Eric Bickle
000c1f7ec8
Java: Flow taint through ArithExpr for ThreadResourceAbuse
...
Ensure that tainted values flow through arithmetic operations when
checking for ThreadResourceAbuse vulnerabilities.
For example, multiplying 'number of seconds' by 1000 as an input
to Thread.Sleep, which accepts milliseconds, is a common scenario.
2023-10-06 14:24:37 -07:00
Anders Schack-Mulligen
8e6038577d
Java: Update expected output.
2023-04-26 14:45:40 +02:00
Jami Cogswell
fd593fd4f0
Java: undo changes to tests that were affected by numeric-flow summary models
2023-01-11 22:34:19 -05:00
Jami Cogswell
f933fc75cd
Java: update another test affected by Integer.parseInt, and one affected by String.length
2022-12-18 21:46:43 -05:00
luchua-bc
b0031a0d85
Add local input test case and update qldoc
2021-11-24 13:30:50 +00:00
luchua-bc
e56737e007
Use value step to optimize the taint step and add a test case for Apache file upload listener
2021-11-23 17:15:28 +00:00
luchua-bc
378db7de87
Remove local user input and use fluent model
2021-09-27 17:33:04 +00:00
luchua-bc
272e4f6cf9
Update the query
2021-09-24 01:48:11 +00:00
luchua-bc
8170f01b66
Query to detect uncontrolled thread resource consumption
2021-09-20 02:12:47 +00:00
