Commit Graph

18 Commits

Author SHA1 Message Date
Michael Hohn
813a53a054 Introduce recursive predicate in prepatation for sanitizer; add guard condition
guard condition: if (ua.safeToWrite())...
2023-11-29 20:16:15 -08:00
Michael Hohn
1bc71c068f Include second type-tracker based dataflow check 2023-11-29 15:21:59 -08:00
Michael Hohn
bf9197cb57 Add def-use code sample and query 2023-11-28 17:04:57 -08:00
Michael Hohn
60ee4295b2 minor cleanup 2023-11-28 16:47:52 -08:00
Michael Hohn
8cdb8ef0dd Add new example to illustrate taint propagation with def-use dataflow 2023-11-28 16:39:13 -08:00
Michael Hohn
c1962230c2 Switch to type tracking for dataflow from 'new db()' to 'db.exec()' 2023-11-27 15:04:34 -08:00
Michael Hohn
5496a1c5ae Add dual/restricted-flow-configuration sql injection taint tracking query 2023-11-26 19:44:50 -08:00
Michael Hohn
fc09596b45 Add single-flow sql injection taint tracking query 2023-11-26 19:18:56 -08:00
Michael Hohn
18b8c9e98c Add flow config from 'new db()' to 'db.exec()' 2023-11-26 14:06:44 -08:00
Michael Hohn
247b71294a Fix snapshot query script 2023-11-26 13:25:03 -08:00
Michael Hohn
529f61a1cc Add ultimate sink predicate 2023-11-26 13:23:32 -08:00
Michael Hohn
5b294a18c8 Add session snapshot scripts 2023-11-26 13:13:41 -08:00
Michael Hohn
8ac0490289 wip: debug codeql test. Fixed by upgrading CLI. 2023-11-23 12:11:10 -08:00
Michael Hohn
563d0e7334 WIP: test structure and ultimate source query 2023-11-22 21:39:02 -08:00
Michael Hohn
c175614623 10. use the following to build a CodeQL database. 2023-11-22 20:22:15 -08:00
Michael Hohn
c860686fd0 split database connection / use over two functions 2023-11-22 20:03:06 -08:00
Michael Hohn
0cd96f065a Under construction warning 2023-11-22 16:45:03 -08:00
Michael Hohn
6bb29c4969 Minimal Javascript/SQLite3 sample 2023-11-22 16:43:21 -08:00