Crypto: nodes.expected update and removed dead code from Language.qll

This commit is contained in:
REDMOND\brodes
2025-08-22 14:50:31 -04:00
parent ec7e41cb30
commit b7ceeb399f
2 changed files with 113 additions and 102 deletions

View File

@@ -103,28 +103,4 @@ private class ConstantDataSource extends Crypto::GenericConstantSourceInstance i
override string getAdditionalDescription() { result = this.toString() }
}
module ArtifactUniversalFlowConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node source) {
source = any(Crypto::ArtifactInstance artifact).getOutputNode()
}
predicate isSink(DataFlow::Node sink) {
sink = any(Crypto::FlowAwareElement other).getInputNode()
}
predicate isBarrierOut(DataFlow::Node node) {
node = any(Crypto::FlowAwareElement element).getInputNode()
}
predicate isBarrierIn(DataFlow::Node node) {
node = any(Crypto::FlowAwareElement element).getOutputNode()
}
predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
node1.(AdditionalFlowInputStep).getOutput() = node2
}
}
module ArtifactUniversalFlow = DataFlow::Global<ArtifactUniversalFlowConfig>;
import OpenSSL.OpenSSL

View File

@@ -59,82 +59,117 @@
| openssl_pkey.c:64:9:64:24 | EncryptOperation |
| openssl_pkey.c:64:31:64:39 | KeyOperationOutput |
| openssl_pkey.c:64:58:64:66 | Message |
| openssl_signature.c:22:34:22:40 | Message |
| openssl_signature.c:23:9:23:26 | HashOperation |
| openssl_signature.c:23:36:23:41 | Digest |
| openssl_signature.c:70:32:70:38 | Message |
| openssl_signature.c:75:28:75:36 | Message |
| openssl_signature.c:80:9:80:21 | SignOperation |
| openssl_signature.c:80:31:80:40 | SignatureOutput |
| openssl_signature.c:80:53:80:56 | Key |
| openssl_signature.c:133:52:133:55 | Key |
| openssl_signature.c:134:38:134:44 | Message |
| openssl_signature.c:25:34:25:40 | Message |
| openssl_signature.c:26:9:26:26 | HashOperation |
| openssl_signature.c:26:36:26:41 | Digest |
| openssl_signature.c:63:32:63:38 | Message |
| openssl_signature.c:68:28:68:36 | Message |
| openssl_signature.c:73:9:73:21 | SignOperation |
| openssl_signature.c:73:31:73:40 | SignatureOutput |
| openssl_signature.c:73:53:73:56 | Key |
| openssl_signature.c:126:52:126:55 | Key |
| openssl_signature.c:127:38:127:44 | Message |
| openssl_signature.c:128:9:128:27 | SignatureOrMACOperation |
| openssl_signature.c:128:37:128:40 | SignatureOutput |
| openssl_signature.c:135:9:135:27 | SignatureOrMACOperation |
| openssl_signature.c:135:37:135:40 | SignatureOutput |
| openssl_signature.c:142:9:142:27 | SignatureOrMACOperation |
| openssl_signature.c:142:37:142:46 | SignatureOutput |
| openssl_signature.c:165:54:165:57 | Key |
| openssl_signature.c:166:40:166:46 | Message |
| openssl_signature.c:167:9:167:29 | VerifyOperation |
| openssl_signature.c:167:39:167:47 | SignatureInput |
| openssl_signature.c:190:57:190:60 | Key |
| openssl_signature.c:196:38:196:44 | Message |
| openssl_signature.c:197:9:197:27 | SignatureOrMACOperation |
| openssl_signature.c:197:37:197:40 | SignatureOutput |
| openssl_signature.c:204:9:204:27 | SignatureOrMACOperation |
| openssl_signature.c:204:37:204:46 | SignatureOutput |
| openssl_signature.c:228:59:228:62 | Key |
| openssl_signature.c:234:40:234:46 | Message |
| openssl_signature.c:235:9:235:29 | VerifyOperation |
| openssl_signature.c:235:39:235:47 | SignatureInput |
| openssl_signature.c:260:39:260:42 | Key |
| openssl_signature.c:263:9:263:21 | SignOperation |
| openssl_signature.c:263:33:263:36 | SignatureOutput |
| openssl_signature.c:263:54:263:59 | Message |
| openssl_signature.c:270:9:270:21 | SignOperation |
| openssl_signature.c:270:33:270:42 | SignatureOutput |
| openssl_signature.c:270:60:270:65 | Message |
| openssl_signature.c:292:39:292:42 | Key |
| openssl_signature.c:295:9:295:23 | VerifyOperation |
| openssl_signature.c:295:35:295:43 | SignatureInput |
| openssl_signature.c:295:61:295:66 | Message |
| openssl_signature.c:321:39:321:42 | Key |
| openssl_signature.c:326:48:326:54 | Message |
| openssl_signature.c:327:9:327:35 | SignOperation |
| openssl_signature.c:327:47:327:50 | SignatureOutput |
| openssl_signature.c:334:9:334:35 | SignOperation |
| openssl_signature.c:334:47:334:56 | SignatureOutput |
| openssl_signature.c:357:39:357:42 | Key |
| openssl_signature.c:363:42:363:50 | SignatureInput |
| openssl_signature.c:365:50:365:56 | Message |
| openssl_signature.c:366:9:366:37 | VerifyOperation |
| openssl_signature.c:398:9:398:16 | KeyOperationAlgorithm |
| openssl_signature.c:398:9:398:16 | SignOperation |
| openssl_signature.c:398:28:398:33 | Message |
| openssl_signature.c:398:48:398:57 | SignatureOutput |
| openssl_signature.c:399:48:399:54 | Key |
| openssl_signature.c:421:12:421:21 | KeyOperationAlgorithm |
| openssl_signature.c:421:12:421:21 | VerifyOperation |
| openssl_signature.c:421:33:421:38 | Message |
| openssl_signature.c:421:53:421:61 | SignatureInput |
| openssl_signature.c:422:51:422:57 | Key |
| openssl_signature.c:521:46:521:66 | PaddingAlgorithm |
| openssl_signature.c:543:35:543:46 | KeyOperationAlgorithm |
| openssl_signature.c:547:51:547:54 | Constant |
| openssl_signature.c:548:9:548:23 | KeyGeneration |
| openssl_signature.c:548:34:548:37 | Key |
| openssl_signature.c:565:50:565:54 | KeyOperationAlgorithm |
| openssl_signature.c:569:55:569:58 | Constant |
| openssl_signature.c:575:32:575:37 | Key |
| openssl_signature.c:578:9:578:23 | KeyGeneration |
| openssl_signature.c:578:34:578:37 | Key |
| openssl_signature.c:602:37:602:77 | Constant |
| openssl_signature.c:684:24:684:33 | HashAlgorithm |
| openssl_signature.c:685:37:685:77 | Constant |
| openssl_signature.c:702:60:702:71 | HashAlgorithm |
| openssl_signature.c:702:60:702:71 | KeyOperationAlgorithm |
| openssl_signature.c:709:37:709:46 | HashAlgorithm |
| openssl_signature.c:711:41:711:50 | HashAlgorithm |
| openssl_signature.c:740:24:740:33 | HashAlgorithm |
| openssl_signature.c:741:37:741:77 | Constant |
| openssl_signature.c:758:60:758:64 | KeyOperationAlgorithm |
| openssl_signature.c:135:37:135:46 | SignatureOutput |
| openssl_signature.c:158:54:158:57 | Key |
| openssl_signature.c:159:40:159:46 | Message |
| openssl_signature.c:160:9:160:29 | VerifyOperation |
| openssl_signature.c:160:39:160:47 | SignatureInput |
| openssl_signature.c:182:57:182:60 | Key |
| openssl_signature.c:185:44:185:64 | PaddingAlgorithm |
| openssl_signature.c:187:38:187:44 | Message |
| openssl_signature.c:188:9:188:27 | SignatureOrMACOperation |
| openssl_signature.c:188:37:188:40 | SignatureOutput |
| openssl_signature.c:195:9:195:27 | SignatureOrMACOperation |
| openssl_signature.c:195:37:195:46 | SignatureOutput |
| openssl_signature.c:218:59:218:62 | Key |
| openssl_signature.c:222:44:222:64 | PaddingAlgorithm |
| openssl_signature.c:224:40:224:46 | Message |
| openssl_signature.c:225:9:225:29 | VerifyOperation |
| openssl_signature.c:225:39:225:47 | SignatureInput |
| openssl_signature.c:250:39:250:42 | Key |
| openssl_signature.c:253:9:253:21 | SignOperation |
| openssl_signature.c:253:33:253:36 | SignatureOutput |
| openssl_signature.c:253:54:253:59 | Message |
| openssl_signature.c:260:9:260:21 | SignOperation |
| openssl_signature.c:260:33:260:42 | SignatureOutput |
| openssl_signature.c:260:60:260:65 | Message |
| openssl_signature.c:282:39:282:42 | Key |
| openssl_signature.c:285:9:285:23 | VerifyOperation |
| openssl_signature.c:285:35:285:43 | SignatureInput |
| openssl_signature.c:285:61:285:66 | Message |
| openssl_signature.c:311:39:311:42 | Key |
| openssl_signature.c:316:48:316:54 | Message |
| openssl_signature.c:317:9:317:35 | SignOperation |
| openssl_signature.c:317:47:317:50 | SignatureOutput |
| openssl_signature.c:324:9:324:35 | SignOperation |
| openssl_signature.c:324:47:324:56 | SignatureOutput |
| openssl_signature.c:347:39:347:42 | Key |
| openssl_signature.c:353:42:353:50 | SignatureInput |
| openssl_signature.c:355:50:355:56 | Message |
| openssl_signature.c:356:9:356:37 | VerifyOperation |
| openssl_signature.c:388:9:388:16 | KeyOperationAlgorithm |
| openssl_signature.c:388:9:388:16 | SignOperation |
| openssl_signature.c:388:28:388:33 | Message |
| openssl_signature.c:388:48:388:57 | SignatureOutput |
| openssl_signature.c:389:48:389:54 | Key |
| openssl_signature.c:411:12:411:21 | KeyOperationAlgorithm |
| openssl_signature.c:411:12:411:21 | VerifyOperation |
| openssl_signature.c:411:33:411:38 | Message |
| openssl_signature.c:411:53:411:61 | SignatureInput |
| openssl_signature.c:412:51:412:57 | Key |
| openssl_signature.c:519:35:519:46 | KeyOperationAlgorithm |
| openssl_signature.c:523:51:523:54 | Constant |
| openssl_signature.c:524:9:524:23 | KeyGeneration |
| openssl_signature.c:524:34:524:37 | Key |
| openssl_signature.c:541:50:541:54 | KeyOperationAlgorithm |
| openssl_signature.c:545:55:545:58 | Constant |
| openssl_signature.c:551:32:551:37 | Key |
| openssl_signature.c:554:9:554:23 | KeyGeneration |
| openssl_signature.c:554:34:554:37 | Key |
| openssl_signature.c:574:37:574:74 | Constant |
| openssl_signature.c:575:24:575:30 | HashAlgorithm |
| openssl_signature.c:583:35:583:46 | KeyOperationAlgorithm |
| openssl_signature.c:587:51:587:54 | Constant |
| openssl_signature.c:588:9:588:23 | KeyGeneration |
| openssl_signature.c:588:34:588:37 | Key |
| openssl_signature.c:596:15:596:31 | KeyOperationAlgorithm |
| openssl_signature.c:604:37:604:46 | HashAlgorithm |
| openssl_signature.c:606:41:606:50 | HashAlgorithm |
| openssl_signature.c:624:37:624:74 | Constant |
| openssl_signature.c:625:24:625:33 | HashAlgorithm |
| openssl_signature.c:660:37:660:61 | Constant |
| openssl_signature.c:661:24:661:33 | HashAlgorithm |
| openssl_signature.c:670:35:670:46 | KeyOperationAlgorithm |
| openssl_signature.c:674:51:674:54 | Constant |
| openssl_signature.c:675:9:675:23 | KeyGeneration |
| openssl_signature.c:675:34:675:37 | Key |
| openssl_signature.c:701:37:701:67 | Constant |
| openssl_signature.c:702:24:702:33 | HashAlgorithm |
| openssl_signature.c:711:35:711:46 | KeyOperationAlgorithm |
| openssl_signature.c:715:51:715:54 | Constant |
| openssl_signature.c:716:9:716:23 | KeyGeneration |
| openssl_signature.c:716:34:716:37 | Key |
| openssl_signature.c:741:37:741:66 | Constant |
| openssl_signature.c:742:24:742:31 | HashAlgorithm |
| openssl_signature.c:755:35:755:46 | KeyOperationAlgorithm |
| openssl_signature.c:759:51:759:54 | Constant |
| openssl_signature.c:760:9:760:23 | KeyGeneration |
| openssl_signature.c:760:34:760:37 | Key |
| openssl_signature.c:786:37:786:73 | Constant |
| openssl_signature.c:787:24:787:31 | HashAlgorithm |
| openssl_signature.c:795:35:795:46 | KeyOperationAlgorithm |
| openssl_signature.c:799:51:799:54 | Constant |
| openssl_signature.c:800:9:800:23 | KeyGeneration |
| openssl_signature.c:800:34:800:37 | Key |
| openssl_signature.c:826:37:826:63 | Constant |
| openssl_signature.c:833:35:833:46 | KeyOperationAlgorithm |
| openssl_signature.c:837:51:837:54 | Constant |
| openssl_signature.c:838:9:838:23 | KeyGeneration |
| openssl_signature.c:838:34:838:37 | Key |
| openssl_signature.c:847:85:847:96 | HashAlgorithm |
| openssl_signature.c:847:85:847:96 | KeyOperationAlgorithm |
| openssl_signature.c:848:87:848:98 | HashAlgorithm |
| openssl_signature.c:848:87:848:98 | KeyOperationAlgorithm |