hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add typetracker to constrain attribute.

Browse Source
This commit is contained in:
Rasmus Lerchedahl Petersen
2021-03-27 01:07:15 +01:00
parent bf81122fc6
commit bd86388447
1 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
python/ql/src/Security/CWE-327/Ssl.qll
View File

@@ -22,10 +22,28 @@ class SSLDefaultContextCreation extends ContextCreation {
override DataFlow::CfgNode getProtocol() { none() }
}
/** Gets a reference to an `ssl.Context` instance. */
private DataFlow::LocalSourceNode sslContextInstance(DataFlow::TypeTracker t) {
t.start() and
result = API::moduleImport("ssl").getMember(["SSLContext", "create_default_context"]).getACall()
or
exists(DataFlow::TypeTracker t2 | result = sslContextInstance(t2).track(t2, t))
}
/** Gets a reference to an `ssl.Context` instance. */
DataFlow::Node sslContextInstance() {
sslContextInstance(DataFlow::TypeTracker::end()).flowsTo(result)
}
class WrapSocketCall extends ConnectionCreation {
override CallNode node;
WrapSocketCall() { node.getFunction().(AttrNode).getName() = "wrap_socket" }
WrapSocketCall() {
exists(DataFlow::AttrRead call | node.getFunction() = call.asCfgNode() |
call.getAttributeName() = "wrap_socket" and
call.getObject() = sslContextInstance()
)
}
override DataFlow::CfgNode getContext() {
result.getNode() = node.getFunction().(AttrNode).getObject()