discussions Search Results · repo:github/codeql path:docs/codeql "MethodAccess" is:public
Filter by
25 results (161 ms)
25 results
ingithub/codeql (press backspace or delete to remove):
... -
override predicate isSink(DataFlow::Node sink) {
exists(MethodAccess call, SetterMethod method , Field field |
call.getMethod() = method and
sink.asExpr ...
:
... ) {
exists(MethodAccess call | sink.asExpr() = call.getAnArgument())
}
}
from TestTaint config1, DataFlow2::PathNode source1, DataFlow2::PathNode sink1
where config1.hasFlowPath(source1, sink1)
select source1, source1, sink1, 123
:
... )
)
)
}
from DataFlow::Node node, MethodAccess ma, Method me
where
isCmdi(node)
and node.asExpr() = ma
and ma.getMethod() = me
select
ma.getFile() as file,
ma.getEnclosingCallable() as method ...
:
... predicate isSink(DataFlow::Node sink) {
exists(MethodAccess ma | ma.getAnArgument() = sink.asExpr() and
ma.getMethod().hasName( eval )
)
}
override int explorationLimit() { result = 500 ...
:
You can use getEnclosingCallable, e.g. (untested code):
predicate test() {
exists(MethodAccess equals, Method login |
equals.getMethod().hasName( equals ) and
login.hasName( login ) and ...
:
This query will only return results for MethodAccess with the name render that return some object.
predicate testQuery2(MethodAccess ma, Expr qualifier, DataFlow::Node node1) {
ma.getMethod ...
:
I found this sink predicate online and it works fine:
override predicate isSink(DataFlow::Node sink) {
exists(MethodAccess ma |
ma.getMethod().getName() = lookup and
ma.getMethod ...
:
... ) {
exists(MethodAccess call, Method method |
method.hasName( getParameter )
and method.getDeclaringType().getAnAncestor().hasQualifiedName( javax.servlet , ServletRequest )
and ...
:
I m trying to list all sources, along with it s argument:
from DataFlow::Node node, MethodAccess ma, Method me
where
node instanceof RemoteFlowSource
and node.asExpr() = ma
and ma.getMethod() = me ...
:
... ::parameterNode(method.getAParameter()), DataFlow::exprNode(call.getArgument(0)))
try
TaintTracking::localTaint(DataFlow::exprNode(any(MethodAccess ma | ma.getCallee() = method)), DataFlow::exprNode(call.getArgument(0)))