mirror of
https://github.com/github/codeql.git
synced 2026-04-28 18:25:24 +02:00
Java: Consider ai-generated flow summaries to as generated summaries in dataflow.
This commit is contained in:
@@ -28,7 +28,7 @@ private int getNumMadModeledApis(string package, string provenance) {
|
||||
or
|
||||
sc.isManual() and
|
||||
(
|
||||
if sc.hasProvenance("generated")
|
||||
if sc.hasProvenance(["generated", "ai-generated"])
|
||||
then
|
||||
// "both"
|
||||
provenance = "both"
|
||||
|
||||
@@ -10,5 +10,5 @@ import semmle.code.java.dataflow.ExternalFlow
|
||||
from string package, string type, string name, string signature, string provenance
|
||||
where
|
||||
neutralModel(package, type, name, signature, provenance) and
|
||||
provenance != "generated"
|
||||
provenance != ["generated", "ai-generated"]
|
||||
select package, type, name, signature, provenance order by package, type, name, signature
|
||||
|
||||
@@ -12,6 +12,6 @@ from
|
||||
string input, string kind, string provenance
|
||||
where
|
||||
sinkModel(package, type, subtypes, name, signature, ext, input, kind, provenance) and
|
||||
provenance != "generated"
|
||||
provenance != ["generated", "ai-generated"]
|
||||
select package, type, subtypes, name, signature, ext, input, kind, provenance order by
|
||||
package, type, name, signature, input, kind
|
||||
|
||||
@@ -12,6 +12,6 @@ from
|
||||
string output, string kind, string provenance
|
||||
where
|
||||
sourceModel(package, type, subtypes, name, signature, ext, output, kind, provenance) and
|
||||
provenance != "generated"
|
||||
provenance != ["generated", "ai-generated"]
|
||||
select package, type, subtypes, name, signature, ext, output, kind, provenance order by
|
||||
package, type, name, signature, output, kind
|
||||
|
||||
@@ -12,6 +12,6 @@ from
|
||||
string input, string output, string kind, string provenance
|
||||
where
|
||||
summaryModel(package, type, subtypes, name, signature, ext, input, output, kind, provenance) and
|
||||
provenance != "generated"
|
||||
provenance != ["generated", "ai-generated"]
|
||||
select package, type, subtypes, name, signature, ext, input, output, kind, provenance order by
|
||||
package, type, name, signature, input, output, kind
|
||||
|
||||
Reference in New Issue
Block a user