We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent e442e50 commit 695e77aCopy full SHA for 695e77a
java/ql/lib/semmle/code/java/security/UnsafeCertTrust.qll
@@ -69,11 +69,7 @@ private class SslEngineServerMode extends SslUnsafeCertTrustSanitizer {
69
* or the qualifier of `createSocket` is an instance of `SSLSocketFactory`.
70
*/
71
private predicate isSslSocket(MethodAccess createSocket) {
72
- exists(Variable ssl, CastExpr ce |
73
- ce.getExpr() = createSocket and
74
- ce.getControlFlowNode().getASuccessor().(VariableAssign).getDestVar() = ssl and
75
- ssl.getType() instanceof SSLSocket
76
- )
+ createSocket = any(CastExpr ce | ce.getType() instanceof SSLSocket).getExpr()
77
or
78
createSocket.getQualifier().getType().(RefType).getASupertype*() instanceof SSLSocketFactory
79
}
0 commit comments