Skip to content

Commit 6f2d91a

Browse files
committed
Sinks for CloseableThreadContext
1 parent 8fabbd6 commit 6f2d91a

File tree

4 files changed

+5045
-4982
lines changed

4 files changed

+5045
-4982
lines changed

java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -136,10 +136,15 @@ private class Log4jLoggingSinkModels extends SinkModelCsv {
136136
"org.apache.logging.log4j;LogBuilder;true;log;(String,Object,Object,Object,Object,Object,Object,Object,Object,Object,Object);;Argument[0..10];log4j",
137137
"org.apache.logging.log4j;LogBuilder;true;log;(String,Supplier[]);;Argument[0..1];log4j",
138138
"org.apache.logging.log4j;LogBuilder;true;log;(Supplier);;Argument[0];log4j",
139-
// org.apache.logging.log4j.ThreadContet
139+
// org.apache.logging.log4j.ThreadContext
140140
"org.apache.logging.log4j;ThreadContext;false;put;;;Argument[1];log4j",
141141
"org.apache.logging.log4j;ThreadContext;false;putIfNull;;;Argument[1];log4j",
142142
"org.apache.logging.log4j;ThreadContext;false;putAll;;;Argument[0];log4j",
143+
// org.apache.logging.log4j.CloseableThreadContext
144+
"org.apache.logging.log4j;CloseableThreadContext;false;put;;;Argument[1];log4j",
145+
"org.apache.logging.log4j;CloseableThreadContext;false;putAll;;;Argument[0];log4j",
146+
"org.apache.logging.log4j;CloseableThreadContext$Instance;false;put;;;Argument[1];log4j",
147+
"org.apache.logging.log4j;CloseableThreadContext$Instance;false;putAll;;;Argument[0];log4j",
143148
]
144149
}
145150
}

0 commit comments

Comments
 (0)