hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Manually model ZipFile (due to CWE-522 compression bombs test failure).

Browse Source
This commit is contained in:
Michael Nebel
2024-10-03 11:27:28 +02:00
parent f537e04532
commit b356c3cd48
5 changed files with 24 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
java/ql/lib/ext/generated/java.util.zip.model.yml
View File

@@ -61,14 +61,6 @@ extensions:
- ["java.util.zip", "ZipEntry", True, "setLastModifiedTime", "(FileTime)", "", "Argument[this]", "ReturnValue", "value", "dfc-generated"]
- ["java.util.zip", "ZipError", True, "ZipError", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
- ["java.util.zip", "ZipException", True, "ZipException", "(String)", "", "Argument[0]", "Argument[this]", "taint", "df-generated"]
- ["java.util.zip", "ZipFile", True, "ZipFile", "(File)", "", "Argument[0]", "Argument[this].SyntheticField[java.util.zip.ZipFile.name]", "taint", "dfc-generated"]
- ["java.util.zip", "ZipFile", True, "ZipFile", "(File,Charset)", "", "Argument[0]", "Argument[this].SyntheticField[java.util.zip.ZipFile.name]", "taint", "dfc-generated"]
- ["java.util.zip", "ZipFile", True, "ZipFile", "(File,int)", "", "Argument[0]", "Argument[this].SyntheticField[java.util.zip.ZipFile.name]", "taint", "dfc-generated"]
- ["java.util.zip", "ZipFile", True, "ZipFile", "(File,int,Charset)", "", "Argument[0]", "Argument[this].SyntheticField[java.util.zip.ZipFile.name]", "taint", "dfc-generated"]
- ["java.util.zip", "ZipFile", True, "ZipFile", "(String)", "", "Argument[0]", "Argument[this].SyntheticField[java.util.zip.ZipFile.name]", "taint", "dfc-generated"]
- ["java.util.zip", "ZipFile", True, "ZipFile", "(String,Charset)", "", "Argument[0]", "Argument[this].SyntheticField[java.util.zip.ZipFile.name]", "taint", "dfc-generated"]
- ["java.util.zip", "ZipFile", True, "getEntry", "(String)", "", "Argument[0]", "ReturnValue", "taint", "df-generated"]
- ["java.util.zip", "ZipFile", True, "getName", "()", "", "Argument[this].SyntheticField[java.util.zip.ZipFile.name]", "ReturnValue", "value", "dfc-generated"]
- ["java.util.zip", "ZipInputStream", True, "getNextEntry", "()", "", "Argument[this]", "ReturnValue", "taint", "df-generated"]
- ["java.util.zip", "ZipOutputStream", True, "ZipOutputStream", "(OutputStream)", "", "Argument[0]", "Argument[this]", "taint", "dfc-generated"]
- ["java.util.zip", "ZipOutputStream", True, "ZipOutputStream", "(OutputStream,Charset)", "", "Argument[0]", "Argument[this]", "taint", "dfc-generated"]
@@ -162,10 +154,7 @@ extensions:
- ["java.util.zip", "ZipEntry", "setSize", "(long)", "summary", "df-generated"]
- ["java.util.zip", "ZipEntry", "setTime", "(long)", "summary", "df-generated"]
- ["java.util.zip", "ZipEntry", "setTimeLocal", "(LocalDateTime)", "summary", "df-generated"]
- ["java.util.zip", "ZipFile", "entries", "()", "summary", "df-generated"]
- ["java.util.zip", "ZipFile", "getComment", "()", "summary", "df-generated"]
- ["java.util.zip", "ZipFile", "size", "()", "summary", "df-generated"]
- ["java.util.zip", "ZipFile", "stream", "()", "summary", "df-generated"]
- ["java.util.zip", "ZipInputStream", "available", "()", "summary", "df-generated"]
- ["java.util.zip", "ZipInputStream", "closeEntry", "()", "summary", "df-generated"]
- ["java.util.zip", "ZipInputStream", "skip", "(long)", "summary", "df-generated"]