Query module ArithmeticTaintedLocal

name
Local-user-controlled data in arithmetic expression
description
Arithmetic operations on user-controlled data that is not validated can cause overflows.
kind
path-problem
problem.severity
recommendation
precision
medium
id
java/tainted-arithmetic-local
tags
security external/cwe/cwe-190 external/cwe/cwe-191

Imports

ArithmeticCommon
FlowSources

Provides classes representing various flow sources for taint tracking.

PathGraph

Provides the query predicates needed to include a graph in a path-problem query.

java

Provides all default Java QL imports.

Predicates

Classes