issues Search Results · repo:github/codeql path:docs/codeql "MethodAccess"
Filter by
45 results (106 ms)
45 results
ingithub/codeql (press backspace or delete to remove)So I have a Java project with a lot of external dependencies, and when I want to find some information like say a
MethodAccess for a method defined inside an external library, I am able to get the ...
question
... enable fastjson.safeMode feature, so I wrote ql: ` import java import
semmle.code.java.dataflow.FlowSources import semmle.code.java.frameworks.FastJson
class FastJsonSink extends MethodAccess ...
question
... {
NullConfiguration() { this = config }
override predicate isSink(DataFlow::Node sink) {
any(MethodAccess ma).getQualifier() = sink.asExpr()
}
override predicate isSource(DataFlow ...
Java
question
... ().(MethodAccess).getMethod().hasName( taint )
}
override predicate isSink(DataFlow::Node n) {
n.asExpr().(Argument).getCall().getCallee().hasName( sink )
}
}
from DataFlow::Node src, DataFlow::Node sink, Conf conf
where conf.hasFlow(src, sink)
select src, sink
question
... ContainsDotDotSanitizer extends DataFlow::ExprNode {
ContainsDotDotSanitizer() {
exists(MethodAccess ma, Argument p, Method m|
m instanceof FilterMethod and
ma.getMethod() = m and ...
Java
question
I wanna know what does result mean in codeQL predicate . Example code:
MethodAccess getMethodAccess() { unsafeDeserialization(result, this.getExpr()) }
or
Person getAChildOf(Person p) { p ...
question
... ::AdditionalTaintStep {
override predicate step(DataFlow::Node n1, DataFlow::Node n2) {
exists(MethodAccess ma, Method m|
ma.getMethod() = m and
(m.getName() = append or m.getName() = write ...
Java
question
... ::Node source) {
exists(Expr E |
source.asExpr() = E
)
}
override predicate isSink(DataFlow::Node sink) {
exists(MethodAccess call |
call.getMethod ...
question
... :
import java
from MethodAccess call, Assignment assign, Variable var
where
assign.getControlFlowNode().getASuccessor+() = call
and call.getQualifier() = var.getAnAccess()
and call.getParent ...
Java
question

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.