Language: Java
Label: safe
CWE: CWE-89 \u2014 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

Code:
    public void setUp() throws Exception {
        this.mocks = MockitoAnnotations.openMocks(this);
        when(this.ds.getConnection()).thenReturn(this.conn);
        when(this.conn.getMetaData()).thenReturn(this.md);
        when(this.md.getDatabaseMajorVersion()).thenReturn(15);
        when(this.md.getDatabaseMinorVersion()).thenReturn(1);
        when(this.conn.createStatement()).thenReturn(this.st1, this.st2);
        when(this.st1.executeQuery("select PostGIS_Lib_Version()")).thenReturn(this.rs1);
        when(this.rs1.next()).thenReturn(true);
        when(this.rs1.getString(1)).thenReturn("3.3.2");
    }