Query module ExternallyControlledFormatString

name
Use of externally-controlled format string
description
Using external input in format strings can lead to exceptions or information leaks.
kind
path-problem
problem.severity
error
precision
high
id
java/tainted-format-string
tags
security external/cwe/cwe-134

Imports

FlowSources

Provides classes representing various flow sources for taint tracking.

PathGraph

Provides the query predicates needed to include a graph in a path-problem query.

StringFormat

Provides classes and predicates for reasoning about string formatting.

java

Provides all default Java QL imports.

Classes