Java: Make source and sink callable adapters.

This commit is contained in:
Michael Nebel
2024-06-13 16:03:21 +02:00
parent 0fabca94db
commit 833b4f90bf
2 changed files with 33 additions and 3 deletions

View File

@@ -1,6 +1,6 @@
private import java
private import semmle.code.java.dataflow.ExternalFlow
private import semmle.code.java.dataflow.internal.DataFlowPrivate
private import semmle.code.java.dataflow.internal.FlowSummaryImpl
private import semmle.code.java.dataflow.internal.ModelExclusions
private import ModelEditor
@@ -8,7 +8,7 @@ private import ModelEditor
* A class of effectively public callables from source code.
*/
class PublicEndpointFromSource extends Endpoint, ModelApi {
override predicate isSource() { SourceSinkInterpretationInput::sourceElement(this, _, _, _, _) }
override predicate isSource() { this instanceof SourceCallable }
override predicate isSink() { SourceSinkInterpretationInput::sinkElement(this, _, _, _, _) }
override predicate isSink() { this instanceof SinkCallable }
}