File tree Expand file tree Collapse file tree 4 files changed +10
-8
lines changed
library-tests/frameworks/ratpack/resources Expand file tree Collapse file tree 4 files changed +10
-8
lines changed Original file line number Diff line number Diff line change @@ -307,6 +307,7 @@ class TopJdkApi extends SummarizedCallableBase {
307
307
predicate hasManualMadModel ( ) { this .hasManualSummary ( ) or this .hasManualNeutral ( ) }
308
308
/*
309
309
* Note: the following top JDK APIs are not modeled with MaD:
310
+ * `java.lang.Runnable#run()`: specialised lambda flow
310
311
* `java.lang.String#valueOf(Object)`: a complex case; an alias for `Object.toString`, except the dispatch is hidden
311
312
* `java.lang.System#getProperty(String)`: needs to be modeled by regular CodeQL matching the get and set keys to reduce FPs
312
313
* `java.lang.System#setProperty(String,String)`: needs to be modeled by regular CodeQL matching the get and set keys to reduce FPs
Original file line number Diff line number Diff line change
1
+ | java.lang.Runnable#run() | no manual model |
1
2
| java.lang.String#valueOf(Object) | no manual model |
2
3
| java.lang.System#getProperty(String) | no manual model |
3
4
| java.lang.System#setProperty(String,String) | no manual model |
Original file line number Diff line number Diff line change @@ -107,13 +107,13 @@ void test5(Context ctx) {
107
107
filterAndMerge_2 (pojoForm , mergedParams , name -> false );
108
108
return mergedParams ;
109
109
}).then (pojoMap -> {
110
- sink (pojoMap .keySet ().iterator ().next ()); //TODO: $hasTaintFlow
111
- sink (pojoMap .get ("value" )); //TODO: $hasTaintFlow
110
+ sink (pojoMap .keySet ().iterator ().next ()); //$hasTaintFlow
111
+ sink (pojoMap .get ("value" )); //$hasTaintFlow
112
112
pojoMap .forEach ((key , value ) -> {
113
- sink (key ); //TODO: $hasTaintFlow
114
- sink (value ); //TODO: $hasTaintFlow
113
+ sink (key ); //$hasTaintFlow
114
+ sink (value ); //$hasTaintFlow
115
115
List <Object > values = (List <Object >) value ;
116
- sink (values .get (0 )); //TODO: $hasTaintFlow
116
+ sink (values .get (0 )); //$hasTaintFlow
117
117
});
118
118
});
119
119
}
Original file line number Diff line number Diff line change @@ -361,13 +361,13 @@ void test15() {
361
361
Promise
362
362
.value (tainted )
363
363
.nextOp (value -> Operation .of (() -> {
364
- sink (value ); //$hasTaintFlow
364
+ sink (value ); // MISSING: $hasTaintFlow
365
365
}))
366
366
.nextOpIf (value -> {
367
367
sink (value ); //$hasTaintFlow
368
368
return true ;
369
369
}, value -> Operation .of (() -> {
370
- sink (value ); //$hasTaintFlow
370
+ sink (value ); // MISSING: $hasTaintFlow
371
371
}))
372
372
.then (value -> {
373
373
sink (value ); //$hasTaintFlow
@@ -379,7 +379,7 @@ void test16() {
379
379
Promise
380
380
.value (tainted )
381
381
.flatOp (value -> Operation .of (() -> {
382
- sink (value ); //$hasTaintFlow
382
+ sink (value ); // MISSING: $hasTaintFlow
383
383
}));
384
384
}
385
385
You can’t perform that action at this time.
0 commit comments