hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 20:25:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Propagate extras through build methods

Browse Source
This commit is contained in:
Tony Torralba
2021-12-09 14:56:52 +01:00
parent c0c40cc05b
commit 522a4bb9fa
2 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
java/ql/test/library-tests/frameworks/android/notification/Test.java
View File

@@ -101,6 +101,16 @@ public class Test {
out = in.build();
sink(out); // $ hasTaintFlow
}
{
// "android.app;Notification$Action$Builder;true;build;;;SyntheticField[android.content.Intent.extras]
// of Argument[-1];SyntheticField[android.content.Intent.extras] of ReturnValue;value"
Notification.Action out = null;
Notification.Action.Builder builder = null;
Bundle in = (Bundle) newWithMapValueDefault(source());
builder.addExtras(in);
out = builder.build();
sink(getMapValueDefault(out.getExtras())); // $ hasValueFlow
}
{
// "android.app;Notification$Action$Builder;true;extend;;;Argument[-1];ReturnValue;value"
Notification.Action.Builder out = null;
@@ -223,6 +233,16 @@ public class Test {
out = in.build();
sink(out); // $ hasTaintFlow
}
{
// "android.app;Notification$Builder;true;build;;;SyntheticField[android.content.Intent.extras]
// of Argument[-1];Field[android.app.Notification.extras] of ReturnValue;value"
Notification out = null;
Notification.Builder builder = null;
Bundle in = (Bundle) newWithMapValueDefault(source());
builder.addExtras(in);
out = builder.build();
sink(getMapValueDefault(out.extras)); // $ hasValueFlow
}
{
// "android.app;Notification$Builder;true;extend;;;Argument[-1];ReturnValue;value"
Notification.Builder out = null;