hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Java: Add queries for extracting sources, sinks and summaries.

Browse Source
This commit is contained in:
Michael Nebel
2022-11-14 11:08:09 +01:00
parent a8ee878356
commit 9f7103c4fb
3 changed files with 51 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
java/ql/src/utils/modelconverter/ExtractSinks.ql Normal file
View File

@@ -0,0 +1,17 @@
/**
* @name Extract MaD sink model rows.
* @description This extracts the Models as data sink model rows.
* @id java/utils/modelconverter/generate-data-extensions-sink
*/
import java
import semmle.code.java.dataflow.ExternalFlow
from
string package, string type, boolean subtypes, string name, string signature, string ext,
string input, string kind, string provenance
where
sinkModel(package, type, subtypes, name, signature, ext, input, kind, provenance) and
provenance != "generated"
select package, type, subtypes, name, signature, ext, input, kind, provenance order by
package, type, name, signature, input, kind

17
java/ql/src/utils/modelconverter/ExtractSources.ql Normal file
View File

@@ -0,0 +1,17 @@
/**
* @name Extract MaD source model rows.
* @description This extracts the Models as data source model rows.
* @id java/utils/modelconverter/generate-data-extensions-source
*/
import java
import semmle.code.java.dataflow.ExternalFlow
from
string package, string type, boolean subtypes, string name, string signature, string ext,
string output, string kind, string provenance
where
sourceModel(package, type, subtypes, name, signature, ext, output, kind, provenance) and
provenance != "generated"
select package, type, subtypes, name, signature, ext, output, kind, provenance order by
package, type, name, signature, output, kind

17
java/ql/src/utils/modelconverter/ExtractSummaries.ql Normal file
View File

@@ -0,0 +1,17 @@
/**
* @name Extract MaD summary model rows.
* @description This extracts the Models as data summary model rows.
* @id java/utils/modelconverter/generate-data-extensions-summary
*/
import java
import semmle.code.java.dataflow.ExternalFlow
from
string package, string type, boolean subtypes, string name, string signature, string ext,
string input, string output, string kind, string provenance
where
summaryModel(package, type, subtypes, name, signature, ext, input, output, kind, provenance) and
provenance != "generated"
select package, type, subtypes, name, signature, ext, input, output, kind, provenance order by
package, type, name, signature, input, output, kind