Sync ExternallyControlledFormatStringLocalQuery

egregius313 · egregius313 · commit da933fb77adf · 2023-10-12T09:58:08.000-04:00
diff --git a/java/ql/lib/semmle/code/java/security/ExternallyControlledFormatStringLocalQuery.qll b/java/ql/lib/semmle/code/java/security/ExternallyControlledFormatStringLocalQuery.qll
@@ -11,6 +11,10 @@ module ExternallyControlledFormatStringLocalConfig implements DataFlow::ConfigSi
   predicate isSink(DataFlow::Node sink) {
     sink.asExpr() = any(StringFormat formatCall).getFormatArgument()
   }
+
+  predicate isBarrier(DataFlow::Node node) {
+    node.getType() instanceof NumericType or node.getType() instanceof BooleanType
+  }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,10 @@ module ExternallyControlledFormatStringLocalConfig implements DataFlow::ConfigSi`
`11`	`11`	`predicate isSink(DataFlow::Node sink) {`
`12`	`12`	`sink.asExpr() = any(StringFormat formatCall).getFormatArgument()`
`13`	`13`	`}`
	`14`	`+`
	`15`	`+ predicate isBarrier(DataFlow::Node node) {`
	`16`	`+ node.getType() instanceof NumericType or node.getType() instanceof BooleanType`
	`17`	`+ }`
`14`	`18`	`}`
`15`	`19`
`16`	`20`	`/**`