Files
codeql/java/ql/test/query-tests/security/CWE-089/semmle/examples/getToStringCall.ql
2018-08-30 10:48:05 +01:00

11 lines
394 B
Plaintext

import semmle.code.java.dataflow.TaintTracking
from StringBuilderVar sbv, MethodAccess toString, Method method
where sbv.getToStringCall() = toString and toString.getEnclosingCallable() = method
select
method.getName(),
sbv.getLocation().getStartLine() - method.getLocation().getStartLine(),
sbv,
toString.getLocation().getStartLine() - method.getLocation().getStartLine(),
toString