github / github/codeql

Java: Callable.getAnException() reports thrown exceptions

Aperta
#5,464 1 commento 0 reazioni 0 assegnatari Vedi su GitHub
acknowledged Java not security
Lingua principale
CodeQL
Stelle
10.1k
Fork
2.1k
Merge medio
2g 15h
PR unite (30g)
141

Descrizione

[`Callable.getAnException()`](https://codeql.github.com/codeql-standard-libraries/java/semmle/code/java/Member.qll/predicate.Member$Callable$getAnException.0.html) is documented as:
> Gets an exception that occurs in the `throws` clause of this callable.

Note how it says `throws` clause, not `throw` statement. Yet it appears to be reporting exceptions which do not appear in the `throws` clause, but appear inside `throw` statements:
```ql
import java

from Method m, Exception e
where
m.fromSource()
and e = m.getAnException()
and not e.fromSource()
select m, e.toString()
```
[Query Console link](https://lgtm.com/query/5757069100542810787/)
The found `Exception` elements also seem to cause issues for the Query Console, see #5465.

(This also affects `Callable.getAThrownExceptionType()` which delegates to `getAnException()`.)

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.