circle-ir 3.158.0 → 3.159.0

package/dist/browser/circle-ir.js

@@ -24592,6 +24592,7 @@ var LanguageSourcesPass = class {
       additionalSanitizers.push(
         ...findJavaPathNormalizeStartsWithGuardSanitizers(code)
       );
+      additionalSanitizers.push(...findJavaPathGetFileNameSanitizers(code));
       additionalSanitizers.push(...findJavaInlineCrlfStripLogSanitizers(code));
       additionalSanitizers.push(...findJavaArgvFormExecSanitizers(code));
       for (const finding of findJavaPatternFindings(code, graph.ir.meta.file)) {
@@ -26634,6 +26635,42 @@ function findJavaPathNormalizeStartsWithGuardSanitizers(code) {
   }
   return sanitizers;
 }
+function findJavaPathGetFileNameSanitizers(code) {
+  const sanitizers = [];
+  const lines = code.split("\n");
+  const assignmentRe = /^\s*(?:(?:final\s+)?[A-Za-z_][\w.<>?,\s\[\]]*?\s+)?([A-Za-z_]\w*)\s*=\s*(.+?);\s*$/;
+  const rhsHasGetFileNameRe = /\.\s*getFileName\s*\(\s*\)/;
+  const rhsHasPathsChainRe = /\b(?:Paths\s*\.\s*get|Path\s*\.\s*of)\s*\(/;
+  const candidates = [];
+  for (let i2 = 0; i2 < lines.length; i2++) {
+    const m = assignmentRe.exec(lines[i2]);
+    if (!m) continue;
+    const rhs = m[2];
+    if (!rhsHasGetFileNameRe.test(rhs)) continue;
+    if (!rhsHasPathsChainRe.test(rhs)) continue;
+    candidates.push({ line: i2 + 1, boundVar: m[1] });
+  }
+  if (candidates.length === 0) return sanitizers;
+  for (const c of candidates) {
+    sanitizers.push({
+      type: "java_path_get_filename",
+      method: "getFileName",
+      line: c.line,
+      sanitizes: ["path_traversal", "external_taint_escape"]
+    });
+    const varRefRe = new RegExp(`\\b${c.boundVar}\\b`);
+    for (let l = c.line; l < lines.length; l++) {
+      if (!varRefRe.test(lines[l])) continue;
+      sanitizers.push({
+        type: "java_path_get_filename",
+        method: "getFileName",
+        line: l + 1,
+        sanitizes: ["path_traversal", "external_taint_escape"]
+      });
+    }
+  }
+  return sanitizers;
+}
 function findJavaInlineCrlfStripLogSanitizers(code) {
   const sanitizers = [];
   const lines = code.split("\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "circle-ir",
-  "version": "3.158.0",
+  "version": "3.159.0",
   "description": "High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis",
   "main": "dist/index.js",
   "module": "dist/index.js",