@@ -62,7 +62,7 @@ private class UnsafeSearchControlsSink extends JndiInjectionSink {
62
62
}
63
63
64
64
/**
65
- * Tainted value passed to env `Hashtable` as the provider URL, i.e.
65
+ * Tainted value passed to env `Hashtable` as the provider URL by calling
66
66
* `env.put(Context.PROVIDER_URL, tainted)` or `env.setProperty(Context.PROVIDER_URL, tainted)`.
67
67
*/
68
68
private class ProviderUrlJndiInjectionSink extends JndiInjectionSink , DataFlow:: ExprNode {
@@ -231,7 +231,7 @@ private class DefaultJndiInjectionAdditionalTaintStep extends JndiInjectionAddit
231
231
232
232
/**
233
233
* Holds if `n1` to `n2` is a dataflow step that converts between `String` and `CompositeName` or
234
- * `CompoundName`, i.e. `new CompositeName(tainted)` or `new CompoundName(tainted)`.
234
+ * `CompoundName` by calling `new CompositeName(tainted)` or `new CompoundName(tainted)`.
235
235
*/
236
236
private predicate nameStep ( DataFlow:: ExprNode n1 , DataFlow:: ExprNode n2 ) {
237
237
exists ( ConstructorCall cc |
@@ -245,7 +245,7 @@ private predicate nameStep(DataFlow::ExprNode n1, DataFlow::ExprNode n2) {
245
245
246
246
/**
247
247
* Holds if `n1` to `n2` is a dataflow step that converts between `String` and `CompositeName` or
248
- * `CompoundName`, i.e. `new CompositeName().add(tainted)` or `new CompoundName().add(tainted)`.
248
+ * `CompoundName` by calling `new CompositeName().add(tainted)` or `new CompoundName().add(tainted)`.
249
249
*/
250
250
private predicate nameAddStep ( DataFlow:: ExprNode n1 , DataFlow:: ExprNode n2 ) {
251
251
exists ( Method m , MethodAccess ma |
@@ -262,8 +262,8 @@ private predicate nameAddStep(DataFlow::ExprNode n1, DataFlow::ExprNode n2) {
262
262
}
263
263
264
264
/**
265
- * Holds if `n1` to `n2` is a dataflow step that converts between `String` and `JMXServiceURL`,
266
- * i.e. `new JMXServiceURL(tainted)`.
265
+ * Holds if `n1` to `n2` is a dataflow step that converts between `String` and `JMXServiceURL`
266
+ * by calling `new JMXServiceURL(tainted)`.
267
267
*/
268
268
private predicate jmxServiceUrlStep ( DataFlow:: ExprNode n1 , DataFlow:: ExprNode n2 ) {
269
269
exists ( ConstructorCall cc | cc .getConstructedType ( ) instanceof TypeJMXServiceURL |
@@ -274,7 +274,7 @@ private predicate jmxServiceUrlStep(DataFlow::ExprNode n1, DataFlow::ExprNode n2
274
274
275
275
/**
276
276
* Holds if `n1` to `n2` is a dataflow step that converts between `JMXServiceURL` and
277
- * `JMXConnector`, i.e. `JMXConnectorFactory.newJMXConnector(tainted)`.
277
+ * `JMXConnector` by calling `JMXConnectorFactory.newJMXConnector(tainted)`.
278
278
*/
279
279
private predicate jmxConnectorStep ( DataFlow:: ExprNode n1 , DataFlow:: ExprNode n2 ) {
280
280
exists ( MethodAccess ma , Method m | n1 .asExpr ( ) = ma .getArgument ( 0 ) and n2 .asExpr ( ) = ma |
@@ -286,7 +286,7 @@ private predicate jmxConnectorStep(DataFlow::ExprNode n1, DataFlow::ExprNode n2)
286
286
287
287
/**
288
288
* Holds if `n1` to `n2` is a dataflow step that converts between `JMXServiceURL` and
289
- * `RMIConnector`, i.e. `new RMIConnector(tainted)`.
289
+ * `RMIConnector` by calling `new RMIConnector(tainted)`.
290
290
*/
291
291
private predicate rmiConnectorStep ( DataFlow:: ExprNode n1 , DataFlow:: ExprNode n2 ) {
292
292
exists ( ConstructorCall cc | cc .getConstructedType ( ) instanceof TypeRMIConnector |
0 commit comments