Query module ExternallyControlledFormatStringLocal

name
Use of externally-controlled format string from local source
description
Using external input in format strings can lead to exceptions or information leaks.
kind
path-problem
problem.severity
recommendation
precision
medium
id
java/tainted-format-string-local
tags
security external/cwe/cwe-134

Imports

FlowSources

Provides classes representing various flow sources for taint tracking.

PathGraph

Provides the query predicates needed to include a graph in a path-problem query.

StringFormat

Provides classes and predicates for reasoning about string formatting.

java

Provides all default Java QL imports.

Classes