hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 21:25:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

naive conversion of ldapjs model to API node

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-09-30 12:09:50 +02:00
parent f48c418d6d
commit 94e2676c0f
1 changed files with 14 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll
View File

@@ -15,35 +15,35 @@ module Ldapjs {
/**
* Gets a data flow source node for an LDAP client.
*/
abstract class LdapClient extends DataFlow::SourceNode { }
abstract class LdapClient extends API::Node { }
/**
* Gets a data flow source node for the ldapjs library.
*/
private DataFlow::SourceNode ldapjs() { result = DataFlow::moduleImport("ldapjs") }
private API::Node ldapjs() { result = API::moduleImport("ldapjs") }
/**
* Gets a data flow source node for the ldapjs client.
*/
class LdapjsClient extends LdapClient {
LdapjsClient() { this = ldapjs().getAMemberCall("createClient") }
LdapjsClient() { this = ldapjs().getMember("createClient").getReturn() }
}
/**
* Gets a data flow node for the client `search` options.
*/
class LdapjsSearchOptions extends DataFlow::SourceNode {
DataFlow::CallNode queryCall;
class LdapjsSearchOptions extends API::Node {
API::CallNode queryCall;
LdapjsSearchOptions() {
queryCall = any(LdapjsClient client).getAMemberCall("search") and
this = queryCall.getArgument(1).getALocalSource()
queryCall = any(LdapjsClient client).getMember("search").getACall() and
this = queryCall.getParameter(1)
}
/**
* Gets the LDAP query call that these options are used in.
*/
DataFlow::InvokeNode getQueryCall() { result = queryCall }
API::CallNode getQueryCall() { result = queryCall }
}
/**
@@ -52,20 +52,20 @@ module Ldapjs {
class LdapjsSearchFilter extends DataFlow::Node {
LdapjsSearchOptions options;
LdapjsSearchFilter() { this = options.getAPropertyWrite("filter").getRhs() }
LdapjsSearchFilter() { this = options.getMember("filter").getARhs() }
/**
* Gets the LDAP query call that this filter is used in.
*/
DataFlow::InvokeNode getQueryCall() { result = options.getQueryCall() }
API::CallNode getQueryCall() { result = options.getQueryCall() }
}
/**
* A call to the ldapjs Client API methods.
*/
class LdapjsClientAPICall extends DataFlow::CallNode {
class LdapjsClientAPICall extends API::CallNode {
LdapjsClientAPICall() {
this = any(LdapjsClient client).getAMemberCall(getLdapjsClientDNMethodName())
this = any(LdapjsClient client).getMember(getLdapjsClientDNMethodName()).getACall()
}
}
@@ -80,13 +80,13 @@ module Ldapjs {
/**
* Gets the LDAP query call that this DN is used in.
*/
DataFlow::InvokeNode getQueryCall() { result = queryCall }
API::CallNode getQueryCall() { result = queryCall }
}
/**
* Ldapjs parseFilter method call.
*/
class LdapjsParseFilter extends DataFlow::CallNode {
LdapjsParseFilter() { this = ldapjs().getAMemberCall("parseFilter") }
LdapjsParseFilter() { this = ldapjs().getMember("parseFilter").getACall() }
}
}