hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Java: Fix ratpack flow.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2023-06-19 13:06:33 +02:00
parent f4a05c183b
commit 70bef64e2a
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/lib/ext/ratpack.exec.model.yml
View File

@@ -3,6 +3,7 @@ extensions:
pack: codeql/java-all
extensible: summaryModel
data:
- ["ratpack.exec", "Operation", True, "of", "(Block)", "", "Argument[0]", "Argument[0].Parameter[this]", "value", "manual"]
- ["ratpack.exec", "Promise", True, "apply", "", "", "Argument[this].Element", "Argument[0].Parameter[0].Element", "value", "manual"]
- ["ratpack.exec", "Promise", True, "apply", "", "", "Argument[0].ReturnValue.Element", "ReturnValue.Element", "value", "manual"]
- ["ratpack.exec", "Promise", True, "blockingMap", "", "", "Argument[this].Element", "Argument[0].Parameter[0]", "value", "manual"]

6
java/ql/test/library-tests/frameworks/ratpack/resources/Resource.java
View File

@@ -361,13 +361,13 @@ class Resource {
Promise
.value(tainted)
.nextOp(value -> Operation.of(() -> {
sink(value); // MISSING: $hasTaintFlow
sink(value); //$hasTaintFlow
}))
.nextOpIf(value -> {
sink(value); //$hasTaintFlow
return true;
}, value -> Operation.of(() -> {
sink(value); // MISSING: $hasTaintFlow
sink(value); //$hasTaintFlow
}))
.then(value -> {
sink(value); //$hasTaintFlow
@@ -379,7 +379,7 @@ class Resource {
Promise
.value(tainted)
.flatOp(value -> Operation.of(() -> {
sink(value); // MISSING: $hasTaintFlow
sink(value); //$hasTaintFlow
}));
}