We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 548721a commit 37b051aCopy full SHA for 37b051a
java/ql/lib/semmle/code/java/frameworks/MyBatis.qll
@@ -125,7 +125,7 @@ class MyBatisInjectionSink extends DataFlow::Node {
125
a.getType() instanceof MyBatisProvider and
126
m.getDeclaringType() = a.getValue(["type", "value"]).(TypeLiteral).getTypeName().getType() and
127
m.hasName(a.getValue("method").(StringLiteral).getValue()) and
128
- this.getEnclosingCallable() = m.getBody().getAStmt().(ReturnStmt).getEnclosingCallable()
+ exists(ReturnStmt ret | this.asExpr() = ret.getResult() and ret.getEnclosingCallable() = m)
129
)
130
}
131
0 commit comments