How to extract all the string constants passed to a logger?

[sbilello]

If we have

1 public class TestJavaLogExtraction {
2  private static final Logger logger = LoggerFactory.getLogger(TestJavaLogExtraction.class);
3  private static String myMessage = "testMessage";
4  
5 public void mylogger() {
6     logger.info("My beautiful log message");
7     logger.info(message);
8  }

Expected result in CSV:

Content,            Location
testMessage,  TestJavaLogExtraction#L7
My beautiful log message, TestJavaLogExtraction#L6

Is it possible vial codeQL or partially possible because it is not able to see the variable replacement at compile time?

[aeisenberg]

Something like this should work for you:

import java

predicate isLoggerCall(MethodAccess ma) {
  ma.getReceiverType().getQualifiedName() = "org.slf4j.Logger" and
  (ma.getMethod().getName() = "info" or ma.getMethod().getName() = "warn" or ...)
}

from MethodAccess ma
where isLoggerCall(ma)
select ma.getArgument(0)

The codeql java extractor hooks into the java compiler and has access to constants before they are inlined. So, you will see actual source code in the results.

[sbilello]

Thank you very much!