Uses of Class
com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Packages that use TaintMethodConfig Package Description com.h3xstream.findsecbugs.taintanalysis -
-
Uses of TaintMethodConfig in com.h3xstream.findsecbugs.taintanalysis
Subclasses of TaintMethodConfig in com.h3xstream.findsecbugs.taintanalysis Modifier and Type Class Description classTaintMethodConfigWithArgumentsAndLocationSummary of information about a taint analysis method with configured arguments and location of the call.
Can be used to fine-tune false-positives in specific classes.
Examples:
javax/servlet/http/HttpServletRequest.getAttribute("applicationConstant"):SAFE@org/apache/jsp/edit_jsp
javax/servlet/http/HttpServletRequest.getAttribute(UNKNOWN):SAFE@org/apache/jsp/constants_jspFields in com.h3xstream.findsecbugs.taintanalysis declared as TaintMethodConfig Modifier and Type Field Description static TaintMethodConfigTaintMethodConfig. SAFE_CONFIGMethods in com.h3xstream.findsecbugs.taintanalysis that return TaintMethodConfig Modifier and Type Method Description static TaintMethodConfigTaintMethodConfig. getDefaultConstructorConfig(int stackSize)Constructs a default constructor summary (modifies 2 stack items with UNKNOWN taint state)TaintMethodConfigTaintConfig. getMethodConfig(TaintFrame frame, edu.umd.cs.findbugs.classfile.MethodDescriptor methodDescriptor, String className, String methodId)TaintMethodConfigTaintConfig. getSuperMethodConfig(String className, String methodId)TaintMethodConfigTaintMethodConfig. load(String taintConfig)Loads method summary from String.Constructors in com.h3xstream.findsecbugs.taintanalysis with parameters of type TaintMethodConfig Constructor Description TaintMethodConfig(TaintMethodConfig config)Creates a copy of the summary (output taint and output parameters taint not copied)
-