CodeQL library for Java/Kotlin

codeql/java-all 0.9.2-dev (changelog, source)

Module ArbitraryApkInstallation

Provide classes to reason about Android Intents that can install APKs.

Import path

import semmle.code.java.security.ArbitraryApkInstallation

Imports

DataFlow	Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.
Intent
java	Provides all default Java QL imports.

Classes

ExternalApkSource	A dataflow source representing the URIs which an APK not controlled by the application may come from. Including external storage and web URLs.
InstallPackageAction	The `android.content.Intent.ACTION_INSTALL_PACKAGE` constant.
PackageArchiveMimeTypeLiteral	A string literal that represents the MIME type for Android APKs.
SetActionMethod	The `setAction` method of the `android.content.Intent` class.
SetDataAndTypeMethod	A method that sets the data URI and the MIME type of an intent.
SetDataMethod	A method that sets the data URI of an intent.
SetDataSink	A dataflow sink for the URI of an intent.
SetTypeMethod	A method that sets the MIME type of an intent.
UriConstructorMethod	A method that generates a URI.