Files
codeql/java/ql/test/query-tests/security/CWE-089/semmle/examples/getToStringCall.ql
2018-10-11 11:31:37 +02:00

7 lines
386 B
Plaintext

import semmle.code.java.dataflow.TaintTracking
from StringBuilderVar sbv, MethodAccess toString, Method method
where sbv.getToStringCall() = toString and toString.getEnclosingCallable() = method
select method.getName(), sbv.getLocation().getStartLine() - method.getLocation().getStartLine(),
sbv, toString.getLocation().getStartLine() - method.getLocation().getStartLine(), toString