@@ -11,7 +11,7 @@ public void sendBroadcast1(Context context, String token, String refreshToken) {
1111 intent .setAction ("com.example.custom_action" );
1212 intent .putExtra ("token" , token );
1313 intent .putExtra ("refreshToken" , refreshToken );
14- context .sendBroadcast (intent );
14+ context .sendBroadcast (intent ); // $ hasTaintFlow
1515 }
1616
1717 // BAD - Tests broadcast of sensitive user information with intent extra.
@@ -23,7 +23,7 @@ public void sendBroadcast2(Context context) {
2323 intent .setAction ("com.example.custom_action" );
2424 intent .putExtra ("name" , userName );
2525 intent .putExtra ("pwd" , password );
26- context .sendBroadcast (intent );
26+ context .sendBroadcast (intent ); // $ hasTaintFlow
2727 }
2828
2929 // BAD - Tests broadcast of email information with extra bundle.
@@ -35,7 +35,7 @@ public void sendBroadcast3(Context context) {
3535 Bundle bundle = new Bundle ();
3636 bundle .putString ("email" , email );
3737 intent .putExtras (bundle );
38- context .sendBroadcast (intent );
38+ context .sendBroadcast (intent ); // $ hasTaintFlow
3939 }
4040
4141 // BAD - Tests broadcast of sensitive user information with null permission.
@@ -49,7 +49,7 @@ public void sendBroadcast4(Context context) {
4949 userinfo .add (username );
5050 userinfo .add (password );
5151 intent .putStringArrayListExtra ("userinfo" , userinfo );
52- context .sendBroadcast (intent , null );
52+ context .sendBroadcast (intent , null ); // $ hasTaintFlow
5353 }
5454
5555 // GOOD - Tests broadcast of sensitive user information with permission using string literal.
@@ -72,7 +72,7 @@ public void sendBroadcast6(Context context) {
7272 intent .setAction ("com.example.custom_action" );
7373 intent .putExtra ("ticket" , ticket );
7474 String perm = "com.example.user_permission" ;
75- context .sendBroadcast (intent , perm );
75+ context .sendBroadcast (intent , perm ); // $ hasTaintFlow
7676 }
7777
7878 // GOOD - Tests broadcast of sensitive user information to a specific application.
@@ -95,7 +95,7 @@ public void sendBroadcast8(Context context) {
9595 Intent intent = new Intent ();
9696 intent .setAction ("com.example.custom_action" );
9797 intent .putExtra ("ticket" , ticket );
98- context .sendBroadcastWithMultiplePermissions (intent , new String []{});
98+ context .sendBroadcastWithMultiplePermissions (intent , new String []{}); // $ hasTaintFlow
9999 }
100100
101101 // BAD - Tests broadcast of sensitive user information with multiple permissions using empty array initialization through a variable.
@@ -108,7 +108,7 @@ public void sendBroadcast9(Context context) {
108108 intent .putExtra ("name" , username );
109109 intent .putExtra ("pwd" , passcode );
110110 String [] perms = new String [0 ];
111- context .sendBroadcastWithMultiplePermissions (intent , perms );
111+ context .sendBroadcastWithMultiplePermissions (intent , perms ); // $ hasTaintFlow
112112 }
113113
114114 // GOOD - Tests broadcast of sensitive user information with multiple permissions.
@@ -133,11 +133,11 @@ public void sendBroadcast11(Context context) {
133133 intent .setAction ("com.example.custom_action" );
134134 Bundle bundle = new Bundle ();
135135 bundle .putString ("name" , username );
136- bundle .putString ("pwd" , passwd );
136+ bundle .putString ("pwd" , passwd );
137137 intent .putExtras (bundle );
138138 String [] perms = new String [0 ];
139139 String [] perms2 = perms ;
140- context .sendBroadcastWithMultiplePermissions (intent , perms2 );
140+ context .sendBroadcastWithMultiplePermissions (intent , perms2 ); // $ hasTaintFlow
141141 }
142142
143143 /**
@@ -156,7 +156,7 @@ public void sendBroadcast12(Context context) {
156156 intent .getExtras ().putString ("pwd" , password );
157157 String [] perms = new String [0 ];
158158 String [] perms2 = perms ;
159- context .sendBroadcastWithMultiplePermissions (intent , perms2 );
159+ context .sendBroadcastWithMultiplePermissions (intent , perms2 ); // $ hasTaintFlow
160160 }
161161
162162 // GOOD - Tests broadcast of sensitive user information with ordered broadcast.
0 commit comments