hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add missing model of JsonObjectBuilder.remove

Browse Source
This commit is contained in:
Chris Smowton
2021-07-12 17:13:39 +01:00
parent 753c878f48
commit 6bf931392b
2 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/src/semmle/code/java/frameworks/JavaxJson.qll
View File

@@ -86,6 +86,7 @@ private class FlowSummaries extends SummaryModelCsv {
"JsonObjectBuilder;false;addAll;;;Argument[-1];ReturnValue;value",
"JsonObjectBuilder;false;addNull;;;Argument[-1];ReturnValue;value",
"JsonObjectBuilder;false;build;;;Argument[-1];ReturnValue;taint",
"JsonObjectBuilder;false;remove;;;Argument[-1];ReturnValue;value",
"JsonParserFactory;false;createParser;;;Argument[0];ReturnValue;taint",
"JsonPatch;false;apply;;;Argument[-1];ReturnValue;taint",
"JsonPatch;false;apply;;;Argument[0];ReturnValue;taint",

14
java/ql/test/library-tests/frameworks/javax-json/Test.java
View File

@@ -1030,6 +1030,13 @@ public class Test {
out = in.build();
sink(out); // $hasTaintFlow
}
{
// "jakarta.json;JsonObjectBuilder;false;remove;;;Argument[-1];ReturnValue;value"
jakarta.json.JsonObjectBuilder out = null;
jakarta.json.JsonObjectBuilder in = (jakarta.json.JsonObjectBuilder)source();
out = in.remove(null);
sink(out); // $hasValueFlow
}
{
// "jakarta.json;JsonPatch;false;apply;;;Argument[-1];ReturnValue;taint"
jakarta.json.JsonStructure out = null;
@@ -2210,6 +2217,13 @@ public class Test {
out = in.build();
sink(out); // $hasTaintFlow
}
{
// "javax.json;JsonObjectBuilder;false;remove;;;Argument[-1];ReturnValue;value"
javax.json.JsonObjectBuilder out = null;
javax.json.JsonObjectBuilder in = (javax.json.JsonObjectBuilder)source();
out = in.remove(null);
sink(out); // $hasValueFlow
}
{
// "javax.json;JsonPatch;false;apply;;;Argument[-1];ReturnValue;taint"
javax.json.JsonStructure out = null;