File tree Expand file tree Collapse file tree 1 file changed +2
-4
lines changed
java/ql/src/experimental/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +2
-4
lines changed Original file line number Diff line number Diff line change @@ -11,7 +11,7 @@ private predicate initializedWithConstants(ArrayCreationExpr array) {
11
11
or
12
12
// creating a multidimensional array with an initializer like `{ new byte[8], new byte[16] }`
13
13
// This works around https://github.com/github/codeql/issues/6552 -- change me once there is
14
- // a better way to distinguish nested initializers that create zero-filled arrays
14
+ // a better way to distinguish nested initializers that create zero-filled arrays
15
15
// (e.g. `new byte[1]`) from those with an initializer list (`new byte[] { 1 }` or just `{ 1 }`)
16
16
array .getInit ( ) .getAnInit ( ) .getAChildExpr ( ) instanceof IntegerLiteral
17
17
or
@@ -85,9 +85,7 @@ private class ArrayUpdateConfig extends TaintTracking2::Configuration {
85
85
private class StaticInitializationVectorSource extends DataFlow:: Node {
86
86
StaticInitializationVectorSource ( ) {
87
87
exists ( StaticByteArrayCreation array | array = this .asExpr ( ) |
88
- not exists ( ArrayUpdate update , ArrayUpdateConfig config |
89
- config .hasFlow ( DataFlow2:: exprNode ( array ) , DataFlow2:: exprNode ( update .getArray ( ) ) )
90
- )
88
+ not exists ( ArrayUpdateConfig config | config .hasFlow ( DataFlow2:: exprNode ( array ) , _) )
91
89
)
92
90
}
93
91
}
You can’t perform that action at this time.
0 commit comments