CodeQL library for Java/Kotlin

codeql/java-all 9.0.2 (changelog, source)

Module TempDirUtils

Provides classes and predicates for reasoning about temporary file/directory creations.

Import path

import semmle.code.java.security.TempDirUtils

Imports

FlowSources	Provides classes representing various flow sources for taint tracking.
java	Provides all default Java QL imports.

Predicates

isFileConstructorArgument	Holds if `expSource` is an argument to a constructor call `exprDest` (constructor from `java.io.File`), where the specific `File` constructor being used has `paramCount` parameters.
isPermissionsProtectedTempDirUse	Hold’s if temporary directory’s use is protected if there is an explicit call to `setReadable(false, false)`, then `setRedabale(true, true)`.

Classes

ExprSystemGetPropertyTempDirTainted	A method or field access that returns a `String` or `File` that has been tainted by `System.getProperty("java.io.tmpdir")`.
MethodFileCreateTempFile	A `java.io.File::createTempFile` method.