mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
Java: Add data flow for record getters.
This commit is contained in:
28
java/ql/test/library-tests/dataflow/records/A.java
Normal file
28
java/ql/test/library-tests/dataflow/records/A.java
Normal file
@@ -0,0 +1,28 @@
|
||||
public class A {
|
||||
record Pair(Object x, Object y) { }
|
||||
|
||||
Object source() { return null; }
|
||||
|
||||
void sink(Object o) { }
|
||||
|
||||
void foo() {
|
||||
Pair p1 = new Pair(source(), null);
|
||||
Pair p2 = new Pair(new Object(), source());
|
||||
bar(p1, p2);
|
||||
}
|
||||
|
||||
void bar(Pair p1, Pair p2) {
|
||||
sink(p1.x);
|
||||
sink(p1.y);
|
||||
sink(p2.x);
|
||||
sink(p2.y);
|
||||
Object p1x = p1.x();
|
||||
Object p1y = p1.y();
|
||||
Object p2x = p2.x();
|
||||
Object p2y = p2.y();
|
||||
sink(p1x);
|
||||
sink(p1y);
|
||||
sink(p2x);
|
||||
sink(p2y);
|
||||
}
|
||||
}
|
||||
1
java/ql/test/library-tests/dataflow/records/options
Normal file
1
java/ql/test/library-tests/dataflow/records/options
Normal file
@@ -0,0 +1 @@
|
||||
//semmle-extractor-options: --javac-args --enable-preview -source 14 -target 14
|
||||
@@ -0,0 +1,4 @@
|
||||
| A.java:9:24:9:31 | source(...) | A.java:15:10:15:13 | p1.x |
|
||||
| A.java:9:24:9:31 | source(...) | A.java:23:10:23:12 | p1x |
|
||||
| A.java:10:38:10:45 | source(...) | A.java:18:10:18:13 | p2.y |
|
||||
| A.java:10:38:10:45 | source(...) | A.java:26:10:26:12 | p2y |
|
||||
15
java/ql/test/library-tests/dataflow/records/test.ql
Normal file
15
java/ql/test/library-tests/dataflow/records/test.ql
Normal file
@@ -0,0 +1,15 @@
|
||||
import java
|
||||
import semmle.code.java.dataflow.DataFlow
|
||||
import DataFlow
|
||||
|
||||
class Conf extends Configuration {
|
||||
Conf() { this = "qqconf" }
|
||||
|
||||
override predicate isSource(Node n) { n.asExpr().(MethodAccess).getMethod().hasName("source") }
|
||||
|
||||
override predicate isSink(Node n) { n.asExpr().(Argument).getCall().getCallee().hasName("sink") }
|
||||
}
|
||||
|
||||
from Conf conf, Node src, Node sink
|
||||
where conf.hasFlow(src, sink)
|
||||
select src, sink
|
||||
Reference in New Issue
Block a user