diff --git a/java/ql/src/Security/CWE/CWE-312/CleartextStorageAndroidDatabase.ql b/java/ql/src/Security/CWE/CWE-312/CleartextStorageAndroidDatabase.ql index 88c1c6f856c..df394db8b4c 100644 --- a/java/ql/src/Security/CWE/CWE-312/CleartextStorageAndroidDatabase.ql +++ b/java/ql/src/Security/CWE/CWE-312/CleartextStorageAndroidDatabase.ql @@ -18,6 +18,6 @@ from SensitiveSource data, LocalDatabaseOpenMethodAccess s, Expr input, Expr sto where input = s.getAnInput() and store = s.getAStore() and - data.flowsToCached(input) + data.flowsTo(input) select store, "SQLite database $@ containing $@ is stored $@. Data was added $@.", s, s.toString(), data, "sensitive data", store, "here", input, "here" diff --git a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.ql b/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.ql index ea754b1a96e..421b3a408c4 100644 --- a/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.ql +++ b/java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.ql @@ -12,7 +12,7 @@ class CleartextStorageAndroidDatabaseTest extends InlineExpectationsTest { exists(SensitiveSource data, LocalDatabaseOpenMethodAccess s, Expr input, Expr store | input = s.getAnInput() and store = s.getAStore() and - data.flowsToCached(input) + data.flowsTo(input) | input.getLocation() = location and element = input.toString() and diff --git a/java/ql/test/stubs/google-android-9.0.0/android/database/sqlite/SQLiteDatabase.java b/java/ql/test/stubs/google-android-9.0.0/android/database/sqlite/SQLiteDatabase.java index a698c7e952f..f2b43056026 100644 --- a/java/ql/test/stubs/google-android-9.0.0/android/database/sqlite/SQLiteDatabase.java +++ b/java/ql/test/stubs/google-android-9.0.0/android/database/sqlite/SQLiteDatabase.java @@ -97,6 +97,7 @@ public class SQLiteDatabase extends SQLiteClosable public void execPerConnectionSQL(String p0, Object[] p1){} public void execSQL(String p0){} public void execSQL(String p0, Object[] p1){} + public void execPerConnectionSQL (String p0, Object[] p1){} public void markTableSyncable(String p0, String p1){} public void markTableSyncable(String p0, String p1, String p2){} public void setCustomAggregateFunction(String p0, BinaryOperator p1){}