Add method access qualifier as source

2026-03-01 21:34:50 +01:00 · 2020-06-27 18:00:52 -04:00
parent 65e76ab18f
commit 87668bf075
1 changed files with 4 additions and 1 deletions
--- a/java/ql/src/semmle/code/java/dataflow/FlowSources.qll
+++ b/java/ql/src/semmle/code/java/dataflow/FlowSources.qll
@@ -298,7 +298,10 @@ private class AndroidIntentExtraSource extends RemoteFlowSource {
  AndroidIntentExtraSource() {
    exists(MethodAccess ma |
      ma instanceof IntentGetExtraMethodAccess and
-      this.asExpr().(VarAccess).getVariable().getAnAssignedValue() = ma
+      (
+        this.asExpr().(VarAccess).getVariable().getAnAssignedValue() = ma or
+        ma.getQualifier() = this.asExpr()
+      )
    )
  }