com.h3xstream.findsecbugs.injection.command
Class CommandInjectionDetector

java.lang.Object
  com.h3xstream.findsecbugs.injection.TaintDetector
      com.h3xstream.findsecbugs.injection.command.CommandInjectionDetector

All Implemented Interfaces:

edu.umd.cs.findbugs.Detector, edu.umd.cs.findbugs.Priorities

public class CommandInjectionDetector
extends TaintDetector

Detect the usage of Runtime and ProcessBuilder to execute system command.

See Also:

ProcessBuilder, Runtime, CommandInjectionSource

Field Summary

Fields inherited from interface edu.umd.cs.findbugs.Priorities

EXP_PRIORITY, HIGH_PRIORITY, IGNORE_PRIORITY, LOW_PRIORITY, NORMAL_PRIORITY

Constructor Summary

CommandInjectionDetector(edu.umd.cs.findbugs.BugReporter bugReporter)

Method Summary

InjectionSource[]

getInjectionSource()

Methods inherited from class com.h3xstream.findsecbugs.injection.TaintDetector

report, visitClassContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CommandInjectionDetector

public CommandInjectionDetector(edu.umd.cs.findbugs.BugReporter bugReporter)

Method Detail

getInjectionSource

public InjectionSource[] getInjectionSource()

Specified by:

getInjectionSource in class TaintDetector