Like this issus:#3366
Java codeql engine cannot model data flow through collections precisely. Example:
class Demo
{
private static final String PSFS = "1111";
void M1(source)
{
Obj obj = new Obj();
obj.setA(source);
obj.setB(PSFS);
Sink(obj.getA()); // vul
Sink(obj.getB()); // not vul
}
}
codeql marked obj is tainted,not obj.A
Like this issus:#3366
Java codeql engine cannot model data flow through collections precisely. Example:
codeql marked obj is tainted,not obj.A