hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Rust: Make imports consistent and correct.

Browse Source
This commit is contained in:
Geoffrey White
2025-04-04 18:23:53 +01:00
parent 784ccb740b
commit 0db551032c
6 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
rust/ql/src/queries/security/CWE-022/TaintedPath.ql
View File

@@ -16,11 +16,10 @@
import rust
import codeql.rust.dataflow.DataFlow
import codeql.rust.dataflow.internal.DataFlowImpl as DataflowImpl
import codeql.rust.dataflow.TaintTracking
import codeql.rust.dataflow.internal.DataFlowImpl as DataflowImpl
import codeql.rust.Concepts
import codeql.rust.security.TaintedPathExtensions
import TaintedPathFlow::PathGraph
private import codeql.rust.Concepts
newtype NormalizationState =
/** A state signifying that the file path has not been normalized. */
@@ -84,6 +83,8 @@ module TaintedPathConfig implements DataFlow::StateConfigSig {
module TaintedPathFlow = TaintTracking::GlobalWithState<TaintedPathConfig>;
import TaintedPathFlow::PathGraph
from TaintedPathFlow::PathNode source, TaintedPathFlow::PathNode sink
where TaintedPathFlow::flowPath(source, sink)
select sink.getNode(), source, sink, "This path depends on a $@.", source.getNode(),

3
rust/ql/src/queries/security/CWE-089/SqlInjection.ql
View File

@@ -14,7 +14,6 @@ import rust
import codeql.rust.dataflow.DataFlow
import codeql.rust.dataflow.TaintTracking
import codeql.rust.security.SqlInjectionExtensions
import SqlInjectionFlow::PathGraph
/**
* A taint configuration for tainted data that reaches a SQL sink.
@@ -31,6 +30,8 @@ module SqlInjectionConfig implements DataFlow::ConfigSig {
module SqlInjectionFlow = TaintTracking::Global<SqlInjectionConfig>;
import SqlInjectionFlow::PathGraph
from SqlInjectionFlow::PathNode sourceNode, SqlInjectionFlow::PathNode sinkNode
where SqlInjectionFlow::flowPath(sourceNode, sinkNode)
select sinkNode.getNode(), sourceNode, sinkNode, "This query depends on a $@.",

1
rust/ql/src/queries/security/CWE-311/CleartextTransmission.ql
View File

@@ -13,7 +13,6 @@
import rust
import codeql.rust.dataflow.DataFlow
import codeql.rust.security.SensitiveData
import codeql.rust.dataflow.TaintTracking
import codeql.rust.security.CleartextTransmissionExtensions

2
rust/ql/src/queries/security/CWE-312/CleartextLogging.ql
View File

@@ -14,9 +14,9 @@
*/
import rust
import codeql.rust.security.CleartextLoggingExtensions
import codeql.rust.dataflow.DataFlow
import codeql.rust.dataflow.TaintTracking
import codeql.rust.security.CleartextLoggingExtensions
/**
* A taint-tracking configuration for cleartext logging vulnerabilities.

2
rust/ql/src/queries/security/CWE-328/WeakSensitiveDataHashing.ql
View File

@@ -13,9 +13,9 @@
*/
import rust
import codeql.rust.security.WeakSensitiveDataHashingExtensions
import codeql.rust.dataflow.DataFlow
import codeql.rust.dataflow.TaintTracking
import codeql.rust.security.WeakSensitiveDataHashingExtensions
/**
* Provides a taint-tracking configuration for detecting use of a broken or weak