tabby icon indicating copy to clipboard operation
tabby copied to clipboard

A CAT called tabby ( Code Analysis Tool )

Results 13 tabby issues
Sort by recently updated
recently updated
newest added

审计过程中多次遇到判断方法或者所在类是否存在某个注解来进行鉴权,需要注解支持。

```java Caused by: org.h2.jdbc.JdbcSQLIntegrityConstraintViolationException: NULL not allowed for column "IS_OPTIMIZE"; SQL statement: insert into call (invoker_type, line_num, polluted_position, real_call_type, source, target, id) values (?, ?, ?, ?, ?, ?, ?)...

看报错感觉像是配置地址的问题?但是也没有找到哪里可以调整,请大佬执教,log: `D:\Tools\Tabby>D:\Env\JDK\JDK17\bin\java -Xmx20g -jar tabby.jar ___________ __ _______ _______ ___ ___ (" _ ") /""\ | _ "\ | _ "\|" \/" | )__/ \\__/ / \ (. |_) :)(....

我在分析jooq-3.19.3.jar的时候,明明org.jooq.impl.Convert$ConvertAll.from()方法中调用了newInstance()方法,但是Tabby没查出来。 ![image](https://github.com/wh1t3p1g/tabby/assets/126458073/ed9ce769-43a5-4abb-8b69-e01112dda112) ![image](https://github.com/wh1t3p1g/tabby/assets/126458073/7724dc88-b3c7-4be9-9bbb-94b768b219b9)

![image](https://github.com/wh1t3p1g/tabby/assets/26796210/fb185866-67c3-4a45-91fe-7b2671faffd5) ----------------------- 原因: Dockerfile中的tabby-path-finder-1.0.jar文件名称和目录下对应的文件名称不同

![image](https://github.com/wh1t3p1g/tabby/assets/140902568/dfa06f9c-25bb-4f4d-9db1-4f31d42c79aa) 师傅,能看一下这个报错吗,不明白为啥会报一个settings.properties file not found

师傅您好,请问有关于Class、Method这两类节点详细的属性说明文档吗?如果有的话方便发一下地址吗,谢谢!

# 修正动态绑定机制导致方法调用产生的误报问题 ## 问题介绍: https://droidyue.com/blog/2014/12/28/static-biding-and-dynamic-binding-in-java/ 测试中我编写了这样的三个具有继承关系的类以及一个测试类,且其中一个子类方法进行了重写, ```java class Caller { public void call(String str) { System.out.println("a String instance in Caller"); } } class SubCaller extends Caller { } class SubSubCaller...