Stub interface for Apache Commons Codec Hex find-sec-bugs#291

h3xstream · Aug 7, 2017 · f096090 · f096090
1 parent a1a27ac
commit f096090
Show file tree

Hide file tree

Showing 2 changed files with 46 additions and 4 deletions.
diff --git a/plugin-deps/src/main/java/org/apache/commons/codec/binary/Hex.java b/plugin-deps/src/main/java/org/apache/commons/codec/binary/Hex.java
@@ -1,7 +1,48 @@
 package org.apache.commons.codec.binary;
 
-/**
- * Created by parteau on 8/7/2017.
- */
+import java.nio.ByteBuffer;
+
 public class Hex {
+
+    public static char[] encodeHex(final byte[] data) {
+        return null;
+    }
+
+    public static char[] encodeHex(final ByteBuffer data) {
+        return null;
+    }
+
+    public static char[] encodeHex(final byte[] data, final boolean toLowerCase) {
+        return null;
+    }
+
+    public static char[] encodeHex(final ByteBuffer data, final boolean toLowerCase) {
+        return null;
+    }
+
+    public static String encodeHexString(final byte[] data) {
+        return null;
+    }
+
+    public static String encodeHexString(final byte[] data, boolean toLowerCase) {
+        return null;
+    }
+
+    public static String encodeHexString(final ByteBuffer data) {
+        return null;
+    }
+
+    public static String encodeHexString(final ByteBuffer data, boolean toLowerCase) {
+        return null;
+    }
+
+    public byte[] encode(final byte[] array) {
+        return null;
+    }
+
+    public byte[] encode(final ByteBuffer array) {
+        return null;
+    }
+
+
 }
diff --git a/plugin/src/main/resources/taint-config/java-lang.txt b/plugin/src/main/resources/taint-config/java-lang.txt
@@ -1,6 +1,5 @@
 -- Following classes are immutable
 Ljava/lang/String;:#IMMUTABLE
-Ljava/math/BigInteger;:#IMMUTABLE
 Ljava/io/File;:#IMMUTABLE
 Ljava/util/Locale;:#IMMUTABLE
 Ljava/net/Inet4Address;:#IMMUTABLE
@@ -18,6 +17,7 @@ Ljava/lang/Integer;:SAFE#IMMUTABLE
 Ljava/lang/Long;:SAFE#IMMUTABLE
 Ljava/lang/Byte;:SAFE#IMMUTABLE
 Ljava/lang/Short;:SAFE#IMMUTABLE
+Ljava/math/BigInteger;:SAFE#IMMUTABLE
 Ljava/math/BigDecimal;:SAFE#IMMUTABLE
 Ljava/util/Date;:SAFE#IMMUTABLE
 Ljava/sql/Time;:SAFE#IMMUTABLE
@@ -181,6 +181,7 @@ java/lang/String.valueOf(F)Ljava/lang/String;:SAFE
 java/lang/String.valueOf(I)Ljava/lang/String;:SAFE
 java/lang/String.valueOf(J)Ljava/lang/String;:SAFE
 java/lang/String.valueOf(Ljava/lang/Object;)Ljava/lang/String;:0
+java/lang/String.valueOf([C)Ljava/lang/String;:0
 
 java/util/Arrays.toString([Ljava/lang/Object;)Ljava/lang/String;:0