hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 01:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

add getValue() method

Browse Source
This commit is contained in:
Maiky
2023-08-10 00:39:35 +02:00
parent e60fa6f1a7
commit 97f8d1fca9
1 changed files with 11 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
ruby/ql/lib/codeql/ruby/frameworks/Ldap.qll
View File

@@ -45,10 +45,7 @@ module NetLdap {
NetLdapConnection() { this in [ldap().getAnInstantiation(), ldap().getAMethodCall("open")] }
predicate usesSsl() {
[
this.getKeywordArgument("encryption"), this.getAMethodCall("encryption").getArgument(0),
this.getAMethodCall("encryption").getKeywordArgument("method")
].getConstantValue().isStringlikeValue("simple_tls")
getValue(this, "encryption").getConstantValue().isStringlikeValue("simple_tls")
}
DataFlow::Node getAuthValue(string arg) {
@@ -88,13 +85,7 @@ module NetLdap {
NetLdapBind() { this = l.getAMethodCall("bind") }
override DataFlow::Node getHost() {
result =
[
l.getKeywordArgument("host"), l.getAMethodCall("host").getArgument(0),
l.getAMethodCall("host").getKeywordArgument("method")
]
}
override DataFlow::Node getHost() { result = getValue(l, "host") }
override DataFlow::Node getPassword() {
result = l.getAuthValue("password") or
@@ -103,4 +94,13 @@ module NetLdap {
override predicate usesSsl() { l.usesSsl() }
}
/** LDAP Attribute value */
DataFlow::Node getValue(NetLdapConnection l, string attr) {
result =
[
l.getKeywordArgument(attr), l.getAMethodCall(attr).getArgument(0),
l.getAMethodCall(attr).getKeywordArgument(attr)
]
}
}