hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 02:35:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Added flow steps for DataInput and ObjectInput

Browse Source
This commit is contained in:
Artem Smotrakov
2022-03-19 17:44:04 +00:00
committed by Chris Smowton
parent 3737248deb
commit fb39e0f577
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/lib/semmle/code/java/frameworks/JavaIo.qll
View File

@@ -13,6 +13,10 @@ private class JavaIoSummaryCsv extends SummaryModelCsv {
"java.io;Writer;true;write;;;Argument[0];Argument[-1];taint",
"java.io;Writer;true;toString;;;Argument[-1];ReturnValue;taint",
"java.io;CharArrayWriter;true;toCharArray;;;Argument[-1];ReturnValue;taint",
"java.io;ObjectInput;true;read;;;Argument[-1];Argument[0];taint",
"java.io;DataInput;true;readFully;;;Argument[-1];Argument[0];taint",
"java.io;DataInput;true;readLine;();;Argument[-1];Argument[0];taint",
"java.io;DataInput;true;readUTF;();;Argument[-1];Argument[0];taint",
"java.nio.channels;ReadableByteChannel;true;read;(ByteBuffer);;Argument[-1];Argument[0];taint",
"java.nio.channels;Channels;false;newChannel;(InputStream);;Argument[0];ReturnValue;taint"
]