Test Issues

java/ql/test/library-tests/dataflow/taintsources/App.java

@@ -0,0 +1,21 @@
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServlet;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.Part;
+
+/**
+ * Hello world!
+ */
+public class App {
+
+
+
+public class FileUploadServlet extends HttpServlet {
+    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, java.io.IOException {
+        Part filePart = request.getPart("file"); // Retrieves <input type="file" name="file">
+        sink(filePart.getName());
+        
+    }
+}
+}

java/ql/test/library-tests/dataflow/taintsources/options

@@ -1 +1 @@
-//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.3.8:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x:${testdir}/../../../stubs/jwtk-jjwt-0.11.2:${testdir}/../../../stubs/jenkins:${testdir}/../../../stubs/stapler-1.263
+//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.3.8:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x:${testdir}/../../../stubs/jwtk-jjwt-0.11.2:${testdir}/../../../stubs/jenkins:${testdir}/../../../stubs/stapler-1.263:${testdir}/../../../stubs/test

java/ql/test/stubs/test/javax/servlet/AsyncContext.java

@@ -0,0 +1,31 @@
+// Generated automatically from javax.servlet.AsyncContext for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.AsyncListener;
+import javax.servlet.ServletContext;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+public interface AsyncContext
+{
+    <T extends AsyncListener> T createListener(java.lang.Class<T> p0);
+    ServletRequest getRequest();
+    ServletResponse getResponse();
+    boolean hasOriginalRequestAndResponse();
+    long getTimeout();
+    static String ASYNC_CONTEXT_PATH = null;
+    static String ASYNC_MAPPING = null;
+    static String ASYNC_PATH_INFO = null;
+    static String ASYNC_QUERY_STRING = null;
+    static String ASYNC_REQUEST_URI = null;
+    static String ASYNC_SERVLET_PATH = null;
+    void addListener(AsyncListener p0);
+    void addListener(AsyncListener p0, ServletRequest p1, ServletResponse p2);
+    void complete();
+    void dispatch();
+    void dispatch(ServletContext p0, String p1);
+    void dispatch(String p0);
+    void setTimeout(long p0);
+    void start(Runnable p0);
+}

java/ql/test/stubs/test/javax/servlet/AsyncEvent.java

@@ -0,0 +1,20 @@
+// Generated automatically from javax.servlet.AsyncEvent for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.AsyncContext;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+public class AsyncEvent
+{
+    protected AsyncEvent() {}
+    public AsyncContext getAsyncContext(){ return null; }
+    public AsyncEvent(AsyncContext p0){}
+    public AsyncEvent(AsyncContext p0, ServletRequest p1, ServletResponse p2){}
+    public AsyncEvent(AsyncContext p0, ServletRequest p1, ServletResponse p2, Throwable p3){}
+    public AsyncEvent(AsyncContext p0, Throwable p1){}
+    public ServletRequest getSuppliedRequest(){ return null; }
+    public ServletResponse getSuppliedResponse(){ return null; }
+    public Throwable getThrowable(){ return null; }
+}

java/ql/test/stubs/test/javax/servlet/AsyncListener.java

@@ -0,0 +1,14 @@
+// Generated automatically from javax.servlet.AsyncListener for testing purposes
+
+package javax.servlet;
+
+import java.util.EventListener;
+import javax.servlet.AsyncEvent;
+
+public interface AsyncListener extends EventListener
+{
+    void onComplete(AsyncEvent p0);
+    void onError(AsyncEvent p0);
+    void onStartAsync(AsyncEvent p0);
+    void onTimeout(AsyncEvent p0);
+}

java/ql/test/stubs/test/javax/servlet/DispatcherType.java

@@ -0,0 +1,10 @@
+// Generated automatically from javax.servlet.DispatcherType for testing purposes
+
+package javax.servlet;
+
+
+public enum DispatcherType
+{
+    ASYNC, ERROR, FORWARD, INCLUDE, REQUEST;
+    private DispatcherType() {}
+}

java/ql/test/stubs/test/javax/servlet/Filter.java

@@ -0,0 +1,15 @@
+// Generated automatically from javax.servlet.Filter for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.FilterChain;
+import javax.servlet.FilterConfig;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+public interface Filter
+{
+    default void destroy(){}
+    default void init(FilterConfig p0){}
+    void doFilter(ServletRequest p0, ServletResponse p1, FilterChain p2);
+}

java/ql/test/stubs/test/javax/servlet/FilterChain.java

@@ -0,0 +1,11 @@
+// Generated automatically from javax.servlet.FilterChain for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+public interface FilterChain
+{
+    void doFilter(ServletRequest p0, ServletResponse p1);
+}

java/ql/test/stubs/test/javax/servlet/FilterConfig.java

@@ -0,0 +1,14 @@
+// Generated automatically from javax.servlet.FilterConfig for testing purposes
+
+package javax.servlet;
+
+import java.util.Enumeration;
+import javax.servlet.ServletContext;
+
+public interface FilterConfig
+{
+    Enumeration<String> getInitParameterNames();
+    ServletContext getServletContext();
+    String getFilterName();
+    String getInitParameter(String p0);
+}

java/ql/test/stubs/test/javax/servlet/FilterRegistration.java

@@ -0,0 +1,19 @@
+// Generated automatically from javax.servlet.FilterRegistration for testing purposes
+
+package javax.servlet;
+
+import java.util.Collection;
+import java.util.EnumSet;
+import javax.servlet.DispatcherType;
+import javax.servlet.Registration;
+
+public interface FilterRegistration extends Registration
+{
+    Collection<String> getServletNameMappings();
+    Collection<String> getUrlPatternMappings();
+    static public interface Dynamic extends FilterRegistration, Registration.Dynamic
+    {
+    }
+    void addMappingForServletNames(EnumSet<DispatcherType> p0, boolean p1, String... p2);
+    void addMappingForUrlPatterns(EnumSet<DispatcherType> p0, boolean p1, String... p2);
+}

java/ql/test/stubs/test/javax/servlet/GenericServlet.java

@@ -0,0 +1,28 @@
+// Generated automatically from javax.servlet.GenericServlet for testing purposes
+
+package javax.servlet;
+
+import java.io.Serializable;
+import java.util.Enumeration;
+import javax.servlet.Servlet;
+import javax.servlet.ServletConfig;
+import javax.servlet.ServletContext;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+abstract public class GenericServlet implements Serializable, Servlet, ServletConfig
+{
+    public Enumeration<String> getInitParameterNames(){ return null; }
+    public GenericServlet(){}
+    public ServletConfig getServletConfig(){ return null; }
+    public ServletContext getServletContext(){ return null; }
+    public String getInitParameter(String p0){ return null; }
+    public String getServletInfo(){ return null; }
+    public String getServletName(){ return null; }
+    public abstract void service(ServletRequest p0, ServletResponse p1);
+    public void destroy(){}
+    public void init(){}
+    public void init(ServletConfig p0){}
+    public void log(String p0){}
+    public void log(String p0, Throwable p1){}
+}

java/ql/test/stubs/test/javax/servlet/HttpConstraintElement.java

@@ -0,0 +1,16 @@
+// Generated automatically from javax.servlet.HttpConstraintElement for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.annotation.ServletSecurity;
+
+public class HttpConstraintElement
+{
+    public HttpConstraintElement(){}
+    public HttpConstraintElement(ServletSecurity.EmptyRoleSemantic p0){}
+    public HttpConstraintElement(ServletSecurity.EmptyRoleSemantic p0, ServletSecurity.TransportGuarantee p1, String... p2){}
+    public HttpConstraintElement(ServletSecurity.TransportGuarantee p0, String... p1){}
+    public ServletSecurity.EmptyRoleSemantic getEmptyRoleSemantic(){ return null; }
+    public ServletSecurity.TransportGuarantee getTransportGuarantee(){ return null; }
+    public String[] getRolesAllowed(){ return null; }
+}

java/ql/test/stubs/test/javax/servlet/HttpMethodConstraintElement.java

@@ -0,0 +1,13 @@
+// Generated automatically from javax.servlet.HttpMethodConstraintElement for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.HttpConstraintElement;
+
+public class HttpMethodConstraintElement extends HttpConstraintElement
+{
+    protected HttpMethodConstraintElement() {}
+    public HttpMethodConstraintElement(String p0){}
+    public HttpMethodConstraintElement(String p0, HttpConstraintElement p1){}
+    public String getMethodName(){ return null; }
+}

java/ql/test/stubs/test/javax/servlet/MultipartConfigElement.java

@@ -0,0 +1,17 @@
+// Generated automatically from javax.servlet.MultipartConfigElement for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.annotation.MultipartConfig;
+
+public class MultipartConfigElement
+{
+    protected MultipartConfigElement() {}
+    public MultipartConfigElement(MultipartConfig p0){}
+    public MultipartConfigElement(String p0){}
+    public MultipartConfigElement(String p0, long p1, long p2, int p3){}
+    public String getLocation(){ return null; }
+    public int getFileSizeThreshold(){ return 0; }
+    public long getMaxFileSize(){ return 0; }
+    public long getMaxRequestSize(){ return 0; }
+}

java/ql/test/stubs/test/javax/servlet/ReadListener.java

@@ -0,0 +1,12 @@
+// Generated automatically from javax.servlet.ReadListener for testing purposes
+
+package javax.servlet;
+
+import java.util.EventListener;
+
+public interface ReadListener extends EventListener
+{
+    void onAllDataRead();
+    void onDataAvailable();
+    void onError(Throwable p0);
+}

java/ql/test/stubs/test/javax/servlet/Registration.java

@@ -0,0 +1,20 @@
+// Generated automatically from javax.servlet.Registration for testing purposes
+
+package javax.servlet;
+
+import java.util.Map;
+import java.util.Set;
+
+public interface Registration
+{
+    Map<String, String> getInitParameters();
+    Set<String> setInitParameters(Map<String, String> p0);
+    String getClassName();
+    String getInitParameter(String p0);
+    String getName();
+    boolean setInitParameter(String p0, String p1);
+    static public interface Dynamic extends Registration
+    {
+        void setAsyncSupported(boolean p0);
+    }
+}

java/ql/test/stubs/test/javax/servlet/RequestDispatcher.java

@@ -0,0 +1,30 @@
+// Generated automatically from javax.servlet.RequestDispatcher for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+public interface RequestDispatcher
+{
+    static String ERROR_EXCEPTION = null;
+    static String ERROR_EXCEPTION_TYPE = null;
+    static String ERROR_MESSAGE = null;
+    static String ERROR_REQUEST_URI = null;
+    static String ERROR_SERVLET_NAME = null;
+    static String ERROR_STATUS_CODE = null;
+    static String FORWARD_CONTEXT_PATH = null;
+    static String FORWARD_MAPPING = null;
+    static String FORWARD_PATH_INFO = null;
+    static String FORWARD_QUERY_STRING = null;
+    static String FORWARD_REQUEST_URI = null;
+    static String FORWARD_SERVLET_PATH = null;
+    static String INCLUDE_CONTEXT_PATH = null;
+    static String INCLUDE_MAPPING = null;
+    static String INCLUDE_PATH_INFO = null;
+    static String INCLUDE_QUERY_STRING = null;
+    static String INCLUDE_REQUEST_URI = null;
+    static String INCLUDE_SERVLET_PATH = null;
+    void forward(ServletRequest p0, ServletResponse p1);
+    void include(ServletRequest p0, ServletResponse p1);
+}

java/ql/test/stubs/test/javax/servlet/Servlet.java

@@ -0,0 +1,16 @@
+// Generated automatically from javax.servlet.Servlet for testing purposes
+
+package javax.servlet;
+
+import javax.servlet.ServletConfig;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+
+public interface Servlet
+{
+    ServletConfig getServletConfig();
+    String getServletInfo();
+    void destroy();
+    void init(ServletConfig p0);
+    void service(ServletRequest p0, ServletResponse p1);
+}

java/ql/test/stubs/test/javax/servlet/ServletConfig.java

@@ -0,0 +1,14 @@
+// Generated automatically from javax.servlet.ServletConfig for testing purposes
+
+package javax.servlet;
+
+import java.util.Enumeration;
+import javax.servlet.ServletContext;
+
+public interface ServletConfig
+{
+    Enumeration<String> getInitParameterNames();
+    ServletContext getServletContext();
+    String getInitParameter(String p0);
+    String getServletName();
+}

java/ql/test/stubs/test/javax/servlet/ServletContext.java

@@ -0,0 +1,83 @@
+// Generated automatically from javax.servlet.ServletContext for testing purposes
+
+package javax.servlet;
+
+import java.io.InputStream;
+import java.net.URL;
+import java.util.Enumeration;
+import java.util.EventListener;
+import java.util.Map;
+import java.util.Set;
+import javax.servlet.Filter;
+import javax.servlet.FilterRegistration;
+import javax.servlet.RequestDispatcher;
+import javax.servlet.Servlet;
+import javax.servlet.ServletRegistration;
+import javax.servlet.SessionCookieConfig;
+import javax.servlet.SessionTrackingMode;
+import javax.servlet.descriptor.JspConfigDescriptor;
+
+public interface ServletContext
+{
+    <T extends EventListener> T createListener(java.lang.Class<T> p0);
+    <T extends EventListener> void addListener(T p0);
+    <T extends Filter> T createFilter(java.lang.Class<T> p0);
+    <T extends Servlet> T createServlet(java.lang.Class<T> p0);
+    ClassLoader getClassLoader();
+    Enumeration<Servlet> getServlets();
+    Enumeration<String> getAttributeNames();
+    Enumeration<String> getInitParameterNames();
+    Enumeration<String> getServletNames();
+    FilterRegistration getFilterRegistration(String p0);
+    FilterRegistration.Dynamic addFilter(String p0, Class<? extends Filter> p1);
+    FilterRegistration.Dynamic addFilter(String p0, Filter p1);
+    FilterRegistration.Dynamic addFilter(String p0, String p1);
+    InputStream getResourceAsStream(String p0);
+    JspConfigDescriptor getJspConfigDescriptor();
+    Map<String, ? extends FilterRegistration> getFilterRegistrations();
+    Map<String, ? extends ServletRegistration> getServletRegistrations();
+    Object getAttribute(String p0);
+    RequestDispatcher getNamedDispatcher(String p0);
+    RequestDispatcher getRequestDispatcher(String p0);
+    Servlet getServlet(String p0);
+    ServletContext getContext(String p0);
+    ServletRegistration getServletRegistration(String p0);
+    ServletRegistration.Dynamic addJspFile(String p0, String p1);
+    ServletRegistration.Dynamic addServlet(String p0, Class<? extends Servlet> p1);
+    ServletRegistration.Dynamic addServlet(String p0, Servlet p1);
+    ServletRegistration.Dynamic addServlet(String p0, String p1);
+    SessionCookieConfig getSessionCookieConfig();
+    Set<SessionTrackingMode> getDefaultSessionTrackingModes();
+    Set<SessionTrackingMode> getEffectiveSessionTrackingModes();
+    Set<String> getResourcePaths(String p0);
+    String getContextPath();
+    String getInitParameter(String p0);
+    String getMimeType(String p0);
+    String getRealPath(String p0);
+    String getRequestCharacterEncoding();
+    String getResponseCharacterEncoding();
+    String getServerInfo();
+    String getServletContextName();
+    String getVirtualServerName();
+    URL getResource(String p0);
+    boolean setInitParameter(String p0, String p1);
+    int getEffectiveMajorVersion();
+    int getEffectiveMinorVersion();
+    int getMajorVersion();
+    int getMinorVersion();
+    int getSessionTimeout();
+    static String ORDERED_LIBS = null;
+    static String TEMPDIR = null;
+    void addListener(Class<? extends EventListener> p0);
+    void addListener(String p0);
+    void declareRoles(String... p0);
+    void log(Exception p0, String p1);
+    void log(String p0);
+    void log(String p0, Throwable p1);
+    void removeAttribute(String p0);
+    void setAttribute(String p0, Object p1);
+    void setRequestCharacterEncoding(String p0);
+    void setResponseCharacterEncoding(String p0);
+    void setSessionTimeout(int p0);
+    void setSessionTrackingModes(Set<SessionTrackingMode> p0);
+}

java/ql/test/stubs/test/javax/servlet/ServletException.java

@@ -0,0 +1,27 @@
+/**
+ *
+ * Copyright 2003-2004 The Apache Software Foundation
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+
+/*
+ * Adapted from the Java Servlet API version 2.4 as available at
+ *   http://search.maven.org/remotecontent?filepath=javax/servlet/servlet-api/2.4/servlet-api-2.4-sources.jar
+ * Only relevant stubs of this file have been retained for test purposes.
+ */
+
+package javax.servlet;
+
+public class ServletException extends Exception {
+}

java/ql/test/stubs/test/javax/servlet/ServletInputStream.java

@@ -0,0 +1,15 @@
+// Generated automatically from javax.servlet.ServletInputStream for testing purposes
+
+package javax.servlet;
+
+import java.io.InputStream;
+import javax.servlet.ReadListener;
+
+abstract public class ServletInputStream extends InputStream
+{
+    protected ServletInputStream(){}
+    public abstract boolean isFinished();
+    public abstract boolean isReady();
+    public abstract void setReadListener(ReadListener p0);
+    public int readLine(byte[] p0, int p1, int p2){ return 0; }
+}

java/ql/test/stubs/test/javax/servlet/ServletOutputStream.java

@@ -0,0 +1,28 @@
+// Generated automatically from javax.servlet.ServletOutputStream for testing purposes
+
+package javax.servlet;
+
+import java.io.OutputStream;
+import javax.servlet.WriteListener;
+
+abstract public class ServletOutputStream extends OutputStream
+{
+    protected ServletOutputStream(){}
+    public abstract boolean isReady();
+    public abstract void setWriteListener(WriteListener p0);
+    public void print(String p0){}
+    public void print(boolean p0){}
+    public void print(char p0){}
+    public void print(double p0){}
+    public void print(float p0){}
+    public void print(int p0){}
+    public void print(long p0){}
+    public void println(){}
+    public void println(String p0){}
+    public void println(boolean p0){}
+    public void println(char p0){}
+    public void println(double p0){}
+    public void println(float p0){}
+    public void println(int p0){}
+    public void println(long p0){}
+}

java/ql/test/stubs/test/javax/servlet/ServletRegistration.java

@@ -0,0 +1,23 @@
+// Generated automatically from javax.servlet.ServletRegistration for testing purposes
+
+package javax.servlet;
+
+import java.util.Collection;
+import java.util.Set;
+import javax.servlet.MultipartConfigElement;
+import javax.servlet.Registration;
+import javax.servlet.ServletSecurityElement;
+
+public interface ServletRegistration extends Registration
+{
+    Collection<String> getMappings();
+    Set<String> addMapping(String... p0);
+    String getRunAsRole();
+    static public interface Dynamic extends Registration.Dynamic, ServletRegistration
+    {
+        Set<String> setServletSecurity(ServletSecurityElement p0);
+        void setLoadOnStartup(int p0);
+        void setMultipartConfig(MultipartConfigElement p0);
+        void setRunAsRole(String p0);
+    }
+}

java/ql/test/stubs/test/javax/servlet/ServletRequest.java

@@ -0,0 +1,55 @@
+// Generated automatically from javax.servlet.ServletRequest for testing purposes
+
+package javax.servlet;
+
+import java.io.BufferedReader;
+import java.util.Enumeration;
+import java.util.Locale;
+import java.util.Map;
+import javax.servlet.AsyncContext;
+import javax.servlet.DispatcherType;
+import javax.servlet.RequestDispatcher;
+import javax.servlet.ServletContext;
+import javax.servlet.ServletInputStream;
+import javax.servlet.ServletResponse;
+
+public interface ServletRequest
+{
+    AsyncContext getAsyncContext();
+    AsyncContext startAsync();
+    AsyncContext startAsync(ServletRequest p0, ServletResponse p1);
+    BufferedReader getReader();
+    DispatcherType getDispatcherType();
+    Enumeration<Locale> getLocales();
+    Enumeration<String> getAttributeNames();
+    Enumeration<String> getParameterNames();
+    Locale getLocale();
+    Map<String, String[]> getParameterMap();
+    Object getAttribute(String p0);
+    RequestDispatcher getRequestDispatcher(String p0);
+    ServletContext getServletContext();
+    ServletInputStream getInputStream();
+    String getCharacterEncoding();
+    String getContentType();
+    String getLocalAddr();
+    String getLocalName();
+    String getParameter(String p0);
+    String getProtocol();
+    String getRealPath(String p0);
+    String getRemoteAddr();
+    String getRemoteHost();
+    String getScheme();
+    String getServerName();
+    String[] getParameterValues(String p0);
+    boolean isAsyncStarted();
+    boolean isAsyncSupported();
+    boolean isSecure();
+    int getContentLength();
+    int getLocalPort();
+    int getRemotePort();
+    int getServerPort();
+    long getContentLengthLong();
+    void removeAttribute(String p0);
+    void setAttribute(String p0, Object p1);
+    void setCharacterEncoding(String p0);
+}

java/ql/test/stubs/test/javax/servlet/ServletResponse.java

@@ -0,0 +1,27 @@
+// Generated automatically from javax.servlet.ServletResponse for testing purposes
+
+package javax.servlet;
+
+import java.io.PrintWriter;
+import java.util.Locale;
+import javax.servlet.ServletOutputStream;
+
+public interface ServletResponse
+{
+    Locale getLocale();
+    PrintWriter getWriter();
+    ServletOutputStream getOutputStream();
+    String getCharacterEncoding();
+    String getContentType();
+    boolean isCommitted();
+    int getBufferSize();
+    void flushBuffer();
+    void reset();
+    void resetBuffer();
+    void setBufferSize(int p0);
+    void setCharacterEncoding(String p0);
+    void setContentLength(int p0);
+    void setContentLengthLong(long p0);
+    void setContentType(String p0);
+    void setLocale(Locale p0);
+}

java/ql/test/stubs/test/javax/servlet/ServletSecurityElement.java

@@ -0,0 +1,19 @@
+// Generated automatically from javax.servlet.ServletSecurityElement for testing purposes
+
+package javax.servlet;
+
+import java.util.Collection;
+import javax.servlet.HttpConstraintElement;
+import javax.servlet.HttpMethodConstraintElement;
+import javax.servlet.annotation.ServletSecurity;
+
+public class ServletSecurityElement extends HttpConstraintElement
+{
+    public Collection<HttpMethodConstraintElement> getHttpMethodConstraints(){ return null; }
+    public Collection<String> getMethodNames(){ return null; }
+    public ServletSecurityElement(){}
+    public ServletSecurityElement(Collection<HttpMethodConstraintElement> p0){}
+    public ServletSecurityElement(HttpConstraintElement p0){}
+    public ServletSecurityElement(HttpConstraintElement p0, Collection<HttpMethodConstraintElement> p1){}
+    public ServletSecurityElement(ServletSecurity p0){}
+}

java/ql/test/stubs/test/javax/servlet/SessionCookieConfig.java

@@ -0,0 +1,22 @@
+// Generated automatically from javax.servlet.SessionCookieConfig for testing purposes
+
+package javax.servlet;
+
+
+public interface SessionCookieConfig
+{
+    String getComment();
+    String getDomain();
+    String getName();
+    String getPath();
+    boolean isHttpOnly();
+    boolean isSecure();
+    int getMaxAge();
+    void setComment(String p0);
+    void setDomain(String p0);
+    void setHttpOnly(boolean p0);
+    void setMaxAge(int p0);
+    void setName(String p0);
+    void setPath(String p0);
+    void setSecure(boolean p0);
+}

java/ql/test/stubs/test/javax/servlet/SessionTrackingMode.java

@@ -0,0 +1,10 @@
+// Generated automatically from javax.servlet.SessionTrackingMode for testing purposes
+
+package javax.servlet;
+
+
+public enum SessionTrackingMode
+{
+    COOKIE, SSL, URL;
+    private SessionTrackingMode() {}
+}

java/ql/test/stubs/test/javax/servlet/WriteListener.java

@@ -0,0 +1,11 @@
+// Generated automatically from javax.servlet.WriteListener for testing purposes
+
+package javax.servlet;
+
+import java.util.EventListener;
+
+public interface WriteListener extends EventListener
+{
+    void onError(Throwable p0);
+    void onWritePossible();
+}

java/ql/test/stubs/test/javax/servlet/annotation/HttpConstraint.java

@@ -0,0 +1,18 @@
+// Generated automatically from javax.servlet.annotation.HttpConstraint for testing purposes
+
+package javax.servlet.annotation;
+
+import java.lang.annotation.Annotation;
+import java.lang.annotation.Documented;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import javax.servlet.annotation.ServletSecurity;
+
+@Documented
+@Retention(value=java.lang.annotation.RetentionPolicy.RUNTIME)
+public @interface HttpConstraint
+{
+    ServletSecurity.EmptyRoleSemantic value();
+    ServletSecurity.TransportGuarantee transportGuarantee();
+    String[] rolesAllowed();
+}

java/ql/test/stubs/test/javax/servlet/annotation/HttpMethodConstraint.java

@@ -0,0 +1,19 @@
+// Generated automatically from javax.servlet.annotation.HttpMethodConstraint for testing purposes
+
+package javax.servlet.annotation;
+
+import java.lang.annotation.Annotation;
+import java.lang.annotation.Documented;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import javax.servlet.annotation.ServletSecurity;
+
+@Documented
+@Retention(value=java.lang.annotation.RetentionPolicy.RUNTIME)
+public @interface HttpMethodConstraint
+{
+    ServletSecurity.EmptyRoleSemantic emptyRoleSemantic();
+    ServletSecurity.TransportGuarantee transportGuarantee();
+    String value();
+    String[] rolesAllowed();
+}

java/ql/test/stubs/test/javax/servlet/annotation/MultipartConfig.java

@@ -0,0 +1,19 @@
+// Generated automatically from javax.servlet.annotation.MultipartConfig for testing purposes
+
+package javax.servlet.annotation;
+
+import java.lang.annotation.Annotation;
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+@Retention(value=java.lang.annotation.RetentionPolicy.RUNTIME)
+@Target(value={java.lang.annotation.ElementType.TYPE})
+public @interface MultipartConfig
+{
+    String location();
+    int fileSizeThreshold();
+    long maxFileSize();
+    long maxRequestSize();
+}

java/ql/test/stubs/test/javax/servlet/annotation/ServletSecurity.java

@@ -0,0 +1,33 @@
+// Generated automatically from javax.servlet.annotation.ServletSecurity for testing purposes
+
+package javax.servlet.annotation;
+
+import java.lang.annotation.Annotation;
+import java.lang.annotation.Documented;
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Inherited;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+import javax.servlet.annotation.HttpConstraint;
+import javax.servlet.annotation.HttpMethodConstraint;
+
+@Documented
+@Inherited
+@Retention(value=java.lang.annotation.RetentionPolicy.RUNTIME)
+@Target(value={java.lang.annotation.ElementType.TYPE})
+public @interface ServletSecurity
+{
+    HttpConstraint value();
+    HttpMethodConstraint[] httpMethodConstraints();
+    static public enum EmptyRoleSemantic
+    {
+        DENY, PERMIT;
+        private EmptyRoleSemantic() {}
+    }
+    static public enum TransportGuarantee
+    {
+        CONFIDENTIAL, NONE;
+        private TransportGuarantee() {}
+    }
+}

java/ql/test/stubs/test/javax/servlet/annotation/WebInitParam.java

@@ -0,0 +1,20 @@
+// Generated automatically from javax.servlet.annotation.WebInitParam for testing purposes
+
+package javax.servlet.annotation;
+
+import java.lang.annotation.Annotation;
+import java.lang.annotation.Documented;
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+@Documented
+@Retention(value=java.lang.annotation.RetentionPolicy.RUNTIME)
+@Target(value={java.lang.annotation.ElementType.TYPE})
+public @interface WebInitParam
+{
+    String description();
+    String name();
+    String value();
+}

java/ql/test/stubs/test/javax/servlet/annotation/WebServlet.java

@@ -0,0 +1,28 @@
+// Generated automatically from javax.servlet.annotation.WebServlet for testing purposes
+
+package javax.servlet.annotation;
+
+import java.lang.annotation.Annotation;
+import java.lang.annotation.Documented;
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+import javax.servlet.annotation.WebInitParam;
+
+@Documented
+@Retention(value=java.lang.annotation.RetentionPolicy.RUNTIME)
+@Target(value={java.lang.annotation.ElementType.TYPE})
+public @interface WebServlet
+{
+    String description();
+    String displayName();
+    String largeIcon();
+    String name();
+    String smallIcon();
+    String[] urlPatterns();
+    String[] value();
+    WebInitParam[] initParams();
+    boolean asyncSupported();
+    int loadOnStartup();
+}

java/ql/test/stubs/test/javax/servlet/descriptor/JspConfigDescriptor.java

@@ -0,0 +1,13 @@
+// Generated automatically from javax.servlet.descriptor.JspConfigDescriptor for testing purposes
+
+package javax.servlet.descriptor;
+
+import java.util.Collection;
+import javax.servlet.descriptor.JspPropertyGroupDescriptor;
+import javax.servlet.descriptor.TaglibDescriptor;
+
+public interface JspConfigDescriptor
+{
+    Collection<JspPropertyGroupDescriptor> getJspPropertyGroups();
+    Collection<TaglibDescriptor> getTaglibs();
+}

java/ql/test/stubs/test/javax/servlet/descriptor/JspPropertyGroupDescriptor.java

@@ -0,0 +1,21 @@
+// Generated automatically from javax.servlet.descriptor.JspPropertyGroupDescriptor for testing purposes
+
+package javax.servlet.descriptor;
+
+import java.util.Collection;
+
+public interface JspPropertyGroupDescriptor
+{
+    Collection<String> getIncludeCodas();
+    Collection<String> getIncludePreludes();
+    Collection<String> getUrlPatterns();
+    String getBuffer();
+    String getDefaultContentType();
+    String getDeferredSyntaxAllowedAsLiteral();
+    String getElIgnored();
+    String getErrorOnUndeclaredNamespace();
+    String getIsXml();
+    String getPageEncoding();
+    String getScriptingInvalid();
+    String getTrimDirectiveWhitespaces();
+}

java/ql/test/stubs/test/javax/servlet/descriptor/TaglibDescriptor.java

@@ -0,0 +1,10 @@
+// Generated automatically from javax.servlet.descriptor.TaglibDescriptor for testing purposes
+
+package javax.servlet.descriptor;
+
+
+public interface TaglibDescriptor
+{
+    String getTaglibLocation();
+    String getTaglibURI();
+}

java/ql/test/stubs/test/javax/servlet/http/Cookie.java

@@ -0,0 +1,29 @@
+// Generated automatically from javax.servlet.http.Cookie for testing purposes
+
+package javax.servlet.http;
+
+import java.io.Serializable;
+
+public class Cookie implements Cloneable, Serializable
+{
+    protected Cookie() {}
+    public Cookie(String p0, String p1){}
+    public Object clone(){ return null; }
+    public String getComment(){ return null; }
+    public String getDomain(){ return null; }
+    public String getName(){ return null; }
+    public String getPath(){ return null; }
+    public String getValue(){ return null; }
+    public boolean getSecure(){ return false; }
+    public boolean isHttpOnly(){ return false; }
+    public int getMaxAge(){ return 0; }
+    public int getVersion(){ return 0; }
+    public void setComment(String p0){}
+    public void setDomain(String p0){}
+    public void setHttpOnly(boolean p0){}
+    public void setMaxAge(int p0){}
+    public void setPath(String p0){}
+    public void setSecure(boolean p0){}
+    public void setValue(String p0){}
+    public void setVersion(int p0){}
+}

java/ql/test/stubs/test/javax/servlet/http/HttpServlet.java

@@ -0,0 +1,24 @@
+// Generated automatically from javax.servlet.http.HttpServlet for testing purposes
+
+package javax.servlet.http;
+
+import javax.servlet.GenericServlet;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+abstract public class HttpServlet extends GenericServlet
+{
+    protected long getLastModified(HttpServletRequest p0){ return 0; }
+    protected void doDelete(HttpServletRequest p0, HttpServletResponse p1){}
+    protected void doGet(HttpServletRequest p0, HttpServletResponse p1){}
+    protected void doHead(HttpServletRequest p0, HttpServletResponse p1){}
+    protected void doOptions(HttpServletRequest p0, HttpServletResponse p1){}
+    protected void doPost(HttpServletRequest p0, HttpServletResponse p1){}
+    protected void doPut(HttpServletRequest p0, HttpServletResponse p1){}
+    protected void doTrace(HttpServletRequest p0, HttpServletResponse p1){}
+    protected void service(HttpServletRequest p0, HttpServletResponse p1){}
+    public HttpServlet(){}
+    public void service(ServletRequest p0, ServletResponse p1){}
+}

java/ql/test/stubs/test/javax/servlet/http/HttpServletMapping.java

@@ -0,0 +1,13 @@
+// Generated automatically from javax.servlet.http.HttpServletMapping for testing purposes
+
+package javax.servlet.http;
+
+import javax.servlet.http.MappingMatch;
+
+public interface HttpServletMapping
+{
+    MappingMatch getMappingMatch();
+    String getMatchValue();
+    String getPattern();
+    String getServletName();
+}

java/ql/test/stubs/test/javax/servlet/http/HttpServletRequest.java

@@ -0,0 +1,60 @@
+// Generated automatically from javax.servlet.http.HttpServletRequest for testing purposes
+
+package javax.servlet.http;
+
+import java.security.Principal;
+import java.util.Collection;
+import java.util.Enumeration;
+import java.util.Map;
+import javax.servlet.ServletRequest;
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletMapping;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+import javax.servlet.http.HttpUpgradeHandler;
+import javax.servlet.http.Part;
+import javax.servlet.http.PushBuilder;
+
+public interface HttpServletRequest extends ServletRequest
+{
+    <T extends HttpUpgradeHandler> T upgrade(java.lang.Class<T> p0);
+    Collection<Part> getParts();
+    Cookie[] getCookies();
+    Enumeration<String> getHeaderNames();
+    Enumeration<String> getHeaders(String p0);
+    HttpSession getSession();
+    HttpSession getSession(boolean p0);
+    Part getPart(String p0);
+    Principal getUserPrincipal();
+    String changeSessionId();
+    String getAuthType();
+    String getContextPath();
+    String getHeader(String p0);
+    String getMethod();
+    String getPathInfo();
+    String getPathTranslated();
+    String getQueryString();
+    String getRemoteUser();
+    String getRequestURI();
+    String getRequestedSessionId();
+    String getServletPath();
+    StringBuffer getRequestURL();
+    boolean authenticate(HttpServletResponse p0);
+    boolean isRequestedSessionIdFromCookie();
+    boolean isRequestedSessionIdFromURL();
+    boolean isRequestedSessionIdFromUrl();
+    boolean isRequestedSessionIdValid();
+    boolean isUserInRole(String p0);
+    default HttpServletMapping getHttpServletMapping(){ return null; }
+    default Map<String, String> getTrailerFields(){ return null; }
+    default PushBuilder newPushBuilder(){ return null; }
+    default boolean isTrailerFieldsReady(){ return false; }
+    int getIntHeader(String p0);
+    long getDateHeader(String p0);
+    static String BASIC_AUTH = null;
+    static String CLIENT_CERT_AUTH = null;
+    static String DIGEST_AUTH = null;
+    static String FORM_AUTH = null;
+    void login(String p0, String p1);
+    void logout();
+}

java/ql/test/stubs/test/javax/servlet/http/HttpServletResponse.java

@@ -0,0 +1,77 @@
+// Generated automatically from javax.servlet.http.HttpServletResponse for testing purposes
+
+package javax.servlet.http;
+
+import java.util.Collection;
+import java.util.Map;
+import java.util.function.Supplier;
+import javax.servlet.ServletResponse;
+import javax.servlet.http.Cookie;
+
+public interface HttpServletResponse extends ServletResponse
+{
+    Collection<String> getHeaderNames();
+    Collection<String> getHeaders(String p0);
+    String encodeRedirectURL(String p0);
+    String encodeRedirectUrl(String p0);
+    String encodeURL(String p0);
+    String encodeUrl(String p0);
+    String getHeader(String p0);
+    boolean containsHeader(String p0);
+    default Supplier<Map<String, String>> getTrailerFields(){ return null; }
+    default void setTrailerFields(Supplier<Map<String, String>> p0){}
+    int getStatus();
+    static int SC_ACCEPTED = 0;
+    static int SC_BAD_GATEWAY = 0;
+    static int SC_BAD_REQUEST = 0;
+    static int SC_CONFLICT = 0;
+    static int SC_CONTINUE = 0;
+    static int SC_CREATED = 0;
+    static int SC_EXPECTATION_FAILED = 0;
+    static int SC_FORBIDDEN = 0;
+    static int SC_FOUND = 0;
+    static int SC_GATEWAY_TIMEOUT = 0;
+    static int SC_GONE = 0;
+    static int SC_HTTP_VERSION_NOT_SUPPORTED = 0;
+    static int SC_INTERNAL_SERVER_ERROR = 0;
+    static int SC_LENGTH_REQUIRED = 0;
+    static int SC_METHOD_NOT_ALLOWED = 0;
+    static int SC_MOVED_PERMANENTLY = 0;
+    static int SC_MOVED_TEMPORARILY = 0;
+    static int SC_MULTIPLE_CHOICES = 0;
+    static int SC_NON_AUTHORITATIVE_INFORMATION = 0;
+    static int SC_NOT_ACCEPTABLE = 0;
+    static int SC_NOT_FOUND = 0;
+    static int SC_NOT_IMPLEMENTED = 0;
+    static int SC_NOT_MODIFIED = 0;
+    static int SC_NO_CONTENT = 0;
+    static int SC_OK = 0;
+    static int SC_PARTIAL_CONTENT = 0;
+    static int SC_PAYMENT_REQUIRED = 0;
+    static int SC_PRECONDITION_FAILED = 0;
+    static int SC_PROXY_AUTHENTICATION_REQUIRED = 0;
+    static int SC_REQUESTED_RANGE_NOT_SATISFIABLE = 0;
+    static int SC_REQUEST_ENTITY_TOO_LARGE = 0;
+    static int SC_REQUEST_TIMEOUT = 0;
+    static int SC_REQUEST_URI_TOO_LONG = 0;
+    static int SC_RESET_CONTENT = 0;
+    static int SC_SEE_OTHER = 0;
+    static int SC_SERVICE_UNAVAILABLE = 0;
+    static int SC_SWITCHING_PROTOCOLS = 0;
+    static int SC_TEMPORARY_REDIRECT = 0;
+    static int SC_UNAUTHORIZED = 0;
+    static int SC_UNSUPPORTED_MEDIA_TYPE = 0;
+    static int SC_USE_PROXY = 0;
+    void addCookie(Cookie p0);
+    void addDateHeader(String p0, long p1);
+    void addHeader(String p0, String p1);
+    void addIntHeader(String p0, int p1);
+    void sendError(int p0);
+    void sendError(int p0, String p1);
+    void sendRedirect(String p0);
+    void setDateHeader(String p0, long p1);
+    void setHeader(String p0, String p1);
+    void setIntHeader(String p0, int p1);
+    void setStatus(int p0);
+    void setStatus(int p0, String p1);
+}

java/ql/test/stubs/test/javax/servlet/http/HttpSession.java

@@ -0,0 +1,28 @@
+// Generated automatically from javax.servlet.http.HttpSession for testing purposes
+
+package javax.servlet.http;
+
+import java.util.Enumeration;
+import javax.servlet.ServletContext;
+import javax.servlet.http.HttpSessionContext;
+
+public interface HttpSession
+{
+    Enumeration<String> getAttributeNames();
+    HttpSessionContext getSessionContext();
+    Object getAttribute(String p0);
+    Object getValue(String p0);
+    ServletContext getServletContext();
+    String getId();
+    String[] getValueNames();
+    boolean isNew();
+    int getMaxInactiveInterval();
+    long getCreationTime();
+    long getLastAccessedTime();
+    void invalidate();
+    void putValue(String p0, Object p1);
+    void removeAttribute(String p0);
+    void removeValue(String p0);
+    void setAttribute(String p0, Object p1);
+    void setMaxInactiveInterval(int p0);
+}

java/ql/test/stubs/test/javax/servlet/http/HttpSessionContext.java

@@ -0,0 +1,12 @@
+// Generated automatically from javax.servlet.http.HttpSessionContext for testing purposes
+
+package javax.servlet.http;
+
+import java.util.Enumeration;
+import javax.servlet.http.HttpSession;
+
+public interface HttpSessionContext
+{
+    Enumeration<String> getIds();
+    HttpSession getSession(String p0);
+}

java/ql/test/stubs/test/javax/servlet/http/HttpUpgradeHandler.java

@@ -0,0 +1,11 @@
+// Generated automatically from javax.servlet.http.HttpUpgradeHandler for testing purposes
+
+package javax.servlet.http;
+
+import javax.servlet.http.WebConnection;
+
+public interface HttpUpgradeHandler
+{
+    void destroy();
+    void init(WebConnection p0);
+}

java/ql/test/stubs/test/javax/servlet/http/MappingMatch.java

@@ -0,0 +1,10 @@
+// Generated automatically from javax.servlet.http.MappingMatch for testing purposes
+
+package javax.servlet.http;
+
+
+public enum MappingMatch
+{
+    CONTEXT_ROOT, DEFAULT, EXACT, EXTENSION, PATH;
+    private MappingMatch() {}
+}

java/ql/test/stubs/test/javax/servlet/http/Part.java

@@ -0,0 +1,20 @@
+// Generated automatically from javax.servlet.http.Part for testing purposes
+
+package javax.servlet.http;
+
+import java.io.InputStream;
+import java.util.Collection;
+
+public interface Part
+{
+    Collection<String> getHeaderNames();
+    Collection<String> getHeaders(String p0);
+    InputStream getInputStream();
+    String getContentType();
+    String getHeader(String p0);
+    String getName();
+    String getSubmittedFileName();
+    long getSize();
+    void delete();
+    void write(String p0);
+}

java/ql/test/stubs/test/javax/servlet/http/PushBuilder.java

@@ -0,0 +1,23 @@
+// Generated automatically from javax.servlet.http.PushBuilder for testing purposes
+
+package javax.servlet.http;
+
+import java.util.Set;
+
+public interface PushBuilder
+{
+    PushBuilder addHeader(String p0, String p1);
+    PushBuilder method(String p0);
+    PushBuilder path(String p0);
+    PushBuilder queryString(String p0);
+    PushBuilder removeHeader(String p0);
+    PushBuilder sessionId(String p0);
+    PushBuilder setHeader(String p0, String p1);
+    Set<String> getHeaderNames();
+    String getHeader(String p0);
+    String getMethod();
+    String getPath();
+    String getQueryString();
+    String getSessionId();
+    void push();
+}

java/ql/test/stubs/test/javax/servlet/http/WebConnection.java

@@ -0,0 +1,12 @@
+// Generated automatically from javax.servlet.http.WebConnection for testing purposes
+
+package javax.servlet.http;
+
+import javax.servlet.ServletInputStream;
+import javax.servlet.ServletOutputStream;
+
+public interface WebConnection extends AutoCloseable
+{
+    ServletInputStream getInputStream();
+    ServletOutputStream getOutputStream();
+}