Skip to content

Commit b2cb585

Browse files
committed
UnsafeDeserialization: add missing getASelectedSinkLocation override
This fixes the failing diff-informed consistency check.
1 parent e213e3f commit b2cb585

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

java/ql/lib/semmle/code/java/security/UnsafeDeserializationQuery.qll

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -323,6 +323,10 @@ private module UnsafeDeserializationConfig implements DataFlow::ConfigSig {
323323
predicate isBarrier(DataFlow::Node node) { isUnsafeDeserializationSanitizer(node) }
324324

325325
predicate observeDiffInformedIncrementalMode() { any() }
326+
327+
Location getASelectedSinkLocation(DataFlow::Node sink) {
328+
result = sink.(UnsafeDeserializationSink).getMethodCall().getLocation()
329+
}
326330
}
327331

328332
module UnsafeDeserializationFlow = TaintTracking::Global<UnsafeDeserializationConfig>;

0 commit comments

Comments
 (0)