File tree Expand file tree Collapse file tree 2 files changed +11
-10
lines changed Expand file tree Collapse file tree 2 files changed +11
-10
lines changed Original file line number Diff line number Diff line change @@ -24,9 +24,10 @@ The following changes in version 1.25 affect C# analysis in all applications.
24
24
have type parameters. This means that non-generic nested types inside construced types,
25
25
such as ` A<int>.B ` , no longer are considered unbound generics. (Such nested types do,
26
26
however, still have relevant ` .getSourceDeclaration() ` s, for example ` A<>.B ` .)
27
- * The data-flow library has been improved, which affects and improves most security queries. Flow
28
- through methods now takes nested field reads/writes into account. For example, the library is
29
- able to track flow from ` "taint" ` to ` Sink() ` via the method ` GetF2F1() ` in
27
+ * The data-flow library has been improved, which affects most security queries by potentially
28
+ adding more results. Flow through methods now takes nested field reads/writes into account.
29
+ For example, the library is able to track flow from ` "taint" ` to ` Sink() ` via the method
30
+ ` GetF2F1() ` in
30
31
``` csharp
31
32
class C1
32
33
{
@@ -37,13 +38,12 @@ The following changes in version 1.25 affect C# analysis in all applications.
37
38
{
38
39
C1 F2 ;
39
40
40
-
41
- string GetF2F1 () => this .F2 .F1 ; // Nested field read
41
+ string GetF2F1 () => F2 .F1 ; // Nested field read
42
42
43
43
void M ()
44
44
{
45
- this . F2 = new C1 () { F1 = " taint" };
46
- Sink (this . GetF2F1 ()); // NEW: "taint" reaches here
45
+ F2 = new C1 () { F1 = " taint" };
46
+ Sink (GetF2F1 ()); // NEW: "taint" reaches here
47
47
}
48
48
}
49
49
```
Original file line number Diff line number Diff line change @@ -18,9 +18,10 @@ The following changes in version 1.25 affect Java analysis in all applications.
18
18
19
19
## Changes to libraries
20
20
21
- * The data-flow library has been improved, which affects and improves most security queries. Flow
22
- through methods now takes nested field reads/writes into account. For example, the library is
23
- able to track flow from ` "taint" ` to ` sink() ` via the method ` getF2F1() ` in
21
+ * The data-flow library has been improved, which affects most security queries by potentially
22
+ adding more results. Flow through methods now takes nested field reads/writes into account.
23
+ For example, the library is able to track flow from ` "taint" ` to ` sink() ` via the method
24
+ ` getF2F1() ` in
24
25
``` java
25
26
class C1 {
26
27
String f1;
You can’t perform that action at this time.
0 commit comments