Commit Graph

  • bc7cda5274 update from pre/postUpdate node to new forms master db-for-analysis Michael Hohn 2025-03-05 11:12:35 -08:00
  • bf69cb0f45 comment isAdditionalFlowStep--no longer needed Michael Hohn 2025-03-03 12:08:36 -08:00
  • 684b4c145a fix flow indirection Michael Hohn 2025-03-03 12:04:02 -08:00
  • 7ec8b18eac db Michael Hohn 2025-03-03 11:59:42 -08:00
  • 92a678414d Use asIndirecArgument workshop-20250218 Michael Hohn 2025-03-03 11:54:46 -08:00
  • 00bd07be2b add flow with module boilerplate Michael Hohn 2025-03-03 11:21:04 -08:00
  • ea0311f339 fix add-user.c Michael Hohn 2025-03-03 11:11:52 -08:00
  • ade70e9b32 fixes for db Michael Hohn 2025-03-03 10:22:40 -08:00
  • 03c38d3c89 remove db Michael Hohn 2025-03-03 10:15:25 -08:00
  • c532be53d4 first session Michael Hohn 2025-03-02 21:28:48 -08:00
  • 01048300c0 from...where...select with class Michael Hohn 2025-02-18 19:21:30 -08:00
  • e6b23a9d86 from...where...select Michael Hohn 2025-02-18 19:13:19 -08:00
  • 7b1daa9a8b updates for pack lock Michael Hohn 2025-02-17 17:17:49 -08:00
  • f3b703a35f updates for module system; include a db Michael Hohn 2025-02-17 17:09:04 -08:00
  • c1b3c8d901 Updated readme Michael Hohn 2022-08-21 21:05:38 -07:00
  • c01a039d23 Partially revert qlpack to get working cli command Michael Hohn 2022-08-21 20:59:06 -07:00
  • 83e4ac9be8 Add xkcd link for inspiration Michael Hohn 2022-08-03 10:33:07 -07:00
  • 48dede015c Change from codeql v2.7.6 to codeql v2.9.3 Michael Hohn 2022-08-03 10:27:03 -07:00
  • f64503ae1d remove git lfs Michael Hohn 2022-08-03 10:25:51 -07:00
  • bd93cad633 remove git lfs Michael Hohn 2022-08-03 10:25:22 -07:00
  • 3851fcb9eb database w/o git lfs Michael Hohn 2022-06-08 15:08:17 +02:00
  • f9eba14771 include git lfs Michael Hohn 2022-06-08 15:06:19 +02:00
  • 4c7b111ea9 include database Michael Hohn 2022-06-08 15:03:00 +02:00
  • 3fe610d354 workshop updates Michael Hohn 2022-06-08 14:05:32 +02:00
  • dd664fe4ef Insert updates from github.com:hohn/codeql.git Michael Hohn 2022-06-08 08:36:05 +02:00
  • 9d130f1466 minor presentation-1 Michael Hohn 2020-07-23 10:42:47 -07:00
  • 77fefdf78d The isAdditionalTaintStep Predicate, toc Michael Hohn 2020-07-23 10:42:22 -07:00
  • dce515cabd dataflow pdf, cropped for presentation Michael Hohn 2020-07-23 10:22:53 -07:00
  • bb0841eee4 Reviewd all non-xx: sections, toc updated Michael Hohn 2020-07-22 15:53:58 -07:00
  • 9a41879346 Codeql Recap Michael Hohn 2020-07-22 15:45:21 -07:00
  • c0bedda060 The isSource Predicate Michael Hohn 2020-07-22 15:09:16 -07:00
  • fd27af2216 Update Appendix Michael Hohn 2020-07-22 15:06:30 -07:00
  • ab99c0fb44 move isAdditionalTaintStep explanation to Taint Flow Configuration Michael Hohn 2020-07-22 14:59:06 -07:00
  • 999f665ceb The isSink Predicate Michael Hohn 2020-07-22 14:24:44 -07:00
  • f99935159b path problem query format, start of 'the isSink Predicate' Michael Hohn 2020-07-22 14:12:05 -07:00
  • d0507b79d6 Taint Flow Configuration Michael Hohn 2020-07-22 13:48:45 -07:00
  • 4fcd08f394 toc and title caps Michael Hohn 2020-07-22 11:58:19 -07:00
  • 38bc479725 The extra flow step Michael Hohn 2020-07-22 11:52:29 -07:00
  • 12a90e9a54 topic reordering Michael Hohn 2020-07-22 10:51:37 -07:00
  • 62234f4d55 wip: dataflow doc rearrangements Michael Hohn 2020-07-21 17:39:23 -07:00
  • 73a49d5ba5 Formatting updates in dataflow keynote file Michael Hohn 2020-07-21 17:21:39 -07:00
  • 3030f717c1 dataflow slides in PDF, cropped to use more space Michael Hohn 2020-07-21 17:21:07 -07:00
  • d2a9737b4e readme code reordering Michael Hohn 2020-07-21 14:31:01 -07:00
  • 9970524b8d Tutorial, part 1: running the code to see the problem Michael Hohn 2020-07-21 14:29:14 -07:00
  • ba3cfcb010 sql injection: use post-update nodes for function return values Michael Hohn 2020-07-20 16:16:40 -07:00
  • 5bce3ae696 sql injection: taintstep across macro under snprintf as predicate Michael Hohn 2020-07-20 14:58:25 -07:00
  • 4060f31100 sql injection: taintstep across macro under snprintf, with position adjustment Michael Hohn 2020-07-20 14:46:13 -07:00
  • 45a5e89366 sql injection: taintstep across snprintf -- function not found Michael Hohn 2020-07-20 14:38:51 -07:00
  • aa5d019740 sql injection: try flow configuration (with pathgraph). Not ready Michael Hohn 2020-07-20 14:26:44 -07:00
  • 7aa51e67c8 sql injection: sink as class predicate Michael Hohn 2020-07-20 14:20:32 -07:00
  • 1f385ddfe3 Summary: sql injection: sink identification Michael Hohn 2020-07-20 14:14:55 -07:00
  • c91db6a653 Summary: sql injection: move source identification to configuration Michael Hohn 2020-07-20 14:10:36 -07:00
  • 42e2c5de8b sql injection: source is argument to read Michael Hohn 2020-07-20 14:07:49 -07:00
  • a69c511dc1 sql injection: call to read Michael Hohn 2020-07-20 14:04:42 -07:00
  • 47b1c9522c Build codeql database Michael Hohn 2020-07-20 14:02:53 -07:00
  • d5b28fb6b5 project metadata Michael Hohn 2020-07-20 13:53:28 -07:00
  • e31039dd64 sql injection: Flow configuration template Michael Hohn 2020-07-20 13:53:10 -07:00
  • b241632815 'Running the program' sequence added to slides Michael Hohn 2020-07-16 17:43:43 -07:00
  • 90a3bee380 Update the sample run for slide creation Michael Hohn 2020-07-16 17:03:46 -07:00
  • 4c5174bdf5 combined flow: animate global data flow and source Michael Hohn 2020-06-30 17:25:20 -07:00
  • a7a0d33bc8 combined flow diagram with intra-procedural flow Michael Hohn 2020-06-30 17:02:06 -07:00
  • 961ae9b036 combined flow diagram Michael Hohn 2020-06-30 16:46:37 -07:00
  • 60f1f09c60 Switch to using iterm and keynote instead of svg/rtf Michael Hohn 2020-06-30 15:12:39 -07:00
  • aaa58dbca5 Add data flow for other functions Michael Hohn 2020-06-30 15:10:41 -07:00
  • fba3f416f6 Add simplified data flow for get_user_info() Michael Hohn 2020-06-30 11:11:51 -07:00
  • f1cd029146 Create add-user.svg from add-user.c Michael Hohn 2020-06-30 10:48:52 -07:00
  • 41dd5e004e Add simple logging Michael Hohn 2020-06-29 17:20:05 -07:00
  • 5210f57197 Initial sql injection sample in C using sqlite Michael Hohn 2020-06-29 15:29:45 -07:00