You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/codeql/codeql-language-guides/customizing-library-models-for-java.rst
+6-4Lines changed: 6 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -126,7 +126,7 @@ The first five values identify the callable (in this case a method) to be modele
126
126
- The fourth value **getInputStream** is the method name.
127
127
- The fifth value **()** is the method input type signature.
128
128
129
-
For most practical purposes the sixth value is not relevant.
129
+
The sixth value is only relevant internally and can be omitted in most use cases.
130
130
The remaining values are used to define the **access path**, the **kind**, and the **provenance** (origin) of the source.
131
131
132
132
- The seventh value **ReturnValue** is the access path to the return of the method, which means that it is the return value that should be considered a source of tainted input.
@@ -173,7 +173,7 @@ These are the same for both of the rows above as we are adding two summaries for
173
173
- The fourth value **concat** is the method name.
174
174
- The fifth value **(String)** is the method input type signature.
175
175
176
-
For most practical purposes the sixth value is not relevant.
176
+
The sixth value is only relevant internally and can be omitted in most use cases.
177
177
The remaining values are used to define the **access path**, the **kind**, and the **provenance** (origin) of the summary.
178
178
179
179
- The seventh value is the access path to the input (where data flows from). **Argument[-1]** is the access path to the qualifier (**s1** in the example) and **Argument[0]** is the access path to the first argument (**s2** in the example).
@@ -219,7 +219,7 @@ These are the same for both of the rows above as we are adding two summaries for
219
219
- The fourth value **map** is the method name.
220
220
- The fifth value **Function** is the method input type signature.
221
221
222
-
For most practical purposes the sixth value is not relevant.
222
+
The sixth value is only relevant internally and can be omitted in most use cases.
223
223
The remaining values are used to define the **access path**, the **kind**, and the **provenance** (origin) of the summary definition.
224
224
225
225
- The seventh value is the access path to the **input** (where data flows from).
@@ -361,6 +361,7 @@ The following sink kinds are supported:
0 commit comments