Make inputStreamWrapper consider supertypes transitively

atorralba · atorralba · commit 2c41c5b0e23d · 2023-05-09T17:27:16.000+02:00
diff --git a/java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll b/java/ql/lib/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll
@@ -256,7 +256,7 @@ private class BulkData extends RefType {
  */
 private predicate inputStreamWrapper(Constructor c, int argi) {
   c.getParameterType(argi) instanceof BulkData and
-  c.getDeclaringType().getASourceSupertype().hasQualifiedName("java.io", "InputStream")
+  c.getDeclaringType().getASourceSupertype*().hasQualifiedName("java.io", "InputStream")
 }
 
 /** An object construction that preserves the data flow status of any of its arguments. */

Original file line number	Diff line number	Diff line change
`@@ -256,7 +256,7 @@ private class BulkData extends RefType {`
`256`	`256`	`*/`
`257`	`257`	`private predicate inputStreamWrapper(Constructor c, int argi) {`
`258`	`258`	`c.getParameterType(argi) instanceof BulkData and`
`259`		`- c.getDeclaringType().getASourceSupertype().hasQualifiedName("java.io", "InputStream")`
	`259`	`+ c.getDeclaringType().getASourceSupertype*().hasQualifiedName("java.io", "InputStream")`
`260`	`260`	`}`
`261`	`261`
`262`	`262`	`/** An object construction that preserves the data flow status of any of its arguments. */`