hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Add a global extension point for taint steps.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2019-08-22 16:38:59 +02:00
parent 0801e51175
commit ef0c6d01eb
1 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
java/ql/src/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll
View File

@@ -40,12 +40,26 @@ predicate localAdditionalTaintStep(DataFlow::Node src, DataFlow::Node sink) {
)
}
/**
* A `DataFlow::Node` that is the origin of a taint step.
*
* Extend this class to add additional taint steps that should apply to all
* taint configurations.
*/
abstract class AdditionalTaintStepNode extends DataFlow::Node {
/**
* Gets a `DataFlow::Node` that this node can step to in one taint step.
*/
abstract DataFlow::Node step();
}
/**
* Holds if the additional step from `src` to `sink` should be included in all
* global taint flow configurations.
*/
predicate defaultAdditionalTaintStep(DataFlow::Node src, DataFlow::Node sink) {
localAdditionalTaintStep(src, sink)
localAdditionalTaintStep(src, sink) or
src.(AdditionalTaintStepNode).step() = sink
}
/**