com.h3xstream.findsecbugs.injection

Interface InjectionSource

All Known Implementing Classes:

RedirectionSource

public interface InjectionSource

Method Summary

Modifier and Type	Method and Description
InjectionPoint	getInjectableParameters(org.apache.bcel.generic.InvokeInstruction ins, org.apache.bcel.generic.ConstantPoolGen cpg, org.apache.bcel.generic.InstructionHandle insHandle) The implementation should identify method that are susceptible to injection and return parameters index that can injected.

Method Detail

getInjectableParameters

InjectionPoint getInjectableParameters(org.apache.bcel.generic.InvokeInstruction ins,
                                       org.apache.bcel.generic.ConstantPoolGen cpg,
                                       org.apache.bcel.generic.InstructionHandle insHandle)

The implementation should identify method that are susceptible to injection and return parameters index that can injected.

Parameters:

ins - Instruction visit

cpg - ConstantPool (needed to find the class name and method name associate to instruction)

insHandle - instruction handle (needed to look at the instruction around the current instruction)

Returns:

Precision about the parameter at risk for the current instruction visit. (InjectionPoint.NONE when the method is safe)