issues Search Results · repo:github/codeql path:docs/codeql "MethodAccess"
Filter by
45 results (120 ms)
45 results
ingithub/codeql (press backspace or delete to remove)awaiting-response
Java
question
Stale
soh0ro0t
...
Query statement：
import java
class UserMapper extends RefType{
UserMapper(){
this.hasQualifiedName( com.jfinal.plugin.activerecord , Db )
}
}
predicate sql(MethodAccess ma ...
ernongxizhu
l3yx... following hack-y taintstep , the vulns will be flagged
override predicate isAdditionalTaintStep(DataFlow::Node pred, DataFlow::Node succ) {
exists(MethodAccess m | m.getAnArgument() = pred.asExpr ...
question
chmodxxx
... ( javax.naming , InitialContext )
}
}
predicate isLookup(Expr arg) {
exists(MethodAccess ma |
ma.getMethod().getName() = lookup
and
ma.getMethod().getDeclaringType() instanceof ...
question
... (), stored to obj, is not tainted, and so neither is the read from obj.
If you want instead to taint the result of readObject(), then you should use a source like exists(MethodAccess ma | ma =
source.asExpr() | ... check that ma is a call to an interesting method here ...)
Java
question
flowiri
I m trying to write a custom query to detect CVE-2019-26891 (insecure deserialization) on liferay 6 but I ve been
struggling for 1 week without any movement.
In short, I debug the query and see the partial ...
Java
question
false-positive
Java
JLLeitschuh
... validate:
import java
import semmle.code.java.dispatch.VirtualDispatch
from VirtCalledSrcMethod top, SrcRefType tsrc, RefType t
where
exists(MethodAccess ma | ma.getMethod().hasName( validate ...
bug
Java
atorralba
... )
)
and this.getCallable().hasName( log )
and this.hasName( data )
}
}
predicate strategylog(DataFlow::Node node1, DataFlow::Node node2) {
exists(MethodAccess ma ...
acknowledged
Java
question
KiruaLawliet
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.
Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.