CodeQL library for Java/Kotlin

codeql/java-all 8.1.0 (changelog, source)

Module NumericCastTaintedQuery

Provides classes to reason about possible truncation from casting of a user-provided value.

Import path

import semmle.code.java.security.NumericCastTaintedQuery

Imports

java	Provides all default Java QL imports.

Classes

NumericNarrowingCastExpr	A `CastExpr` that is a narrowing cast.
RightShiftOp	An expression that performs a right shift operation.

Modules

NumericCastFlowConfig	A taint-tracking configuration for reasoning about user input that is used in a numeric cast.
NumericCastLocalFlowConfig	A taint-tracking configuration for reasoning about local user input that is used in a numeric cast.

Aliases

NumericCastFlow	Taint-tracking flow for user input that is used in a numeric cast.
NumericCastLocalFlow	DEPRECATED: Use `NumericCastFlow` instead and configure threat model sources to include `local`.