hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3454 from porcupineyhairs/javaSSRf

Browse Source 
Java : add request forgery query
This commit is contained in:
Anders Schack-Mulligen
2020-11-26 08:52:15 +01:00
committed by GitHub
parent d29a6ec4c6 9c30b82116
commit f70072a2db
39 changed files with 1559 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
java/ql/test/experimental/query-tests/security/CWE-918/JaxWsSSRF.java Normal file
View File

@@ -0,0 +1,25 @@
import javax.ws.rs.client.*;
import java.io.IOException;
import java.net.URI;
import java.net.*;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.Proxy.Type;
import java.io.InputStream;
import org.apache.http.client.methods.HttpGet;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class JaxWsSSRF extends HttpServlet {
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
Client client = ClientBuilder.newClient();
String url = request.getParameter("url");
client.target(url);
}
}

64
java/ql/test/experimental/query-tests/security/CWE-918/RequestForgery.expected Normal file
View File

@@ -0,0 +1,64 @@
edges
| JaxWsSSRF.java:21:22:21:48 | getParameter(...) : String | JaxWsSSRF.java:22:23:22:25 | url |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:55:32:55:35 | url1 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:58:32:58:35 | url1 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:59:30:59:33 | url1 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:63:65:63:68 | uri2 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:64:59:64:61 | uri |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:67:43:67:45 | uri |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:69:29:69:32 | uri2 |
| RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:22:52:22:54 | uri |
| RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:27:57:27:59 | uri |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:32:47:32:67 | ... + ... |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:37:43:37:56 | fooResourceUrl |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:41:42:41:55 | fooResourceUrl |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:45:47:45:60 | fooResourceUrl |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:54:59:54:72 | fooResourceUrl |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:58:74:58:96 | new URI(...) |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:62:57:62:70 | fooResourceUrl |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:66:48:66:61 | fooResourceUrl |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:69:30:69:43 | fooResourceUrl |
nodes
| JaxWsSSRF.java:21:22:21:48 | getParameter(...) : String | semmle.label | getParameter(...) : String |
| JaxWsSSRF.java:22:23:22:25 | url | semmle.label | url |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | semmle.label | getParameter(...) : String |
| RequestForgery2.java:55:32:55:35 | url1 | semmle.label | url1 |
| RequestForgery2.java:58:32:58:35 | url1 | semmle.label | url1 |
| RequestForgery2.java:59:30:59:33 | url1 | semmle.label | url1 |
| RequestForgery2.java:63:65:63:68 | uri2 | semmle.label | uri2 |
| RequestForgery2.java:64:59:64:61 | uri | semmle.label | uri |
| RequestForgery2.java:67:43:67:45 | uri | semmle.label | uri |
| RequestForgery2.java:69:29:69:32 | uri2 | semmle.label | uri2 |
| RequestForgery.java:19:31:19:57 | getParameter(...) : String | semmle.label | getParameter(...) : String |
| RequestForgery.java:22:52:22:54 | uri | semmle.label | uri |
| RequestForgery.java:27:57:27:59 | uri | semmle.label | uri |
| SpringSSRF.java:26:33:26:60 | getParameter(...) : String | semmle.label | getParameter(...) : String |
| SpringSSRF.java:32:47:32:67 | ... + ... | semmle.label | ... + ... |
| SpringSSRF.java:37:43:37:56 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:41:42:41:55 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:45:47:45:60 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:54:59:54:72 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:58:74:58:96 | new URI(...) | semmle.label | new URI(...) |
| SpringSSRF.java:62:57:62:70 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:66:48:66:61 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:69:30:69:43 | fooResourceUrl | semmle.label | fooResourceUrl |
#select
| JaxWsSSRF.java:22:23:22:25 | url | JaxWsSSRF.java:21:22:21:48 | getParameter(...) : String | JaxWsSSRF.java:22:23:22:25 | url | Potential server side request forgery due to $@. | JaxWsSSRF.java:21:22:21:48 | getParameter(...) | a user-provided value |
| RequestForgery2.java:55:32:55:35 | url1 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:55:32:55:35 | url1 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:58:32:58:35 | url1 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:58:32:58:35 | url1 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:59:30:59:33 | url1 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:59:30:59:33 | url1 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:63:65:63:68 | uri2 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:63:65:63:68 | uri2 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:64:59:64:61 | uri | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:64:59:64:61 | uri | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:67:43:67:45 | uri | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:67:43:67:45 | uri | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:69:29:69:32 | uri2 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:69:29:69:32 | uri2 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery.java:22:52:22:54 | uri | RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:22:52:22:54 | uri | Potential server side request forgery due to $@. | RequestForgery.java:19:31:19:57 | getParameter(...) | a user-provided value |
| RequestForgery.java:27:57:27:59 | uri | RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:27:57:27:59 | uri | Potential server side request forgery due to $@. | RequestForgery.java:19:31:19:57 | getParameter(...) | a user-provided value |
| SpringSSRF.java:32:47:32:67 | ... + ... | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:32:47:32:67 | ... + ... | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:37:43:37:56 | fooResourceUrl | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:37:43:37:56 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:41:42:41:55 | fooResourceUrl | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:41:42:41:55 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:45:47:45:60 | fooResourceUrl | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:45:47:45:60 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:54:59:54:72 | fooResourceUrl | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:54:59:54:72 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:58:74:58:96 | new URI(...) | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:58:74:58:96 | new URI(...) | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:62:57:62:70 | fooResourceUrl | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:62:57:62:70 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:66:48:66:61 | fooResourceUrl | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:66:48:66:61 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |
| SpringSSRF.java:69:30:69:43 | fooResourceUrl | SpringSSRF.java:26:33:26:60 | getParameter(...) : String | SpringSSRF.java:69:30:69:43 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:26:33:26:60 | getParameter(...) | a user-provided value |

34
java/ql/test/experimental/query-tests/security/CWE-918/RequestForgery.java Normal file
View File

@@ -0,0 +1,34 @@
import java.io.IOException;
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class RequestForgery extends HttpServlet {
private static final String VALID_URI = "http://lgtm.com";
private HttpClient client = HttpClient.newHttpClient();
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
try {
URI uri = new URI(request.getParameter("uri"));
// BAD: a request parameter is incorporated without validation into a Http
// request
HttpRequest r = HttpRequest.newBuilder(uri).build();
client.send(r, null);
// GOOD: the request parameter is validated against a known fixed string
if (VALID_URI.equals(request.getParameter("uri"))) {
HttpRequest r2 = HttpRequest.newBuilder(uri).build();
client.send(r2, null);
}
} catch (Exception e) {
// TODO: handle exception
}
}
}

1
java/ql/test/experimental/query-tests/security/CWE-918/RequestForgery.qlref Normal file
View File

@@ -0,0 +1 @@
experimental/CWE-918/RequestForgery.ql

84
java/ql/test/experimental/query-tests/security/CWE-918/RequestForgery2.java Normal file
View File

@@ -0,0 +1,84 @@
import java.io.IOException;
import java.net.URI;
import java.net.*;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.Proxy.Type;
import java.io.InputStream;
import org.apache.http.client.methods.HttpGet;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class RequestForgery2 extends HttpServlet {
private static final String VALID_URI = "http://lgtm.com";
private HttpClient client = HttpClient.newHttpClient();
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
try {
String sink = request.getParameter("uri");
// URI(String str)
URI uri = new URI(sink);
// URI(String scheme, String ssp, String fragment)
URI uri2 = new URI("http", sink, "fragement");
// URI(String scheme, String userInfo, String host, int port, String path,
// String query, String fragment)
URI uri3 = new URI("http", "userinfo", "host", 1, "path", "query", "fragment");
// URI(String scheme, String host, String path, String fragment)
URI uri4 = new URI("http", "host", "path", "fragment");
// URI(String scheme, String authority, String path, String query, String
// fragment)
URI uri5 = new URI("http", "authority", "path", "query", "fragment");
URI uri6 = URI.create("http://foo.com/");
// URL(String spec)
URL url1 = new URL(sink);
// URL(String protocol, String host, int port, String file)
URL url2 = new URL("http", "host", 1, "file");
// URL(String protocol, String host, String file)
URL url3 = new URL("http", "host", "file");
// URL(URL context, String spec)
URL url4 = new URL(url3, "http");
// URL(String protocol, String host, int port, String file, URLStreamHandler
// handler)
URL url5 = new URL("http", "host", 1, "file", new Helper2());
// URL(URL context, String spec, URLStreamHandler handler)
URL url6 = new URL(url3, "spec", new Helper2());
URLConnection c1 = url1.openConnection();
SocketAddress sa = new SocketAddress() {
};
URLConnection c2 = url1.openConnection(new Proxy(Type.HTTP, sa));
InputStream c3 = url1.openStream();
// java.net.http
HttpClient client = HttpClient.newHttpClient();
HttpRequest request2 = HttpRequest.newBuilder().uri(uri2).build();
HttpRequest request3 = HttpRequest.newBuilder(uri).build();
// Apache HTTPlib
HttpGet httpGet = new HttpGet(uri);
HttpGet httpGet2 = new HttpGet();
httpGet2.setURI(uri2);
} catch (Exception e) {
// TODO: handle exception
}
}
}
class Helper2 extends URLStreamHandler {
Helper2() {
}
protected URLConnection openConnection(URL u) throws IOException {
return null;
}
}

72
java/ql/test/experimental/query-tests/security/CWE-918/Sinks.java Normal file
View File

@@ -0,0 +1,72 @@
import java.io.IOException;
import java.io.InputStream;
import java.net.Proxy;
import java.net.SocketAddress;
import java.net.URI;
import java.net.URL;
import java.net.URLConnection;
import java.net.URLStreamHandler;
import java.net.Proxy.Type;
import org.apache.http.client.methods.HttpGet;
// import java.net.http.HttpClient;
// import java.net.http.HttpRequest;
public class Sinks {
public static void main(String[] args) throws Exception {
// URI(String str)
URI uri = new URI("uri1");
// URI(String scheme, String ssp, String fragment)
URI uri2 = new URI("http", "ssp", "fragement");
// URI(String scheme, String userInfo, String host, int port, String path,
// String query, String fragment)
URI uri3 = new URI("http", "userinfo", "host", 1, "path", "query", "fragment");
// URI(String scheme, String host, String path, String fragment)
URI uri4 = new URI("http", "host", "path", "fragment");
// URI(String scheme, String authority, String path, String query, String
// fragment)
URI uri5 = new URI("http", "authority", "path", "query", "fragment");
URI uri6 = URI.create("http://foo.com/");
// URL(String spec)
URL url1 = new URL("spec");
// URL(String protocol, String host, int port, String file)
URL url2 = new URL("http", "host", 1, "file");
// URL(String protocol, String host, String file)
URL url3 = new URL("http", "host", "file");
// URL(URL context, String spec)
URL url4 = new URL(url3, "http");
// URL(String protocol, String host, int port, String file, URLStreamHandler
// handler)
URL url5 = new URL("http", "host", 1, "file", new Helper());
// URL(URL context, String spec, URLStreamHandler handler)
URL url6 = new URL(url3, "spec", new Helper());
URLConnection c1 = url1.openConnection();
SocketAddress sa = new SocketAddress() {
};
URLConnection c2 = url1.openConnection(new Proxy(Type.HTTP, sa));
InputStream c3 = url1.openStream();
// java.net.http
// HttpClient client = HttpClient.newHttpClient();
// HttpRequest request2 = HttpRequest.newBuilder().uri(uri2).build();
// HttpRequest request3 = HttpRequest.newBuilder(uri).build();
// Apache HTTPlib
HttpGet httpGet = new HttpGet(uri);
HttpGet httpGet2 = new HttpGet();
httpGet2.setURI(uri2);
}
}
class Helper extends URLStreamHandler {
@Override
protected URLConnection openConnection(URL arg0) throws IOException {
return null;
}
}

72
java/ql/test/experimental/query-tests/security/CWE-918/SpringSSRF.java Normal file
View File

@@ -0,0 +1,72 @@
import org.springframework.web.client.RestTemplate;
import org.springframework.http.RequestEntity;
import org.springframework.http.ResponseEntity;
import org.springframework.http.HttpEntity;
import org.springframework.http.HttpStatus;
import java.net.URI;
import org.springframework.http.HttpMethod;
import java.io.IOException;
import java.net.URI;
import java.net.*;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.Proxy.Type;
import java.io.InputStream;
import org.apache.http.client.methods.HttpGet;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class SpringSSRF extends HttpServlet {
protected void doGet(HttpServletRequest request2, HttpServletResponse response2)
throws ServletException, IOException {
String fooResourceUrl = request2.getParameter("uri");;
RestTemplate restTemplate = new RestTemplate();
HttpEntity<String> request = new HttpEntity<>(new String("bar"));
{
ResponseEntity<String> response =
restTemplate.getForEntity(fooResourceUrl + "/1", String.class);
}
{
ResponseEntity<String> response =
restTemplate.exchange(fooResourceUrl, HttpMethod.POST, request, String.class);
}
{
ResponseEntity<String> response =
restTemplate.execute(fooResourceUrl, HttpMethod.POST, null, null, "test");
}
{
ResponseEntity<String> response =
restTemplate.getForEntity(fooResourceUrl, String.class, "test");
}
{
String body = new String("body");
RequestEntity<String> requestEntity =
RequestEntity.post(new URI(fooResourceUrl)).body(body);
ResponseEntity<String> response = restTemplate.exchange(requestEntity, String.class);
}
{
String response = restTemplate.patchForObject(fooResourceUrl, new String("object"),
String.class, "hi");
}
{
ResponseEntity<String> response = restTemplate.postForEntity(new URI(fooResourceUrl),
new String("object"), String.class);
}
{
URI response = restTemplate.postForLocation(fooResourceUrl, new String("object"));
}
{
String response =
restTemplate.postForObject(fooResourceUrl, new String("object"), String.class);
}
{
restTemplate.put(fooResourceUrl, new String("object"));
}
}
}

1
java/ql/test/experimental/query-tests/security/CWE-918/options Normal file
View File

@@ -0,0 +1 @@
//semmle-extractor-options: --javac-args -source 11 -target 11 -cp ${testdir}/../../../../stubs/springframework-5.2.3:${testdir}/../../../stubs/javax-ws-rs-api-2.1.1:${testdir}/../../../../stubs/apache-http-4.4.13/:${testdir}/../../../../stubs/servlet-api-2.4/

12
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/client/Client.java Normal file
View File

@@ -0,0 +1,12 @@
package javax.ws.rs.client;
public abstract interface Client extends javax.ws.rs.core.Configurable {
public abstract javax.ws.rs.client.WebTarget target(java.lang.String arg0);
public abstract javax.ws.rs.client.WebTarget target(java.net.URI arg0);
public abstract javax.ws.rs.client.WebTarget target(javax.ws.rs.core.UriBuilder arg0);
public abstract javax.ws.rs.client.WebTarget target(javax.ws.rs.core.Link arg0);
}

19
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/client/ClientBuilder.java Normal file
View File

@@ -0,0 +1,19 @@
package javax.ws.rs.client;
public abstract class ClientBuilder implements javax.ws.rs.core.Configurable {
protected ClientBuilder() {
}
public static javax.ws.rs.client.ClientBuilder newBuilder() {
return null;
}
public static javax.ws.rs.client.Client newClient() {
return null;
}
public static javax.ws.rs.client.Client newClient(javax.ws.rs.core.Configuration configuration) {
return null;
}
}

4
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/client/WebTarget.java Normal file
View File

@@ -0,0 +1,4 @@
package javax.ws.rs.client;
public abstract interface WebTarget extends javax.ws.rs.core.Configurable {
}

6
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/core/Configurable.java Normal file
View File

@@ -0,0 +1,6 @@
package javax.ws.rs.core;
public abstract interface Configurable<C extends javax.ws.rs.core.Configurable> {
public abstract javax.ws.rs.core.Configuration getConfiguration();
}

3
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/core/Configuration.java Normal file
View File

@@ -0,0 +1,3 @@
package javax.ws.rs.core;
public abstract interface Configuration {}

61
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/core/Link.java Normal file
View File

@@ -0,0 +1,61 @@
package javax.ws.rs.core;
public abstract class Link {
public static final java.lang.String TITLE = "title";
public static final java.lang.String REL = "rel";
public static final java.lang.String TYPE = "type";
public Link() {
}
public abstract java.net.URI getUri();
public abstract javax.ws.rs.core.UriBuilder getUriBuilder();
public abstract java.lang.String getRel();
public abstract java.util.List<java.lang.String> getRels();
public abstract java.lang.String getTitle();
public abstract java.lang.String getType();
public abstract java.util.Map<java.lang.String, java.lang.String> getParams();
public abstract java.lang.String toString();
public static javax.ws.rs.core.Link valueOf(java.lang.String value) {
return null;
}
// public static javax.ws.rs.core.Link.Builder fromUri(java.net.URI uri) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromUri(java.lang.String uri) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromUriBuilder(javax.ws.rs.core.UriBuilder uriBuilder) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromLink(javax.ws.rs.core.Link link) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromPath(java.lang.String path) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromResource(java.lang.Class<?> resource) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromMethod(java.lang.Class<?> resource, java.lang.String method) {
// return null;
// }
}

62
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/core/UriBuilder.java Normal file
View File

@@ -0,0 +1,62 @@
// Failed to get sources. Instead, stub sources have been generated by the disassembler.
// Implementation of methods is unavailable.
package javax.ws.rs.core;
public abstract class UriBuilder {
protected UriBuilder() {
}
protected static javax.ws.rs.core.UriBuilder newInstance() {
return null;
}
public static javax.ws.rs.core.UriBuilder fromUri(java.net.URI uri) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromUri(java.lang.String uriTemplate) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromLink(javax.ws.rs.core.Link link) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromPath(java.lang.String path)
throws java.lang.IllegalArgumentException {
return null;
}
public static javax.ws.rs.core.UriBuilder fromResource(java.lang.Class<?> resource) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromMethod(java.lang.Class<?> resource, java.lang.String method) {
return null;
}
public abstract javax.ws.rs.core.UriBuilder clone();
public abstract javax.ws.rs.core.UriBuilder uri(java.net.URI arg0);
public abstract javax.ws.rs.core.UriBuilder uri(java.lang.String arg0);
public abstract java.net.URI buildFromMap(java.util.Map<java.lang.String, ?> arg0);
public abstract java.net.URI buildFromMap(java.util.Map<java.lang.String, ?> arg0, boolean arg1)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI buildFromEncodedMap(java.util.Map<java.lang.String, ?> arg0)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI build(java.lang.Object... arg0)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI build(java.lang.Object[] arg0, boolean arg1)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI buildFromEncoded(java.lang.Object... arg0)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
}

18
java/ql/test/experimental/stubs/javax-ws-rs-api-2.1.1/javax/ws/rs/core/UriBuilderException.java Normal file
View File

@@ -0,0 +1,18 @@
package javax.ws.rs.core;
public class UriBuilderException extends java.lang.RuntimeException {
private static final long serialVersionUID = 956255913370721193L;
public UriBuilderException() {
}
public UriBuilderException(java.lang.String msg) {
}
public UriBuilderException(java.lang.String msg, java.lang.Throwable cause) {
}
public UriBuilderException(java.lang.Throwable cause) {
}
}

1
java/ql/test/stubs/servlet-api-2.4/javax/servlet/ServletInputStream.java
View File

@@ -30,5 +30,6 @@ public abstract class ServletInputStream extends InputStream {
protected ServletInputStream() {
}
public int readLine(byte[] b, int off, int len) throws IOException {
return 0;
}
}

27
java/ql/test/stubs/springframework-5.2.3/org/springframework/core/ParameterizedTypeReference.java Normal file
View File

@@ -0,0 +1,27 @@
package org.springframework.core;
public abstract class ParameterizedTypeReference<T> {
public java.lang.reflect.Type getType() {
return null;
}
public boolean equals(java.lang.Object other) {
return false;
}
public int hashCode() {
return 0;
}
public java.lang.String toString() {
return null;
}
public static <T> org.springframework.core.ParameterizedTypeReference<T> forType(java.lang.reflect.Type type) {
return null;
}
private static java.lang.Class<?> findParameterizedTypeReferenceSubclass(java.lang.Class<?> child) {
return null;
}
}

40
java/ql/test/stubs/springframework-5.2.3/org/springframework/http/HttpEntity.java Normal file
View File

@@ -0,0 +1,40 @@
package org.springframework.http;
public class HttpEntity<T> {
protected HttpEntity() {
}
public HttpEntity(T body) {
}
public HttpEntity(org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers) {
}
public HttpEntity(T body, org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers) {
}
public org.springframework.http.HttpHeaders getHeaders() {
return null;
}
public T getBody() {
return null;
}
public boolean hasBody() {
return false;
}
public boolean equals(java.lang.Object other) {
return false;
}
public int hashCode() {
return 0;
}
public java.lang.String toString() {
return null;
}
}

4
java/ql/test/stubs/springframework-5.2.3/org/springframework/http/HttpHeaders.java Normal file
View File

@@ -0,0 +1,4 @@
package org.springframework.http;
public class HttpHeaders implements java.io.Serializable {
}

20
java/ql/test/stubs/springframework-5.2.3/org/springframework/http/HttpMethod.java Normal file
View File

@@ -0,0 +1,20 @@
package org.springframework.http;
public enum HttpMethod {
GET,
HEAD,
POST,
PUT,
PATCH,
DELETE,
OPTIONS,
TRACE,
}

147
java/ql/test/stubs/springframework-5.2.3/org/springframework/http/HttpStatus.java Normal file
View File

@@ -0,0 +1,147 @@
package org.springframework.http;
public enum HttpStatus {
CONTINUE,
SWITCHING_PROTOCOLS,
PROCESSING,
CHECKPOINT,
OK,
CREATED,
ACCEPTED,
NON_AUTHORITATIVE_INFORMATION,
NO_CONTENT,
RESET_CONTENT,
PARTIAL_CONTENT,
MULTI_STATUS,
ALREADY_REPORTED,
IM_USED,
MULTIPLE_CHOICES,
MOVED_PERMANENTLY,
FOUND,
@java.lang.Deprecated
MOVED_TEMPORARILY,
SEE_OTHER,
NOT_MODIFIED,
@java.lang.Deprecated
USE_PROXY,
TEMPORARY_REDIRECT,
PERMANENT_REDIRECT,
BAD_REQUEST,
UNAUTHORIZED,
PAYMENT_REQUIRED,
FORBIDDEN,
NOT_FOUND,
METHOD_NOT_ALLOWED,
NOT_ACCEPTABLE,
PROXY_AUTHENTICATION_REQUIRED,
REQUEST_TIMEOUT,
CONFLICT,
GONE,
LENGTH_REQUIRED,
PRECONDITION_FAILED,
PAYLOAD_TOO_LARGE,
@java.lang.Deprecated
REQUEST_ENTITY_TOO_LARGE,
URI_TOO_LONG,
@java.lang.Deprecated
REQUEST_URI_TOO_LONG,
UNSUPPORTED_MEDIA_TYPE,
REQUESTED_RANGE_NOT_SATISFIABLE,
EXPECTATION_FAILED,
I_AM_A_TEAPOT,
@java.lang.Deprecated
INSUFFICIENT_SPACE_ON_RESOURCE,
@java.lang.Deprecated
METHOD_FAILURE,
@java.lang.Deprecated
DESTINATION_LOCKED,
UNPROCESSABLE_ENTITY,
LOCKED,
FAILED_DEPENDENCY,
TOO_EARLY,
UPGRADE_REQUIRED,
PRECONDITION_REQUIRED,
TOO_MANY_REQUESTS,
REQUEST_HEADER_FIELDS_TOO_LARGE,
UNAVAILABLE_FOR_LEGAL_REASONS,
INTERNAL_SERVER_ERROR,
NOT_IMPLEMENTED,
BAD_GATEWAY,
SERVICE_UNAVAILABLE,
GATEWAY_TIMEOUT,
HTTP_VERSION_NOT_SUPPORTED,
VARIANT_ALSO_NEGOTIATES,
INSUFFICIENT_STORAGE,
LOOP_DETECTED,
BANDWIDTH_LIMIT_EXCEEDED,
NOT_EXTENDED,
NETWORK_AUTHENTICATION_REQUIRED,
}

70
java/ql/test/stubs/springframework-5.2.3/org/springframework/http/RequestEntity.java Normal file
View File

@@ -0,0 +1,70 @@
package org.springframework.http;
public class RequestEntity<T> extends org.springframework.http.HttpEntity {
public RequestEntity(org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.http.HttpMethod method, java.net.URI url,
java.lang.reflect.Type type) {
}
public RequestEntity(org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers,
org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers,
org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers,
org.springframework.http.HttpMethod method, java.net.URI url, java.lang.reflect.Type type) {
}
public java.net.URI getUrl() {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder method(org.springframework.http.HttpMethod method,
java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder get(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder head(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder post(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder put(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder patch(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder delete(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder options(java.net.URI url) {
return null;
}
class HeadersBuilder<K> {
}
public class BodyBuilder<T> {
public RequestEntity<T> body(Object body){return null;};
}
}

12
java/ql/test/stubs/springframework-5.2.3/org/springframework/http/ResponseEntity.java Normal file
View File

@@ -0,0 +1,12 @@
package org.springframework.http;
public class ResponseEntity<T> extends org.springframework.http.HttpEntity {
// private final java.lang.Object status;
// public ResponseEntity(org.springframework.http.HttpStatus status) {
// }
// public ResponseEntity(T body, org.springframework.http.HttpStatus status) {
// }
}

12
java/ql/test/stubs/springframework-5.2.3/org/springframework/http/client/ClientHttpResponse.java Normal file
View File

@@ -0,0 +1,12 @@
package org.springframework.http.client;
public abstract interface ClientHttpResponse {
public abstract org.springframework.http.HttpStatus getStatusCode() throws java.io.IOException;
public abstract int getRawStatusCode() throws java.io.IOException;
public abstract java.lang.String getStatusText() throws java.io.IOException;
public abstract void close();
}

4
java/ql/test/stubs/springframework-5.2.3/org/springframework/web/client/RequestCallback.java Normal file
View File

@@ -0,0 +1,4 @@
package org.springframework.web.client;
public abstract interface RequestCallback {
}

4
java/ql/test/stubs/springframework-5.2.3/org/springframework/web/client/ResponseExtractor.java Normal file
View File

@@ -0,0 +1,4 @@
package org.springframework.web.client;
public abstract interface ResponseExtractor<K> {
}

12
java/ql/test/stubs/springframework-5.2.3/org/springframework/web/client/RestClientException.java Normal file
View File

@@ -0,0 +1,12 @@
package org.springframework.web.client;
public class RestClientException extends Exception {
private static final long serialVersionUID = -4084444984163796577L;
public RestClientException(java.lang.String msg) {
}
public RestClientException(java.lang.String msg, java.lang.Throwable ex) {
}
}

237
java/ql/test/stubs/springframework-5.2.3/org/springframework/web/client/RestTemplate.java Normal file
View File

@@ -0,0 +1,237 @@
package org.springframework.web.client;
public class RestTemplate {
public <T> T getForObject(java.lang.String url, java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T getForObject(java.lang.String url, java.lang.Class<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T getForObject(java.net.URI url, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> getForEntity(java.lang.String url,
java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> getForEntity(java.lang.String url,
java.lang.Class<T> responseType, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> getForEntity(java.net.URI url,
java.lang.Class<T> responseType) throws org.springframework.web.client.RestClientException {
return null;
}
public org.springframework.http.HttpHeaders headForHeaders(java.lang.String url, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public org.springframework.http.HttpHeaders headForHeaders(java.lang.String url,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public org.springframework.http.HttpHeaders headForHeaders(java.net.URI url)
throws org.springframework.web.client.RestClientException {
return null;
}
public java.net.URI postForLocation(java.lang.String url, java.lang.Object request,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.net.URI postForLocation(java.lang.String url, java.lang.Object request,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.net.URI postForLocation(java.net.URI url, java.lang.Object request)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T postForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T postForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T postForObject(java.net.URI url, java.lang.Object request, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> postForEntity(java.lang.String url, java.lang.Object request,
java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> postForEntity(java.lang.String url, java.lang.Object request,
java.lang.Class<T> responseType, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> postForEntity(java.net.URI url, java.lang.Object request,
java.lang.Class<T> responseType) throws org.springframework.web.client.RestClientException {
return null;
}
public void put(java.lang.String url, java.lang.Object request, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void put(java.lang.String url, java.lang.Object request, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void put(java.net.URI url, java.lang.Object request)
throws org.springframework.web.client.RestClientException {
}
public <T> T patchForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T patchForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T patchForObject(java.net.URI url, java.lang.Object request, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public void delete(java.lang.String url, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void delete(java.lang.String url, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void delete(java.net.URI url) throws org.springframework.web.client.RestClientException {
}
public java.util.Set<org.springframework.http.HttpMethod> optionsForAllow(java.lang.String url,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.util.Set<org.springframework.http.HttpMethod> optionsForAllow(java.lang.String url,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.util.Set<org.springframework.http.HttpMethod> optionsForAllow(java.net.URI url)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
java.lang.Class<T> responseType, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.net.URI url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
java.lang.Class<T> responseType) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.net.URI url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(
org.springframework.http.RequestEntity<?> requestEntity, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(
org.springframework.http.RequestEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T execute(java.lang.String url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T execute(java.lang.String url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T execute(java.net.URI url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor)
throws org.springframework.web.client.RestClientException {
return null;
}
protected <T> T doExecute(java.net.URI url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor)
throws org.springframework.web.client.RestClientException {
return null;
}
protected void handleResponse(java.net.URI url, org.springframework.http.HttpMethod method,
org.springframework.http.client.ClientHttpResponse response) throws java.io.IOException {
}
}