com.h3xstream.findsecbugs.injection.redirect

Class RedirectionSource

java.lang.Object

com.h3xstream.findsecbugs.injection.redirect.RedirectionSource

All Implemented Interfaces:

InjectionSource

public class RedirectionSource
extends Object
implements InjectionSource

Constructor Summary

Constructors

Constructor and Description
RedirectionSource()

Method Summary

Modifier and Type	Method and Description
InjectionPoint	getInjectableParameters(org.apache.bcel.generic.InvokeInstruction ins, org.apache.bcel.generic.ConstantPoolGen cpg, org.apache.bcel.generic.InstructionHandle insHandle) The implementation should identify method that are susceptible to injection and return parameters index that can injected.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RedirectionSource

public RedirectionSource()

Method Detail

getInjectableParameters

public InjectionPoint getInjectableParameters(org.apache.bcel.generic.InvokeInstruction ins,
                                              org.apache.bcel.generic.ConstantPoolGen cpg,
                                              org.apache.bcel.generic.InstructionHandle insHandle)

Description copied from interface: InjectionSource

The implementation should identify method that are susceptible to injection and return parameters index that can injected.

Specified by:

getInjectableParameters in interface InjectionSource

Parameters:

ins - Instruction visit

cpg - ConstantPool (needed to find the class name and method name associate to instruction)

insHandle - instruction handle (needed to look at the instruction around the current instruction)

Returns:

Precision about the parameter at risk for the current instruction visit. (InjectionPoint.NONE when the method is safe)