Skip to content

issues Search Results · repo:github/codeql path:docs/codeql "MethodAccess"

Filter by

45 results  (106 ms)

45 results

ingithub/codeql (press backspace or delete to remove)

So I have a Java project with a lot of external dependencies, and when I want to find some information like say a MethodAccess for a method defined inside an external library, I am able to get the ...
question

... enable fastjson.safeMode feature, so I wrote ql: ` import java import semmle.code.java.dataflow.FlowSources import semmle.code.java.frameworks.FastJson class FastJsonSink extends MethodAccess ...
question

... { NullConfiguration() { this = config } override predicate isSink(DataFlow::Node sink) { any(MethodAccess ma).getQualifier() = sink.asExpr() } override predicate isSource(DataFlow ...
Java
question

... ().(MethodAccess).getMethod().hasName( taint ) } override predicate isSink(DataFlow::Node n) { n.asExpr().(Argument).getCall().getCallee().hasName( sink ) } } from DataFlow::Node src, DataFlow::Node sink, Conf conf where conf.hasFlow(src, sink) select src, sink
question

... ContainsDotDotSanitizer extends DataFlow::ExprNode { ContainsDotDotSanitizer() { exists(MethodAccess ma, Argument p, Method m| m instanceof FilterMethod and ma.getMethod() = m and ...
Java
question

I wanna know what does result mean in codeQL predicate . Example code: MethodAccess getMethodAccess() { unsafeDeserialization(result, this.getExpr()) } or Person getAChildOf(Person p) { p ...
question

... ::AdditionalTaintStep { override predicate step(DataFlow::Node n1, DataFlow::Node n2) { exists(MethodAccess ma, Method m| ma.getMethod() = m and (m.getName() = append or m.getName() = write ...
Java
question

... ::Node source) { exists(Expr E | source.asExpr() = E ) } override predicate isSink(DataFlow::Node sink) { exists(MethodAccess call | call.getMethod ...
question

... : import java from MethodAccess call, Assignment assign, Variable var where assign.getControlFlowNode().getASuccessor+() = call and call.getQualifier() = var.getAnAccess() and call.getParent ...
Java
question
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! Restrict your search to the title by using the in:title qualifier.