hohn/codeql-lab
1
0
Fork 0
mirror of https://github.com/hohn/codeql-lab.git synced 2025-12-16 09:53:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

revise *** Extending Queries with Customizations.qll for C

Browse Source
This commit is contained in:
Michael Hohn
2025-07-30 16:11:10 -07:00
committed by =Michael Hohn
parent 6583c5a76f
commit 202a99e59f
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
README.org
View File

@@ -132,7 +132,7 @@
*** Extending Queries with Customizations.qll for C *** Extending Queries with Customizations.qll for C
While most CodeQL-supported languages provide out-of-the-box support for While most CodeQL-supported languages provide out-of-the-box support for
`Customizations.qll`, C and C++ do not include this by default. However, it is =Customizations.qll=, C and C++ do not include this by default. However, it is
possible to enable such support by building a custom CodeQL bundle. This can possible to enable such support by building a custom CodeQL bundle. This can
be done using the CLI tool at be done using the CLI tool at
https://github.com/advanced-security/codeql-bundle. Since the tool functions https://github.com/advanced-security/codeql-bundle. Since the tool functions
@@ -141,13 +141,13 @@
A working demonstration is available in A working demonstration is available in
[[./codeql-dataflow-sql-injection-c/README.org]]. In languages like Java, [[./codeql-dataflow-sql-injection-c/README.org]]. In languages like Java,
`Customizations.qll` is included automatically via imports from =Customizations.qll= is included automatically via imports from
`<language>.qll`, such as [[./ql/java/ql/lib/java.qll][java.qll]] importing [[./ql/java/ql/lib/Customizations.qll][Customizations.qll]], which defines =<language>.qll=, such as [[./ql/java/ql/lib/java.qll][java.qll]] importing [[./ql/java/ql/lib/Customizations.qll][Customizations.qll]], which defines
user-extensible predicates for flow modeling. user-extensible predicates for flow modeling.
For C/C++, the process requires explicit modification: For C/C++, the process requires explicit modification:
1. Modify `ql/cpp/ql/lib/cpp.qll` to import `Customizations.qll`. 1. Modify =ql/cpp/ql/lib/cpp.qll= to import =Customizations.qll=.
2. Create and populate `ql/cpp/ql/lib/Customizations.qll` with custom sources/sinks or extensions. 2. Create and populate =ql/cpp/ql/lib/Customizations.qll= with custom sources/sinks or extensions.
3. Rebuild the CodeQL bundle to include these changes. 3. Rebuild the CodeQL bundle to include these changes.
This customization enables consistent user-defined flow modeling across This customization enables consistent user-defined flow modeling across