diff --git a/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll b/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll index 30a47c73596..454317cd230 100644 --- a/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll +++ b/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll @@ -13,7 +13,7 @@ private module ProcessBuilderEnvironmentConfig implements DataFlow::ConfigSig { ) } - predicate isSink(DataFlow::Node sink) { sink.asExpr() = any(MapPutCall mpc).getQualifier() } + predicate isSink(DataFlow::Node sink) { sink.asExpr() = any(MapMutation mm).getQualifier() } } private module ProcessBuilderEnvironmentFlow = DataFlow::Global; @@ -28,8 +28,8 @@ module ExecTaintedEnvironmentConfig implements DataFlow::ConfigSig { sinkNode(sink, "environment-injection") or // sink is an added to a `ProcessBuilder::environment` map. - exists(MapPutCall mpc | mpc.getAnArgument() = sink.asExpr() | - ProcessBuilderEnvironmentFlow::flowToExpr(mpc.getQualifier()) + exists(MapMutation mm | mm.getAnArgument() = sink.asExpr() | + ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier()) ) } }