mirror of
https://github.com/github/codeql.git
synced 2026-04-27 01:35:13 +02:00
Consider bulk-like data for argument accessors
This commit is contained in:
@@ -30,7 +30,8 @@
|
||||
| p;ParamFlow;true;returnMultipleParameters;(String,String);;Argument[1];ReturnValue;taint; |
|
||||
| p;ParamFlow;true;returnVarArgElement;(String[]);;ArrayElement of Argument[0];ReturnValue;taint; |
|
||||
| p;ParamFlow;true;returnsInput;(String);;Argument[0];ReturnValue;taint; |
|
||||
| p;ParamFlow;true;writeChunked;(byte[],OutputStream);;ArrayElement of Argument[0];Argument[1];taint; |
|
||||
| p;ParamFlow;true;writeChunked;(byte[],OutputStream);;Argument[0];Argument[1];taint; |
|
||||
| p;ParamFlow;true;writeChunked;(char[],OutputStream);;Argument[0];Argument[1];taint; |
|
||||
| p;Pojo;false;fillIn;(List);;Argument[-1];Element of Argument[0];taint; |
|
||||
| p;Pojo;false;getBoxedBytes;();;Argument[-1];ReturnValue;taint; |
|
||||
| p;Pojo;false;getBoxedChars;();;Argument[-1];ReturnValue;taint; |
|
||||
|
||||
@@ -51,6 +51,11 @@ public class ParamFlow {
|
||||
throws IOException {
|
||||
output.write(data, 0, data.length);
|
||||
}
|
||||
|
||||
public void writeChunked(char[] data, OutputStream output)
|
||||
throws IOException {
|
||||
output.write(String.valueOf(data).getBytes(), 0, data.length);
|
||||
}
|
||||
|
||||
public void addTo(String data, List<String> target) {
|
||||
target.add(data);
|
||||
|
||||
Reference in New Issue
Block a user