33import java
44private import semmle.code.java.dataflow.FlowSteps
55
6- /**
7- * The class `org.apache.commons.lang.RandomStringUtils` or `org.apache.commons.lang3.RandomStringUtils`.
6+ /**
7+ * The class `org.apache.commons.lang.RandomStringUtils` or `org.apache.commons.lang3.RandomStringUtils`.
88 */
99class TypeApacheRandomStringUtils extends Class {
1010 TypeApacheRandomStringUtils ( ) {
11- this .hasQualifiedName ( [ "org.apache.commons.lang" , "org.apache.commons.lang3" ] , "RandomStringUtils" )
11+ this .hasQualifiedName ( [ "org.apache.commons.lang" , "org.apache.commons.lang3" ] ,
12+ "RandomStringUtils" )
1213 }
1314}
1415
15- /**
16- * The class `org.apache.commons.lang.ArrayUtils` or `org.apache.commons.lang3.ArrayUtils`.
16+ /**
17+ * The class `org.apache.commons.lang.ArrayUtils` or `org.apache.commons.lang3.ArrayUtils`.
1718 */
1819class TypeApacheArrayUtils extends Class {
1920 TypeApacheArrayUtils ( ) {
@@ -27,7 +28,9 @@ class TypeApacheArrayUtils extends Class {
2728 */
2829class MethodApacheSerializationUtilsDeserialize extends Method {
2930 MethodApacheSerializationUtilsDeserialize ( ) {
30- this .getDeclaringType ( ) .hasQualifiedName ( [ "org.apache.commons.lang" , "org.apache.commons.lang3" ] , "SerializationUtils" ) and
31+ this .getDeclaringType ( )
32+ .hasQualifiedName ( [ "org.apache.commons.lang" , "org.apache.commons.lang3" ] ,
33+ "SerializationUtils" ) and
3134 this .hasName ( "deserialize" )
3235 }
3336}
@@ -44,12 +47,16 @@ private class ApacheLangArrayUtilsTaintPreservingMethod extends TaintPreservingC
4447 this .hasName ( [ "addAll" , "addFirst" ] ) and
4548 src = [ 0 .. getNumberOfParameters ( ) ]
4649 or
47- this .hasName ( [ "clone" , "nullToEmpty" , "remove" , "removeAll" , "removeElement" , "removeElements" , "reverse" , "shift" , "shuffle" , "subarray" , "swap" , "toArray" , "toMap" , "toObject" , "toPrimitive" , "toString" , "toStringArray" ] ) and
50+ this .hasName ( [
51+ "clone" , "nullToEmpty" , "remove" , "removeAll" , "removeElement" , "removeElements" , "reverse" ,
52+ "shift" , "shuffle" , "subarray" , "swap" , "toArray" , "toMap" , "toObject" , "toPrimitive" ,
53+ "toString" , "toStringArray"
54+ ] ) and
4855 src = 0
4956 or
5057 this .hasName ( "add" ) and
5158 this .getNumberOfParameters ( ) = 2 and
52- src = [ 0 , 1 , 2 ]
59+ src = [ 0 , 1 , 2 ]
5360 or
5461 this .hasName ( "add" ) and
5562 this .getNumberOfParameters ( ) = 3 and
0 commit comments