Skip to content

Commit 75310a6

Browse files
committed
Create a dataflow instance specifically for the Serializability library
Otherwise because this dataflow instance populates AdditionalTaintStep there is an ever-present danger that a user will stumble into creating a recursive configuration, or at least that by using DataFlow5::Configuration for any other purpose they will needlessly recalculate the Serializability dataflow results.
1 parent f83f950 commit 75310a6

File tree

5 files changed

+4495
-4
lines changed

5 files changed

+4495
-4
lines changed

config/identical-files.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@
66
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImpl4.qll",
77
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImpl5.qll",
88
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImpl6.qll",
9+
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImplForSerializability.qll",
910
"cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowImpl.qll",
1011
"cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowImpl2.qll",
1112
"cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowImpl3.qll",
Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
/**
2+
* Provides classes for performing local (intra-procedural) and
3+
* global (inter-procedural) data flow analyses.
4+
*/
5+
6+
import java
7+
8+
module DataFlowForSerializability {
9+
import semmle.code.java.dataflow.internal.DataFlowImplForSerializability
10+
}

0 commit comments

Comments
 (0)