- generateBugInstance(boolean) - Method in class com.h3xstream.findsecbugs.injection.InjectionSink
-
Uses immutable values, updated priority and added lines for reporting
- GeolocationDetector - Class in com.h3xstream.findsecbugs.android
-
- GeolocationDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.android.GeolocationDetector
-
- getAllLocations() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- getArgumentsClasses() - Method in class com.h3xstream.findsecbugs.spring.SignatureParserWithGeneric
-
- getBugType() - Method in class com.h3xstream.findsecbugs.injection.InjectionPoint
-
- getClassMethodSignature() - Method in class com.h3xstream.findsecbugs.injection.MethodAndSink
-
- getClassName() - Method in class com.h3xstream.findsecbugs.injection.ClassMethodSignature
-
- getClassTaintState(String, Taint.State) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getConstantInt(InstructionHandle) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
Extract the integer value from the Instruction ICONST.
- getConstantLDC(InstructionHandle, ConstantPoolGen, Class<T>) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
Get the constant value of the given instruction.
- getConstantOrPotentialValue() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- getConstantValue() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns the constant value of the string or char if known
- getContanstBooleanAsString(LinkedList<Instruction>, ConstantPoolGen) - Static method in class com.h3xstream.findsecbugs.common.JspUtils
-
- getCustomConfigFile() - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- getCustomSinksConfigFile(String) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
This getter will load sink injections.
- getDebugInfo() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Gets the info for debugging merged from all used facts
- getDefaultConstructorConfig(int) - Static method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Constructs a default constructor summary
(modifies 2 stack items with UNKNOWN taint state)
- getDefaultValue() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrameModelingVisitor
-
- getFieldTaintState(String, Taint.State) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getFindSecBugsVersion() - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
Getters and setters only
- getInjectableArguments() - Method in class com.h3xstream.findsecbugs.injection.InjectionPoint
-
- getInjectableMethod() - Method in class com.h3xstream.findsecbugs.injection.InjectionPoint
-
- getInjectableParameters(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in interface com.h3xstream.findsecbugs.injection.InjectionSource
-
The implementation should identify method that are susceptible to injection and return
parameters index that can injected.
- getInjectableParameters(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.redirect.RedirectionSource
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.crypto.cipher.CipherDetector
-
Hook Cipher.getInstance(), KeyGenerator.getInstance()
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.file.SuspiciousCommandDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.BasicInjectionDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.LegacyInjectionDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.kotlin.KotlinHardcodedPasswordEqualsDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.kotlin.KotlinHardcodePasswordInMapDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.password.HardcodedPasswordEqualsDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.password.HardcodePasswordInMapDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.password.HashUnsafeEqualsDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.password.IntuitiveHardcodePasswordDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.PermissiveCORSDetector
-
- getInjectionSource() - Method in class com.h3xstream.findsecbugs.injection.LegacyInjectionDetector
-
- getInjectionSource() - Method in class com.h3xstream.findsecbugs.injection.redirect.UnvalidatedRedirectDetector
-
- getInstance() - Static method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- getLocalVariable(MethodGen, int) - Static method in class com.h3xstream.findsecbugs.common.StackUtils
-
- getLocation() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfigWithArgumentsAndLocation
-
- getMethodConfig(TaintFrame, MethodDescriptor, String, String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getMethodDescriptor() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.TaintLocation
-
Returns the method of this location
- getMethodName() - Method in class com.h3xstream.findsecbugs.injection.ClassMethodSignature
-
- getMutableStackIndices() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Returns all stack indices modified by method if there are any
- getNonParametricState() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Gets the state influencing the state of this fact if dependant on method
arguments, final state is given by merge of that state and arguments
- getNumArgumentsIncludingObjectInstance(InvokeInstruction, ConstantPoolGen) - Static method in class com.h3xstream.findsecbugs.BCELUtil
-
- getOutputTaint() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Returns the output taint of the method describing the taint transfer
- getParameterIndex() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- getParameters() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns the method arguments influencing the taint state of this fact
- getParametersOutputTaints() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Returns computed output taints for method parameters for back-propagation.
Please note the stackIndex is in reverse order compared to the method parameters (and frame local variables),
i.e.
- getParentClassNames(JavaClass) - Static method in class com.h3xstream.findsecbugs.BCELUtil
-
- getPosition() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.TaintLocation
-
Returns the position in the method of this location
- getPotentialValue() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns the constant value that will be set under a specific condition
- getPrevInstruction(InstructionHandle, Class<T>) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
Get the previous instruction matching the given type of instruction (second parameter)
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.file.PathTraversalDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.HttpResponseSplittingDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
-
The default implementation of getPriority() can be overridden if the severity and the confidence for risk
is particular.
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.command.CommandInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.crlf.CrlfLogInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.custom.CustomInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.formatter.FormatStringManipulationDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.http.HttpParameterPollutionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.ldap.LdapInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.redirect.UnvalidatedRedirectDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.smtp.SmtpHeaderInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.sql.AndroidSqlInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.sql.SqlInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationAttributeDetector
-
All or nothing :
If the taint to sink path is found, it is mark as high
If the source is not confirm, it is mark as low.
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationValueDetector
-
=
All or nothing :
If the taint to sink path is found, it is mark as high
If the source is not confirm, it is mark as low.
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.scala.ScalaSensitiveDataExposureDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.scala.XssMvcApiDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.scala.XssTwirlDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.xpath.XPathInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.xss.XssJspDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.xss.XssServletDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.crypto.cipher.CipherDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.file.SuspiciousCommandDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
-
The default implementation of getPriorityFromTaintFrame() can be overridden if the detector must base its
priority on multiple parameters or special conditions like constant values.
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.password.AbstractHardcodedPasswordEqualsDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.password.AbstractHardcodePasswordInMapDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.password.HashUnsafeEqualsDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.password.IntuitiveHardcodePasswordDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.PermissiveCORSDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.scala.XssMvcApiDetector
-
- getPushNumber(InstructionHandle) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
Extract the number from a push operation (BIPUSH/SIPUSH).
- getRealInstanceClass() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Finds out the real type of instance matching this fact if possible
- getRealInstanceClassName() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Finds out the real class name of instance matching this fact if possible
- getReturnClasses() - Method in class com.h3xstream.findsecbugs.spring.SignatureParserWithGeneric
-
- getSignature() - Method in class com.h3xstream.findsecbugs.injection.ClassMethodSignature
-
- getSignatureField() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- getSignatureMethod() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- getSink() - Method in class com.h3xstream.findsecbugs.injection.MethodAndSink
-
- getSlashedClassName(ConstantPoolGen, FieldOrMethod) - Static method in class com.h3xstream.findsecbugs.BCELUtil
-
- getSlashedClassName(JavaClass) - Static method in class com.h3xstream.findsecbugs.BCELUtil
-
- getSources() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- getSourceType() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- getState() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
Auto-generate getter and setter with the template Builder
- getState() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns the taint state of this fact
- getStaticFieldTaint(String, Taint) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getStringArray(OpcodeStack.Item) - Method in class com.h3xstream.findsecbugs.spring.CorsRegistryCORSDetector
-
- getStringFromIdx(int) - Method in class com.h3xstream.findsecbugs.spring.CorsRegistryCORSDetector
-
- getSuperMethodConfig(String, String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getTags() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns all present taint tags for this fact
- getTagsToRemove() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns tags to remove (if this fact acts like a taint derivation spec.)
- getTaintClassConfig(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getTaintedLocations() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns locations with taint sources or nodes on path from those
sources, if there are some locations confirmed to be tainted,
only those are returned
- getTaintState() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
- getTaintState(Taint.State) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
- getTaintState() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFieldConfig
-
- getTaintState(Taint.State) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFieldConfig
-
- getTypeSignature() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
Returns the analyzed method full signature
- getTypeSignature() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFieldConfig
-
Returns the analyzed method full signature
- getTypeSignature() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Returns the analyzed method full signature
- getUnknownLocations() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- getVariableIndex() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
If known (check first), returns the index of the local variable,
where the value matching this fact is stored
- GoogleApiKeyDetector - Class in com.h3xstream.findsecbugs.password
-
GoogleApi provide code sample to sign URL using provided API key.
- GoogleApiKeyDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.password.GoogleApiKeyDetector
-
- SAFE_CONFIG - Static variable in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
- SamlIgnoreCommentsDetector - Class in com.h3xstream.findsecbugs.saml
-
More information on the vulnerability:
https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
https://github.com/spring-projects/spring-security-saml/issues/228
- SamlIgnoreCommentsDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.saml.SamlIgnoreCommentsDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.android.BroadcastDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.android.ExternalFileAccessDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.android.WebViewJavascriptEnabledDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.android.WebViewJavascriptInterfaceDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.android.WorldWritableDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.cookie.CookieReadDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.cookie.PersistentCookieDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.cookie.UrlRewritingDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.CipherWithNoIntegrityDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.ErrorMessageExposureDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.EsapiEncryptorDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.HazelcastSymmetricEncryptionDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.NullCipherDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.UnencryptedServerSocketDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.UnencryptedSocketDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.WeakMessageDigestDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.crypto.WeakTLSDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.csrf.SpringCsrfProtectionDisabledDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.endpoint.ServletEndpointDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.file.FileUploadFilenameDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.injection.script.SpelViewDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.jsp.JspIncludeDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.jsp.JspSpringEvalDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.ldap.LdapEntryPoisoningDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.password.ConstantPasswordDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.PredictableRandomDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.ReDosDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.saml.SamlIgnoreCommentsDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.scala.PlayUnvalidatedRedirectDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.scala.SslDisablerDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.spring.CorsRegistryCORSDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.template.FreemarkerDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.template.VelocityDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.WeakFilenameUtilsMethodDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.xml.EnabledExtensionsInApacheXmlRpcDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.xml.TransformerFactoryDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.xml.XmlDecoderDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.xml.XmlStreamReaderDetector
-
- sawOpcode(int) - Method in class com.h3xstream.findsecbugs.xml.XxeDetector
-
- ScalaSensitiveDataExposureDetector - Class in com.h3xstream.findsecbugs.scala
-
- ScalaSensitiveDataExposureDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.scala.ScalaSensitiveDataExposureDetector
-
- ScriptInjectionDetector - Class in com.h3xstream.findsecbugs.injection.script
-
- ScriptInjectionDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.script.ScriptInjectionDetector
-
- ServletEndpointDetector - Class in com.h3xstream.findsecbugs.endpoint
-
This detector cover the Servlet/HttpServlet API which give access to user input.
- ServletEndpointDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.endpoint.ServletEndpointDetector
-
- setClassName(String) - Method in class com.h3xstream.findsecbugs.injection.ClassMethodSignature
-
- setConstantValue(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- setCustomConfigFile(String) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setDebugInfo(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Sets info for debugging purposes (consumes much memory)
- setDebugOutputTaintConfigs(boolean) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setDebugPrintInstructionVisited(boolean) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setDebugPrintInvocationVisited(boolean) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setDebugTaintState(boolean) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setFindSecBugsVersion(String) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setInjectableMethod(String) - Method in class com.h3xstream.findsecbugs.injection.InjectionPoint
-
- setMethodName(String) - Method in class com.h3xstream.findsecbugs.injection.ClassMethodSignature
-
- setOuputTaint(Taint) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Sets the output taint of the method describing the taint transfer,
copy of the parameter is made and variable index is invalidated
- setParameterIndex(int) - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- setParameterOutputTaint(int, Taint) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Stores output taint for method parameters to be used for back-propagation.
Please note the stackIndex is in reverse order compared to the method parameters (and frame local variables),
i.e.
- setParametersOutputTaintsProcessed(boolean) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
- setPotentialValue(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- setReportPotentialXssWrongContext(boolean) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setSignature(String) - Method in class com.h3xstream.findsecbugs.injection.ClassMethodSignature
-
- setSignatureField(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- setSignatureMethod(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- setSourceType(UnknownSourceType) - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- setTaintedMainArgument(boolean) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setTaintedSystemVariables(boolean) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- setTypeSignature(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
Set full class and method signature for the analyzed method
- setTypeSignature(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFieldConfig
-
Set full class and method signature for the analyzed method
- setTypeSignature(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Set full class and method signature for the analyzed method
- shouldAnalyzeClass(ClassContext) - Method in class com.h3xstream.findsecbugs.injection.AbstractTaintDetector
-
Allow any concrete implementation of taint detector to skip the analysis of certain files.
- shouldAnalyzeClass(ClassContext) - Method in class com.h3xstream.findsecbugs.injection.script.OgnlInjectionDetector
-
- shouldAnalyzeClass(ClassContext) - Method in class com.h3xstream.findsecbugs.xss.XssJspDetector
-
- shouldAnalyzeClass(ClassContext) - Method in class com.h3xstream.findsecbugs.xss.XssServletDetector
-
- SignatureParserWithGeneric - Class in com.h3xstream.findsecbugs.spring
-
Similar to edu.umd.cs.findbugs.ba.SignatureParser
It support the extraction of type in format such as:
- java/util/List<java/lang/String> => java.util.List & java.lang.String
- SignatureParserWithGeneric(String) - Constructor for class com.h3xstream.findsecbugs.spring.SignatureParserWithGeneric
-
- SinksLoader - Class in com.h3xstream.findsecbugs.injection
-
The sanity of the sinks file is crucial (a typo == missed API == missed vulnerability).
- SinksLoader() - Constructor for class com.h3xstream.findsecbugs.injection.SinksLoader
-
- SinksLoader.InjectionPointReceiver - Interface in com.h3xstream.findsecbugs.injection
-
Interface that imitate lambda pattern.
- SmtpHeaderInjectionDetector - Class in com.h3xstream.findsecbugs.injection.smtp
-
- SmtpHeaderInjectionDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.smtp.SmtpHeaderInjectionDetector
-
- SpelViewDetector - Class in com.h3xstream.findsecbugs.injection.script
-
Detect a pattern that was found in multiple Spring components.
- SpelViewDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.script.SpelViewDetector
-
- SpringCsrfProtectionDisabledDetector - Class in com.h3xstream.findsecbugs.csrf
-
Detects the disabling of Spring CSRF protection
- SpringCsrfProtectionDisabledDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.csrf.SpringCsrfProtectionDisabledDetector
-
- SpringCsrfUnrestrictedRequestMappingDetector - Class in com.h3xstream.findsecbugs.csrf
-
Detects Spring CSRF unrestricted RequestMapping
- SpringCsrfUnrestrictedRequestMappingDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.csrf.SpringCsrfUnrestrictedRequestMappingDetector
-
- SpringEntityLeakDetector - Class in com.h3xstream.findsecbugs.spring
-
Detects Persistent Objects leak and mass updation
- SpringEntityLeakDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.spring.SpringEntityLeakDetector
-
- SpringMvcEndpointDetector - Class in com.h3xstream.findsecbugs.endpoint
-
- SpringMvcEndpointDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.endpoint.SpringMvcEndpointDetector
-
- SpringUnvalidatedRedirectDetector - Class in com.h3xstream.findsecbugs.spring
-
- SpringUnvalidatedRedirectDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.spring.SpringUnvalidatedRedirectDetector
-
- SqlInjectionDetector - Class in com.h3xstream.findsecbugs.injection.sql
-
- SqlInjectionDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.sql.SqlInjectionDetector
-
- SslDisablerDetector - Class in com.h3xstream.findsecbugs.scala
-
- SslDisablerDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.scala.SslDisablerDetector
-
- SSRFDetector - Class in com.h3xstream.findsecbugs.injection.ssrf
-
- SSRFDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.ssrf.SSRFDetector
-
- StackUtils - Class in com.h3xstream.findsecbugs.common
-
- StackUtils() - Constructor for class com.h3xstream.findsecbugs.common.StackUtils
-
- StaticIvDetector - Class in com.h3xstream.findsecbugs.crypto
-
The main goal of the this detector is to find encryption being done with static initialization vector (IV).
- StaticIvDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.crypto.StaticIvDetector
-
- StdXmlTransformDetector - Class in com.h3xstream.findsecbugs.xml
-
Detect XSLT transformation.
- StdXmlTransformDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.xml.StdXmlTransformDetector
-
- STRUTS1_ENDPOINT_TYPE - Static variable in class com.h3xstream.findsecbugs.endpoint.Struts1EndpointDetector
-
- Struts1EndpointDetector - Class in com.h3xstream.findsecbugs.endpoint
-
- Struts1EndpointDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.endpoint.Struts1EndpointDetector
-
- Struts2EndpointDetector - Class in com.h3xstream.findsecbugs.endpoint
-
- Struts2EndpointDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.endpoint.Struts2EndpointDetector
-
- STRUTS_UTILITY_CLASSES - Static variable in class com.h3xstream.findsecbugs.injection.script.OgnlInjectionDetector
-
The utility class from Struts2 are skip to avoid false positive.
- StrutsValidatorFormDetector - Class in com.h3xstream.findsecbugs
-
- StrutsValidatorFormDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.StrutsValidatorFormDetector
-
- SuspiciousCommandDetector - Class in com.h3xstream.findsecbugs.file
-
- SuspiciousCommandDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.file.SuspiciousCommandDetector
-
- Taint - Class in com.h3xstream.findsecbugs.taintanalysis
-
Representation of taint dataflow facts (dataflow values) for each slot in
TaintFrame
- Taint(Taint.State) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Constructs a new empty instance of Taint with the specified state
- Taint(Taint) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Creates a hard copy of the specified Taint instance
- Taint.State - Enum in com.h3xstream.findsecbugs.taintanalysis
-
- Taint.Tag - Enum in com.h3xstream.findsecbugs.taintanalysis
-
- TaintAnalysis - Class in com.h3xstream.findsecbugs.taintanalysis
-
Implements taint dataflow operations, in particular meeting facts, transfer
function is delegated to
TaintFrameModelingVisitor
- TaintAnalysis(MethodGen, DepthFirstSearch, MethodDescriptor, TaintConfig, List<TaintFrameAdditionalVisitor>) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintAnalysis
-
Constructs analysis for the given method
- TaintClassConfig - Class in com.h3xstream.findsecbugs.taintanalysis
-
Summary of information about a class related to taint analysis,
allows to configure default behavior for return types and type casts.
- TaintClassConfig() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
- TaintConfig - Class in com.h3xstream.findsecbugs.taintanalysis
-
Map of taint summaries for all known methods and classes
This class extends HashMap:
The key is the method signature (ie :
org/hibernate/Session.createQuery(Ljava/lang/String;)Lorg/hibernate/Query;)
The value is the behavior of the method
("0" for param index 0 is tainted,
"UNKNOWN" if the method does not become tainted base on the value,
"TAINTED" if the result must be consider unsafe)
- TaintConfig() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- TaintConfigLoader - Class in com.h3xstream.findsecbugs.taintanalysis
-
Helper class for loading configured taint method and class summaries
- TaintConfigLoader() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintConfigLoader
-
- TaintConfigLoader.TaintConfigReceiver - Interface in com.h3xstream.findsecbugs.taintanalysis
-
Specifies what to do for each loaded summary
- TaintDataflow - Class in com.h3xstream.findsecbugs.taintanalysis
-
Analysis object storing the result of taint analysis on a method
- TaintDataflow(CFG, TaintAnalysis) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintDataflow
-
- TaintDataflowEngine - Class in com.h3xstream.findsecbugs.taintanalysis
-
Requests or creates needed objects and execute taint analysis,
extends taint summaries with analyzed methods
- TaintDataflowEngine() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintDataflowEngine
-
Constructs the engine and loads all configured method summaries
- TaintFieldConfig - Class in com.h3xstream.findsecbugs.taintanalysis
-
Summary of information about a class field related to taint analysis,
allows to configure default behavior for class fields.
- TaintFieldConfig() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintFieldConfig
-
- TaintFrame - Class in com.h3xstream.findsecbugs.taintanalysis
-
Representation of the dataflow value (fact) modeling taint state of local
variables and values on stack, consists of
Taint values
- TaintFrame(int) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
- TaintFrameAdditionalVisitor - Interface in com.h3xstream.findsecbugs.taintanalysis
-
- TaintFrameModelingVisitor - Class in com.h3xstream.findsecbugs.taintanalysis
-
Visitor to make instruction transfer of taint values easier
- TaintFrameModelingVisitor(ConstantPoolGen, MethodDescriptor, TaintConfig, List<TaintFrameAdditionalVisitor>, MethodGen) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintFrameModelingVisitor
-
Constructs the object and stores the parameters
- TaintLocation - Class in com.h3xstream.findsecbugs.taintanalysis.data
-
Global comparable specification of a taint source (or path node) location
- TaintLocation(MethodDescriptor, int) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.data.TaintLocation
-
Constructs a location from the specified method and position inside
- TaintMethodConfig - Class in com.h3xstream.findsecbugs.taintanalysis
-
Summary of information about a method related to taint analysis.
For loading sinks files please see
SinksLoader
- TaintMethodConfig(boolean) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Constructs an empty summary
- TaintMethodConfig(TaintMethodConfig) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Creates a copy of the summary (output taint and output parameters taint not copied)
- TaintMethodConfigWithArgumentsAndLocation - Class in com.h3xstream.findsecbugs.taintanalysis
-
Summary of information about a taint analysis method with configured arguments and location of the call.
Can be used to fine-tune false-positives in specific classes.
Examples:
javax/servlet/http/HttpServletRequest.getAttribute("applicationConstant"):SAFE@org/apache/jsp/edit_jsp
javax/servlet/http/HttpServletRequest.getAttribute(UNKNOWN):SAFE@org/apache/jsp/constants_jsp
- TaintMethodConfigWithArgumentsAndLocation() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfigWithArgumentsAndLocation
-
Constructs an empty configured summary
- TaintTypeConfig - Interface in com.h3xstream.findsecbugs.taintanalysis
-
Predecessor for method and class type summary configs
- TaintUtil - Class in com.h3xstream.findsecbugs.common
-
- TaintUtil() - Constructor for class com.h3xstream.findsecbugs.common.TaintUtil
-
- TapestryEndpointDetector - Class in com.h3xstream.findsecbugs.endpoint
-
Identify endpoints using the web framework Tapestry.
- TapestryEndpointDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.endpoint.TapestryEndpointDetector
-
- TDesUsageDetector - Class in com.h3xstream.findsecbugs.crypto.cipher
-
Cipher identify
DESede/CBC/NoPadding (168 bit)
DESede/CBC/PKCS5Padding (168 bit)
DESede/ECB/NoPadding (168 bit)
DESede/ECB/PKCS5Padding (168 bit)
Ref:
Partial list of ciphers
- TDesUsageDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.crypto.cipher.TDesUsageDetector
-
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.TaintLocation
-
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.data.UnknownSource
-
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- toString(MethodGen) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
- toString(String[]) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
The toString method are intended for debugging.
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
- transferInstruction(InstructionHandle, BasicBlock, TaintFrame) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintAnalysis
-
- TransformerFactoryDetector - Class in com.h3xstream.findsecbugs.xml
-
Currently the detector look for a specific code sequence.
- TransformerFactoryDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.xml.TransformerFactoryDetector
-
- TrustBoundaryViolationAttributeDetector - Class in com.h3xstream.findsecbugs.injection.trust
-
Trust Boundary Violation is fancy name to describe tainted value passed directly to session attribute.
- TrustBoundaryViolationAttributeDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationAttributeDetector
-
- TrustBoundaryViolationValueDetector - Class in com.h3xstream.findsecbugs.injection.trust
-
- TrustBoundaryViolationValueDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationValueDetector
-