- generateBugInstance(boolean) - Method in class com.h3xstream.findsecbugs.injection.InjectionSink
-
Uses immutable values, updated priority and added lines for reporting
- GeolocationDetector - Class in com.h3xstream.findsecbugs.android
-
- GeolocationDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.android.GeolocationDetector
-
- getAllLocations() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- getBugType() - Method in class com.h3xstream.findsecbugs.injection.InjectionPoint
-
- getClassTaintState(String, Taint.State) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getConstantInt(InstructionHandle) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
- getConstantLDC(InstructionHandle, ConstantPoolGen, Class<T>) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
Get the constant value of the given instruction.
- getConstantValue() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns the constant value of the string or char if known
- getContanstBooleanAsString(LinkedList<Instruction>, ConstantPoolGen) - Static method in class com.h3xstream.findsecbugs.common.JspUtils
-
- getCustomConfigFile(String) - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- getCustomConfigFile() - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- getDebugInfo() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Gets the info for debugging merged from all used facts
- getDefaultConstructorConfig(int) - Static method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Constructs a default constructor summary
(modifies 2 stack items with UNKNOWN taint state)
- getDefaultValue() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrameModelingVisitor
-
- getFindSecBugsVersion() - Method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
Getters and setters only
- getInjectableArguments() - Method in class com.h3xstream.findsecbugs.injection.InjectionPoint
-
- getInjectableMethod() - Method in class com.h3xstream.findsecbugs.injection.InjectionPoint
-
- getInjectableParameters(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in interface com.h3xstream.findsecbugs.injection.InjectionSource
-
The implementation should identify method that are susceptible to injection and return
parameters index that can injected.
- getInjectableParameters(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.redirect.RedirectionSource
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.BasicInjectionDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.injection.LegacyInjectionDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.password.HardcodePasswordInMapDetector
-
- getInjectionPoint(InvokeInstruction, ConstantPoolGen, InstructionHandle) - Method in class com.h3xstream.findsecbugs.password.IntuitiveHardcodePasswordDetector
-
- getInjectionSource() - Method in class com.h3xstream.findsecbugs.injection.LegacyInjectionDetector
-
- getInjectionSource() - Method in class com.h3xstream.findsecbugs.injection.redirect.UnvalidatedRedirectDetector
-
- getInstance() - Static method in class com.h3xstream.findsecbugs.FindSecBugsGlobalConfig
-
- getLocation() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfigWithArgumentsAndLocation
-
- getMethod() - Method in class com.h3xstream.findsecbugs.injection.MethodAndSink
-
- getMethodConfig(TaintFrame, MethodDescriptor, String, String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getMethodDescriptor() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintLocation
-
Returns the method of this location
- getMutableStackIndices() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Returns all stack indices modified by method if there are any
- getNonParametricState() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Gets the state influencing the state of this fact if dependant on method
arguments, final state is given by merge of that state and arguments
- getOutputTaint() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Returns the output taint of the method describing the taint transfer
- getParameters() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns the method arguments influencing the taint state of this fact
- getPosition() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintLocation
-
Returns the position in the method of this location
- getPrevInstruction(InstructionHandle, Class<T>) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
Get the previous instruction matching the given type of instruction (second parameter)
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.HttpResponseSplittingDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
-
The default implementation of getPriority() can be overridden if the severity and the confidence for risk
is particular.
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.command.CommandInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.crlf.CrlfLogInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.custom.CustomInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.formatter.FormatStringManipulationDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.http.HttpParameterPollutionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.ldap.LdapInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.sql.AndroidSqlInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.sql.SqlInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationAttributeDetector
-
All or nothing :
If the taint to sink path is found, it is mark as high
If the source is not confirm, it is mark as low.
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationValueDetector
-
=
All or nothing :
If the taint to sink path is found, it is mark as high
If the source is not confirm, it is mark as low.
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.scala.ScalaSensitiveDataExposureDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.scala.XssMvcApiDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.scala.XssTwirlDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.xpath.XPathInjectionDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.xss.XssJspDetector
-
- getPriority(Taint) - Method in class com.h3xstream.findsecbugs.xss.XssServletDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.injection.AbstractInjectionDetector
-
The default implementation of getPriorityFromTaintFrame() can be overridden if the detector must base its
priority on multiple parameters or special conditions like constant values.
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.password.HardcodePasswordInMapDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.password.IntuitiveHardcodePasswordDetector
-
- getPriorityFromTaintFrame(TaintFrame, int) - Method in class com.h3xstream.findsecbugs.scala.XssMvcApiDetector
-
- getPushNumber(InstructionHandle) - Static method in class com.h3xstream.findsecbugs.common.ByteCode
-
Extract the number from a push operation (BIPUSH/SIPUSH).
- getRealInstanceClass() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Finds out the real type of instance matching this fact if possible
- getRealInstanceClassName() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Finds out the real class name of instance matching this fact if possible
- getSink() - Method in class com.h3xstream.findsecbugs.injection.MethodAndSink
-
- getState() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns the taint state of this fact
- getSuperMethodConfig(String, String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getTags() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns all present taint tags for this fact
- getTagsToRemove() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns tags to remove (if this fact acts like a taint derivation spec.)
- getTaintClassConfig(String) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- getTaintedLocations() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Returns locations with taint sources or nodes on path from those
sources, if there are some locations confirmed to be tainted,
only those are returned
- getTaintSource() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintLocation
-
- getTaintState() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
- getTaintState(Taint.State) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
- getUnknownLocations() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- getVariableIndex() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
If known (check first), returns the index of the local variable,
where the value matching this fact is stored
- GoogleApiKeyDetector - Class in com.h3xstream.findsecbugs.password
-
GoogleApi provide code sample to sign URL using provided API key.
- GoogleApiKeyDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.password.GoogleApiKeyDetector
-
- Taint - Class in com.h3xstream.findsecbugs.taintanalysis
-
Representation of taint dataflow facts (dataflow values) for each slot in
TaintFrame
- Taint(Taint.State) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Constructs a new empty instance of Taint with the specified state
- Taint(Taint) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.Taint
-
Creates a hard copy of the specified Taint instance
- Taint.State - Enum in com.h3xstream.findsecbugs.taintanalysis
-
- Taint.Tag - Enum in com.h3xstream.findsecbugs.taintanalysis
-
- TaintAnalysis - Class in com.h3xstream.findsecbugs.taintanalysis
-
Implements taint dataflow operations, in particular meeting facts, transfer
function is delegated to
TaintFrameModelingVisitor
- TaintAnalysis(MethodGen, DepthFirstSearch, MethodDescriptor, TaintConfig) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintAnalysis
-
Constructs analysis for the given method
- TaintClassConfig - Class in com.h3xstream.findsecbugs.taintanalysis
-
Summary of information about a class related to taint analysis,
allows to configure default behavior for return types and type casts.
- TaintClassConfig() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintClassConfig
-
- TaintConfig - Class in com.h3xstream.findsecbugs.taintanalysis
-
Map of taint summaries for all known methods and classes
This class extends HashMap:
The key is the method signature (ie :
org/hibernate/Session.createQuery(Ljava/lang/String;)Lorg/hibernate/Query;)
The value is the behavior of the method
("0" for param index 0 is tainted,
"UNKNOWN" if the method does not become tainted base on the value,
"TAINTED" if the result must be consider unsafe)
- TaintConfig() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintConfig
-
- TaintConfigLoader - Class in com.h3xstream.findsecbugs.taintanalysis
-
Helper class for loading configured taint method and class summaries
- TaintConfigLoader() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintConfigLoader
-
- TaintConfigLoader.TaintConfigReceiver - Interface in com.h3xstream.findsecbugs.taintanalysis
-
Specifies what to do for each loaded summary
- TaintDataflow - Class in com.h3xstream.findsecbugs.taintanalysis
-
Analysis object storing the result of taint analysis on a method
- TaintDataflow(CFG, TaintAnalysis) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintDataflow
-
- TaintDataflowEngine - Class in com.h3xstream.findsecbugs.taintanalysis
-
Requests or creates needed objects and execute taint analysis,
extends taint summaries with analyzed methods
- TaintDataflowEngine() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintDataflowEngine
-
Constructs the engine and loads all configured method summaries
- TaintFrame - Class in com.h3xstream.findsecbugs.taintanalysis
-
Representation of the dataflow value (fact) modeling taint state of local
variables and values on stack, consists of
Taint values
- TaintFrame(int) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
- TaintFrameModelingVisitor - Class in com.h3xstream.findsecbugs.taintanalysis
-
Visitor to make instruction transfer of taint values easier
- TaintFrameModelingVisitor(ConstantPoolGen, MethodDescriptor, TaintConfig) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintFrameModelingVisitor
-
Constructs the object and stores the parameters
- TaintLocation - Class in com.h3xstream.findsecbugs.taintanalysis
-
Global comparable specification of a taint source (or path node) location
- TaintLocation(MethodDescriptor, int, String) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintLocation
-
Constructs a location from the specified method and position inside
- TaintMethodConfig - Class in com.h3xstream.findsecbugs.taintanalysis
-
Summary of information about a method related to taint analysis.
For loading sinks files please see
SinksLoader
- TaintMethodConfig(boolean) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Constructs an empty summary
- TaintMethodConfig(TaintMethodConfig) - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
Creates a copy of the summary (output taint not copied)
- TaintMethodConfigWithArgumentsAndLocation - Class in com.h3xstream.findsecbugs.taintanalysis
-
Summary of information about a taint analysis method with configured arguments and location of the call.
Can be used to fine-tune false-positives in specific classes.
Examples:
javax/servlet/http/HttpServletRequest.getAttribute("applicationConstant"):SAFE@org/apache/jsp/edit_jsp
javax/servlet/http/HttpServletRequest.getAttribute(UNKNOWN):SAFE@org/apache/jsp/constants_jsp
- TaintMethodConfigWithArgumentsAndLocation() - Constructor for class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfigWithArgumentsAndLocation
-
Constructs an empty configured summary
- TaintTypeConfig - Interface in com.h3xstream.findsecbugs.taintanalysis
-
Predecessor for method and class type summary configs
- TapestryEndpointDetector - Class in com.h3xstream.findsecbugs.endpoint
-
Identify endpoints using the web framework Tapestry.
- TapestryEndpointDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.endpoint.TapestryEndpointDetector
-
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.Taint
-
- toString(MethodGen) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
- toString(String[]) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintFrame
-
The toString method are intended for debugging.
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintLocation
-
- toString() - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintMethodConfig
-
- transferInstruction(InstructionHandle, BasicBlock, TaintFrame) - Method in class com.h3xstream.findsecbugs.taintanalysis.TaintAnalysis
-
- TrustBoundaryViolationAttributeDetector - Class in com.h3xstream.findsecbugs.injection.trust
-
Trust Boundary Violation is fancy name to describe tainted value passed directly to session attribute.
- TrustBoundaryViolationAttributeDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationAttributeDetector
-
- TrustBoundaryViolationValueDetector - Class in com.h3xstream.findsecbugs.injection.trust
-
- TrustBoundaryViolationValueDetector(BugReporter) - Constructor for class com.h3xstream.findsecbugs.injection.trust.TrustBoundaryViolationValueDetector
-