CTF 4: CodeQL and Chill- Step 1.1 #132
Answered
Replies
|
Read carefully again:
If my hint is not helpful, I can give further hints or completely explain the problem in your solution. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi everyone, I am trying to resolve the step 1.1 of the challenge, reported below:
The sources of tainted data are the bean properties that go through constraint validation. In the code, these can be found as the first parameter of ConstraintValidator.isValid(...).
Write a CodeQL predicate that identifies these call arguments:
predicate isSource(DataFlow::Node source) { / TODO describe source / }
To test your predicate, use the Quick Evaluation command (Right-click > CodeQL: Quick Evaluation). You should get 6 results.
I get the following solution:

but the result isn't the expected:

I tried different solutions, but all of them provide the same result.
May someone please tell me where is the problem with my solution?