Max Schaefer
32ebd4eebb
Automodel: Filter unexploitable types in application mode.
...
We already did this in framework mode.
2024-03-27 12:22:24 +00:00
Max Schaefer
02547d3839
Improve representation of implicit varargs arrays to more reliably filter out known flow steps.
2024-02-08 13:22:52 +00:00
Max Schaefer
e47b021050
Do not consider expressions as candidates whose type is annotated with @FunctionalInterface.
2024-02-01 11:04:14 +00:00
Max Schaefer
99c99145a2
Rename {source,sink}Model to {source,sink}ModelCandidate.
2024-01-22 13:10:51 +00:00
Max Schaefer
7bc03040ec
Make tags for positive and negative examples more precise.
2024-01-17 15:57:27 +00:00
Max Schaefer
312dd16956
Consolidate application mode tests.
2024-01-17 14:48:27 +00:00
Max Schaefer
692d5e55a2
Use inline expectations for positive examples.
2024-01-17 14:48:22 +00:00
Max Schaefer
83c567385f
Use inline expectations for negative-example tests as well.
2024-01-17 14:47:39 +00:00
Max Schaefer
1ebd0747a8
Fix treatment of void method calls.
2024-01-17 14:40:47 +00:00
Max Schaefer
18e44b6f5c
Turn AutomodelApplicationModeExtractCandidates into an inline-expectations test.
2024-01-17 14:40:46 +00:00
Max Schaefer
800a78d258
Treat unexploitable types more centrally.
...
The apparently missing test result is due to sampling.
2024-01-17 14:40:37 +00:00
Max Schaefer
a6d996b478
Add an example of a missed source candidate.
...
`Files.list` has a taint step from its first argument to its result, so that first argument should not be considered a sink candidate (and it is not). However, due to a bug in `IsMaDTaintStepCharacteristic` it is also not considered a source candidate, which is wrong: as the example shows, if that argument is a call we do very much want to consider it as a source candidate.
2024-01-11 11:27:34 +00:00
Stephan Brandauer
30925da7d9
Java Automodel: tests that demonstrate that there is no sink candidate of an object being constructed in app mode
2023-11-16 12:24:41 +01:00
Stephan Brandauer
0115ba0df3
Java: Automodel: drive-by, add extensibleType metadata to app mode +/- extraction
2023-09-12 09:29:54 +02:00
Stephan Brandauer
c173d9ae40
Java: automodel application mode: generate models for overridden method candidates
2023-09-07 15:49:58 +02:00
Stephan Brandauer
6f7d78183f
Java: add endpoints for parameters of overridden methods in automodel application mode
2023-09-07 15:49:57 +02:00
Stephan Brandauer
dff8259e78
Java: support remote sources in automodel positive example extraction
2023-09-07 15:49:57 +02:00
Stephan Brandauer
344aa9cb6b
Java: enable local call characteristic also for source candidates
2023-09-07 15:49:57 +02:00
Stephan Brandauer
f55d950be3
Java: update application mode extraction test expectations after adding source candidates
2023-09-07 15:49:57 +02:00
Stephan Brandauer
eb1e29d284
Java: add new endpoint class for source candidates in application mode
2023-09-07 15:49:57 +02:00
Anders Starcke Henriksen
361ae1747e
Merge branch 'main' into starcke/automodel-pack
2023-08-30 09:25:28 +02:00
Anders Starcke Henriksen
56871c77f5
Merge branch 'main' into starcke/automodel-pack
2023-08-17 10:04:44 +02:00
Anders Starcke Henriksen
e2abd3ff13
Create separate automodel pack.
2023-08-03 13:55:15 +02:00
