Adjust validation models to reflect array parameters

Author: Sauyon Lee

java/ql/src/semmle/code/java/frameworks/spring/SpringValidation.qll

@@ -3,7 +3,7 @@
 import java
 private import semmle.code.java.dataflow.ExternalFlow
 
-private class SpringErrorModel extends SummaryModelCsv {
+private class SpringValidationErrorModel extends SummaryModelCsv {
   override predicate row(string row) {
     row =
       [
@@ -13,10 +13,13 @@ private class SpringErrorModel extends SummaryModelCsv {
         "org.springframework.validation;Errors;true;getFieldErrors;;;Argument[-1];ReturnValue;taint",
         "org.springframework.validation;Errors;true;getGlobalError;;;Argument[-1];ReturnValue;taint",
         "org.springframework.validation;Errors;true;getGlobalErrors;;;Argument[-1];ReturnValue;taint",
-        "org.springframework.validation;Errors;true;reject;;;Argument[0..2];Argument[-1];taint",
-        "org.springframework.validation;Errors;true;rejectValue;;;Argument[1..3];Argument[-1];taint",
-        "org.springframework.validation;Errors;true;reject;;;Argument[0..2];Argument[-1];taint",
-        "org.springframework.validation;Errors;true;rejectValue;;;Argument[1..3];Argument[-1];taint"
+        "org.springframework.validation;Errors;true;reject;;;Argument[0];Argument[-1];taint",
+        "org.springframework.validation;Errors;true;reject;;;ArrayElement of Argument[1];Argument[-1];taint",
+        "org.springframework.validation;Errors;true;reject;;;Argument[2];Argument[-1];taint",
+        "org.springframework.validation;Errors;true;rejectValue;;;Argument[1];Argument[-1];taint",
+        "org.springframework.validation;Errors;true;rejectValue;;;Argument[3];Argument[-1];taint",
+        "org.springframework.validation;Errors;true;rejectValue;(java.lang.String,java.lang.String,java.lang.Object[],java.lang.String);;ArrayElement of Argument[2];Argument[-1];taint",
+        "org.springframework.validation;Errors;true;rejectValue;(java.lang.String,java.lang.String,java.lang.String);;Argument[2];Argument[-1];taint"
       ]
   }
 }