7 Commits

Author	SHA1	Message	Date
Eric Bickle	000c1f7ec8	Java: Flow taint through ArithExpr for ThreadResourceAbuse ... Ensure that tainted values flow through arithmetic operations when checking for ThreadResourceAbuse vulnerabilities. For example, multiplying 'number of seconds' by 1000 as an input to Thread.Sleep, which accepts milliseconds, is a common scenario.	2023-10-06 14:24:37 -07:00
luchua-bc	b0031a0d85	Add local input test case and update qldoc	2021-11-24 13:30:50 +00:00
luchua-bc	e56737e007	Use value step to optimize the taint step and add a test case for Apache file upload listener	2021-11-23 17:15:28 +00:00
luchua-bc	378db7de87	Remove local user input and use fluent model	2021-09-27 17:33:04 +00:00
luchua-bc	5264936fc3	Correct the run method and add Math.min check	2021-09-24 21:00:53 +00:00
luchua-bc	272e4f6cf9	Update the query	2021-09-24 01:48:11 +00:00
luchua-bc	8170f01b66	Query to detect uncontrolled thread resource consumption	2021-09-20 02:12:47 +00:00