Java: Taint flow through org.springframework.data.repository.CrudRepository.save().

java/ql/test/library-tests/frameworks/spring/data/Test.java

@@ -0,0 +1,19 @@
+import org.springframework.data.repository.CrudRepository;
+
+class Struct {
+  public String field;
+  public Struct(String f){
+    this.field = f;
+  }
+}
+
+public class Test {
+  String source() { return null; }
+  void sink(Object o) {}
+
+  void testCrudRepository(CrudRepository<Struct, Integer> cr) {
+    Struct s = new Struct(source());
+    s = cr.save(s);
+    sink(s.field); //$hasValueFlow
+  }
+}

java/ql/test/library-tests/frameworks/spring/data/options

@@ -0,0 +1 @@
+//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../stubs/spring-data-commons-2.5.1

java/ql/test/library-tests/frameworks/spring/data/test.ql

@@ -0,0 +1,2 @@
+import java
+import TestUtilities.InlineFlowTest