File tree Expand file tree Collapse file tree 1 file changed +8
-5
lines changed
java/ql/src/Security/CWE/CWE-798 Expand file tree Collapse file tree 1 file changed +8
-5
lines changed Original file line number Diff line number Diff line change @@ -16,7 +16,6 @@ import HardcodedCredentials
16
16
import DataFlow:: PathGraph
17
17
import semmle.code.java.dataflow.internal.FlowSummaryImpl as FlowSummaryImpl
18
18
19
-
20
19
class HardcodedCredentialApiCallConfiguration extends DataFlow:: Configuration {
21
20
HardcodedCredentialApiCallConfiguration ( ) { this = "HardcodedCredentialApiCallConfiguration" }
22
21
@@ -29,10 +28,14 @@ class HardcodedCredentialApiCallConfiguration extends DataFlow::Configuration {
29
28
30
29
override predicate isAdditionalFlowStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
31
30
node1 .asExpr ( ) .getType ( ) instanceof TypeString and
32
- ( exists ( MethodAccess ma | ma .getMethod ( ) .hasName ( [ "getBytes" , "toCharArray" ] ) |
33
- node2 .asExpr ( ) = ma and
34
- ma .getQualifier ( ) = node1 .asExpr ( ) ) or FlowSummaryImpl:: Private:: Steps:: summaryThroughStep ( node1 , node2 , false ) )
35
-
31
+ (
32
+ exists ( MethodAccess ma | ma .getMethod ( ) .hasName ( [ "getBytes" , "toCharArray" ] ) |
33
+ node2 .asExpr ( ) = ma and
34
+ ma .getQualifier ( ) = node1 .asExpr ( )
35
+ )
36
+ or
37
+ FlowSummaryImpl:: Private:: Steps:: summaryThroughStep ( node1 , node2 , false )
38
+ )
36
39
}
37
40
38
41
override predicate isBarrier ( DataFlow:: Node n ) {
You can’t perform that action at this time.
0 commit comments