Make MyBatisProviderStep an AdditionalValueStep

jorgectf · jorgectf · commit 8482c0195955 · 2022-03-14T21:35:26.000+01:00
diff --git a/java/ql/lib/semmle/code/java/frameworks/MyBatis.qll b/java/ql/lib/semmle/code/java/frameworks/MyBatis.qll
@@ -138,7 +138,7 @@ class MyBatisInjectionSink extends DataFlow::Node {
   }
 }
 
-private class MyBatisProviderStep extends TaintTracking::AdditionalTaintStep {
+private class MyBatisProviderStep extends TaintTracking::AdditionalValueStep {
   override predicate step(DataFlow::Node n1, DataFlow::Node n2) {
     exists(MethodAccess ma, Annotation a, Method providerMethod |
       exists(int i |

Original file line number	Diff line number	Diff line change
`@@ -138,7 +138,7 @@ class MyBatisInjectionSink extends DataFlow::Node {`
`138`	`138`	`}`
`139`	`139`	`}`
`140`	`140`
`141`		`-private class MyBatisProviderStep extends TaintTracking::AdditionalTaintStep {`
	`141`	`+private class MyBatisProviderStep extends TaintTracking::AdditionalValueStep {`
`142`	`142`	`override predicate step(DataFlow::Node n1, DataFlow::Node n2) {`
`143`	`143`	`exists(MethodAccess ma, Annotation a, Method providerMethod \|`
`144`	`144`	`exists(int i \|`