| Package | Description |
|---|---|
| com.h3xstream.findsecbugs.taintanalysis |
| Modifier and Type | Class and Description |
|---|---|
class |
TaintMethodConfigWithArgumentsAndLocation
Summary of information about a taint analysis method with configured arguments and location of the call.
Can be used to fine-tune false-positives in specific classes. Examples: javax/servlet/http/HttpServletRequest.getAttribute("applicationConstant"):SAFE@org/apache/jsp/edit_jspjavax/servlet/http/HttpServletRequest.getAttribute(UNKNOWN):SAFE@org/apache/jsp/constants_jsp |
| Modifier and Type | Field and Description |
|---|---|
static TaintMethodConfig |
TaintMethodConfig.SAFE_CONFIG |
| Modifier and Type | Method and Description |
|---|---|
static TaintMethodConfig |
TaintMethodConfig.getDefaultConstructorConfig(int stackSize)
Constructs a default constructor summary
(modifies 2 stack items with UNKNOWN taint state)
|
TaintMethodConfig |
TaintConfig.getMethodConfig(TaintFrame frame,
edu.umd.cs.findbugs.classfile.MethodDescriptor methodDescriptor,
String className,
String methodId) |
TaintMethodConfig |
TaintConfig.getSuperMethodConfig(String className,
String methodId) |
TaintMethodConfig |
TaintMethodConfig.load(String taintConfig)
Loads method summary from String.
|
| Constructor and Description |
|---|
TaintMethodConfig(TaintMethodConfig config)
Creates a copy of the summary (output taint not copied)
|
Copyright © 2017. All rights reserved.