Skip to content

Commit a0a9144

Browse files
committed
Rewording
1 parent 9c12c5f commit a0a9144

File tree

3 files changed

+6
-7
lines changed

3 files changed

+6
-7
lines changed

java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.ql

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
/**
2-
* @name Use of implicit Pending Intents
2+
* @name Use of implicit PendingIntents
33
* @description Implicit and mutable PendingIntents being sent to an unspecified third party
44
* component may provide access to internal components of the application or cause
55
* other unintended effects.
66
* @kind path-problem
77
* @problem.severity error
88
* @security-severity 8.2
99
* @precision high
10-
* @id java/android/pending-intents
10+
* @id java/android/implicit-pendingintents
1111
* @tags security
1212
* external/cwe/cwe-927
1313
*/
@@ -20,5 +20,5 @@ import DataFlow::PathGraph
2020
from DataFlow::PathNode source, DataFlow::PathNode sink
2121
where any(ImplicitPendingIntentStartConf conf).hasFlowPath(source, sink)
2222
select sink.getNode(), source, sink,
23-
"An implicit and mutable pending Intent is created $@ and sent to an unspecified third party.",
23+
"An implicit and mutable PendingIntent is created $@ and sent to an unspecified third party.",
2424
source.getNode(), "here"
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
category: newQuery
33
---
4-
* A new query "Use of implicit Pending Intents" (`java/android/pending-intents`) has been added.
5-
This query finds implicit and mutable PendingIntents being sent to an unspecified third party component,
4+
* A new query "Use of implicit PendingIntents" (`java/android/pending-intents`) has been added.
5+
This query finds implicit and mutable `PendingIntents` being sent to an unspecified third party component,
66
which can provide access to internal components of the application or cause other unintended
77
effects.

java/ql/test/library-tests/frameworks/android/notification/Test.java

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -274,8 +274,7 @@ public void test() throws Exception {
274274
}
275275
{
276276
// "android.app;Notification$Builder;true;setActions;;;ArrayElement of
277-
// Argument[0];SyntheticField[android.app.Notification.action] of
278-
// Argument[-1];taint"
277+
// Argument[0];Argument[-1];taint"
279278
Notification.Builder out = null;
280279
Notification.Action[] in = (Notification.Action[]) new Notification.Action[] {
281280
(Notification.Action) source()};

0 commit comments

Comments
 (0)