mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
Extraction discrepancy fixed in kotlinc 1.7.21
This commit is contained in:
@@ -20,10 +20,8 @@ class TestKt {
|
||||
fun exactPathMatchGuard() {
|
||||
run {
|
||||
val source = source() as String?
|
||||
// This gets extracted as Object.equals, which makes the definitions in exactPathMatchGuard not catch it.
|
||||
// Note that it gets correctly extracted in Java.
|
||||
if (source!!.equals("/safe/path"))
|
||||
sink(source) // $SPURIOUS: $ hasTaintFlow
|
||||
sink(source) // Safe
|
||||
else
|
||||
sink(source) // $ hasTaintFlow
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user