Use ArrayElement of to handle arargs case in SpringJdbc.qll

joefarebrother · joefarebrother · commit 1a06c132be3c · 2021-07-01T14:38:20.000+01:00
diff --git a/java/ql/src/semmle/code/java/frameworks/SpringJdbc.qll b/java/ql/src/semmle/code/java/frameworks/SpringJdbc.qll
@@ -15,6 +15,7 @@ private class SqlSinkCsv extends SinkModelCsv {
     row =
       [
         //"package;type;overrides;name;signature;ext;spec;kind"
+        "org.springframework.jdbc.core;JdbcTemplate;false;batchUpdate;(String[]);;ArrayElement of Argument[0];sql",
         "org.springframework.jdbc.core;JdbcTemplate;false;batchUpdate;;;Argument[0];sql",
         "org.springframework.jdbc.core;JdbcTemplate;false;execute;;;Argument[0];sql",
         "org.springframework.jdbc.core;JdbcTemplate;false;update;;;Argument[0];sql",

Original file line number	Diff line number	Diff line change
`@@ -15,6 +15,7 @@ private class SqlSinkCsv extends SinkModelCsv {`
`15`	`15`	`row =`
`16`	`16`	`[`
`17`	`17`	`//"package;type;overrides;name;signature;ext;spec;kind"`
	`18`	`+ "org.springframework.jdbc.core;JdbcTemplate;false;batchUpdate;(String[]);;ArrayElement of Argument[0];sql",`
`18`	`19`	`"org.springframework.jdbc.core;JdbcTemplate;false;batchUpdate;;;Argument[0];sql",`
`19`	`20`	`"org.springframework.jdbc.core;JdbcTemplate;false;execute;;;Argument[0];sql",`
`20`	`21`	`"org.springframework.jdbc.core;JdbcTemplate;false;update;;;Argument[0];sql",`