CodeQL library for Java
codeql/java-all 0.5.5 ( changelog , source )
Search

Module DataFlow

Import path

import semmle.code.java.dataflow.DataFlow

Predicates

exprNode

Gets the node corresponding to e.

getFieldQualifier

Gets the node that occurs as the qualifier of fa.

getInstanceArgument

Gets the instance argument of a non-static call.

hasNonlocalValue

Holds if the FieldRead is not completely determined by explicit SSA updates.

localExprFlow

Holds if data can flow from e1 to e2 in zero or more local (intra-procedural) steps.

localFlow

Holds if data can flow from node1 to node2 in zero or more local (intra-procedural) steps.

localFlowStep

Holds if data can flow from node1 to node2 in one local step.

parameterNode

Gets the node corresponding to p.

simpleLocalFlowStep

INTERNAL: do not use.

Classes

ArrayContent

A reference through an array.

BarrierGuard

DEPRECATED: Use BarrierGuard module instead.

CollectionContent

A reference through the contents of some collection-like container.

Configuration

A configuration of interprocedural data flow analysis. This defines sources, sinks, and any other configurable aspect of the analysis. Each use of the global data flow library must define its own unique extension of this abstract class. To create a configuration, extend this class with a subclass whose characteristic predicate is a unique singleton string. For example, write

Content

A description of the way data may be stored inside an object. Examples include instance fields, the contents of a collection object, or the contents of an array.

ContentSet

An entity that represents a set of Contents.

ExplicitParameterNode

A parameter, viewed as a node in a data flow graph.

ExprNode

An expression, viewed as a node in a data flow graph.

FeatureEqualSourceSinkCallContext

A flow configuration feature that implies that source-sink pairs have some shared existing call context.

FeatureHasSinkCallContext

A flow configuration feature that implies that sinks have some existing call context.

FeatureHasSourceCallContext

A flow configuration feature that implies that sources have some existing call context.

FieldContent

A reference through an instance field.

FieldValueNode

A node representing the value of a field.

FlowFeature

A flow configuration feature for use in Configuration::getAFeature().

FlowStateEmpty

The default state, which is used when the state is unspecified for a source or a sink.

ImplicitInstanceAccess

An implicit read of this or A.this.

ImplicitVarargsArray

An implicit varargs array creation expression.

InstanceAccessNode

A node representing an InstanceAccessExt.

InstanceParameterNode

An instance parameter for an instance method or constructor.

MapKeyContent

A reference through a map key.

MapValueContent

A reference through a map value.

Node

An element, viewed as a node in a data flow graph. Either an expression, a parameter, or an implicit varargs array creation.

ParameterNode

An explicit or implicit parameter.

PathNode

A Node augmented with a call context (except for sinks), an access path, and a configuration. Only those PathNodes that are reachable from a source, and which can reach a sink, are generated.

PostUpdateNode

A node associated with an object after an operation that might have changed its state.

SyntheticFieldContent

A reference through a synthetic instance field.

Modules

BarrierGuard

Provides a set of barrier nodes for a guard that validates an expression.

FlowStateString

Provides FlowState = string.

Make

Constructs a standard data flow computation.

MakeWithState

Constructs a data flow computation using flow state.

MergePathGraph

Constructs a PathGraph from two PathGraphs by disjoint union.

Predicate signatures

explorationLimitSig

Gets the exploration limit for hasPartialFlow and hasPartialFlowRev measured in approximate number of interprocedural steps.

guardChecksSig

Holds if the guard g validates the expression e upon evaluating to branch.

Type signatures

Module signatures

ConfigSig

An input configuration for data flow.

DataFlowSig

The output of a data flow computation.

PathGraphSig
StateConfigSig

An input configuration for data flow using flow state.

Aliases

FlowState

A state value to track during data flow.

flowsTo