github / github/codeql

Java codeql requires Precise data-flow for collections and Field-sensitive data-flow analysis capabilities

Open
#9,597 3 comments 0 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

Like this issus:https://github.com/github/codeql/pull/3366

Java codeql engine cannot model data flow through collections precisely. Example:
```
class Demo
{
private static final String PSFS = "1111";
void M1(source)
{
Obj obj = new Obj();
obj.setA(source);
obj.setB(PSFS);
Sink(obj.getA()); // vul
Sink(obj.getB()); // not vul
}
}
```
codeql marked obj is tainted,not obj.A

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.