add service flow sources

2026-03-30 12:18:18 +02:00 · 2022-09-19 15:54:45 -04:00
parent 3bd456e52d
commit decba39c09
2 changed files with 29 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll
@@ -250,6 +250,12 @@ class AndroidIntentInput extends DataFlow::Node {
      this.asParameter() = m.getParameter(1) and
      receiverType = m.getDeclaringType()
    )
+    or
+    exists(Method m, AndroidServiceIntentMethod sI |
+      m.overrides*(sI) and
+      this.asParameter() = m.getParameter(0) and
+      receiverType = m.getDeclaringType()
+    )
  }
 }