Java: Address review comment. Fix dataflow model

This commit is contained in:
idrissrio
2025-09-05 16:03:11 +02:00
parent 89e080cd99
commit 55ff71b760
5 changed files with 111 additions and 47 deletions

View File

@@ -1,24 +1,3 @@
import java
import semmle.code.java.dataflow.TaintTracking
module Config implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node n) {
exists(ArrayAccess aa |
aa.getArray().(VarAccess).getVariable().hasName("args") and
n.asExpr() = aa
)
}
predicate isSink(DataFlow::Node n) {
exists(MethodCall ma |
ma.getMethod().hasName("sink") and
n.asExpr() = ma.getAnArgument()
)
}
}
module Flow = TaintTracking::Global<Config>;
from DataFlow::Node src, DataFlow::Node sink
where Flow::flow(src, sink)
select src, sink
import utils.test.InlineFlowTest
import TaintFlowTest<DefaultFlowConfig>
import TaintFlow::PathGraph