File tree 1 file changed +4
-2
lines changed
java/ql/lib/semmle/code/java/security
1 file changed +4
-2
lines changed Original file line number Diff line number Diff line change 2
2
3
3
import java
4
4
import semmle.code.java.dataflow.TaintTracking
5
- import semmle.code.java.dataflow.TaintTracking2
5
+ import semmle.code.java.dataflow.DataFlow2
6
6
7
7
/**
8
8
* Holds if `array` is initialized only with constants.
@@ -83,14 +83,16 @@ private class ArrayUpdate extends Expr {
83
83
/**
84
84
* A config that tracks dataflow from creating an array to an operation that updates it.
85
85
*/
86
- private class ArrayUpdateConfig extends TaintTracking2 :: Configuration {
86
+ private class ArrayUpdateConfig extends DataFlow2 :: Configuration {
87
87
ArrayUpdateConfig ( ) { this = "ArrayUpdateConfig" }
88
88
89
89
override predicate isSource ( DataFlow:: Node source ) {
90
90
source .asExpr ( ) instanceof StaticByteArrayCreation
91
91
}
92
92
93
93
override predicate isSink ( DataFlow:: Node sink ) { sink .asExpr ( ) = any ( ArrayUpdate upd ) .getArray ( ) }
94
+
95
+ override predicate isBarrierOut ( DataFlow:: Node node ) { this .isSink ( node ) }
94
96
}
95
97
96
98
/**
You can’t perform that action at this time.
0 commit comments