Skip to content

Commit f907fd2

Browse files
committed
Add manual neutral models for java.text.Format and java.text.MessageFormat
See comment in java/ql/src/Metrics/Summaries/TopJdkApis.qll * Note: the following top JDK APIs are not modeled with MaD: * `java.text.Format#format(Object)`: similar issue as `Object.toString`; depends on the object being passed as the argument * `java.text.MessageFormat#format(String,Object[])`: similar issue as `Object.toString`; depends on the object being passed as the argument
1 parent 0e95f41 commit f907fd2

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

java/ql/lib/ext/java.text.model.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,9 @@ extensions:
33
pack: codeql/java-all
44
extensible: neutralModel
55
data:
6+
- ["java.text", "Format", "format", "", "summary", "manual"] # similar issue as `Object.toString`; depends on the object being passed as the argument
7+
- ["java.text", "MessageFormat", "format", "", "summary", "manual"] # similar issue as `Object.toString`; depends on the object being passed as the argument
8+
69
# summary neutrals
710
# The below APIs have numeric flow and are currently being stored as neutral models.
811
# These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future.

0 commit comments

Comments
 (0)