github / github/codeql

[Feature Request] support add constraint on typeVariable while perform virtual dispatch in java query

Open
#7,486 5 comments 0 reactions 0 assignees View on GitHub
enhancement Java
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

Is it possible to add class type constraint on TypeVariable while perform virtual dispatch in java query?

Take this sinppet for example:
```java
E data = (E) in.readObject();
data.equals(....);
```
It seems `data` can be any class and have data flow tracked into `equals` method as long as the class has one even if the class is unserializable.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.