Skip to content

Commit 1b761b3

Browse files
authored
Apply suggestions from code review
1 parent ff2f5a5 commit 1b761b3

File tree

1 file changed

+0
-24
lines changed

1 file changed

+0
-24
lines changed

java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql

Lines changed: 0 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -18,21 +18,6 @@ import semmle.code.java.dataflow.FlowSources
1818
import semmle.code.java.dataflow.ExternalFlow
1919
import DataFlow::PathGraph
2020

21-
private class LoggingSummaryModels extends SummaryModelCsv {
22-
override predicate row(string row) {
23-
row =
24-
[
25-
"org.apache.logging.log4j;Logger;true;traceEntry;(Message);;Argument[0];ReturnValue;taint",
26-
"org.apache.logging.log4j;Logger;true;traceEntry;(String,Object[]);;Argument[0..1];ReturnValue;taint",
27-
"org.apache.logging.log4j;Logger;true;traceEntry;(String,Supplier[]);;Argument[0..1];ReturnValue;taint",
28-
"org.apache.logging.log4j;Logger;true;traceEntry;(Supplier[]);;Argument[0];ReturnValue;taint",
29-
"org.apache.logging.log4j;Logger;true;traceExit;(EntryMessage,Object);;Argument[1];ReturnValue;value",
30-
"org.apache.logging.log4j;Logger;true;traceExit;(Message,Object);;Argument[1];ReturnValue;value",
31-
"org.apache.logging.log4j;Logger;true;traceExit;(Object);;Argument[0];ReturnValue;value",
32-
"org.apache.logging.log4j;Logger;true;traceExit;(String,Object);;Argument[1];ReturnValue;value",
33-
]
34-
}
35-
}
3621

3722
private class LoggingSinkModels extends SinkModelCsv {
3823
override predicate row(string row) {
@@ -143,15 +128,6 @@ private class LoggingSinkModels extends SinkModelCsv {
143128
"org.apache.logging.log4j;Logger;true;logMessage;(Level,Marker,String,StackTraceElement,Message,Throwable);;Argument[4];logging",
144129
"org.apache.logging.log4j;Logger;true;printf;(Level,Marker,String,Object[]);;Argument[2..3];logging",
145130
"org.apache.logging.log4j;Logger;true;printf;(Level,String,Object[]);;Argument[1..2];logging",
146-
"org.apache.logging.log4j;Logger;true;traceEntry;(Message);;Argument[0];logging",
147-
"org.apache.logging.log4j;Logger;true;traceEntry;(String,Object[]);;Argument[0..1];logging",
148-
"org.apache.logging.log4j;Logger;true;traceEntry;(String,Supplier[]);;Argument[0..1];logging",
149-
"org.apache.logging.log4j;Logger;true;traceEntry;(Supplier[]);;Argument[0];logging",
150-
"org.apache.logging.log4j;Logger;true;traceExit;(EntryMessage);;Argument[0];logging",
151-
"org.apache.logging.log4j;Logger;true;traceExit;(EntryMessage,Object);;Argument[0..1];logging",
152-
"org.apache.logging.log4j;Logger;true;traceExit;(Message,Object);;Argument[0..1];logging",
153-
"org.apache.logging.log4j;Logger;true;traceExit;(Object);;Argument[0];logging",
154-
"org.apache.logging.log4j;Logger;true;traceExit;(String,Object);;Argument[0..1];logging",
155131
// org.apache.logging.log4j.LogBuilder
156132
"org.apache.logging.log4j;LogBuilder;true;log;(CharSequence);;Argument[0];logging",
157133
"org.apache.logging.log4j;LogBuilder;true;log;(Message);;Argument[0];logging",

0 commit comments

Comments
 (0)