Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
1 change: 1 addition & 0 deletions java/ql/lib/ext-json/android.app.model.json

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions java/ql/lib/ext-json/android.content.model.json

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions java/ql/lib/ext-json/android.database.model.json
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{"extensions":[{"addsTo":{"pack":"codeql/java-all","extensible":"sinkModel"},"data":[["android.database","DatabaseUtils",false,"blobFileDescriptorForQuery","(SQLiteDatabase,String,String[])","","Argument[1]","sql-injection","manual"],["android.database","DatabaseUtils",false,"createDbFromSqlStatements","(Context,String,int,String)","","Argument[3]","sql-injection","manual"],["android.database","DatabaseUtils",false,"longForQuery","(SQLiteDatabase,String,String[])","","Argument[1]","sql-injection","manual"],["android.database","DatabaseUtils",false,"queryNumEntries","(SQLiteDatabase,String)","","Argument[1]","sql-injection","manual"],["android.database","DatabaseUtils",false,"queryNumEntries","(SQLiteDatabase,String,String)","","Argument[1..2]","sql-injection","manual"],["android.database","DatabaseUtils",false,"queryNumEntries","(SQLiteDatabase,String,String,String[])","","Argument[1..2]","sql-injection","manual"],["android.database","DatabaseUtils",false,"stringForQuery","(SQLiteDatabase,String,String[])","","Argument[1]","sql-injection","manual"]]},{"addsTo":{"pack":"codeql/java-all","extensible":"summaryModel"},"data":[["android.database","Cursor",true,"copyStringToBuffer","","","Argument[this]","Argument[1]","taint","manual"],["android.database","Cursor",true,"getBlob","","","Argument[this]","ReturnValue","taint","manual"],["android.database","Cursor",true,"getColumnName","","","Argument[this]","ReturnValue","taint","manual"],["android.database","Cursor",true,"getColumnNames","","","Argument[this]","ReturnValue","taint","manual"],["android.database","Cursor",true,"getExtras","","","Argument[this]","ReturnValue","taint","manual"],["android.database","Cursor",true,"getNotificationUri","","","Argument[this]","ReturnValue","taint","manual"],["android.database","Cursor",true,"getNotificationUris","","","Argument[this]","ReturnValue","taint","manual"],["android.database","Cursor",true,"getString","","","Argument[this]","ReturnValue","taint","manual"],["android.database","Cursor",true,"respond","","","Argument[this]","ReturnValue","taint","manual"],["android.database","DatabaseUtils",false,"appendSelectionArgs","(String[],String[])","","Argument[0..1].ArrayElement","ReturnValue.ArrayElement","taint","manual"],["android.database","DatabaseUtils",false,"concatenateWhere","(String,String)","","Argument[0..1]","ReturnValue","taint","manual"]]}]}
1 change: 1 addition & 0 deletions java/ql/lib/ext-json/android.database.sqlite.model.json
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
{"extensions":[{"addsTo":{"pack":"codeql/java-all","extensible":"sinkModel"},"data":[["android.database.sqlite","SQLiteDatabase",false,"compileStatement","(String)","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"delete","(String,String,String[])","","Argument[0..1]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"execPerConnectionSQL","(String,Object[])","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"execSQL","(String)","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"execSQL","(String,Object[])","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(String,String[],String,String[],String,String,String)","","Argument[0..2]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(String,String[],String,String[],String,String,String)","","Argument[4..6]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(String,String[],String,String[],String,String,String,String)","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(String,String[],String,String[],String,String,String,String)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(String,String[],String,String[],String,String,String,String)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(String,String[],String,String[],String,String,String,String)","","Argument[4..7]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String)","","Argument[3]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String)","","Argument[5..8]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[3]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"query","(boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[5..8]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String)","","Argument[3]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String)","","Argument[4]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String)","","Argument[6..9]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[3]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[4]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"queryWithFactory","(SQLiteDatabase$CursorFactory,boolean,String,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[6..9]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"rawQuery","(String,String[])","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"rawQuery","(String,String[],CancellationSignal)","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"rawQueryWithFactory","(SQLiteDatabase$CursorFactory,String,String[],String)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"rawQueryWithFactory","(SQLiteDatabase$CursorFactory,String,String[],String,CancellationSignal)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"update","(String,ContentValues,String,String[])","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"update","(String,ContentValues,String,String[])","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"updateWithOnConflict","(String,ContentValues,String,String[],int)","","Argument[0]","sql-injection","manual"],["android.database.sqlite","SQLiteDatabase",false,"updateWithOnConflict","(String,ContentValues,String,String[],int)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"delete","(SQLiteDatabase,String,String[])","","Argument[this]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"delete","(SQLiteDatabase,String,String[])","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"insert","(SQLiteDatabase,ContentValues)","","Argument[this]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String)","","Argument[this]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String)","","Argument[4..6]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String)","","Argument[this]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String)","","Argument[4..7]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[this]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[1]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[2]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"query","(SQLiteDatabase,String[],String,String[],String,String,String,String,CancellationSignal)","","Argument[4..7]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"update","(SQLiteDatabase,ContentValues,String,String[])","","Argument[this]","sql-injection","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"update","(SQLiteDatabase,ContentValues,String,String[])","","Argument[2]","sql-injection","manual"]]},{"addsTo":{"pack":"codeql/java-all","extensible":"summaryModel"},"data":[["android.database.sqlite","SQLiteQueryBuilder",true,"appendColumns","(StringBuilder,String[])","","Argument[1].ArrayElement","Argument[0]","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"appendWhere","(CharSequence)","","Argument[0]","Argument[this]","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"appendWhereStandalone","(CharSequence)","","Argument[0]","Argument[this]","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQuery","(String[],String,String,String,String,String)","","Argument[this]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQuery","(String[],String,String,String,String,String)","","Argument[0].ArrayElement","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQuery","(String[],String,String,String,String,String)","","Argument[1..5]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQuery","(String[],String,String[],String,String,String,String)","","Argument[this]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQuery","(String[],String,String[],String,String,String,String)","","Argument[0].ArrayElement","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQuery","(String[],String,String[],String,String,String,String)","","Argument[1]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQuery","(String[],String,String[],String,String,String,String)","","Argument[3..6]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQueryString","(boolean,String,String[],String,String,String,String,String)","","Argument[1]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQueryString","(boolean,String,String[],String,String,String,String,String)","","Argument[2].ArrayElement","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildQueryString","(boolean,String,String[],String,String,String,String,String)","","Argument[3..7]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionQuery","(String[],String,String)","","Argument[this]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionQuery","(String[],String,String)","","Argument[0].ArrayElement","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionQuery","(String[],String,String)","","Argument[1..2]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String,String)","","Argument[this]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String,String)","","Argument[0]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String,String)","","Argument[1].ArrayElement","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String,String)","","Argument[2].Element","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String,String)","","Argument[4..7]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String[],String,String)","","Argument[this]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String[],String,String)","","Argument[0]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String[],String,String)","","Argument[1].ArrayElement","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String[],String,String)","","Argument[2].Element","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String[],String,String)","","Argument[4..5]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"buildUnionSubQuery","(String,String[],Set,int,String,String,String[],String,String)","","Argument[7..8]","ReturnValue","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"setProjectionMap","(Map)","","Argument[0].MapKey","Argument[this]","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"setProjectionMap","(Map)","","Argument[0].MapValue","Argument[this]","taint","manual"],["android.database.sqlite","SQLiteQueryBuilder",true,"setTables","(String)","","Argument[0]","Argument[this]","taint","manual"]]}]}
Loading
Loading