File tree Expand file tree Collapse file tree 1 file changed +8
-0
lines changed
java/ql/src/Security/CWE/CWE-094 Expand file tree Collapse file tree 1 file changed +8
-0
lines changed Original file line number Diff line number Diff line change @@ -23,6 +23,7 @@ class PackageArchiveMimeTypeLiteral extends StringLiteral {
23
23
PackageArchiveMimeTypeLiteral ( ) { this .getValue ( ) = "application/vnd.android.package-archive" }
24
24
}
25
25
26
+ /** The `android.content.Intent.ACTION_INSTALL_PACKAGE` constant. */
26
27
class InstallPackageAction extends Expr {
27
28
InstallPackageAction ( ) {
28
29
this .( StringLiteral ) .getValue ( ) = "android.intent.action.INSTALL_PACKAGE"
@@ -110,13 +111,20 @@ class ApkConfiguration extends DataFlow::Configuration {
110
111
}
111
112
}
112
113
114
+ /** The `setAction` method of the `android.content.Intent` class. */
113
115
class SetActionMethod extends Method {
114
116
SetActionMethod ( ) {
115
117
this .hasName ( "setAction" ) and
116
118
this .getDeclaringType ( ) instanceof TypeIntent
117
119
}
118
120
}
119
121
122
+ /**
123
+ * A dataflow configuration tracking the flow from the `android.content.Intent.ACTION_INSTALL_PACKAGE`
124
+ * constant to either the constructor of an intent or the `setAction` method of an intent.
125
+ *
126
+ * This is used to track if an intent is used to install an APK.
127
+ */
120
128
private class InstallPackageActionConfiguration extends TaintTracking3:: Configuration {
121
129
InstallPackageActionConfiguration ( ) { this = "InstallPackageActionConfiguration" }
122
130
You can’t perform that action at this time.
0 commit comments