Add test and check for another edge case

Author: atorralba

java/ql/lib/semmle/code/java/security/AndroidIntentRedirectionQuery.qll

@@ -55,6 +55,7 @@ private class SameIntentBeingRelaunchedConfiguration extends DataFlow3::Configur
     exists(ClassInstanceExpr cie |
       cie.getConstructedType() instanceof TypeIntent and
       node1.asExpr() = cie.getArgument(0) and
+      node1.asExpr().getType() instanceof TypeIntent and
       node2.asExpr() = cie
     )
   }

java/ql/test/query-tests/security/CWE-940/AndroidIntentRedirectionTest.java

@@ -146,6 +146,11 @@ public void onCreate(Bundle savedInstanceState) {
                 anotherIntent.setComponent(cp);
                 startActivity(originalIntent); // Safe - not a tainted Intent
             }
+            {
+                Intent originalIntent = getIntent();
+                Intent anotherIntent = new Intent(originalIntent);
+                startActivity(anotherIntent); // Safe - copy constructor from original Intent
+            }
             {
                 Intent originalIntent = getIntent();
                 Intent fwdIntent = (Intent) originalIntent.getParcelableExtra("forward_intent");