mirror of
https://github.com/github/codeql.git
synced 2026-05-02 04:05:14 +02:00
Java: Address review comment. Fix dataflow model
This commit is contained in:
@@ -1,24 +1,3 @@
|
||||
import java
|
||||
import semmle.code.java.dataflow.TaintTracking
|
||||
|
||||
module Config implements DataFlow::ConfigSig {
|
||||
predicate isSource(DataFlow::Node n) {
|
||||
exists(ArrayAccess aa |
|
||||
aa.getArray().(VarAccess).getVariable().hasName("args") and
|
||||
n.asExpr() = aa
|
||||
)
|
||||
}
|
||||
|
||||
predicate isSink(DataFlow::Node n) {
|
||||
exists(MethodCall ma |
|
||||
ma.getMethod().hasName("sink") and
|
||||
n.asExpr() = ma.getAnArgument()
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
module Flow = TaintTracking::Global<Config>;
|
||||
|
||||
from DataFlow::Node src, DataFlow::Node sink
|
||||
where Flow::flow(src, sink)
|
||||
select src, sink
|
||||
import utils.test.InlineFlowTest
|
||||
import TaintFlowTest<DefaultFlowConfig>
|
||||
import TaintFlow::PathGraph
|
||||
|
||||
Reference in New Issue
Block a user