hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-21 06:55:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: switch 'android-widget' source kind to 'remote'

Browse Source
This commit is contained in:
Jami Cogswell
2023-05-12 09:02:56 -04:00
parent 40cf09996a
commit 6722892828
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/ext/android.widget.model.yml
View File

@@ -3,7 +3,7 @@ extensions:
pack: codeql/java-all
extensible: sourceModel
data:
- ["android.widget", "EditText", True, "getText", "", "", "ReturnValue", "android-widget", "manual"]
- ["android.widget", "EditText", True, "getText", "", "", "ReturnValue", "remote", "manual"]
- addsTo:
pack: codeql/java-all
extensible: summaryModel

2
java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll
View File

@@ -286,7 +286,7 @@ module ModelValidation {
)
or
exists(string kind | sourceModel(_, _, _, _, _, _, _, kind, _) |
not kind = ["remote", "contentprovider", "android-widget", "android-external-storage-dir"] and
not kind = ["remote", "contentprovider", "android-external-storage-dir"] and
not kind.matches("qltest%") and
result = "Invalid kind \"" + kind + "\" in source model."
)

2
java/ql/lib/semmle/code/java/frameworks/android/Widget.qll
View File

@@ -5,7 +5,7 @@ private import semmle.code.java.dataflow.ExternalFlow
private import semmle.code.java.dataflow.FlowSources
private class DefaultAndroidWidgetSources extends RemoteFlowSource {
DefaultAndroidWidgetSources() { sourceNode(this, "android-widget") }
DefaultAndroidWidgetSources() { sourceNode(this, "remote") }
override string getSourceType() { result = "Android widget source" }
}