hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12751 from egregius313/egregius313/dataflow-refactor-cleanup

Browse Source 
Java: Finish dataflow refactor
This commit is contained in:
Edward Minnix III
2023-04-14 10:35:11 -04:00
committed by GitHub
parent ba982e2f85 f106783c39
commit 38826c98f1
9 changed files with 117 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsSourceCall.ql
View File

@@ -12,11 +12,11 @@
import java
import semmle.code.java.security.HardcodedCredentialsSourceCallQuery
import DataFlow::PathGraph
import HardcodedCredentialSourceCallFlow::PathGraph
from
DataFlow::PathNode source, DataFlow::PathNode sink,
HardcodedCredentialSourceCallConfiguration conf
where conf.hasFlowPath(source, sink)
HardcodedCredentialSourceCallFlow::PathNode source,
HardcodedCredentialSourceCallFlow::PathNode sink
where HardcodedCredentialSourceCallFlow::flowPath(source, sink)
select source.getNode(), source, sink, "Hard-coded value flows to $@.", sink.getNode(),
"sensitive call"

8
java/ql/src/Security/CWE/CWE-927/SensitiveResultReceiver.ql
View File

@@ -13,9 +13,11 @@
import java
import semmle.code.java.security.SensitiveResultReceiverQuery
import DataFlow::PathGraph
import SensitiveResultReceiverFlow::PathGraph
from DataFlow::PathNode src, DataFlow::PathNode sink, DataFlow::Node recSrc
where sensitiveResultReceiver(src, sink, recSrc)
from
SensitiveResultReceiverFlow::PathNode src, SensitiveResultReceiverFlow::PathNode sink,
DataFlow::Node recSrc
where isSensitiveResultReceiver(src, sink, recSrc)
select sink, src, sink, "This $@ is sent to a ResultReceiver obtained from $@.", src,
"sensitive information", recSrc, "this untrusted source"