Skip to content

Commit f38602e

Browse files
committed
Java: Update references to deleted aliases.
1 parent b12a1c0 commit f38602e

File tree

3 files changed

+8
-8
lines changed

3 files changed

+8
-8
lines changed

java/ql/src/experimental/Security/CWE/CWE-208/NonConstantTimeCheckOnSignatureQuery.qll

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -95,7 +95,7 @@ private class ProduceCiphertextCall extends ProduceCryptoCall {
9595
}
9696

9797
/** Holds if `fromNode` to `toNode` is a dataflow step that updates a cryptographic operation. */
98-
private predicate updateCryptoOperationStep(DataFlow2::Node fromNode, DataFlow2::Node toNode) {
98+
private predicate updateCryptoOperationStep(DataFlow::Node fromNode, DataFlow::Node toNode) {
9999
exists(MethodCall call, Method m |
100100
m = call.getMethod() and
101101
call.getQualifier() = toNode.asExpr() and
@@ -111,7 +111,7 @@ private predicate updateCryptoOperationStep(DataFlow2::Node fromNode, DataFlow2:
111111
}
112112

113113
/** Holds if `fromNode` to `toNode` is a dataflow step that creates a hash. */
114-
private predicate createMessageDigestStep(DataFlow2::Node fromNode, DataFlow2::Node toNode) {
114+
private predicate createMessageDigestStep(DataFlow::Node fromNode, DataFlow::Node toNode) {
115115
exists(MethodCall ma, Method m | m = ma.getMethod() |
116116
m.getDeclaringType().hasQualifiedName("java.security", "MessageDigest") and
117117
m.hasStringSignature("digest()") and
@@ -135,7 +135,7 @@ private predicate createMessageDigestStep(DataFlow2::Node fromNode, DataFlow2::N
135135
}
136136

137137
/** Holds if `fromNode` to `toNode` is a dataflow step that updates a hash. */
138-
private predicate updateMessageDigestStep(DataFlow2::Node fromNode, DataFlow2::Node toNode) {
138+
private predicate updateMessageDigestStep(DataFlow::Node fromNode, DataFlow::Node toNode) {
139139
exists(MethodCall ma, Method m | m = ma.getMethod() |
140140
m.hasQualifiedName("java.security", "MessageDigest", "update") and
141141
ma.getArgument(0) = fromNode.asExpr() and
@@ -154,7 +154,7 @@ private module UserInputInCryptoOperationConfig implements DataFlow::ConfigSig {
154154
exists(ProduceCryptoCall call | call.getQualifier() = sink.asExpr())
155155
}
156156

157-
predicate isAdditionalFlowStep(DataFlow2::Node fromNode, DataFlow2::Node toNode) {
157+
predicate isAdditionalFlowStep(DataFlow::Node fromNode, DataFlow::Node toNode) {
158158
updateCryptoOperationStep(fromNode, toNode)
159159
or
160160
createMessageDigestStep(fromNode, toNode)

java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegexQuery.qll

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -94,11 +94,11 @@ private class CompileRegexSink extends DataFlow::ExprNode {
9494
* A data flow configuration for regular expressions that include permissive dots.
9595
*/
9696
private module PermissiveDotRegexConfig implements DataFlow::ConfigSig {
97-
predicate isSource(DataFlow2::Node src) { src.asExpr() instanceof PermissiveDotStr }
97+
predicate isSource(DataFlow::Node src) { src.asExpr() instanceof PermissiveDotStr }
9898

99-
predicate isSink(DataFlow2::Node sink) { sink instanceof CompileRegexSink }
99+
predicate isSink(DataFlow::Node sink) { sink instanceof CompileRegexSink }
100100

101-
predicate isBarrier(DataFlow2::Node node) {
101+
predicate isBarrier(DataFlow::Node node) {
102102
exists(
103103
MethodCall ma, Field f // Pattern.compile(PATTERN, Pattern.DOTALL)
104104
|

java/ql/src/experimental/semmle/code/java/security/SpringUrlRedirect.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ private class SpringViewUrlRedirectSink extends SpringUrlRedirectSink {
5353
)
5454
or
5555
exists(MethodCall ma, RedirectAppendCall rac |
56-
DataFlow2::localExprFlow(rac.getQualifier(), ma.getQualifier()) and
56+
DataFlow::localExprFlow(rac.getQualifier(), ma.getQualifier()) and
5757
ma.getMethod().hasName("append") and
5858
ma.getArgument(0) = this.asExpr() and
5959
any(SpringRequestMappingMethod sqmm).polyCalls*(this.getEnclosingCallable())

0 commit comments

Comments
 (0)