We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b009886 commit 12936ffCopy full SHA for 12936ff
java/ql/src/Likely Bugs/Serialization/IncorrectSerializableMethods.ql
@@ -16,8 +16,9 @@ import java
16
from Method m, TypeSerializable serializable
17
where
18
m.getDeclaringType().hasSupertype+(serializable) and
19
- m.getNumberOfParameters() = 1 and
20
- m.getAParameter().getType().(RefType).hasQualifiedName("java.io", "ObjectOutputStream") and
21
- (m.hasName("readObject") or m.hasName("writeObject")) and
+ (
+ m.hasStringSignature("readObject(ObjectInputStream)") or
+ m.hasName("writeObject(ObjectOutputStream)")
22
+ ) and
23
not m.isPrivate()
24
select m, "readObject and writeObject should be private methods."
0 commit comments