Skip to content

Commit 799ba9a

Browse files
committed
Fixed bug in printing logs
1 parent c8b8246 commit 799ba9a

File tree

1 file changed

+6
-8
lines changed

1 file changed

+6
-8
lines changed

src/main/java/it/unipr/crosschain/checker/AccessControlIncompletenessChecker.java

Lines changed: 6 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -180,15 +180,13 @@ private void checkForAccessControlIncompleteness(CheckToolWithAnalysisResults<
180180
if (functionSignatureByStatement.equals("no-function-found"))
181181
continue;
182182

183-
ProgramCounterLocation sinkLocation = (ProgramCounterLocation) sink.getLocation();
184-
185183
if (isTop) {
186184
log.warn(
187185
"[POSSIBLE] Access Control Incompleteness vulnerability at pc {} (line {}) coming from pc {} (line {}).",
188-
sinkLocation.getPc(),
189-
sinkLocation.getSourceCodeLine(),
190186
((ProgramCounterLocation) sink.getLocation()).getPc(),
191-
((ProgramCounterLocation) sink.getLocation()).getSourceCodeLine());
187+
((ProgramCounterLocation) sink.getLocation()).getSourceCodeLine(),
188+
((ProgramCounterLocation) source.getLocation()).getPc(),
189+
((ProgramCounterLocation) source.getLocation()).getSourceCodeLine());
192190

193191
String warn = "[POSSIBLE] Access Control Incompleteness vulnerability at "
194192
+ ((ProgramCounterLocation) sink.getLocation()).getSourceCodeLine();
@@ -203,10 +201,10 @@ private void checkForAccessControlIncompleteness(CheckToolWithAnalysisResults<
203201
} else {
204202
log.warn(
205203
"[DEFINITE] Access Control Incompleteness vulnerability at pc {} (line {}) coming from pc {} (line {}).",
206-
sinkLocation.getPc(),
207-
sinkLocation.getSourceCodeLine(),
208204
((ProgramCounterLocation) sink.getLocation()).getPc(),
209-
((ProgramCounterLocation) sink.getLocation()).getSourceCodeLine());
205+
((ProgramCounterLocation) sink.getLocation()).getSourceCodeLine(),
206+
((ProgramCounterLocation) source.getLocation()).getPc(),
207+
((ProgramCounterLocation) source.getLocation()).getSourceCodeLine());
210208

211209
String warn = "[DEFINITE] Access Control Incompleteness vulnerability at "
212210
+ ((ProgramCounterLocation) sink.getLocation()).getSourceCodeLine();

0 commit comments

Comments
 (0)