Skip to content

Java: Replace ValidatedVariable with guarded accesses.#1344

Merged
yh-semmle merged 2 commits intogithub:masterfrom
aschackmull:java/validatedvariable
May 24, 2019
Merged

Java: Replace ValidatedVariable with guarded accesses.#1344
yh-semmle merged 2 commits intogithub:masterfrom
aschackmull:java/validatedvariable

Conversation

@aschackmull
Copy link
Contributor

This addresses an imprecision in the set of default taint sanitizers.

@aschackmull aschackmull requested a review from a team as a code owner May 20, 2019 14:47
@aschackmull
Copy link
Contributor Author

Result changes look reasonable:

=== Changes per project (new / fixed) ===

jdk8-java-2                                                               175 / 0


=== Changes per query (new / fixed) ===

ArithmeticUncontrolled.ql                                                  77 / 0
ArithmeticTainted.ql                                                       77 / 0
ImproperValidationOfArrayIndex.ql                                          10 / 0
ExternallyControlledFormatString.ql                                         4 / 0
TaintedPath.ql                                                              3 / 0
NumericCastTainted.ql                                                       2 / 0
HttpsUrls.ql                                                                2 / 0

@yh-semmle
Copy link
Contributor

Does this perhaps merit a change note?

@yh-semmle yh-semmle merged commit 87cbc7e into github:master May 24, 2019
@aschackmull aschackmull deleted the java/validatedvariable branch May 27, 2019 07:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants