Allow MaD sanitizers for java/android/sensitive-notification

owen-mc · owen-mc · commit a312ea2f4bb7 · 2026-01-08T15:23:36.000Z
diff --git a/java/ql/lib/semmle/code/java/security/SensitiveUiQuery.qll b/java/ql/lib/semmle/code/java/security/SensitiveUiQuery.qll
@@ -14,6 +14,8 @@ private module NotificationTrackingConfig implements DataFlow::ConfigSig {
 
   predicate isSink(DataFlow::Node sink) { sinkNode(sink, "notification") }
 
+  predicate isBarrier(DataFlow::Node node) { barrierNode(node, "notification") }
+
   predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {
     isSink(node) and exists(c)
   }

Original file line number	Diff line number	Diff line change
`@@ -14,6 +14,8 @@ private module NotificationTrackingConfig implements DataFlow::ConfigSig {`
`14`	`14`
`15`	`15`	`predicate isSink(DataFlow::Node sink) { sinkNode(sink, "notification") }`
`16`	`16`
	`17`	`+ predicate isBarrier(DataFlow::Node node) { barrierNode(node, "notification") }`
	`18`	`+`
`17`	`19`	`predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {`
`18`	`20`	`isSink(node) and exists(c)`
`19`	`21`	`}`