@@ -9,31 +9,31 @@ private import semmle.code.java.security.ArbitraryApkInstallation
99 * A dataflow configuration for flow from an external source of an APK to the
1010 * `setData[AndType][AndNormalize]` method of an intent.
1111 */
12- private module ApkConf implements DataFlow:: ConfigSig {
12+ private module ApkInstallationConfiguration implements DataFlow:: ConfigSig {
1313 predicate isSource ( DataFlow:: Node node ) { node instanceof ExternalApkSource }
1414
1515 predicate isSink ( DataFlow:: Node node ) {
1616 exists ( MethodAccess ma |
1717 ma .getMethod ( ) instanceof SetDataMethod and
1818 ma .getArgument ( 0 ) = node .asExpr ( ) and
1919 (
20- PackageArchiveMimeTypeConfiguration :: hasFlowToExpr ( ma .getQualifier ( ) )
20+ PackageArchiveMimeTypeFlow :: hasFlowToExpr ( ma .getQualifier ( ) )
2121 or
22- InstallPackageActionConfiguration :: hasFlowToExpr ( ma .getQualifier ( ) )
22+ InstallPackageActionFlow :: hasFlowToExpr ( ma .getQualifier ( ) )
2323 )
2424 )
2525 }
2626}
2727
28- module ApkConfiguration = DataFlow:: Make< ApkConf > ;
28+ module ApkInstallationFlow = DataFlow:: Make< ApkInstallationConfiguration > ;
2929
3030/**
3131 * A dataflow configuration tracking the flow from the `android.content.Intent.ACTION_INSTALL_PACKAGE`
3232 * constant to either the constructor of an intent or the `setAction` method of an intent.
3333 *
3434 * This is used to track if an intent is used to install an APK.
3535 */
36- private module InstallPackageActionConfig implements DataFlow:: StateConfigSig {
36+ private module InstallPackageActionConfiguration implements DataFlow:: StateConfigSig {
3737 class FlowState = string ;
3838
3939 predicate isSource ( DataFlow:: Node source , FlowState state ) {
@@ -69,15 +69,15 @@ private module InstallPackageActionConfig implements DataFlow::StateConfigSig {
6969 predicate isBarrier ( DataFlow:: Node node , FlowState state ) { none ( ) }
7070}
7171
72- private module InstallPackageActionConfiguration =
73- TaintTracking:: MakeWithState< InstallPackageActionConfig > ;
72+ private module InstallPackageActionFlow =
73+ TaintTracking:: MakeWithState< InstallPackageActionConfiguration > ;
7474
7575/**
7676 * A dataflow configuration tracking the flow of the Android APK MIME type to
7777 * the `setType` or `setTypeAndNormalize` method of an intent, followed by a call
7878 * to `setData[AndType][AndNormalize]`.
7979 */
80- private module PackageArchiveMimeTypeConfig implements DataFlow:: StateConfigSig {
80+ private module PackageArchiveMimeTypeConfiguration implements DataFlow:: StateConfigSig {
8181 class FlowState = string ;
8282
8383 predicate isSource ( DataFlow:: Node node , FlowState state ) {
@@ -111,5 +111,5 @@ private module PackageArchiveMimeTypeConfig implements DataFlow::StateConfigSig
111111 predicate isBarrier ( DataFlow:: Node node , FlowState state ) { none ( ) }
112112}
113113
114- private module PackageArchiveMimeTypeConfiguration =
115- TaintTracking:: MakeWithState< PackageArchiveMimeTypeConfig > ;
114+ private module PackageArchiveMimeTypeFlow =
115+ TaintTracking:: MakeWithState< PackageArchiveMimeTypeConfiguration > ;
0 commit comments