Java: Do not derive new write-file sinks.

michaelnebel · michaelnebel · commit 48da8dde6f3a · 2022-05-30T08:16:58.000+02:00
diff --git a/java/ql/src/utils/model-generator/internal/CaptureModelsSpecific.qll b/java/ql/src/utils/model-generator/internal/CaptureModelsSpecific.qll
@@ -234,5 +234,6 @@ string asInputArgument(DataFlow::Node source) {
 bindingset[kind]
 predicate isRelevantSinkKind(string kind) {
   not kind = "logging" and
-  not kind.matches("regex-use%")
+  not kind.matches("regex-use%") and
+  not kind = "write-file"
 }

Original file line number	Diff line number	Diff line change
`@@ -234,5 +234,6 @@ string asInputArgument(DataFlow::Node source) {`
`234`	`234`	`bindingset[kind]`
`235`	`235`	`predicate isRelevantSinkKind(string kind) {`
`236`	`236`	`not kind = "logging" and`
`237`		`- not kind.matches("regex-use%")`
	`237`	`+ not kind.matches("regex-use%") and`
	`238`	`+ not kind = "write-file"`
`238`	`239`	`}`