hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-22 07:15:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

remove unused imports, add tests for libarchive

Browse Source
This commit is contained in:
am0o0
2024-09-03 14:16:25 +02:00
parent 9531701129
commit 6c97096642
11 changed files with 268 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/Brotli.qll
View File

@@ -4,7 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import semmle.code.cpp.commons.File
import DecompressionBomb

4
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/Bzip2.qll
View File

@@ -4,12 +4,10 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import semmle.code.cpp.commons.File
import DecompressionBomb
/**
* The `BZ2_bzDecompress` function as a Flow source
* The `BZ2_bzDecompress` function is used in flow sink
*/
class BZ2BzDecompressFunction extends DecompressionFunction {
BZ2BzDecompressFunction() { this.hasGlobalName(["BZ2_bzDecompress"]) }

15
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/LibArchive.qll
View File

@@ -4,7 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import DecompressionBomb
/**
@@ -18,3 +17,17 @@ class Archive_read_data_block extends DecompressionFunction {
override int getArchiveParameterIndex() { result = 0 }
}
/**
* The `archive_read_open_filename` function as a flow step.
*/
class ReadOpenFunction extends DecompressionFlowStep {
ReadOpenFunction() { this.hasGlobalName("archive_read_open_filename") }
override predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
exists(FunctionCall fc | fc.getTarget() = this |
node1.asIndirectExpr() = fc.getArgument(1) and
node2.asIndirectExpr() = fc.getArgument(0)
)
}
}

5
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/MiniZip.qll
View File

@@ -4,7 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import DecompressionBomb
/**
@@ -18,7 +17,7 @@ class Mz_zip_entry extends DecompressionFunction {
}
/**
* The `mz_zip_reader_entry_*` and `mz_zip_reader_save_all` functions are used in flow source.
* The `mz_zip_reader_entry_*` and `mz_zip_reader_save_all` functions are used in flow sink.
* [docuemnt](https://github.com/zlib-ng/minizip-ng/blob/master/doc/mz_zip_rw.md)
*/
class Mz_zip_reader_entry extends DecompressionFunction {
@@ -42,7 +41,7 @@ class UnzOpenFunction extends DecompressionFunction {
}
/**
* The `mz_zip_reader_open_file` and `mz_zip_reader_open_file_in_memory` functions as a flow source.
* The `mz_zip_reader_open_file` and `mz_zip_reader_open_file_in_memory` functions as a flow step.
*/
class ReaderOpenFunction extends DecompressionFlowStep {
ReaderOpenFunction() {

1
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/XZ.qll
View File

@@ -4,7 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import DecompressionBomb
/**

2
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/ZSTD.qll
View File

@@ -4,8 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import semmle.code.cpp.commons.File
import DecompressionBomb
/**

1
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/ZlibGzopen.qll
View File

@@ -4,7 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import DecompressionBomb
/**

1
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/ZlibInflator.qll
View File

@@ -4,7 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import DecompressionBomb
/**

1
cpp/ql/src/experimental/query-tests/Security/CWE/CWE-409/ZlibUncompress.qll
View File

@@ -4,7 +4,6 @@
import cpp
import semmle.code.cpp.ir.dataflow.TaintTracking
import semmle.code.cpp.security.FlowSources
import DecompressionBomb
/**