You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
60 lines
1.6 KiB
60 lines
1.6 KiB
/*
|
|
* Copyright (c) Facebook, Inc. and its affiliates.
|
|
*
|
|
* This source code is licensed under the MIT license found in the
|
|
* LICENSE file in the root directory of this source tree.
|
|
*/
|
|
|
|
package codetoanalyze.java.quandary;
|
|
|
|
import android.app.Activity;
|
|
import android.content.Intent;
|
|
import com.facebook.infer.builtins.InferTaint;
|
|
|
|
class Obj {
|
|
Object f;
|
|
}
|
|
|
|
public class TaintedFormals {
|
|
|
|
public Activity mActivity;
|
|
|
|
public void callSink(Object formal) {
|
|
InferTaint.inferSensitiveSink(formal);
|
|
}
|
|
|
|
// taintedFormal1 and taintedFormal2 were are modeled as tainted
|
|
public void taintedContextBad(
|
|
String taintedFormal1, Intent untaintedFormal, Integer taintedFormal2) {
|
|
InferTaint.inferSensitiveSink(taintedFormal1); // should report here
|
|
InferTaint.inferSensitiveSink(taintedFormal2); // should report here
|
|
callSink(taintedFormal1); // should report here
|
|
callSink(taintedFormal2); // should report here
|
|
|
|
// using different sink to avoid confusion with the above
|
|
mActivity.startService(untaintedFormal); // should not report here
|
|
}
|
|
|
|
public Object taintedContextBad(String taintedFormal) {
|
|
return taintedFormal;
|
|
}
|
|
|
|
public void callTaintedContextBad1(String formal) {
|
|
Object tainted = taintedContextBad(formal);
|
|
InferTaint.inferSensitiveSink(tainted);
|
|
}
|
|
|
|
public void callTaintedContextBad2() {
|
|
taintedContextBad(null, (Intent) InferTaint.inferSecretSource(), null);
|
|
}
|
|
|
|
public void callTaintedContextOk1() {
|
|
taintedContextBad("foo", null, null);
|
|
}
|
|
|
|
// shouldn't report here, otherwise we will double report
|
|
public void callTaintedContextOk2() {
|
|
taintedContextBad(null, null, new Integer(1));
|
|
}
|
|
}
|