openide/jvm/jvm-analysis-java-tests/testData/codeInspection/sourceToSinkFlow/Simple.java

package org.checkerframework.checker.tainting.qual;

import java.lang.annotation.ElementType;
import java.lang.annotation.Target;

public class Simple {
  
  void simple() {
    String s = source();
    sink(<warning descr="Unsafe string is passed to safe method">s</warning>);
  }
  
  void alias() {
    String s1 = source();
    String s = s1;
    sink(<warning descr="Unsafe string is passed to safe method">s</warning>);
  }
  
  void unknown() {
    String s = foo();
    sink(<warning descr="Unknown string is passed to safe method">s</warning>);
  }
  
  void literalOnly() {
    String s = null;
    s = "safe";
    sink(s);
  }
  
  void safeCall() {
    String s = "safe";
    s = safe();
    sink(s);
  }
  
  void sourceCallToSink() {
    sink(<warning descr="Unsafe string is passed to safe method">source()</warning>);
  }
  
  void safeCallToSink() {
    sink(safe());
  }
  
  void sourceFromClass() {
    String s = (new WithSourceParent()).source();
    sink(<warning descr="Unsafe string is passed to safe method">s</warning>);
  }
  
  void sourceFromChildClass() {
    WithSourceChild child = new WithSourceChild();
    String s = child.source();
    sink(<warning descr="Unsafe string is passed to safe method">s</warning>);
  }

  void withParenthesis() {
    String s1 = (source());
    s1 = (foo());
    String s = (s1);
    sink((<warning descr="Unsafe string is passed to safe method">s</warning>));
  }
  
  @Untainted String unsafeReturn() {
    return <warning descr="Unsafe string is passed to safe method">source()</warning>;
  }
  
  void sourceToSafeString() {
    @Untainted String s = "safe";
    s = <warning descr="Unsafe string is passed to safe method">source()</warning>;
  }

  void unsafeConcat() {
    @Tainted String s = source();
    String s1 = "safe";
    String s2 = "safe2";
    sink(s1 + <warning descr="Unsafe string is passed to safe method">s</warning> + s2);
  }

  void unsafeTernary(boolean b) {
    @Tainted String s = source();
    sink(b ? <warning descr="Unsafe string is passed to safe method">s</warning> : null);
  }
  
  String callSource() {
    return source();
  }
  
  String foo() {
    return "some";
  }
  
  @Untainted
  String safe() {
    return "safe";
  }
  
  @Tainted
  String source() {
    return "tainted";
  }
  
  void sink(@Untainted String s1) {}

  class WithSourceParent {
    @Tainted
    String source() {
      return "tainted";
    }
  }

  class WithSourceChild extends WithSourceParent {
    @Override
    String source() {
      return super.source();
    }
  }
}