File tree Expand file tree Collapse file tree 4 files changed +5
-17
lines changed
query-tests/security/CWE-190/semmle/tests Expand file tree Collapse file tree 4 files changed +5
-17
lines changed Original file line number Diff line number Diff line change @@ -5,14 +5,14 @@ public void f1() {
55 Box1 b1 = new Box1 (e , null );
66 Box2 b2 = new Box2 (b1 );
77 sink (b2 .box1 .elem1 ); // flow
8- sink (b2 .box1 .elem2 ); // FP due to flow in f2 below
8+ sink (b2 .box1 .elem2 ); // no flow
99 }
1010
1111 public void f2 () {
1212 Elem e = new Elem ();
1313 Box1 b1 = new Box1 (null , e );
1414 Box2 b2 = new Box2 (b1 );
15- sink (b2 .box1 .elem1 ); // FP due to flow in f1 above
15+ sink (b2 .box1 .elem1 ); // no flow
1616 sink (b2 .box1 .elem2 ); // flow
1717 }
1818
Original file line number Diff line number Diff line change 1212| A.java:94:11:94:17 | new B(...) | A.java:100:10:100:26 | l3.next.next.head |
1313| A.java:94:11:94:17 | new B(...) | A.java:103:12:103:17 | l.head |
1414| B.java:4:14:4:23 | new Elem(...) | B.java:7:10:7:22 | b2.box1.elem1 |
15- | B.java:4:14:4:23 | new Elem(...) | B.java:8:10:8:22 | b2.box1.elem2 |
16- | B.java:12:14:12:23 | new Elem(...) | B.java:15:10:15:22 | b2.box1.elem1 |
1715| B.java:12:14:12:23 | new Elem(...) | B.java:16:10:16:22 | b2.box1.elem2 |
1816| C.java:3:21:3:30 | new Elem(...) | C.java:18:10:18:11 | s1 |
1917| C.java:4:27:4:36 | new Elem(...) | C.java:19:10:19:11 | s2 |
Original file line number Diff line number Diff line change 11edges
2- | A.java:12:5:12:5 | b [post update] [elem, ... (1)] | A.java:13:12:13:12 | b [elem, ... (1)] |
3- | A.java:12:14:12:18 | src(...) [Object] | A.java:12:5:12:5 | b [post update] [elem, ... (1)] |
42| A.java:12:14:12:18 | src(...) [Object] | A.java:12:5:12:18 | ...=... [Object] |
5- | A.java:13:12:13:12 | b [elem, ... (1)] | A.java:17:13:17:16 | f1(...) [elem, ... (1)] |
6- | A.java:17:13:17:16 | f1(...) [elem, ... (1)] | A.java:18:8:18:8 | b [elem, ... (1)] |
7- | A.java:18:8:18:8 | b [elem, ... (1)] | A.java:21:11:21:15 | b [elem, ... (1)] |
83#select
9- | 0 | A.java:12:5:12:5 | b [post update] [elem, ... (1)] |
104| 0 | A.java:12:5:12:18 | ...=... [Object] |
11- | 0 | A.java:13:12:13:12 | b [elem, ... (1)] |
12- | 1 | A.java:17:13:17:16 | f1(...) [elem, ... (1)] |
13- | 1 | A.java:18:8:18:8 | b [elem, ... (1)] |
14- | 2 | A.java:21:11:21:15 | b [elem, ... (1)] |
Original file line number Diff line number Diff line change 88| ArithmeticTainted.java:17:46:17:54 | System.in [InputStream] | ArithmeticTainted.java:119:10:119:13 | data [Number] |
99| ArithmeticTainted.java:17:46:17:54 | System.in [InputStream] | ArithmeticTainted.java:120:10:120:13 | data [Number] |
1010| ArithmeticTainted.java:17:46:17:54 | System.in [InputStream] | ArithmeticTainted.java:121:10:121:13 | data [Number] |
11- | ArithmeticTainted.java:64:4:64:10 | tainted [post update] [dat, ... (1) ] | ArithmeticTainted.java:66:18:66:24 | tainted [dat, ... (1) ] |
12- | ArithmeticTainted.java:64:20:64:23 | data [Number] | ArithmeticTainted.java:64:4:64:10 | tainted [post update] [dat, ... (1) ] |
13- | ArithmeticTainted.java:66:18:66:24 | tainted [dat, ... (1) ] | ArithmeticTainted.java:66:18:66:34 | getData(...) [Number] |
11+ | ArithmeticTainted.java:64:4:64:10 | tainted [post update] [dat : Number ] | ArithmeticTainted.java:66:18:66:24 | tainted [dat : Number ] |
12+ | ArithmeticTainted.java:64:20:64:23 | data [Number] | ArithmeticTainted.java:64:4:64:10 | tainted [post update] [dat : Number ] |
13+ | ArithmeticTainted.java:66:18:66:24 | tainted [dat : Number ] | ArithmeticTainted.java:66:18:66:34 | getData(...) [Number] |
1414| ArithmeticTainted.java:66:18:66:34 | getData(...) [Number] | ArithmeticTainted.java:71:17:71:23 | herring |
1515| ArithmeticTainted.java:118:9:118:12 | data [Number] | ArithmeticTainted.java:125:26:125:33 | data [Number] |
1616| ArithmeticTainted.java:119:10:119:13 | data [Number] | ArithmeticTainted.java:129:27:129:34 | data [Number] |
You can’t perform that action at this time.
0 commit comments