Java: Add test cases for AbstractMessageSource.getMessage() methods

Author: Sebastian Bauersfeld

java/ql/test/library-tests/frameworks/spring/context/Test.java

@@ -0,0 +1,20 @@
+import org.springframework.context.support.StaticMessageSource;
+import java.util.Locale;
+
+public class Test {
+
+	public static String code = "mycode";
+	public static Locale locale = Locale.US;
+
+	String taint() { return "tainted"; }
+
+	void sink(Object o) {}
+
+	public void test() {
+		StaticMessageSource sms = new StaticMessageSource();
+		sms.addMessage(code, locale, "hello {0}");
+		sink(sms.getMessage(code, new String[]{ taint() }, locale)); // $hasTaintFlow
+		sink(sms.getMessage(code, new String[]{ taint() }, "", locale)); // $hasTaintFlow
+		sink(sms.getMessage(code, null, taint(), locale)); // $hasTaintFlow
+	}
+}

java/ql/test/library-tests/frameworks/spring/context/flow.expected

@@ -0,0 +1,2 @@
+import java
+import TestUtilities.InlineFlowTest

java/ql/test/library-tests/frameworks/spring/context/flow.ql

@@ -0,0 +1 @@
+//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../stubs/springframework-5.3.8:${testdir}/../../../../stubs/apache-commons-logging-1.2/