Fix typos

haby0 · haby0 · commit d6782767b7c2 · 2021-05-31T11:12:22.000+08:00
diff --git a/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.ql b/java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.ql
@@ -22,9 +22,9 @@ class UnsafeDeserializationConfig extends TaintTracking::Configuration {
 
   override predicate isSink(DataFlow::Node sink) { sink instanceof UnsafeDeserializationSink }
 
-  override predicate isAdditionalTaintStep(DataFlow::Node prod, DataFlow::Node succ) {
+  override predicate isAdditionalTaintStep(DataFlow::Node pred, DataFlow::Node succ) {
     exists(ClassInstanceExpr cie |
-      cie.getArgument(0) = prod.asExpr() and
+      cie.getArgument(0) = pred.asExpr() and
       cie = succ.asExpr() and
       (
         cie.getConstructor().getDeclaringType() instanceof JsonIoJsonReader or
@@ -36,7 +36,7 @@ class UnsafeDeserializationConfig extends TaintTracking::Configuration {
     or
     exists(MethodAccess ma |
       ma.getMethod() instanceof BurlapInputInitMethod and
-      ma.getArgument(0) = prod.asExpr() and
+      ma.getArgument(0) = pred.asExpr() and
       ma.getQualifier() = succ.asExpr()
     )
   }

Original file line number	Diff line number	Diff line change
`@@ -22,9 +22,9 @@ class UnsafeDeserializationConfig extends TaintTracking::Configuration {`
`22`	`22`
`23`	`23`	`override predicate isSink(DataFlow::Node sink) { sink instanceof UnsafeDeserializationSink }`
`24`	`24`
`25`		`- override predicate isAdditionalTaintStep(DataFlow::Node prod, DataFlow::Node succ) {`
	`25`	`+ override predicate isAdditionalTaintStep(DataFlow::Node pred, DataFlow::Node succ) {`
`26`	`26`	`exists(ClassInstanceExpr cie \|`
`27`		`- cie.getArgument(0) = prod.asExpr() and`
	`27`	`+ cie.getArgument(0) = pred.asExpr() and`
`28`	`28`	`cie = succ.asExpr() and`
`29`	`29`	`(`
`30`	`30`	`cie.getConstructor().getDeclaringType() instanceof JsonIoJsonReader or`
`@@ -36,7 +36,7 @@ class UnsafeDeserializationConfig extends TaintTracking::Configuration {`
`36`	`36`	`or`
`37`	`37`	`exists(MethodAccess ma \|`
`38`	`38`	`ma.getMethod() instanceof BurlapInputInitMethod and`
`39`		`- ma.getArgument(0) = prod.asExpr() and`
	`39`	`+ ma.getArgument(0) = pred.asExpr() and`
`40`	`40`	`ma.getQualifier() = succ.asExpr()`
`41`	`41`	`)`
`42`	`42`	`}`