@@ -180,15 +180,13 @@ private void checkForAccessControlIncompleteness(CheckToolWithAnalysisResults<
180180 if (functionSignatureByStatement .equals ("no-function-found" ))
181181 continue ;
182182
183- ProgramCounterLocation sinkLocation = (ProgramCounterLocation ) sink .getLocation ();
184-
185183 if (isTop ) {
186184 log .warn (
187185 "[POSSIBLE] Access Control Incompleteness vulnerability at pc {} (line {}) coming from pc {} (line {})." ,
188- sinkLocation .getPc (),
189- sinkLocation .getSourceCodeLine (),
190186 ((ProgramCounterLocation ) sink .getLocation ()).getPc (),
191- ((ProgramCounterLocation ) sink .getLocation ()).getSourceCodeLine ());
187+ ((ProgramCounterLocation ) sink .getLocation ()).getSourceCodeLine (),
188+ ((ProgramCounterLocation ) source .getLocation ()).getPc (),
189+ ((ProgramCounterLocation ) source .getLocation ()).getSourceCodeLine ());
192190
193191 String warn = "[POSSIBLE] Access Control Incompleteness vulnerability at "
194192 + ((ProgramCounterLocation ) sink .getLocation ()).getSourceCodeLine ();
@@ -203,10 +201,10 @@ private void checkForAccessControlIncompleteness(CheckToolWithAnalysisResults<
203201 } else {
204202 log .warn (
205203 "[DEFINITE] Access Control Incompleteness vulnerability at pc {} (line {}) coming from pc {} (line {})." ,
206- sinkLocation .getPc (),
207- sinkLocation .getSourceCodeLine (),
208204 ((ProgramCounterLocation ) sink .getLocation ()).getPc (),
209- ((ProgramCounterLocation ) sink .getLocation ()).getSourceCodeLine ());
205+ ((ProgramCounterLocation ) sink .getLocation ()).getSourceCodeLine (),
206+ ((ProgramCounterLocation ) source .getLocation ()).getPc (),
207+ ((ProgramCounterLocation ) source .getLocation ()).getSourceCodeLine ());
210208
211209 String warn = "[DEFINITE] Access Control Incompleteness vulnerability at "
212210 + ((ProgramCounterLocation ) sink .getLocation ()).getSourceCodeLine ();
0 commit comments