hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: Move ExternalAPI files into query directory to prevent out-of-tree use.

Browse Source
This commit is contained in:
Mathias Vorreiter Pedersen
2020-11-18 09:28:50 +01:00
parent f16591dffc
commit 09c5caa3bd
11 changed files with 12 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cpp/ql/src/Security/CWE/CWE-020/CountUntrustedDataToExternalAPI.ql
View File

@@ -9,7 +9,7 @@
*/
import cpp
import semmle.code.cpp.security.ExternalAPIs
import ExternalAPIs
from ExternalAPIUsedWithUntrustedData externalAPI
select externalAPI, count(externalAPI.getUntrustedDataNode()) as numberOfUses,

2
cpp/ql/src/semmle/code/cpp/security/ExternalAPIs.qll → cpp/ql/src/Security/CWE/CWE-020/ExternalAPIs.qll
View File

@@ -6,7 +6,7 @@
private import cpp
private import semmle.code.cpp.models.interfaces.DataFlow
private import semmle.code.cpp.models.interfaces.Taint
import implementation.ExternalAPIsSpecific
import ExternalAPIsSpecific
/** A node representing untrusted data being passed to an external API. */
class UntrustedExternalAPIDataNode extends ExternalAPIDataNode {

0
cpp/ql/src/semmle/code/cpp/security/implementation/ExternalAPIsSpecific.qll → cpp/ql/src/Security/CWE/CWE-020/ExternalAPIsSpecific.qll
View File

2
cpp/ql/src/Security/CWE/CWE-020/IRCountUntrustedDataToExternalAPI.ql
View File

@@ -9,7 +9,7 @@
*/
import cpp
import semmle.code.cpp.security.ir.ExternalAPIs
import ir.ExternalAPIs
from ExternalAPIUsedWithUntrustedData externalAPI
select externalAPI, count(externalAPI.getUntrustedDataNode()) as numberOfUses,

2
cpp/ql/src/Security/CWE/CWE-020/IRUntrustedDataToExternalAPI.ql
View File

@@ -10,7 +10,7 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.ir.ExternalAPIs
import ir.ExternalAPIs
import semmle.code.cpp.security.FlowSources
import DataFlow::PathGraph

1
cpp/ql/src/semmle/code/cpp/security/implementation/SafeExternalAPIFunction.qll → cpp/ql/src/Security/CWE/CWE-020/SafeExternalAPIFunction.qll
View File

@@ -3,6 +3,7 @@
*/
private import cpp
private import semmle.code.cpp.models.implementations.Pure
/**
* A `Function` that is considered a "safe" external API from a security perspective.

2
cpp/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql
View File

@@ -10,7 +10,7 @@
import cpp
import semmle.code.cpp.dataflow.TaintTracking
import semmle.code.cpp.security.ExternalAPIs
import ExternalAPIs
import DataFlow::PathGraph
from UntrustedDataToExternalAPIConfig config, DataFlow::PathNode source, DataFlow::PathNode sink

2
cpp/ql/src/semmle/code/cpp/security/ir/ExternalAPIs.qll → cpp/ql/src/Security/CWE/CWE-020/ir/ExternalAPIs.qll
View File

@@ -6,7 +6,7 @@
private import cpp
private import semmle.code.cpp.models.interfaces.DataFlow
private import semmle.code.cpp.models.interfaces.Taint
import implementation.ExternalAPIsSpecific
import ExternalAPIsSpecific
/** A node representing untrusted data being passed to an external API. */
class UntrustedExternalAPIDataNode extends ExternalAPIDataNode {

0
cpp/ql/src/semmle/code/cpp/security/ir/implementation/ExternalAPIsSpecific.qll → cpp/ql/src/Security/CWE/CWE-020/ir/ExternalAPIsSpecific.qll
View File

1
cpp/ql/src/semmle/code/cpp/security/ir/implementation/SafeExternalAPIFunction.qll → cpp/ql/src/Security/CWE/CWE-020/ir/SafeExternalAPIFunction.qll
View File

@@ -3,6 +3,7 @@
*/
private import cpp
private import semmle.code.cpp.models.implementations.Pure
/**
* A `Function` that is considered a "safe" external API from a security perspective.