hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Moved Cpp into sub directory 'cryptography' instead of crypto. Added python models, inventory, and example alerts.

Browse Source
This commit is contained in:
Benjamin Rodes
2023-09-15 12:12:01 -04:00
committed by Josh Brown
parent 7560db66fa
commit 50db4fd63e
73 changed files with 2763 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
cpp/ql/lib/experimental/crypto/Concepts.qll
View File

@@ -1,5 +0,0 @@
import experimental.crypto.CryptoArtifact
import experimental.crypto.CryptoAlgorithmNames
import experimental.crypto.modules.OpenSSL as OpenSSL

5
cpp/ql/lib/experimental/cryptography/Concepts.qll Normal file
View File

@@ -0,0 +1,5 @@
import experimental.cryptography.CryptoArtifact
import experimental.cryptography.CryptoAlgorithmNames
import experimental.cryptography.modules.OpenSSL as OpenSSL

0
cpp/ql/lib/experimental/crypto/CryptoAlgorithmNames.qll → cpp/ql/lib/experimental/cryptography/CryptoAlgorithmNames.qll
View File

2
cpp/ql/lib/experimental/crypto/CryptoArtifact.qll → cpp/ql/lib/experimental/cryptography/CryptoArtifact.qll
View File

@@ -1,5 +1,5 @@
import cpp
private import experimental.crypto.CryptoAlgorithmNames
private import experimental.cryptography.CryptoAlgorithmNames
import semmle.code.cpp.ir.dataflow.TaintTracking

14
cpp/ql/lib/experimental/crypto/modules/OpenSSL.qll → cpp/ql/lib/experimental/cryptography/modules/OpenSSL.qll
View File

@@ -1,11 +1,11 @@
import cpp
import experimental.crypto.CryptoAlgorithmNames
import experimental.crypto.CryptoArtifact
import experimental.crypto.utils.OpenSSL.CryptoFunction
import experimental.crypto.utils.OpenSSL.AlgorithmSink
import experimental.crypto.utils.OpenSSL.PassthroughFunction
import experimental.crypto.utils.OpenSSL.CryptoAlgorithm
import experimental.crypto.CryptoArtifact
import experimental.cryptography.CryptoAlgorithmNames
import experimental.cryptography.CryptoArtifact
import experimental.cryptography.utils.OpenSSL.CryptoFunction
import experimental.cryptography.utils.OpenSSL.AlgorithmSink
import experimental.cryptography.utils.OpenSSL.PassthroughFunction
import experimental.cryptography.utils.OpenSSL.CryptoAlgorithm
import experimental.cryptography.CryptoArtifact
// import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.ir.dataflow.DataFlow

4
cpp/ql/lib/experimental/crypto/utils/OpenSSL/AlgorithmSink.qll → cpp/ql/lib/experimental/cryptography/utils/OpenSSL/AlgorithmSink.qll
View File

@@ -7,8 +7,8 @@
//TODO: enforce a hierarchy of AlgorithmSinkArgument, e.g., so I can get all Asymmetric SinkArguments that includes all the strictly RSA etc.
import cpp
import experimental.crypto.utils.OpenSSL.LibraryFunction
import experimental.crypto.CryptoAlgorithmNames
import experimental.cryptography.utils.OpenSSL.LibraryFunction
import experimental.cryptography.CryptoAlgorithmNames
predicate isAlgorithmSink(AlgorithmSinkArgument arg, string algType){
arg.algType() = algType

2
cpp/ql/lib/experimental/crypto/utils/OpenSSL/CryptoAlgorithm.qll → cpp/ql/lib/experimental/cryptography/utils/OpenSSL/CryptoAlgorithm.qll
View File

@@ -1,5 +1,5 @@
import cpp
import experimental.crypto.CryptoAlgorithmNames
import experimental.cryptography.CryptoAlgorithmNames
predicate isValidAlgorithmLiteral(Literal e){
exists(getPossibleNidFromLiteral(e)) or e instanceof StringLiteral

4
cpp/ql/lib/experimental/crypto/utils/OpenSSL/CryptoFunction.qll → cpp/ql/lib/experimental/cryptography/utils/OpenSSL/CryptoFunction.qll
View File

@@ -1,6 +1,6 @@
import cpp
import experimental.crypto.utils.OpenSSL.LibraryFunction
import experimental.crypto.CryptoAlgorithmNames
import experimental.cryptography.utils.OpenSSL.LibraryFunction
import experimental.cryptography.CryptoAlgorithmNames
predicate inferredOpenSSLCryptoFunctionCall(Call c , string normalized, string algType){
inferredOpenSSLCryptoFunction(c.getTarget(), normalized, algType)

4
cpp/ql/lib/experimental/crypto/utils/OpenSSL/DataBuilders.qll → cpp/ql/lib/experimental/cryptography/utils/OpenSSL/DataBuilders.qll
View File

@@ -5,8 +5,8 @@
*/
import cpp
import experimental.crypto.CryptoAlgorithmNames
import experimental.crypto.utils.OpenSSL.CryptoFunction
import experimental.cryptography.CryptoAlgorithmNames
import experimental.cryptography.utils.OpenSSL.CryptoFunction
private string basicNormalizeFunctionName(Function f, string algType) {

0
cpp/ql/lib/experimental/crypto/utils/OpenSSL/LibraryFunction.qll → cpp/ql/lib/experimental/cryptography/utils/OpenSSL/LibraryFunction.qll
View File

2
cpp/ql/lib/experimental/crypto/utils/OpenSSL/PassthroughFunction.qll → cpp/ql/lib/experimental/cryptography/utils/OpenSSL/PassthroughFunction.qll
View File

@@ -1,5 +1,5 @@
import cpp
import experimental.crypto.utils.OpenSSL.LibraryFunction
import experimental.cryptography.utils.OpenSSL.LibraryFunction
import semmle.code.cpp.ir.dataflow.DataFlow

2
cpp/ql/src/experimental/crypto/example_alerts/UnknownAsymmetricKeyGen.ql → cpp/ql/src/experimental/cryptography/example_alerts/UnknownAsymmetricKeyGen.ql
View File

@@ -10,7 +10,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from AsymmetricKeyGeneration op, AsymmetricAlgorithm alg
where

2
cpp/ql/src/experimental/crypto/example_alerts/WeakAsymmetricKeyGen.ql → cpp/ql/src/experimental/cryptography/example_alerts/WeakAsymmetricKeyGen.ql
View File

@@ -10,7 +10,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from AsymmetricKeyGeneration op, AsymmetricAlgorithm alg, Expr configSrc, int size
where

2
cpp/ql/src/experimental/crypto/example_alerts/WeakBlockMode.ql → cpp/ql/src/experimental/cryptography/example_alerts/WeakBlockMode.ql
View File

@@ -9,7 +9,7 @@
* external/cwe/cwe-327
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from BlockModeAlgorithm alg, string name, string msg, Expr confSink
where

2
cpp/ql/src/experimental/crypto/example_alerts/WeakEllipticCurve.ql → cpp/ql/src/experimental/cryptography/example_alerts/WeakEllipticCurve.ql
View File

@@ -9,7 +9,7 @@
* external/cwe/cwe-327
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from EllipticCurveAlgorithm alg, string name, string msg, Expr confSink
where

2
cpp/ql/src/experimental/crypto/example_alerts/WeakEncryption.ql → cpp/ql/src/experimental/cryptography/example_alerts/WeakEncryption.ql
View File

@@ -10,7 +10,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from SymmetricEncryptionAlgorithm alg, Expr confSink, string msg

2
cpp/ql/src/experimental/crypto/example_alerts/WeakHashes.ql → cpp/ql/src/experimental/cryptography/example_alerts/WeakHashes.ql
View File

@@ -11,7 +11,7 @@
import cpp
import semmle.code.cpp.dataflow.DataFlow as ASTDataFlow
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from HashAlgorithm alg, Expr confSink, string msg
where

2
cpp/ql/src/experimental/crypto/inventory/new_models/AllAsymmetricAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/AllAsymmetricAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from AsymmetricAlgorithm alg
select alg, "Use of algorithm " + alg.getName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/AllCryptoAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/AllCryptoAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from CryptographicAlgorithm alg
select alg, "Use of algorithm " + alg.getName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/AsymmetricEncryptionAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/AsymmetricEncryptionAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from AsymmetricEncryptionAlgorithm alg
select alg, "Use of algorithm " + alg.getEncryptionName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/AsymmetricPaddingAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/AsymmetricPaddingAlgorithms.ql
View File

@@ -10,7 +10,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
// TODO: currently not modeled for any API
from AsymmetricPadding alg

2
cpp/ql/src/experimental/crypto/inventory/new_models/AuthenticatedEncryptionAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/AuthenticatedEncryptionAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from AuthenticatedEncryptionAlgorithm alg
select alg, "Use of algorithm " + alg.getAuthticatedEncryptionName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/BlockModeAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/BlockModeAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from BlockModeAlgorithm alg
select alg, "Use of algorithm " + alg.getBlockModeName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/BlockModeKnownIVsOrNonces.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/BlockModeKnownIVsOrNonces.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
// TODO: currently not modeled for any API
from BlockModeAlgorithm alg

2
cpp/ql/src/experimental/crypto/inventory/new_models/BlockModeUnknownIVsOrNonces.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/BlockModeUnknownIVsOrNonces.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
// TODO: currently not modeled for any API
from BlockModeAlgorithm alg

2
cpp/ql/src/experimental/crypto/inventory/new_models/EllipticCurveAlgorithmSize.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/EllipticCurveAlgorithmSize.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from EllipticCurveAlgorithm alg, string size
where

2
cpp/ql/src/experimental/crypto/inventory/new_models/EllipticCurveAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/EllipticCurveAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from EllipticCurveAlgorithm alg
select alg, "Use of algorithm " + alg.getCurveName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/HashingAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/HashingAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from HashAlgorithm alg
select alg, "Use of algorithm " + alg.getName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/KeyExchangeAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/KeyExchangeAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from KeyExchangeAlgorithm alg
select alg, "Use of algorithm " + alg.getName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/KnownAsymmetricKeyGeneration.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/KnownAsymmetricKeyGeneration.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from AsymmetricKeyGeneration op, CryptographicAlgorithm alg, Expr configSrc
where

2
cpp/ql/src/experimental/crypto/inventory/new_models/SigningAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/SigningAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
// TODO: currently not modeled for any API
from SigningAlgorithm alg

2
cpp/ql/src/experimental/crypto/inventory/new_models/SymmetricEncryptionAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/SymmetricEncryptionAlgorithms.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from SymmetricEncryptionAlgorithm alg
select alg, "Use of algorithm " + alg.getEncryptionName()

2
cpp/ql/src/experimental/crypto/inventory/new_models/SymmetricPaddingAlgorithms.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/SymmetricPaddingAlgorithms.ql
View File

@@ -10,7 +10,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
// TODO: currently not modeled for any API
from SymmetricPadding alg

2
cpp/ql/src/experimental/crypto/inventory/new_models/UnknownAsymmetricKeyGeneration.ql → cpp/ql/src/experimental/cryptography/inventory/new_models/UnknownAsymmetricKeyGeneration.ql
View File

@@ -11,7 +11,7 @@
*/
import cpp
import experimental.crypto.Concepts
import experimental.cryptography.Concepts
from AsymmetricKeyGeneration op, CryptographicAlgorithm alg
where

0
cpp/ql/src/experimental/crypto/inventory/old_models/readme.md → cpp/ql/src/experimental/cryptography/inventory/old_models/readme.md
View File