hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add Navigable variants and sort method names

Browse Source
This commit is contained in:
Arthur Baars
2020-07-02 13:02:38 +02:00
parent e7b495e7d3
commit d80bf3395f
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
java/ql/src/semmle/code/java/dataflow/internal/ContainerFlow.qll
View File

@@ -167,12 +167,15 @@ private predicate taintPreservingArgumentToMethod(Method method, int arg) {
method.getDeclaringType().hasQualifiedName("java.util", "Collections") and
(
method
.hasName(["singleton", "singletonList", "singletonMap", "enumeration", "list", "max", "min",
"asLifoQueue", "checkedCollection", "checkedList", "checkedMap", "checkedSet",
"checkedSortedMap", "checkedSortedSet", "synchronizedCollection", "synchronizedList",
"synchronizedMap", "synchronizedSet", "synchronizedSortedMap",
"synchronizedSortedSet", "unmodifiableCollection", "unmodifiableList",
"unmodifiableMap", "unmodifiableSet", "unmodifiableSortedMap", "unmodifiableSortedSet"]) and
.hasName(["checkedCollection", "checkedList", "checkedMap", "checkedNavigableMap",
"checkedNavigableSet", "checkedSet", "checkedSortedMap", "checkedSortedSet",
"enumeration", "list", "max", "min", "singleton", "singletonList", "singletonMap",
"synchronizedCollection", "synchronizedList", "synchronizedMap",
"synchronizedNavigableMap", "synchronizedNavigableSet", "synchronizedSet",
"synchronizedSortedMap", "synchronizedSortedSet", "unmodifiableCollection",
"unmodifiableList", "unmodifiableMap", "unmodifiableNavigableMap",
"unmodifiableNavigableSet", "unmodifiableSet", "unmodifiableSortedMap",
"unmodifiableSortedSet"]) and
arg = 0
or
method.hasName(["nCopies", "singletonMap"]) and arg = 1