hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Split up Random.qll

Browse Source 
This prevents bringing a dataflow config into scope from utility libraries.
This commit is contained in:
Chris Smowton
2021-07-01 16:25:09 +01:00
parent 80124df78e
commit 643f7dfb87
8 changed files with 166 additions and 160 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-129/ArraySizing.qll
View File

@@ -1,7 +1,7 @@
import java
import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.DefUse
import semmle.code.java.security.Random
import semmle.code.java.security.RandomDataSource
private import BoundingChecks
/**

2
java/ql/src/Security/CWE/CWE-190/ArithmeticUncontrolled.ql
View File

@@ -14,7 +14,7 @@
import java
import semmle.code.java.dataflow.TaintTracking
import semmle.code.java.security.Random
import semmle.code.java.security.RandomQuery
import semmle.code.java.security.SecurityTests
import ArithmeticCommon
import DataFlow::PathGraph

2
java/ql/src/Security/CWE/CWE-335/PredictableSeed.ql
View File

@@ -11,7 +11,7 @@
*/
import java
import semmle.code.java.security.Random
import semmle.code.java.security.RandomQuery
from GetRandomData da, RValue use, PredictableSeedExpr source
where