Skip to content

Commit f902204

Browse files
committed
Move sinks to security library
1 parent 9a537f9 commit f902204

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

java/ql/src/semmle/code/java/security/AndroidIntentRedirection.qll

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,34 @@ class IntentRedirectionAdditionalTaintStep extends Unit {
2828
abstract predicate step(DataFlow::Node node1, DataFlow::Node node2);
2929
}
3030

31+
private class DefaultIntentRedirectionSinkModel extends SinkModelCsv {
32+
override predicate row(string row) {
33+
row =
34+
[
35+
"android.app;Activity;true;startActivityAsCaller;;;Argument[0];intent-start",
36+
"android.app;Activity;true;startActivityForResult;(Intent,int);;Argument[0];intent-start",
37+
"android.app;Activity;true;startActivityForResult;(Intent,int,Bundle);;Argument[0];intent-start",
38+
"android.app;Activity;true;startActivityForResult;(String,Intent,int,Bundle);;Argument[1];intent-start",
39+
"android.app;Activity;true;startActivityForResultAsUser;;;Argument[0];intent-start",
40+
"android.content;Context;true;startActivities;;;Argument[0];intent-start",
41+
"android.content;Context;true;startActivity;;;Argument[0];intent-start",
42+
"android.content;Context;true;startActivityAsUser;;;Argument[0];intent-start",
43+
"android.content;Context;true;startActivityFromChild;;;Argument[1];intent-start",
44+
"android.content;Context;true;startActivityFromFragment;;;Argument[1];intent-start",
45+
"android.content;Context;true;startActivityIfNeeded;;;Argument[0];intent-start",
46+
"android.content;Context;true;startService;;;Argument[0];intent-start",
47+
"android.content;Context;true;startServiceAsUser;;;Argument[0];intent-start",
48+
"android.content;Context;true;sendBroadcast;;;Argument[0];intent-start",
49+
"android.content;Context;true;sendBroadcastAsUser;;;Argument[0];intent-start",
50+
"android.content;Context;true;sendBroadcastWithMultiplePermissions;;;Argument[0];intent-start",
51+
"android.content;Context;true;sendStickyBroadcast;;;Argument[0];intent-start",
52+
"android.content;Context;true;sendStickyBroadcastAsUser;;;Argument[0];intent-start",
53+
"android.content;Context;true;sendStickyOrderedBroadcast;;;Argument[0];intent-start",
54+
"android.content;Context;true;sendStickyOrderedBroadcastAsUser;;;Argument[0];intent-start"
55+
]
56+
}
57+
}
58+
3159
/** Default sink for Intent redirection vulnerabilities. */
3260
private class DefaultIntentRedirectionSink extends IntentRedirectionSink {
3361
DefaultIntentRedirectionSink() { sinkNode(this, "intent-start") }

0 commit comments

Comments
 (0)