hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-10 20:21:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

InstanceOf check instead of comparing classnames

Browse Source
This commit is contained in:
Timo Mueller
2021-05-04 15:51:40 +02:00
parent fd52135f29
commit f7437422c1
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql
View File

@@ -57,8 +57,8 @@ class MapToPutCredentialstypeConfiguration extends DataFlow2::Configuration {
put.getKey().toString() = "RMIConnectorServer.CREDENTIALS_FILTER_PATTERN" // This can probably be solved more nicely
|
put.getQualifier() = qualifier and
put.getMethod().(MapMethod).getReceiverKeyType().getName() = "String" and
put.getMethod().(MapMethod).getReceiverValueType().getName() = "Object"
put.getMethod().(MapMethod).getReceiverKeyType() instanceof TypeString and
put.getMethod().(MapMethod).getReceiverValueType() instanceof TypeObject
)
}
}