hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12305 from pwntester/new_java_net_URL_toURI_taintstep

Browse Source 
Java: Add new java.net.URI taintsteps
This commit is contained in:
Tony Torralba
2023-02-27 13:09:46 +01:00
committed by GitHub
parent 85bf10ee0f c027e10ef7
commit 0e3f4f6c7c
4 changed files with 104 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/lib/ext/java.net.model.yml
View File

@@ -23,8 +23,10 @@ extensions:
data:
- ["java.net", "URI", False, "URI", "(String)", "", "Argument[0]", "Argument[-1]", "taint", "manual"]
- ["java.net", "URI", False, "create", "", "", "Argument[0]", "ReturnValue", "taint", "manual"]
- ["java.net", "URI", False, "toAsciiString", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"]
- ["java.net", "URI", False, "toASCIIString", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"]
- ["java.net", "URI", False, "toString", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"]
- ["java.net", "URI", False, "toURL", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"]
- ["java.net", "URL", False, "URL", "(String)", "", "Argument[0]", "Argument[-1]", "taint", "manual"]
- ["java.net", "URL", False, "toURI", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"]
- ["java.net", "URL", False, "toExternalForm", "", "", "Argument[-1]", "ReturnValue", "taint", "manual"]
- ["java.net", "URLDecoder", False, "decode", "", "", "Argument[0]", "ReturnValue", "taint", "manual"]

99
java/ql/test/library-tests/frameworks/jdk/java.net/Test.java Normal file
View File

@@ -0,0 +1,99 @@
package generatedtest;
import java.net.URI;
import java.net.URL;
import java.net.URLDecoder;
import java.nio.charset.Charset;
// Test case generated by GenerateFlowTestCase.ql
public class Test {
Object source() {
return null;
}
void sink(Object o) {}
public void test() throws Exception {
{
// "java.net;URI;false;URI;(String);;Argument[0];Argument[-1];taint;manual"
URI out = null;
String in = (String) source();
out = new URI(in);
sink(out); // $ hasTaintFlow
}
{
// "java.net;URI;false;create;;;Argument[0];ReturnValue;taint;manual"
URI out = null;
String in = (String) source();
out = URI.create(in);
sink(out); // $ hasTaintFlow
}
{
// "java.net;URI;false;toASCIIString;;;Argument[-1];ReturnValue;taint;manual"
String out = null;
URI in = (URI) source();
out = in.toASCIIString();
sink(out); // $ hasTaintFlow
}
{
// "java.net;URI;false;toString;;;Argument[-1];ReturnValue;taint;manual"
String out = null;
URI in = (URI) source();
out = in.toString();
sink(out); // $ hasTaintFlow
}
{
// "java.net;URI;false;toURL;;;Argument[-1];ReturnValue;taint;manual"
URL out = null;
URI in = (URI) source();
out = in.toURL();
sink(out); // $ hasTaintFlow
}
{
// "java.net;URL;false;URL;(String);;Argument[0];Argument[-1];taint;manual"
URL out = null;
String in = (String) source();
out = new URL(in);
sink(out); // $ hasTaintFlow
}
{
// "java.net;URL;false;toExternalForm;;;Argument[-1];ReturnValue;taint;manual"
String out = null;
URL in = (URL) source();
out = in.toExternalForm();
sink(out); // $ hasTaintFlow
}
{
// "java.net;URL;false;toURI;;;Argument[-1];ReturnValue;taint;manual"
URI out = null;
URL in = (URL) source();
out = in.toURI();
sink(out); // $ hasTaintFlow
}
{
// "java.net;URLDecoder;false;decode;;;Argument[0];ReturnValue;taint;manual"
String out = null;
String in = (String) source();
out = URLDecoder.decode(in);
sink(out); // $ hasTaintFlow
}
{
// "java.net;URLDecoder;false;decode;;;Argument[0];ReturnValue;taint;manual"
String out = null;
String in = (String) source();
out = URLDecoder.decode(in, (Charset) null);
sink(out); // $ hasTaintFlow
}
{
// "java.net;URLDecoder;false;decode;;;Argument[0];ReturnValue;taint;manual"
String out = null;
String in = (String) source();
out = URLDecoder.decode(in, (String) null);
sink(out); // $ hasTaintFlow
}
}
}

0
java/ql/test/library-tests/frameworks/jdk/java.net/test.expected Normal file
View File

2
java/ql/test/library-tests/frameworks/jdk/java.net/test.ql Normal file
View File

@@ -0,0 +1,2 @@
import java
import TestUtilities.InlineFlowTest