Skip to content

Commit e3b2eed

Browse files
smowtonsmowton
authored
Merge pull request #7423 from github/atorralba/log4j-CVE-2021-45046
Java: Cover CVE-2021-45046 in the Log4jJndiInjection query
2 parents 579b58b + 7d6cba7 commit e3b2eed

File tree

70 files changed

+8190
-117
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

70 files changed

+8190
-117
lines changed

‎java/ql/src/experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql

Lines changed: 123 additions & 117 deletions
Large diffs are not rendered by default.

‎java/ql/test/experimental/query-tests/security/CWE-020/Log4jInjectionTest.expected

Lines changed: 5227 additions & 0 deletions
Large diffs are not rendered by default.

‎java/ql/test/experimental/query-tests/security/CWE-020/Log4jInjectionTest.qlref

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
experimental/Security/CWE/CWE-020/Log4jJndiInjection.ql

‎java/ql/test/experimental/query-tests/security/CWE-020/Log4jJndiInjectionTest.java

Lines changed: 1115 additions & 0 deletions
Large diffs are not rendered by default.

‎java/ql/test/experimental/query-tests/security/CWE-020/options

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../stubs/apache-log4j-2.14.1:${testdir}/../../../../stubs/servlet-api-2.4

‎java/ql/test/stubs/apache-log4j-2.14.1/javax/servlet/AsyncContext.java

Lines changed: 30 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎java/ql/test/stubs/apache-log4j-2.14.1/javax/servlet/AsyncEvent.java

Lines changed: 20 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎java/ql/test/stubs/apache-log4j-2.14.1/javax/servlet/AsyncListener.java

Lines changed: 14 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎java/ql/test/stubs/apache-log4j-2.14.1/javax/servlet/DispatcherType.java

Lines changed: 10 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎java/ql/test/stubs/apache-log4j-2.14.1/javax/servlet/Filter.java

Lines changed: 15 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)