File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
java/ql/src/Security/CWE/CWE-502 Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -22,9 +22,9 @@ class UnsafeDeserializationConfig extends TaintTracking::Configuration {
22
22
23
23
override predicate isSink ( DataFlow:: Node sink ) { sink instanceof UnsafeDeserializationSink }
24
24
25
- override predicate isAdditionalTaintStep ( DataFlow:: Node prod , DataFlow:: Node succ ) {
25
+ override predicate isAdditionalTaintStep ( DataFlow:: Node pred , DataFlow:: Node succ ) {
26
26
exists ( ClassInstanceExpr cie |
27
- cie .getArgument ( 0 ) = prod .asExpr ( ) and
27
+ cie .getArgument ( 0 ) = pred .asExpr ( ) and
28
28
cie = succ .asExpr ( ) and
29
29
(
30
30
cie .getConstructor ( ) .getDeclaringType ( ) instanceof JsonIoJsonReader or
@@ -36,7 +36,7 @@ class UnsafeDeserializationConfig extends TaintTracking::Configuration {
36
36
or
37
37
exists ( MethodAccess ma |
38
38
ma .getMethod ( ) instanceof BurlapInputInitMethod and
39
- ma .getArgument ( 0 ) = prod .asExpr ( ) and
39
+ ma .getArgument ( 0 ) = pred .asExpr ( ) and
40
40
ma .getQualifier ( ) = succ .asExpr ( )
41
41
)
42
42
}
You can’t perform that action at this time.
0 commit comments