Consider bulk-like data for argument accessors

This commit is contained in:
Benjamin Muskalla
2021-10-28 14:17:21 +02:00
parent 739fe75194
commit e2bd792fc2
4 changed files with 14 additions and 6 deletions

View File

@@ -30,7 +30,8 @@
| p;ParamFlow;true;returnMultipleParameters;(String,String);;Argument[1];ReturnValue;taint; |
| p;ParamFlow;true;returnVarArgElement;(String[]);;ArrayElement of Argument[0];ReturnValue;taint; |
| p;ParamFlow;true;returnsInput;(String);;Argument[0];ReturnValue;taint; |
| p;ParamFlow;true;writeChunked;(byte[],OutputStream);;ArrayElement of Argument[0];Argument[1];taint; |
| p;ParamFlow;true;writeChunked;(byte[],OutputStream);;Argument[0];Argument[1];taint; |
| p;ParamFlow;true;writeChunked;(char[],OutputStream);;Argument[0];Argument[1];taint; |
| p;Pojo;false;fillIn;(List);;Argument[-1];Element of Argument[0];taint; |
| p;Pojo;false;getBoxedBytes;();;Argument[-1];ReturnValue;taint; |
| p;Pojo;false;getBoxedChars;();;Argument[-1];ReturnValue;taint; |

View File

@@ -51,6 +51,11 @@ public class ParamFlow {
throws IOException {
output.write(data, 0, data.length);
}
public void writeChunked(char[] data, OutputStream output)
throws IOException {
output.write(String.valueOf(data).getBytes(), 0, data.length);
}
public void addTo(String data, List<String> target) {
target.add(data);