hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 09:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Rename sink kind to "credentials-password" to match naming convention

Browse Source
This commit is contained in:
Ed Minnix
2023-09-03 21:41:36 -04:00
parent 3ee0fa9bc4
commit 0612b3795a
36 changed files with 127 additions and 127 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/ext/ch.ethz.ssh2.model.yml
View File

@@ -5,4 +5,4 @@ extensions:
data:
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithNone", "(String)", "", "Argument[0]", "credential-username", "manual"]
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]

2
java/ql/lib/ext/com.azure.identity.model.yml
View File

@@ -4,5 +4,5 @@ extensions:
extensible: sinkModel
data:
- ["com.azure.identity", "ClientSecretCredentialBuilder", False, "clientSecret", "(String)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "password", "(String)", "", "Argument[0]", "credential-password", "manual"]
- ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "password", "(String)", "", "Argument[0]", "credentials-password", "manual"]
- ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "username", "(String)", "", "Argument[0]", "credential-username", "manual"]

14
java/ql/lib/ext/com.jcraft.jsch.model.yml
View File

@@ -3,24 +3,24 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(Identity,byte[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(Identity,byte[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[])", "", "Argument[0]", "crypto-parameter", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[],byte[],byte[])", "", "Argument[0]", "credential-username", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[],byte[],byte[])", "", "Argument[1]", "crypto-parameter", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[],byte[],byte[])", "", "Argument[2]", "crypto-parameter", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[],byte[],byte[])", "", "Argument[3]", "credential-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,byte[],byte[],byte[])", "", "Argument[3]", "credentials-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,String)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,String,byte[])", "", "Argument[0]", "crypto-parameter", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,String,byte[])", "", "Argument[1]", "crypto-parameter", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,String,byte[])", "", "Argument[2]", "credential-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "addIdentity", "(String,String,byte[])", "", "Argument[2]", "credentials-password", "manual"]
- ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String,int)", "", "Argument[1]", "request-forgery", "ai-manual"]
- ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String,int)", "", "Argument[0]", "credential-username", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(String)", "", "Argument[0]", "credential-password", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(byte[])", "", "Argument[0]", "credential-password", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(byte[])", "", "Argument[0]", "credentials-password", "manual"]
- addsTo:
pack: codeql/java-all
extensible: summaryModel

4
java/ql/lib/ext/com.microsoft.sqlserver.jdbc.model.yml
View File

@@ -4,6 +4,6 @@ extensions:
extensible: sinkModel
data:
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setPassword", "(String)", "", "Argument[0]", "credential-password", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setUser", "(String)", "", "Argument[0]", "credential-username", "manual"]

8
java/ql/lib/ext/com.mongodb.model.yml
View File

@@ -4,12 +4,12 @@ extensions:
extensible: sinkModel
data:
- ["com.mongodb", "MongoCredential", False, "createCredential", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.mongodb", "MongoCredential", False, "createCredential", "", "", "Argument[2]", "credential-password", "manual"]
- ["com.mongodb", "MongoCredential", False, "createCredential", "", "", "Argument[2]", "credentials-password", "manual"]
- ["com.mongodb", "MongoCredential", False, "createGSSAPICredential", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "", "", "Argument[2]", "credential-password", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "", "", "Argument[2]", "credentials-password", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoX509Credential", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.mongodb", "MongoCredential", False, "createPlainCredential", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.mongodb", "MongoCredential", False, "createPlainCredential", "", "", "Argument[2]", "credential-password", "manual"]
- ["com.mongodb", "MongoCredential", False, "createPlainCredential", "", "", "Argument[2]", "credentials-password", "manual"]
- ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "", "", "Argument[2]", "credential-password", "manual"]
- ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "", "", "Argument[2]", "credentials-password", "manual"]

2
java/ql/lib/ext/com.sshtools.j2ssh.authentication.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setPassword", "(String)", "", "Argument[0]", "credential-password", "manual"]
- ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", True, "setUsername", "(String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.sshtools.j2ssh.authentication", "SshAuthenticationClient", True, "setUsername", "(String)", "", "Argument[0]", "credential-username", "manual"]

16
java/ql/lib/ext/com.sun.crypto.provider.model.yml
View File

@@ -3,14 +3,14 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "getPreKeyedHash", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "KeyProtector", False, "KeyProtector", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "PBKDF2KeyImpl", False, "deriveKey", "(Mac,byte[],byte[],int,int)", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "PBKDF2KeyImpl", False, "getPasswordBytes", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "JceKeyStore", False, "getPreKeyedHash", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "KeyProtector", False, "KeyProtector", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "PBKDF2KeyImpl", False, "deriveKey", "(Mac,byte[],byte[],int,int)", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "PBKDF2KeyImpl", False, "getPasswordBytes", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sun.crypto.provider", "AESCipher", False, "engineUnwrap", "(byte[],String,int)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["com.sun.crypto.provider", "AESCrypt", False, "init", "(boolean,String,byte[])", "", "Argument[2]", "crypto-parameter", "manual"]
- ["com.sun.crypto.provider", "AESWrapCipher", False, "engineUnwrap", "(byte[],String,int)", "", "Argument[0]", "crypto-parameter", "manual"]

2
java/ql/lib/ext/com.sun.net.httpserver.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sun.net.httpserver", "BasicAuthenticator", False, "checkCredentials", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.net.httpserver", "BasicAuthenticator", False, "checkCredentials", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.net.httpserver", "BasicAuthenticator", False, "checkCredentials", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.sun.net.httpserver", "HttpPrincipal", False, "HttpPrincipal", "(String,String)", "", "Argument[0]", "credential-username", "manual"]

6
java/ql/lib/ext/com.sun.net.ssl.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sun.net.ssl", "KeyManagerFactory", False, "init", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.net.ssl", "KeyManagerFactorySpi", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.net.ssl", "KeyManagerFactorySpiWrapper", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.net.ssl", "KeyManagerFactory", False, "init", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.net.ssl", "KeyManagerFactorySpi", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.net.ssl", "KeyManagerFactorySpiWrapper", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]

4
java/ql/lib/ext/com.sun.rowset.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sun.rowset", "JdbcRowSetImpl", False, "JdbcRowSetImpl", "(String,String,String)", "", "Argument[2]", "credential-password", "manual"]
- ["com.sun.rowset", "JdbcRowSetImpl", False, "setPassword", "(String)", "", "Argument[0]", "credential-password", "manual"]
- ["com.sun.rowset", "JdbcRowSetImpl", False, "JdbcRowSetImpl", "(String,String,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["com.sun.rowset", "JdbcRowSetImpl", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sun.rowset", "JdbcRowSetImpl", False, "JdbcRowSetImpl", "(String,String,String)", "", "Argument[1]", "credential-username", "manual"]

4
java/ql/lib/ext/com.sun.security.auth.module.model.yml
View File

@@ -3,5 +3,5 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sun.security.auth.module", "JndiLoginModule", False, "verifyPassword", "(String,String)", "", "Argument[0]", "credential-password", "manual"]
- ["com.sun.security.auth.module", "JndiLoginModule", False, "verifyPassword", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.security.auth.module", "JndiLoginModule", False, "verifyPassword", "(String,String)", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sun.security.auth.module", "JndiLoginModule", False, "verifyPassword", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]

6
java/ql/lib/ext/com.sun.security.ntlm.model.yml
View File

@@ -3,8 +3,8 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sun.security.ntlm", "Client", False, "Client", "(String,String,String,String,char[])", "", "Argument[4]", "credential-password", "manual"]
- ["com.sun.security.ntlm", "NTLM", False, "getP1", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["com.sun.security.ntlm", "NTLM", False, "getP2", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["com.sun.security.ntlm", "Client", False, "Client", "(String,String,String,String,char[])", "", "Argument[4]", "credentials-password", "manual"]
- ["com.sun.security.ntlm", "NTLM", False, "getP1", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sun.security.ntlm", "NTLM", False, "getP2", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["com.sun.security.ntlm", "Client", False, "Client", "(String,String,String,String,char[])", "", "Argument[2]", "credential-username", "manual"]
- ["com.sun.security.ntlm", "Server", False, "getPassword", "(String,String)", "", "Argument[1]", "credential-username", "manual"]

4
java/ql/lib/ext/com.sun.security.sasl.digest.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sun.security.sasl.digest", "DigestMD5Base", False, "generateResponseValue", "(String,String,String,String,String,char[],byte[],byte[],int,byte[])", "", "Argument[5]", "credential-password", "manual"]
- ["com.sun.security.sasl.digest", "DigestMD5Server", False, "generateResponseAuth", "(String,char[],byte[],int,byte[])", "", "Argument[1]", "credential-password", "manual"]
- ["com.sun.security.sasl.digest", "DigestMD5Base", False, "generateResponseValue", "(String,String,String,String,String,char[],byte[],byte[],int,byte[])", "", "Argument[5]", "credentials-password", "manual"]
- ["com.sun.security.sasl.digest", "DigestMD5Server", False, "generateResponseAuth", "(String,char[],byte[],int,byte[])", "", "Argument[1]", "credentials-password", "manual"]
- ["com.sun.security.sasl.digest", "DigestMD5Server", False, "generateResponseAuth", "(String,char[],byte[],int,byte[])", "", "Argument[0]", "credential-username", "manual"]

10
java/ql/lib/ext/com.trilead.ssh2.model.yml
View File

@@ -6,16 +6,16 @@ extensions:
- ["com.trilead.ssh2", "Connection", False, "authenticateWithAgent", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[1]", "crypto-parameter", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[2]", "credential-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String,String,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithKeyboardInteractive", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithNone", "(String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "", "", "Argument[0]", "credential-username", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,char[],String)", "", "Argument[1]", "crypto-parameter", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,File,String)", "", "Argument[1]", "crypto-parameter", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,char[],String)", "", "Argument[2]", "credential-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,File,String)", "", "Argument[2]", "credential-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,char[],String)", "", "Argument[2]", "credentials-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String,File,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["com.trilead.ssh2", "Connection", False, "getRemainingAuthMethods", "(String)", "", "Argument[0]", "credential-username", "manual"]
- ["com.trilead.ssh2", "Connection", False, "isAuthMethodAvailable", "(String,String)", "", "Argument[0]", "credential-username", "manual"]

2
java/ql/lib/ext/java.net.model.yml
View File

@@ -10,7 +10,7 @@ extensions:
extensible: sinkModel
data:
- ["java.net", "DatagramSocket", True, "connect", "(SocketAddress)", "", "Argument[0]", "request-forgery", "ai-manual"]
- ["java.net", "PasswordAuthentication", False, "PasswordAuthentication", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["java.net", "PasswordAuthentication", False, "PasswordAuthentication", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["java.net", "Socket", True, "Socket", "(String,int)", "", "Argument[0]", "request-forgery", "ai-manual"]
- ["java.net", "URL", False, "openConnection", "", "", "Argument[this]", "request-forgery", "manual"]
- ["java.net", "URL", False, "openConnection", "(Proxy)", "", "Argument[0]", "request-forgery", "ai-manual"]

20
java/ql/lib/ext/java.security.model.yml
View File

@@ -3,15 +3,15 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["java.security", "KeyStore", False, "getKey", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["java.security", "KeyStore", False, "load", "(InputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["java.security", "KeyStore", False, "setKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credential-password", "manual"]
- ["java.security", "KeyStore", False, "store", "(OutputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["java.security", "KeyStore$PasswordProtection", False, "PasswordProtection", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["java.security", "KeyStore$PasswordProtection", False, "PasswordProtection", "(char[],String,AlgorithmParameterSpec)", "", "Argument[0]", "credential-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credential-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["java.security", "KeyStore", False, "getKey", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["java.security", "KeyStore", False, "load", "(InputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["java.security", "KeyStore", False, "setKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credentials-password", "manual"]
- ["java.security", "KeyStore", False, "store", "(OutputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["java.security", "KeyStore$PasswordProtection", False, "PasswordProtection", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["java.security", "KeyStore$PasswordProtection", False, "PasswordProtection", "(char[],String,AlgorithmParameterSpec)", "", "Argument[0]", "credentials-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credentials-password", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["java.security", "KeyStore", False, "setKeyEntry", "(String,byte[],Certificate[])", "", "Argument[1]", "crypto-parameter", "manual"]
- ["java.security", "KeyStoreSpi", False, "engineSetKeyEntry", "(String,byte[],Certificate[])", "", "Argument[1]", "crypto-parameter", "manual"]

2
java/ql/lib/ext/java.sql.model.yml
View File

@@ -11,7 +11,7 @@ extensions:
- ["java.sql", "DriverManager", False, "getConnection", "(String)", "", "Argument[0]", "request-forgery", "manual"]
- ["java.sql", "DriverManager", False, "getConnection", "(String,Properties)", "", "Argument[0]", "request-forgery", "manual"]
- ["java.sql", "DriverManager", False, "getConnection", "(String,String,String)", "", "Argument[0]", "request-forgery", "manual"]
- ["java.sql", "DriverManager", False, "getConnection", "(String,String,String)", "", "Argument[2]", "credential-password", "manual"]
- ["java.sql", "DriverManager", False, "getConnection", "(String,String,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["java.sql", "Statement", True, "addBatch", "", "", "Argument[0]", "sql-injection", "manual"]
- ["java.sql", "Statement", True, "execute", "", "", "Argument[0]", "sql-injection", "manual"]
- ["java.sql", "Statement", True, "executeLargeUpdate", "", "", "Argument[0]", "sql-injection", "manual"]

6
java/ql/lib/ext/javax.crypto.spec.model.yml
View File

@@ -11,9 +11,9 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[],byte[],int)", "", "Argument[0]", "credential-password", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[],byte[],int,int)", "", "Argument[0]", "credential-password", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[],byte[],int)", "", "Argument[0]", "credentials-password", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[],byte[],int,int)", "", "Argument[0]", "credentials-password", "manual"]
- ["javax.crypto.spec", "DESKeySpec", False, "DESKeySpec", "(byte[])", "", "Argument[0]", "crypto-parameter", "manual"]
- ["javax.crypto.spec", "DESKeySpec", False, "DESKeySpec", "(byte[],int)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["javax.crypto.spec", "DESKeySpec", False, "isParityAdjusted", "(byte[],int)", "", "Argument[0]", "crypto-parameter", "manual"]

4
java/ql/lib/ext/javax.net.ssl.model.yml
View File

@@ -5,5 +5,5 @@ extensions:
data:
- ["javax.net.ssl", "HttpsURLConnection", True, "setDefaultHostnameVerifier", "", "", "Argument[0]", "hostname-verification", "manual"]
- ["javax.net.ssl", "HttpsURLConnection", True, "setHostnameVerifier", "", "", "Argument[0]", "hostname-verification", "manual"]
- ["javax.net.ssl", "KeyManagerFactory", False, "init", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["javax.net.ssl", "KeyManagerFactorySpi", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["javax.net.ssl", "KeyManagerFactory", False, "init", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["javax.net.ssl", "KeyManagerFactorySpi", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]

2
java/ql/lib/ext/javax.security.auth.callback.model.yml
View File

@@ -3,4 +3,4 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["javax.security.auth.callback", "PasswordCallback", False, "setPassword", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["javax.security.auth.callback", "PasswordCallback", False, "setPassword", "(char[])", "", "Argument[0]", "credentials-password", "manual"]

4
java/ql/lib/ext/javax.security.auth.kerberos.model.yml
View File

@@ -3,8 +3,8 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["javax.security.auth.kerberos", "KerberosKey", False, "KerberosKey", "(KerberosPrincipal,char[],String)", "", "Argument[1]", "credential-password", "manual"]
- ["javax.security.auth.kerberos", "KeyImpl", False, "KeyImpl", "(KerberosPrincipal,char[],String)", "", "Argument[1]", "credential-password", "manual"]
- ["javax.security.auth.kerberos", "KerberosKey", False, "KerberosKey", "(KerberosPrincipal,char[],String)", "", "Argument[1]", "credentials-password", "manual"]
- ["javax.security.auth.kerberos", "KeyImpl", False, "KeyImpl", "(KerberosPrincipal,char[],String)", "", "Argument[1]", "credentials-password", "manual"]
- ["javax.security.auth.kerberos", "KerberosKey", False, "KerberosKey", "(KerberosPrincipal,byte[],int,int)", "", "Argument[1]", "crypto-parameter", "manual"]
- ["javax.security.auth.kerberos", "KerberosTicket", False, "KerberosTicket", "(byte[],KerberosPrincipal,KerberosPrincipal,byte[],int,boolean[],Date,Date,Date,Date,InetAddress[])", "", "Argument[3]", "crypto-parameter", "manual"]
- ["javax.security.auth.kerberos", "KerberosTicket", False, "init", "(byte[],KerberosPrincipal,KerberosPrincipal,byte[],int,boolean[],Date,Date,Date,Date,InetAddress[])", "", "Argument[3]", "crypto-parameter", "manual"]

8
java/ql/lib/ext/javax.sql.model.yml
View File

@@ -3,10 +3,10 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["javax.sql", "ConnectionPoolDataSource", False, "getPooledConnection", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["javax.sql", "DataSource", False, "getConnection", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["javax.sql", "RowSet", False, "setPassword", "(String)", "", "Argument[0]", "credential-password", "manual"]
- ["javax.sql", "XADataSource", False, "getXAConnection", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["javax.sql", "ConnectionPoolDataSource", False, "getPooledConnection", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["javax.sql", "DataSource", False, "getConnection", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["javax.sql", "RowSet", False, "setPassword", "(String)", "", "Argument[0]", "credentials-password", "manual"]
- ["javax.sql", "XADataSource", False, "getXAConnection", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["javax.sql", "ConnectionPoolDataSource", False, "getPooledConnection", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["javax.sql", "DataSource", False, "getConnection", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["javax.sql", "XADataSource", False, "getXAConnection", "(String,String)", "", "Argument[0]", "credential-username", "manual"]

8
java/ql/lib/ext/net.schmizz.sshj.model.yml
View File

@@ -5,8 +5,8 @@ extensions:
data:
- ["net.schmizz.sshj", "SSHClient", False, "auth", "", "", "Argument[0]", "credential-username", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "", "", "Argument[0]", "credential-username", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPublicKey", "", "", "Argument[0]", "credential-username", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "loadKeys", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "loadKeys", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "loadKeys", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "loadKeys", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]

4
java/ql/lib/ext/org.apache.commons.net.ftp.model.yml
View File

@@ -4,6 +4,6 @@ extensions:
extensible: sinkModel
data:
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String)", "", "Argument[1]", "credentials-password", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String,String)", "", "Argument[0]", "credential-username", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String,String)", "", "Argument[1]", "credential-password", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String,String,String)", "", "Argument[1]", "credentials-password", "manual"]

2
java/ql/lib/ext/org.apache.sshd.client.session.model.yml
View File

@@ -3,7 +3,7 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["org.apache.sshd.client.session", "AbstractClientSession", True, "addPasswordIdentity", "(String)", "", "Argument[0]", "credential-password", "manual"]
- ["org.apache.sshd.client.session", "AbstractClientSession", True, "addPasswordIdentity", "(String)", "", "Argument[0]", "credentials-password", "manual"]
- ["org.apache.sshd.client.session", "AbstractClientSession", True, "addPublicKeyIdentity", "", "", "Argument[0]", "crypto-parameter", "manual"]
- ["org.apache.sshd.client.session", "AbstractClientSession", True, "setServerKey", "", "", "Argument[0]", "crypto-parameter", "manual"]
- ["org.apache.sshd.client.session", "ClientSessionCreator", True, "connect", "(String,SocketAddress)", "", "Argument[0]", "credential-username", "manual"]

2
java/ql/lib/ext/org.springframework.security.core.userdetails.model.yml
View File

@@ -4,4 +4,4 @@ extensions:
extensible: sinkModel
data:
- ["org.springframework.security.core.userdetails", "User", False, "User", "(String,String,boolean,boolean,boolean,boolean,Collection)", "", "Argument[0]", "credential-username", "manual"]
- ["org.springframework.security.core.userdetails", "User", False, "User", "(String,String,boolean,boolean,boolean,boolean,Collection)", "", "Argument[1]", "credential-password", "manual"]
- ["org.springframework.security.core.userdetails", "User", False, "User", "(String,String,boolean,boolean,boolean,boolean,Collection)", "", "Argument[1]", "credentials-password", "manual"]

4
java/ql/lib/ext/sun.net.ftp.model.yml
View File

@@ -3,8 +3,8 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.net.ftp", "FtpClient", True, "login", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.net.ftp", "FtpClient", True, "login", "(String,char[],String)", "", "Argument[1]", "credential-password", "manual"]
- ["sun.net.ftp", "FtpClient", True, "login", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.net.ftp", "FtpClient", True, "login", "(String,char[],String)", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.net.ftp", "FtpClient", True, "login", "(String,char[])", "", "Argument[0]", "credential-username", "manual"]
- ["sun.net.ftp", "FtpClient", True, "login", "(String,char[],String)", "", "Argument[0]", "credential-username", "manual"]
- ["sun.net.ftp", "FtpDirEntry", True, "setUser", "(String)", "", "Argument[0]", "credential-username", "manual"]

4
java/ql/lib/ext/sun.net.www.protocol.http.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.net.www.protocol.http", "DigestAuthentication", False, "computeDigest", "", "", "Argument[2]", "credential-password", "manual"]
- ["sun.net.www.protocol.http", "DigestAuthentication", False, "encode", "", "", "Argument[1]", "credential-password", "manual"]
- ["sun.net.www.protocol.http", "DigestAuthentication", False, "computeDigest", "", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.net.www.protocol.http", "DigestAuthentication", False, "encode", "", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.net.www.protocol.http", "DigestAuthentication", False, "computeDigest", "", "", "Argument[1]", "credential-username", "manual"]

12
java/ql/lib/ext/sun.security.krb5.model.yml
View File

@@ -3,12 +3,12 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.security.krb5", "EncryptionKey", False, "EncryptionKey", "(char[],String,String)", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "acquireSecretKey", "(PrincipalName,char[],int,SaltAndParams)", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "acquireSecretKey", "(char[],String,int,byte[])", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "acquireSecretKeys", "(char[],String)", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "stringToKey", "(char[],String,byte[],int)", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.krb5", "KrbAsRep", False, "decryptUsingPassword", "(char[],KrbAsReq,PrincipalName)", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "EncryptionKey", "(char[],String,String)", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "acquireSecretKey", "(PrincipalName,char[],int,SaltAndParams)", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "acquireSecretKey", "(char[],String,int,byte[])", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "acquireSecretKeys", "(char[],String)", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "stringToKey", "(char[],String,byte[],int)", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.krb5", "KrbAsRep", False, "decryptUsingPassword", "(char[],KrbAsReq,PrincipalName)", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.krb5", "Credentials", False, "Credentials", "(byte[],String,String,byte[],int,boolean[],Date,Date,Date,Date,InetAddress[])", "", "Argument[3]", "crypto-parameter", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "EncryptionKey", "(byte[],int,Integer)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["sun.security.krb5", "EncryptionKey", False, "EncryptionKey", "(int,byte[])", "", "Argument[1]", "crypto-parameter", "manual"]

12
java/ql/lib/ext/sun.security.pkcs11.model.yml
View File

@@ -3,12 +3,12 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.security.pkcs11", "P11KeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credential-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore$PasswordCallbackHandler", False, "PasswordCallbackHandler", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.pkcs11", "Secmod$KeyStoreLoadParameter", False, "KeyStoreLoadParameter", "(TrustType,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs11", "P11KeyStore$PasswordCallbackHandler", False, "PasswordCallbackHandler", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.pkcs11", "Secmod$KeyStoreLoadParameter", False, "KeyStoreLoadParameter", "(TrustType,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs11", "ConstructKeys", False, "constructPrivateKey", "(byte[],String)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["sun.security.pkcs11", "ConstructKeys", False, "constructPublicKey", "(byte[],String)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["sun.security.pkcs11", "ConstructKeys", False, "constructSecretKey", "(byte[],String)", "", "Argument[0]", "crypto-parameter", "manual"]

18
java/ql/lib/ext/sun.security.pkcs12.model.yml
View File

@@ -3,13 +3,13 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "calculateMac", "(char[],byte[])", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "createEncryptedData", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "encryptContent", "(byte[],char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "getPBEKey", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "loadSafeContents", "(DerInputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "calculateMac", "(char[],byte[])", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "createEncryptedData", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "encryptContent", "(byte[],char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "getPBEKey", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "loadSafeContents", "(DerInputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.pkcs12", "PKCS12KeyStore", False, "engineSetKeyEntry", "(String,byte[],Certificate[])", "", "Argument[1]", "crypto-parameter", "manual"]

20
java/ql/lib/ext/sun.security.provider.model.yml
View File

@@ -3,15 +3,15 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.security.provider", "DomainKeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credential-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credential-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "getPreKeyedHash", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.provider", "KeyProtector", False, "KeyProtector", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineGetKey", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineLoad", "(InputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineSetKeyEntry", "(String,Key,char[],Certificate[])", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineStore", "(OutputStream,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "getPreKeyedHash", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.provider", "KeyProtector", False, "KeyProtector", "(char[])", "", "Argument[0]", "credentials-password", "manual"]
- ["sun.security.provider", "DomainKeyStore", False, "engineSetKeyEntry", "(String,byte[],Certificate[])", "", "Argument[1]", "crypto-parameter", "manual"]
- ["sun.security.provider", "JavaKeyStore", False, "engineSetKeyEntry", "(String,byte[],Certificate[])", "", "Argument[1]", "crypto-parameter", "manual"]

6
java/ql/lib/ext/sun.security.ssl.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.security.ssl", "KeyManagerFactoryImpl$SunX509", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.ssl", "KeyManagerFactoryImpl$X509", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.ssl", "SunX509KeyManagerImpl", False, "SunX509KeyManagerImpl", "(KeyStore,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.ssl", "KeyManagerFactoryImpl$SunX509", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.ssl", "KeyManagerFactoryImpl$X509", False, "engineInit", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.ssl", "SunX509KeyManagerImpl", False, "SunX509KeyManagerImpl", "(KeyStore,char[])", "", "Argument[1]", "credentials-password", "manual"]

2
java/ql/lib/ext/sun.security.tools.keytool.model.yml
View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.security.tools.keytool", "Main", False, "getNewPasswd", "(String,char[])", "", "Argument[1]", "credential-password", "manual"]
- ["sun.security.tools.keytool", "Main", False, "getNewPasswd", "(String,char[])", "", "Argument[1]", "credentials-password", "manual"]
- ["sun.security.tools.keytool", "Main", False, "getKeyPasswd", "(String,String,char[])", "", "Argument[2]", "crypto-parameter", "manual"]
- ["sun.security.tools.keytool", "Main", False, "recoverKey", "(String,char[],char[])", "", "Argument[2]", "crypto-parameter", "manual"]

26
java/ql/lib/ext/sun.tools.jconsole.model.yml
View File

@@ -3,19 +3,19 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["sun.tools.jconsole", "ConnectDialog", False, "setConnectionParameters", "(String,String,int,String,String,String)", "", "Argument[4]", "credential-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addHost", "(String,int,String,String)", "", "Argument[3]", "credential-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addHost", "(String,int,String,String,boolean)", "", "Argument[3]", "credential-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addUrl", "(String,String,String,boolean)", "", "Argument[2]", "credential-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "failed", "(Exception,String,String,String)", "", "Argument[3]", "credential-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "showConnectDialog", "(String,String,int,String,String,String)", "", "Argument[4]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "ProxyClient", "(String,String,String)", "", "Argument[2]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "ProxyClient", "(String,int,String,String)", "", "Argument[3]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getCacheKey", "(String,String,String)", "", "Argument[2]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getCacheKey", "(String,int,String,String)", "", "Argument[3]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getProxyClient", "(String,String,String)", "", "Argument[2]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getProxyClient", "(String,int,String,String)", "", "Argument[3]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "setParameters", "(JMXServiceURL,String,String)", "", "Argument[2]", "credential-password", "manual"]
- ["sun.tools.jconsole", "ConnectDialog", False, "setConnectionParameters", "(String,String,int,String,String,String)", "", "Argument[4]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addHost", "(String,int,String,String)", "", "Argument[3]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addHost", "(String,int,String,String,boolean)", "", "Argument[3]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addUrl", "(String,String,String,boolean)", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "failed", "(Exception,String,String,String)", "", "Argument[3]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "showConnectDialog", "(String,String,int,String,String,String)", "", "Argument[4]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "ProxyClient", "(String,String,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "ProxyClient", "(String,int,String,String)", "", "Argument[3]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getCacheKey", "(String,String,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getCacheKey", "(String,int,String,String)", "", "Argument[3]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getProxyClient", "(String,String,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "getProxyClient", "(String,int,String,String)", "", "Argument[3]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ProxyClient", False, "setParameters", "(JMXServiceURL,String,String)", "", "Argument[2]", "credentials-password", "manual"]
- ["sun.tools.jconsole", "ConnectDialog", False, "setConnectionParameters", "(String,String,int,String,String,String)", "", "Argument[3]", "credential-username", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addHost", "(String,int,String,String)", "", "Argument[2]", "credential-username", "manual"]
- ["sun.tools.jconsole", "JConsole", False, "addHost", "(String,int,String,String,boolean)", "", "Argument[2]", "credential-username", "manual"]

2
java/ql/lib/semmle/code/java/security/SensitiveApi.qll
View File

@@ -15,7 +15,7 @@ abstract class CredentialSinkNode extends DataFlow::Node { }
* A node representing a password being passed to a method.
*/
class PasswordSink extends CredentialSinkNode {
PasswordSink() { sinkNode(this, "credential-password") }
PasswordSink() { sinkNode(this, "credentials-password") }
}
/**