hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: mass enable diff-informed data flow none() location overrides

Browse Source 
An auto-generated patch that enables diff-informed data flow in the obvious cases.

Builds on github#18346 and github/codeql-patch#88
This commit is contained in:
Nora Dimitrijević
2025-06-17 15:36:52 +02:00
parent fb0f12bfe0
commit b79ce6d30b
4 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/experimental/Security/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
View File

@@ -147,6 +147,8 @@ private module AzureBlobClientConfig implements DataFlow::StateConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
module AzureBlobClientFlow = DataFlow::GlobalWithState<AzureBlobClientConfig>;

2
python/ql/src/experimental/Security/CWE-346/CorsBypass.ql
View File

@@ -81,6 +81,8 @@ module CorsBypassConfig implements DataFlow::ConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
module CorsFlow = TaintTracking::Global<CorsBypassConfig>;

2
python/ql/src/experimental/Security/UnsafeUnpackQuery.qll
View File

@@ -210,6 +210,8 @@ module UnsafeUnpackConfig implements DataFlow::ConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
/** Global taint-tracking for detecting "UnsafeUnpacking" vulnerabilities. */

2
python/ql/src/experimental/semmle/python/security/LdapInsecureAuth.qll
View File

@@ -103,6 +103,8 @@ private module LdapInsecureAuthConfig implements DataFlow::ConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
/** Global taint-tracking for detecting "LDAP insecure authentications" vulnerabilities. */