Skip to content

Commit 60b0708

Browse files
Jami CogswellJami Cogswell
authored andcommitted
Java: add 'sink' kind
1 parent 65dd7eb commit 60b0708

File tree

4 files changed

+14
-9
lines changed

4 files changed

+14
-9
lines changed

java/ql/lib/ext/java.nio.file.spi.model.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,5 +3,6 @@ extensions:
33
pack: codeql/java-all
44
extensible: neutralModel
55
data:
6-
- ["java.nio.file.spi", "FileSystemProvider" "isHidden", "", "manual"]
7-
- ["java.nio.file.spi", "FileSystemProvider" "isSameFile", "", "manual"]
6+
# sink neutrals
7+
- ["java.nio.file.spi", "FileSystemProvider" "isHidden", "", "sink", "manual"]
8+
- ["java.nio.file.spi", "FileSystemProvider" "isSameFile", "", "sink", "manual"]

java/ql/lib/ext/java.text.model.yml

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,14 @@ extensions:
33
pack: codeql/java-all
44
extensible: neutralModel
55
data:
6-
- ["java.text", "Collator" "compare", "", "manual"]
7-
- ["java.text", "Collator" "equals", "", "manual"]
8-
- ["java.text", "RuleBasedCollator", "compare", "", "manual"]
9-
6+
# summary neutrals
107
# The below APIs have numeric flow and are currently being stored as neutral models.
118
# These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future.
129
- ["java.text", "DateFormat", "format", "(Date)", "summary", "manual"] # taint-numeric
1310
- ["java.text", "DateFormat", "parse", "(String)", "summary", "manual"] # taint-numeric
1411
- ["java.text", "SimpleDateFormat", "SimpleDateFormat", "(String)", "summary", "manual"] # taint-numeric
12+
13+
# sink neutrals
14+
- ["java.text", "Collator" "compare", "", "sink", "manual"]
15+
- ["java.text", "Collator" "equals", "", "sink", "manual"]
16+
- ["java.text", "RuleBasedCollator", "compare", "", "sink", "manual"]

java/ql/lib/ext/java.util.prefs.model.yml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,5 +3,6 @@ extensions:
33
pack: codeql/java-all
44
extensible: neutralModel
55
data:
6-
- ["java.util.prefs", "AbstractPreferences", "nodeExists", "", "manual"]
7-
- ["java.util.prefs", "Preferences", "nodeExists", "", "manual"]
6+
# sink neutrals
7+
- ["java.util.prefs", "AbstractPreferences", "nodeExists", "", "sink", "manual"]
8+
- ["java.util.prefs", "Preferences", "nodeExists", "", "sink", "manual"]

java/ql/lib/ext/org.apache.hc.client5.http.protocol.model.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,5 @@ extensions:
33
pack: codeql/java-all
44
extensible: neutralModel
55
data:
6-
- ["org.apache.hc.client5.http.protocol", "RedirectLocations", "contains", "", "manual"]
6+
# sink neutrals
7+
- ["org.apache.hc.client5.http.protocol", "RedirectLocations", "contains", "", "sink", "manual"]

0 commit comments

Comments
 (0)