hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Move to experimental and update qldoc

Browse Source
This commit is contained in:
luchua-bc
2020-11-26 17:09:53 +00:00
parent a49160423b
commit 7ad031ca70
12 changed files with 224 additions and 175 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
java/ql/test/experimental/query-tests/security/CWE-312/CleartextStorageSharedPrefs.expected Normal file
View File

@@ -0,0 +1,22 @@
edges
| CleartextStorageSharedPrefs.java:16:19:16:36 | edit(...) : Editor | CleartextStorageSharedPrefs.java:17:3:17:8 | editor |
| CleartextStorageSharedPrefs.java:16:19:16:36 | edit(...) : Editor | CleartextStorageSharedPrefs.java:18:3:18:8 | editor |
| CleartextStorageSharedPrefs.java:16:19:16:36 | edit(...) : Editor | CleartextStorageSharedPrefs.java:19:3:19:8 | editor |
| CleartextStorageSharedPrefs.java:25:19:25:36 | edit(...) : Editor | CleartextStorageSharedPrefs.java:28:3:28:8 | editor |
| CleartextStorageSharedPrefs.java:44:19:44:36 | edit(...) : Editor | CleartextStorageSharedPrefs.java:47:3:47:8 | editor |
nodes
| CleartextStorageSharedPrefs.java:16:19:16:36 | edit(...) : Editor | semmle.label | edit(...) : Editor |
| CleartextStorageSharedPrefs.java:17:3:17:8 | editor | semmle.label | editor |
| CleartextStorageSharedPrefs.java:18:3:18:8 | editor | semmle.label | editor |
| CleartextStorageSharedPrefs.java:18:32:18:39 | password | semmle.label | password |
| CleartextStorageSharedPrefs.java:19:3:19:8 | editor | semmle.label | editor |
| CleartextStorageSharedPrefs.java:25:19:25:36 | edit(...) : Editor | semmle.label | edit(...) : Editor |
| CleartextStorageSharedPrefs.java:28:3:28:8 | editor | semmle.label | editor |
| CleartextStorageSharedPrefs.java:44:19:44:36 | edit(...) : Editor | semmle.label | edit(...) : Editor |
| CleartextStorageSharedPrefs.java:46:32:46:42 | encPassword | semmle.label | encPassword |
| CleartextStorageSharedPrefs.java:47:3:47:8 | editor | semmle.label | editor |
| CleartextStorageSharedPrefs.java:67:32:67:39 | password | semmle.label | password |
| CleartextStorageSharedPrefs.java:87:32:87:39 | password | semmle.label | password |
| CleartextStorageSharedPrefs.java:105:27:105:34 | password | semmle.label | password |
#select
| CleartextStorageSharedPrefs.java:19:3:19:17 | commit(...) | 'SharedPreferences' class $@ containing $@ is stored here. Data was added $@. | CleartextStorageSharedPrefs.java:16:19:16:36 | edit(...) | edit(...) | CleartextStorageSharedPrefs.java:18:32:18:39 | password | sensitive data | CleartextStorageSharedPrefs.java:18:32:18:39 | password | here |

2
java/ql/test/query-tests/security/CWE-312/semmle/tests/ClearTextStorageSharedPrefs.java → java/ql/test/experimental/query-tests/security/CWE-312/CleartextStorageSharedPrefs.java
View File

@@ -9,7 +9,7 @@ import java.util.Base64;
import java.security.MessageDigest;
/* Android activity that tests saving sensitive information in `SharedPreferences` */
public class ClearTextStorageSharedPrefs extends Activity {
public class CleartextStorageSharedPrefs extends Activity {
// BAD - save sensitive information in cleartext
public void testSetSharedPrefs1(Context context, String name, String password) {
SharedPreferences sharedPrefs = context.getSharedPreferences("user_prefs", Context.MODE_PRIVATE);

1
java/ql/test/experimental/query-tests/security/CWE-312/CleartextStorageSharedPrefs.qlref Normal file
View File

@@ -0,0 +1 @@
experimental/Security/CWE/CWE-312/CleartextStorageSharedPrefs.ql

2
java/ql/test/query-tests/security/CWE-312/semmle/tests/options → java/ql/test/experimental/query-tests/security/CWE-312/options
View File

@@ -1 +1 @@
// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0
// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../stubs/google-android-9.0.0

1
java/ql/test/query-tests/security/CWE-312/semmle/tests/ClearTextStorageSharedPrefs.expected
View File

@@ -1 +0,0 @@
| ClearTextStorageSharedPrefs.java:19:3:19:17 | commit(...) | 'SharedPreferences' class $@ containing $@ is stored here. Data was added $@. | ClearTextStorageSharedPrefs.java:16:19:16:36 | edit(...) | edit(...) | ClearTextStorageSharedPrefs.java:18:32:18:39 | password | sensitive data | ClearTextStorageSharedPrefs.java:18:32:18:39 | password | here |

1
java/ql/test/query-tests/security/CWE-312/semmle/tests/ClearTextStorageSharedPrefs.qlref
View File

@@ -1 +0,0 @@
Security/CWE/CWE-312/ClearTextStorageSharedPrefs.ql