mirror of
https://github.com/github/codeql.git
synced 2026-05-05 13:45:19 +02:00
Use synthetic fields to improve taint precision
This commit is contained in:
@@ -7,3 +7,12 @@ class SliceValueFlowConf extends DefaultValueFlowConf {
|
||||
super.isSource(source) or source instanceof RemoteFlowSource
|
||||
}
|
||||
}
|
||||
|
||||
class SliceTaintFlowConf extends DefaultTaintFlowConf {
|
||||
override predicate allowImplicitRead(DataFlow::Node node, DataFlow::Content c) {
|
||||
super.allowImplicitRead(node, c)
|
||||
or
|
||||
isSink(node) and
|
||||
c.(DataFlow::SyntheticFieldContent).getField() = "androidx.slice.Slice.action"
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user