|
1 | 1 | import java |
2 | | -import semmle.code.java.dataflow.DataFlow |
3 | | -import semmle.code.java.dataflow.ExternalFlow |
4 | | -import semmle.code.java.dataflow.TaintTracking |
5 | | -import TestUtilities.InlineExpectationsTest |
6 | | - |
7 | | -class ValueFlowConf extends DataFlow::Configuration { |
8 | | - ValueFlowConf() { this = "qltest:valueFlowConf" } |
9 | | - |
10 | | - override predicate isSource(DataFlow::Node n) { |
11 | | - n.asExpr().(MethodAccess).getMethod().hasName("source") |
12 | | - } |
13 | | - |
14 | | - override predicate isSink(DataFlow::Node n) { |
15 | | - n.asExpr().(Argument).getCall().getCallee().hasName("sink") |
16 | | - } |
17 | | -} |
18 | | - |
19 | | -class TaintFlowConf extends TaintTracking::Configuration { |
20 | | - TaintFlowConf() { this = "qltest:taintFlowConf" } |
21 | | - |
22 | | - override predicate isSource(DataFlow::Node n) { |
23 | | - n.asExpr().(MethodAccess).getMethod().hasName("source") |
24 | | - } |
25 | | - |
26 | | - override predicate isSink(DataFlow::Node n) { |
27 | | - n.asExpr().(Argument).getCall().getCallee().hasName("sink") |
28 | | - } |
29 | | -} |
30 | | - |
31 | | -class HasFlowTest extends InlineExpectationsTest { |
32 | | - HasFlowTest() { this = "HasFlowTest" } |
33 | | - |
34 | | - override string getARelevantTag() { result = ["hasValueFlow", "hasTaintFlow"] } |
35 | | - |
36 | | - override predicate hasActualResult(Location location, string element, string tag, string value) { |
37 | | - tag = "hasValueFlow" and |
38 | | - exists(DataFlow::Node src, DataFlow::Node sink, ValueFlowConf conf | conf.hasFlow(src, sink) | |
39 | | - sink.getLocation() = location and |
40 | | - element = sink.toString() and |
41 | | - value = "" |
42 | | - ) |
43 | | - or |
44 | | - tag = "hasTaintFlow" and |
45 | | - exists(DataFlow::Node src, DataFlow::Node sink, TaintFlowConf conf | |
46 | | - conf.hasFlow(src, sink) and not any(ValueFlowConf c).hasFlow(src, sink) |
47 | | - | |
48 | | - sink.getLocation() = location and |
49 | | - element = sink.toString() and |
50 | | - value = "" |
51 | | - ) |
52 | | - } |
53 | | -} |
| 2 | +import TestUtilities.InlineFlowTest |
0 commit comments