hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7279 from hvitved/csharp/json-net-fix-summaries

Browse Source 
C#: Fix `Newtonsoft.Json.JsonSerializer.{Deserialize,Serialize}` summaries
This commit is contained in:
Tom Hvitved
2021-12-01 13:15:10 +01:00
committed by GitHub
parent 75f9a947b3 93e291cb3e
commit aad55ffbd6
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
csharp/ql/lib/semmle/code/csharp/frameworks/JsonNET.qll
View File

@@ -153,14 +153,14 @@ module JsonNET {
// Serialize
c = this.getSerializeMethod() and
preservesValue = false and
source = any(CallableFlowSourceArg arg | arg.getArgumentIndex() = 0) and
sink = any(CallableFlowSinkArg arg | arg.getArgumentIndex() = 1)
source = any(CallableFlowSourceArg arg | arg.getArgumentIndex() = 1) and
sink = any(CallableFlowSinkArg arg | arg.getArgumentIndex() = 0)
or
// Deserialize
c = this.getDeserializeMethod() and
preservesValue = false and
source = any(CallableFlowSourceArg arg | arg.getArgumentIndex() = 0) and
sink = any(CallableFlowSinkArg arg | arg.getArgumentIndex() = 1)
sink instanceof CallableFlowSinkReturn
}
}