4 Commits

Author	SHA1	Message	Date
Kaixuan Li	f5cfc5e282	Update java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTainted.java ... Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>	2026-03-29 10:25:10 +08:00
MarkLee131	0c5e89a68e	Exclude bounds-check arithmetic from tainted-arithmetic sinks ... The java/tainted-arithmetic query now recognizes when an arithmetic expression appears directly as an operand of a comparison (e.g., `if (off + len > array.length)`). Such expressions are bounds checks, not vulnerable computations, and are excluded via the existing overflowIrrelevant predicate. Add test cases for bounds-checking patterns that should not be flagged.	2026-03-28 17:39:40 +08:00
Anders Schack-Mulligen	a50ea54ff6	Java: Fix tests.	2019-08-08 12:03:01 +02:00
Pavel Avgustinov	846c9d5860	Migrate Java code to separate QL repo.	2018-08-30 10:48:05 +01:00