hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-30 23:02:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

Model archive/tar.FileInfoHeader in CSV

Browse Source
This commit is contained in:
Sauyon Lee
2021-09-27 23:53:32 -07:00
committed by Owen Mansel-Chan
parent 86d3410041
commit 8cba368ef5
2 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ql/lib/semmle/go/dataflow/ExternalFlow.qll
View File

@@ -75,7 +75,7 @@ private import FlowSummary
* ensuring that they are visible to the taint tracking / data flow library.
*/
private module Frameworks {
// no frameworks currently modeled
private import semmle.go.frameworks.Stdlib
}
private predicate sourceModelCsv(string row) { none() }

11
ql/lib/semmle/go/frameworks/stdlib/ArchiveTar.qll
View File

@@ -3,6 +3,13 @@
*/
import go
private import semmle.go.dataflow.ExternalFlow
private class FlowSummaries extends SummaryModelCsv {
override predicate row(string row) {
row = ["archive/tar;;true;FileInfoHeader;;;Argument[0];ReturnValue[0];taint"]
}
}
/** Provides models of commonly used functions in the `archive/tar` package. */
module ArchiveTar {
@@ -11,10 +18,6 @@ module ArchiveTar {
FunctionOutput outp;
FunctionModels() {
// signature: func FileInfoHeader(fi os.FileInfo, link string) (*Header, error)
hasQualifiedName("archive/tar", "FileInfoHeader") and
(inp.isParameter(0) and outp.isResult(0))
or
// signature: func NewReader(r io.Reader) *Reader
hasQualifiedName("archive/tar", "NewReader") and
(inp.isParameter(0) and outp.isResult())