hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add missing CollectionUtils model

Browse Source
This commit is contained in:
Chris Smowton
2021-06-29 11:44:29 +01:00
parent 659478cc39
commit 5769f4718f
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/src/semmle/code/java/frameworks/spring/SpringUtil.qll
View File

@@ -26,6 +26,7 @@ private class FlowSummaries extends SummaryModelCsv {
"org.springframework.util;Base64Utils;false;encodeToUrlSafeString;;;Argument[0];ReturnValue;taint",
"org.springframework.util;Base64Utils;false;encodeUrlSafe;;;Argument[0];ReturnValue;taint",
"org.springframework.util;CollectionUtils;false;arrayToList;;;ArrayElement of Argument[0];Element of ReturnValue;value",
"org.springframework.util;CollectionUtils;false;findFirstMatch;;;Element of Argument[0];ReturnValue;value",
"org.springframework.util;CollectionUtils;false;findValueOfType;;;Element of Argument[0];ReturnValue;value",
"org.springframework.util;CollectionUtils;false;firstElement;;;Element of Argument[0];ReturnValue;value",
"org.springframework.util;CollectionUtils;false;lastElement;;;Element of Argument[0];ReturnValue;value",

7
java/ql/test/library-tests/frameworks/spring/util/Test.java
View File

@@ -198,6 +198,13 @@ public class Test {
out = CollectionUtils.arrayToList(in);
sink(getElement(out)); // $hasValueFlow
}
{
// "org.springframework.util;CollectionUtils;false;findFirstMatch;;;Element of Argument[0];ReturnValue;value"
Object out = null;
Collection in = List.of(source());
out = CollectionUtils.findFirstMatch(in, null);
sink(out); // $hasValueFlow
}
{
// "org.springframework.util;CollectionUtils;false;findValueOfType;;;Element of Argument[0];ReturnValue;value"
Object out = null;