Skip to content

Commit e2022f4

Browse files
Update java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll
Co-authored-by: Anders Schack-Mulligen <[email protected]>
1 parent a3b25f0 commit e2022f4

File tree

1 file changed

+7
-6
lines changed

1 file changed

+7
-6
lines changed

java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -596,12 +596,13 @@ private MethodAccess callReturningSameType(Expr ref) {
596596
}
597597

598598
private SrcRefType entrypointType() {
599-
result =
600-
pragma[only_bind_out](any(RemoteFlowSource s | s instanceof DataFlow::ExplicitParameterNode))
601-
.getType()
602-
.(RefType)
603-
.getASubtype*()
604-
.getSourceDeclaration() or
599+
exists(RemoteFlowSource s, RefType t |
600+
s instanceof DataFlow::ExplicitParameterNode and
601+
t = pragma[only_bind_out](s).getType() and
602+
not t instanceof TypeObject and
603+
result = t.getASubtype*().getSourceDeclaration()
604+
)
605+
or
605606
result = entrypointType().getAField().getType().(RefType).getSourceDeclaration()
606607
}
607608

0 commit comments

Comments
 (0)