@@ -28,6 +28,34 @@ class IntentRedirectionAdditionalTaintStep extends Unit {
28
28
abstract predicate step ( DataFlow:: Node node1 , DataFlow:: Node node2 ) ;
29
29
}
30
30
31
+ private class DefaultIntentRedirectionSinkModel extends SinkModelCsv {
32
+ override predicate row ( string row ) {
33
+ row =
34
+ [
35
+ "android.app;Activity;true;startActivityAsCaller;;;Argument[0];intent-start" ,
36
+ "android.app;Activity;true;startActivityForResult;(Intent,int);;Argument[0];intent-start" ,
37
+ "android.app;Activity;true;startActivityForResult;(Intent,int,Bundle);;Argument[0];intent-start" ,
38
+ "android.app;Activity;true;startActivityForResult;(String,Intent,int,Bundle);;Argument[1];intent-start" ,
39
+ "android.app;Activity;true;startActivityForResultAsUser;;;Argument[0];intent-start" ,
40
+ "android.content;Context;true;startActivities;;;Argument[0];intent-start" ,
41
+ "android.content;Context;true;startActivity;;;Argument[0];intent-start" ,
42
+ "android.content;Context;true;startActivityAsUser;;;Argument[0];intent-start" ,
43
+ "android.content;Context;true;startActivityFromChild;;;Argument[1];intent-start" ,
44
+ "android.content;Context;true;startActivityFromFragment;;;Argument[1];intent-start" ,
45
+ "android.content;Context;true;startActivityIfNeeded;;;Argument[0];intent-start" ,
46
+ "android.content;Context;true;startService;;;Argument[0];intent-start" ,
47
+ "android.content;Context;true;startServiceAsUser;;;Argument[0];intent-start" ,
48
+ "android.content;Context;true;sendBroadcast;;;Argument[0];intent-start" ,
49
+ "android.content;Context;true;sendBroadcastAsUser;;;Argument[0];intent-start" ,
50
+ "android.content;Context;true;sendBroadcastWithMultiplePermissions;;;Argument[0];intent-start" ,
51
+ "android.content;Context;true;sendStickyBroadcast;;;Argument[0];intent-start" ,
52
+ "android.content;Context;true;sendStickyBroadcastAsUser;;;Argument[0];intent-start" ,
53
+ "android.content;Context;true;sendStickyOrderedBroadcast;;;Argument[0];intent-start" ,
54
+ "android.content;Context;true;sendStickyOrderedBroadcastAsUser;;;Argument[0];intent-start"
55
+ ]
56
+ }
57
+ }
58
+
31
59
/** Default sink for Intent redirection vulnerabilities. */
32
60
private class DefaultIntentRedirectionSink extends IntentRedirectionSink {
33
61
DefaultIntentRedirectionSink ( ) { sinkNode ( this , "intent-start" ) }
0 commit comments