Overlay: Add overlay annotations to Java & shared libraries

This commit is contained in:
Kasper Svendsen
2025-06-16 13:06:31 +02:00
parent 2218a981f6
commit c207cfdeb7
428 changed files with 966 additions and 0 deletions

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates related to `org.apache.http.*` and `org.apache.hc.*`.
*/
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.FlowSteps

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Apache LDAP API.
*/
overlay[local?]
module;
import java

View File

@@ -5,6 +5,8 @@
* `org.junit.jupiter.api.Assertions`, `com.google.common.base.Preconditions`,
* and `java.util.Objects`.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Apache Camel messaging framework.
*/
overlay[local?]
module;
import java
import semmle.code.java.frameworks.spring.SpringCamel

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Castor framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Cucumber is an open-source project for writing executable acceptance tests in human-readable `.feature` files.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the FastJson framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes for working with the Flexjson framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Guice framework.
*/
overlay[local?]
module;
import java
import semmle.code.java.dataflow.FlowSteps

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the HessianBurlap framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Hibernate framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides definitions related to `java.io.InputStream`. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,4 +1,6 @@
/** Predicates and classes to reason about the `io.jsonwebtoken` library. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,4 +1,6 @@
/** Definitions related to JAXB. */
overlay[local?]
module;
import semmle.code.java.Type

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with annotations from the `JUnit` framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the JYaml framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes for working with the Jabsorb JSON-RPC ORB framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Jackson serialization framework.
*/
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with annotations in the `javax` package.
*/
overlay[local?]
module;
import java

View File

@@ -2,6 +2,8 @@
* Definitions relating to JAX-WS (Java/Jakarta API for XML Web Services) and JAX-RS
* (Java/Jakarta API for RESTful Web Services).
*/
overlay[local?]
module;
import java
private import semmle.code.java.frameworks.Networking

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Java JDBC API.
*/
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides definitions for working with the JMS library. */
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Java JNDI API.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Jodd JSON framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Json-io framework.
*/
overlay[local?]
module;
import java
import semmle.code.java.Maps

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Kryo serialization framework.
*/
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for identifying use of the Lombok framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates to work with email */
overlay[local?]
module;
import java

View File

@@ -3,6 +3,8 @@
*
* QL classes are provided for detecting uses of Mockito annotations on fields.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the MyBatis framework.
*/
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,4 +1,6 @@
/** Provides definitions related to the Netty framework. */
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Definitions related to `java.net.*`.
*/
overlay[local?]
module;
import semmle.code.java.Type
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the OpenSAML libraries.
*/
overlay[local?]
module;
import java
private import semmle.code.java.security.InsecureRandomnessQuery

View File

@@ -1,4 +1,6 @@
/** Definitions related to `java.util.Properties`. */
overlay[local?]
module;
import semmle.code.java.Type
private import semmle.code.java.dataflow.FlowSteps

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Protobuf framework.
*/
overlay[local?]
module;
import java
import semmle.code.java.dataflow.FlowSteps

View File

@@ -1,4 +1,6 @@
/** Definitions related to `java.util.regex`. */
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Remote Method Invocation. */
overlay[local?]
module;
import java

View File

@@ -2,6 +2,8 @@
* Provides classes and predicates for identifying classes reflectively constructed by Selenium using the
* `PageFactory.initElements(...)` method.
*/
overlay[local?]
module;
import default
import semmle.code.java.Reflection

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Java Servlet API.
*/
overlay[local?]
module;
import semmle.code.java.Type

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the SnakeYaml serialization framework.
*/
overlay[local?]
module;
import java
import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Spring JDBC framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Spring LDAP API.
*/
overlay[local?]
module;
import java

View File

@@ -1,3 +1,6 @@
overlay[local?]
module;
import java
import spring.SpringController
import spring.SpringWeb

View File

@@ -1,4 +1,6 @@
/** Definitions related to `java.util.stream`. */
overlay[local?]
module;
private import semmle.code.java.dataflow.FlowSummary

View File

@@ -1,4 +1,6 @@
/** Definitions related to `java.lang.ThreadLocal`. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the Apache Thrift framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the UnboundID API.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the XStream XML serialization framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the YamlBeans framework.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with Android components.
*/
overlay[local?]
module;
import java
private import semmle.code.xml.AndroidManifest

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates to reason about `AsyncTask`s in Android. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with components generated by the Android's Jetpack Compose compiler.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with Content Providers.
*/
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides definitions for working with uses of Android external storage */
overlay[local?]
module;
import java
private import semmle.code.java.security.FileReadWrite

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates to track Android fragments. */
overlay[local?]
module;
import java

View File

@@ -1,3 +1,6 @@
overlay[local?]
module;
import java
private import semmle.code.java.frameworks.android.Android
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with Android layouts and UI elements. */
overlay[local?]
module;
import java
import semmle.code.xml.AndroidManifest

View File

@@ -1,4 +1,6 @@
/** Provides a remote flow source for Android's `Activity.onActivityResult` method. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates related to the class `PendingIntent`. */
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with SQLite databases. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.FlowSteps

View File

@@ -1,4 +1,6 @@
/** Provides classes related to `android.content.SharedPreferences`. */
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates related to `androidx.slice`. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,3 +1,6 @@
overlay[local?]
module;
import java
/** The class `android.webkit.WebView`. */

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with Android widgets. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.ExternalFlow

View File

@@ -1,3 +1,6 @@
overlay[local?]
module;
import java
class XmlPullParser extends Interface {

View File

@@ -1,4 +1,6 @@
/** Definitions related to the Apache Commons Collections library. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.FlowSteps

View File

@@ -1,4 +1,6 @@
/** Provides XML definitions related to the `org.apache.commons` package. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.RangeUtils

View File

@@ -1,4 +1,6 @@
/** Definitions related to the Apache Commons Lang library. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.FlowSteps

View File

@@ -14,6 +14,8 @@
*
* This creates a route to the `ConsumeMdb` class for messages sent to "activemq:queue:sayhello".
*/
overlay[local?]
module;
import java
import semmle.code.java.Reflection

View File

@@ -13,6 +13,8 @@
*
* This creates a route to the `TargetBean` class for messages sent to "direct.start".
*/
overlay[local?]
module;
import java
import semmle.code.java.Reflection

View File

@@ -1,6 +1,8 @@
/**
* GigaSpaces XAP (eXtreme Application Platform) is a distributed in-memory "datagrid".
*/
overlay[local?]
module;
import java

View File

@@ -1,3 +1,6 @@
overlay[local?]
module;
import java
import semmle.code.java.Serializability
import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Provides classes for working with the Gson framework.
*/
overlay[local?]
module;
import java
import semmle.code.java.dataflow.DataFlow

View File

@@ -2,6 +2,8 @@
* Provides classes and predicates for working with Java Serialization in the context of
* the `com.google.gson` JSON processing framework.
*/
overlay[local?]
module;
import java
private import semmle.code.java.Serializability

View File

@@ -1,4 +1,6 @@
/** Definitions of flow steps through the collection types in the Guava framework */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.DataFlow

View File

@@ -1,6 +1,8 @@
/**
* Definitions for tracking taint steps through the Guava framework.
*/
overlay[local?]
module;
import java
import Collections

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with the GWT framework. */
overlay[local?]
module;
import java
import GwtXml

View File

@@ -4,6 +4,8 @@
* The UiBinder framework allows the specification of user interfaces in XML template files. These
* can then be interacted with programmatically by writing an associated owner class.
*/
overlay[local?]
module;
import java
import GwtUiBinderXml

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for identifying GWT UiBinder framework XML templates.
*/
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with `*.gwt.xml` files. */
overlay[local?]
module;
import semmle.code.xml.XML

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates related to the Hudson framework. */
overlay[local?]
module;
import java
private import semmle.code.java.dataflow.FlowSources

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with OCNI (Objective-C Native Interface).
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the jOOQ framework.
*/
overlay[local?]
module;
import java

View File

@@ -2,6 +2,8 @@
* Provides classes and predicates for working with Java Serialization in the context of
* the `com.fasterxml.jackson` JSON processing framework.
*/
overlay[local?]
module;
import java
import semmle.code.java.Serializability

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with Java Server Faces. */
overlay[local?]
module;
import default
import semmle.code.java.frameworks.javaee.jsf.JSFAnnotations

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the JavaEE Persistence API.
*/
overlay[local?]
module;
import java

View File

@@ -2,6 +2,8 @@
* Provides classes and predicates for working with JavaEE
* persistence configuration XML files (`persistence.xml`).
*/
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides definitions related to the `javax.xml` package. */
overlay[local?]
module;
import java
private import semmle.code.java.security.XmlParsers

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with Enterprise Java Beans. */
overlay[local?]
module;
import java
import EJBJarXML

View File

@@ -2,6 +2,8 @@
* Provides classes and predicates for working with
* EJB deployment descriptor XML files (`ejb-jar.xml`).
*/
overlay[local?]
module;
import java

View File

@@ -2,6 +2,8 @@
* Provides classes and predicates for modeling
* EJB Programming Restrictions (see EJB 3.0 specification, section 21.1.2).
*/
overlay[local?]
module;
import java
import EJB

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with Java Server Faces annotations. */
overlay[local?]
module;
import default

View File

@@ -1,6 +1,8 @@
/**
* Provides classes for JSF "Application Configuration Resources File", usually called `faces-config.xml`.
*/
overlay[local?]
module;
import default

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates for working with JavaServer Faces renderer. */
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides definitions related to the `java.beans` package. */
overlay[local?]
module;
import java
private import semmle.code.java.security.XmlParsers

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates related to `java.net.http.*`.
*/
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes for identifying methods called by the Java SE WebSocket package.
*/
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates related to `kotlin.io`. */
overlay[local?]
module;
import java

View File

@@ -1,4 +1,6 @@
/** Provides classes and predicates related to `kotlin`. */
overlay[local?]
module;
import java

View File

@@ -1,6 +1,8 @@
/**
* Provides classes and predicates for working with the `kotlinx.serialization` plugin.
*/
overlay[local?]
module;
import java

Some files were not shown because too many files have changed in this diff Show More