CodeQL library for Java/Kotlin
codeql/java-all 0.9.0 (changelog, source)
Search

Module ArbitraryApkInstallation

Provide classes to reason about Android Intents that can install APKs.

Import path

import semmle.code.java.security.ArbitraryApkInstallation

Imports

DataFlow

Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.

Intent
java

Provides all default Java QL imports.

Classes

ExternalApkSource

A dataflow source representing the URIs which an APK not controlled by the application may come from. Including external storage and web URLs.

InstallPackageAction

The android.content.Intent.ACTION_INSTALL_PACKAGE constant.

PackageArchiveMimeTypeLiteral

A string literal that represents the MIME type for Android APKs.

SetActionMethod

The setAction method of the android.content.Intent class.

SetDataAndTypeMethod

A method that sets the data URI and the MIME type of an intent.

SetDataMethod

A method that sets the data URI of an intent.

SetDataSink

A dataflow sink for the URI of an intent.

SetTypeMethod

A method that sets the MIME type of an intent.

UriConstructorMethod

A method that generates a URI.