Skip to content

Commit 0acb647

Browse files
Fix tests and add notification sink kind to model verification
1 parent b23bbf9 commit 0acb647

File tree

2 files changed

+35
-6
lines changed

2 files changed

+35
-6
lines changed

java/ql/test/library-tests/frameworks/android/notification/Test.java

Lines changed: 32 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -942,14 +942,28 @@ public void test() throws Exception {
942942
// "androidx.core.app;NotificationCompat$BigPictureStyle;true;bigLargeIcon;;;Argument[this];ReturnValue;value;manual"
943943
NotificationCompat.BigPictureStyle out = null;
944944
NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
945-
out = in.bigLargeIcon(null);
945+
out = in.bigLargeIcon((Bitmap)null);
946+
sink(out); // $ hasValueFlow
947+
}
948+
{
949+
// "androidx.core.app;NotificationCompat$BigPictureStyle;true;bigLargeIcon;;;Argument[this];ReturnValue;value;manual"
950+
NotificationCompat.BigPictureStyle out = null;
951+
NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
952+
out = in.bigLargeIcon((Icon)null);
953+
sink(out); // $ hasValueFlow
954+
}
955+
{
956+
// "androidx.core.app;NotificationCompat$BigPictureStyle;true;bigPicture;;;Argument[this];ReturnValue;value;manual"
957+
NotificationCompat.BigPictureStyle out = null;
958+
NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
959+
out = in.bigPicture((Bitmap)null);
946960
sink(out); // $ hasValueFlow
947961
}
948962
{
949963
// "androidx.core.app;NotificationCompat$BigPictureStyle;true;bigPicture;;;Argument[this];ReturnValue;value;manual"
950964
NotificationCompat.BigPictureStyle out = null;
951965
NotificationCompat.BigPictureStyle in = (NotificationCompat.BigPictureStyle) source();
952-
out = in.bigPicture(null);
966+
out = in.bigPicture((Icon)null);
953967
sink(out); // $ hasValueFlow
954968
}
955969
{
@@ -1040,7 +1054,14 @@ public void test() throws Exception {
10401054
// "androidx.core.app;NotificationCompat$Builder;true;addPerson;;;Argument[this];ReturnValue;value;manual"
10411055
NotificationCompat.Builder out = null;
10421056
NotificationCompat.Builder in = (NotificationCompat.Builder) source();
1043-
out = in.addPerson(null);
1057+
out = in.addPerson((androidx.core.app.Person)null);
1058+
sink(out); // $ hasValueFlow
1059+
}
1060+
{
1061+
// "androidx.core.app;NotificationCompat$Builder;true;addPerson;;;Argument[this];ReturnValue;value;manual"
1062+
NotificationCompat.Builder out = null;
1063+
NotificationCompat.Builder in = (NotificationCompat.Builder) source();
1064+
out = in.addPerson((String)null);
10441065
sink(out); // $ hasValueFlow
10451066
}
10461067
{
@@ -1252,7 +1273,14 @@ public void test() throws Exception {
12521273
// "androidx.core.app;NotificationCompat$Builder;true;setLargeIcon;;;Argument[this];ReturnValue;value;manual"
12531274
NotificationCompat.Builder out = null;
12541275
NotificationCompat.Builder in = (NotificationCompat.Builder) source();
1255-
out = in.setLargeIcon(null);
1276+
out = in.setLargeIcon((Bitmap)null);
1277+
sink(out); // $ hasValueFlow
1278+
}
1279+
{
1280+
// "androidx.core.app;NotificationCompat$Builder;true;setLargeIcon;;;Argument[this];ReturnValue;value;manual"
1281+
NotificationCompat.Builder out = null;
1282+
NotificationCompat.Builder in = (NotificationCompat.Builder) source();
1283+
out = in.setLargeIcon((Icon)null);
12561284
sink(out); // $ hasValueFlow
12571285
}
12581286
{

shared/mad/codeql/mad/ModelValidation.qll

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,8 +32,9 @@ module KindValidation<KindValidationConfigSig Config> {
3232
// Java-only currently, but may be shared in the future
3333
"bean-validation", "fragment-injection", "groovy-injection", "hostname-verification",
3434
"information-leak", "intent-redirection", "jexl-injection", "jndi-injection",
35-
"mvel-injection", "ognl-injection", "pending-intents", "response-splitting",
36-
"trust-boundary-violation", "template-injection", "xpath-injection", "xslt-injection",
35+
"mvel-injection", "notification", "ognl-injection", "pending-intents",
36+
"response-splitting", "trust-boundary-violation", "template-injection", "xpath-injection",
37+
"xslt-injection",
3738
// JavaScript-only currently, but may be shared in the future
3839
"mongodb.sink", "nosql-injection", "unsafe-deserialization",
3940
// Swift-only currently, but may be shared in the future

0 commit comments

Comments
 (0)