hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

C++: Fix QL-for-QL warnings

Browse Source
This commit is contained in:
Jeroen Ketema
2024-09-04 11:57:10 +02:00
parent 084dbc4e12
commit 65fafbf4df
7 changed files with 6 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
cpp/ql/src/experimental/Security/CWE/CWE-409/Brotli.qll
View File

@@ -3,14 +3,13 @@
*/
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import DecompressionBomb
/**
* The `BrotliDecoderDecompress` function is used in flow sink. * Ref: https://www.brotli.org/decode.html#af68
*/
class BrotliDecoderDecompressFunction extends DecompressionFunction {
BrotliDecoderDecompressFunction() { this.hasGlobalName(["BrotliDecoderDecompress"]) }
BrotliDecoderDecompressFunction() { this.hasGlobalName("BrotliDecoderDecompress") }
override int getArchiveParameterIndex() { result = 1 }
}
@@ -19,7 +18,7 @@ class BrotliDecoderDecompressFunction extends DecompressionFunction {
* The `BrotliDecoderDecompressStream` function is used in flow sink. * Ref: https://www.brotli.org/decode.html#a234
*/
class BrotliDecoderDecompressStreamFunction extends DecompressionFunction {
BrotliDecoderDecompressStreamFunction() { this.hasGlobalName(["BrotliDecoderDecompressStream"]) }
BrotliDecoderDecompressStreamFunction() { this.hasGlobalName("BrotliDecoderDecompressStream") }
override int getArchiveParameterIndex() { result = 2 }
}

1
cpp/ql/src/experimental/Security/CWE/CWE-409/LibArchive.qll
View File

@@ -3,7 +3,6 @@
*/
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import DecompressionBomb
/**

1
cpp/ql/src/experimental/Security/CWE/CWE-409/MiniZip.qll
View File

@@ -3,7 +3,6 @@
*/
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import DecompressionBomb
/**

9
cpp/ql/src/experimental/Security/CWE/CWE-409/ZSTD.qll
View File

@@ -3,14 +3,13 @@
*/
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import DecompressionBomb
/**
* The `ZSTD_decompress` function is used in flow sink.
*/
class ZstdDecompressFunction extends DecompressionFunction {
ZstdDecompressFunction() { this.hasGlobalName(["ZSTD_decompress"]) }
ZstdDecompressFunction() { this.hasGlobalName("ZSTD_decompress") }
override int getArchiveParameterIndex() { result = 2 }
}
@@ -19,7 +18,7 @@ class ZstdDecompressFunction extends DecompressionFunction {
* The `ZSTD_decompressDCtx` function is used in flow sink.
*/
class ZstdDecompressDctxFunction extends DecompressionFunction {
ZstdDecompressDctxFunction() { this.hasGlobalName(["ZSTD_decompressDCtx"]) }
ZstdDecompressDctxFunction() { this.hasGlobalName("ZSTD_decompressDCtx") }
override int getArchiveParameterIndex() { result = 3 }
}
@@ -28,7 +27,7 @@ class ZstdDecompressDctxFunction extends DecompressionFunction {
* The `ZSTD_decompressStream` function is used in flow sink.
*/
class ZstdDecompressStreamFunction extends DecompressionFunction {
ZstdDecompressStreamFunction() { this.hasGlobalName(["ZSTD_decompressStream"]) }
ZstdDecompressStreamFunction() { this.hasGlobalName("ZSTD_decompressStream") }
override int getArchiveParameterIndex() { result = 2 }
}
@@ -37,7 +36,7 @@ class ZstdDecompressStreamFunction extends DecompressionFunction {
* The `ZSTD_decompress_usingDDict` function is used in flow sink.
*/
class ZstdDecompressUsingDdictFunction extends DecompressionFunction {
ZstdDecompressUsingDdictFunction() { this.hasGlobalName(["ZSTD_decompress_usingDDict"]) }
ZstdDecompressUsingDdictFunction() { this.hasGlobalName("ZSTD_decompress_usingDDict") }
override int getArchiveParameterIndex() { result = 3 }
}

1
cpp/ql/src/experimental/Security/CWE/CWE-409/ZlibGzopen.qll
View File

@@ -3,7 +3,6 @@
*/
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import DecompressionBomb
/**

1
cpp/ql/src/experimental/Security/CWE/CWE-409/ZlibInflator.qll
View File

@@ -3,7 +3,6 @@
*/
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import DecompressionBomb
/**

1
cpp/ql/src/experimental/Security/CWE/CWE-409/ZlibUncompress.qll
View File

@@ -3,7 +3,6 @@
*/
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import DecompressionBomb
/**