From 9e4f2f8594d7324264cb1b4e9d7ecc06a42544ca Mon Sep 17 00:00:00 2001 From: Anders Schack-Mulligen Date: Fri, 16 Aug 2019 13:27:53 +0200 Subject: [PATCH] Java: Don't use default dataflow in libs imported by default. --- .../semmle/code/java/frameworks/google/GoogleHttpClientApi.qll | 3 ++- .../code/java/frameworks/jackson/JacksonSerializability.qll | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/java/ql/src/semmle/code/java/frameworks/google/GoogleHttpClientApi.qll b/java/ql/src/semmle/code/java/frameworks/google/GoogleHttpClientApi.qll index 79e746726bd..ccc446892f1 100644 --- a/java/ql/src/semmle/code/java/frameworks/google/GoogleHttpClientApi.qll +++ b/java/ql/src/semmle/code/java/frameworks/google/GoogleHttpClientApi.qll @@ -1,6 +1,7 @@ import java import semmle.code.java.Serializability import semmle.code.java.dataflow.DataFlow +import semmle.code.java.dataflow.DataFlow5 /** The method `parseAs` in `com.google.api.client.http.HttpResponse`. */ private class ParseAsMethod extends Method { @@ -10,7 +11,7 @@ private class ParseAsMethod extends Method { } } -private class TypeLiteralToParseAsFlowConfiguration extends DataFlow::Configuration { +private class TypeLiteralToParseAsFlowConfiguration extends DataFlow5::Configuration { TypeLiteralToParseAsFlowConfiguration() { this = "GoogleHttpClientApi::TypeLiteralToParseAsFlowConfiguration" } diff --git a/java/ql/src/semmle/code/java/frameworks/jackson/JacksonSerializability.qll b/java/ql/src/semmle/code/java/frameworks/jackson/JacksonSerializability.qll index da4fdc817b3..1fb0b37b3c6 100644 --- a/java/ql/src/semmle/code/java/frameworks/jackson/JacksonSerializability.qll +++ b/java/ql/src/semmle/code/java/frameworks/jackson/JacksonSerializability.qll @@ -7,6 +7,7 @@ import java import semmle.code.java.Serializability import semmle.code.java.Reflection import semmle.code.java.dataflow.DataFlow +import semmle.code.java.dataflow.DataFlow5 class JacksonJSONIgnoreAnnotation extends NonReflectiveAnnotation { JacksonJSONIgnoreAnnotation() { @@ -52,7 +53,7 @@ library class FieldReferencedJacksonSerializableType extends JacksonSerializable abstract class JacksonDeserializableType extends Type { } -private class TypeLiteralToJacksonDatabindFlowConfiguration extends DataFlow::Configuration { +private class TypeLiteralToJacksonDatabindFlowConfiguration extends DataFlow5::Configuration { TypeLiteralToJacksonDatabindFlowConfiguration() { this = "TypeLiteralToJacksonDatabindFlowConfiguration" }