hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Swift: Standardize on 'AdditionalFlowStep' as well.

Browse Source
This commit is contained in:
Geoffrey White
2023-05-05 10:20:47 +01:00
parent d92ecbb3cf
commit c5178de3f4
40 changed files with 82 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
swift/ql/lib/codeql/swift/security/CleartextLoggingExtensions.qll
View File

@@ -12,14 +12,14 @@ abstract class CleartextLoggingSink extends DataFlow::Node { }
abstract class CleartextLoggingBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*
* Extend this class to add additional taint steps that should apply to paths related to
* Extend this class to add additional flow steps that should apply to paths related to
* cleartext logging of sensitive data vulnerabilities.
*/
class CleartextLoggingAdditionalTaintStep extends Unit {
class CleartextLoggingAdditionalFlowStep extends Unit {
/**
* Holds if the step from `n1` to `n2` should be considered a taint
* Holds if the step from `n1` to `n2` should be considered a flow
* step for flows related to cleartext logging of sensitive data vulnerabilities.
*/
abstract predicate step(DataFlow::Node n1, DataFlow::Node n2);

2
swift/ql/lib/codeql/swift/security/CleartextLoggingQuery.qll
View File

@@ -23,7 +23,7 @@ module CleartextLoggingConfig implements DataFlow::ConfigSig {
predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
predicate isAdditionalFlowStep(DataFlow::Node n1, DataFlow::Node n2) {
any(CleartextLoggingAdditionalTaintStep s).step(n1, n2)
any(CleartextLoggingAdditionalFlowStep s).step(n1, n2)
}
}

8
swift/ql/lib/codeql/swift/security/CleartextStorageDatabaseExtensions.qll
View File

@@ -20,11 +20,11 @@ abstract class CleartextStorageDatabaseSink extends DataFlow::Node { }
abstract class CleartextStorageDatabaseBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class CleartextStorageDatabaseAdditionalTaintStep extends Unit {
class CleartextStorageDatabaseAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to cleartext database storage vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
@@ -123,7 +123,7 @@ private class CleartextStorageDatabaseEncryptionBarrier extends CleartextStorage
/**
* An additional taint step for cleartext database storage vulnerabilities.
*/
private class CleartextStorageDatabaseArrayAdditionalTaintStep extends CleartextStorageDatabaseAdditionalTaintStep
private class CleartextStorageDatabaseArrayAdditionalFlowStep extends CleartextStorageDatabaseAdditionalFlowStep
{
override predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
// needed until we have proper content flow through arrays.

6
swift/ql/lib/codeql/swift/security/CleartextStorageDatabaseQuery.qll
View File

@@ -18,12 +18,10 @@ module CleartextStorageDatabaseConfig implements DataFlow::ConfigSig {
predicate isSink(DataFlow::Node node) { node instanceof CleartextStorageDatabaseSink }
predicate isBarrier(DataFlow::Node barrier) {
barrier instanceof CleartextStorageDatabaseBarrier
}
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof CleartextStorageDatabaseBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(CleartextStorageDatabaseAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(CleartextStorageDatabaseAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
predicate isBarrierIn(DataFlow::Node node) {

6
swift/ql/lib/codeql/swift/security/CleartextStoragePreferencesExtensions.qll
View File

@@ -23,11 +23,11 @@ abstract class CleartextStoragePreferencesSink extends DataFlow::Node {
abstract class CleartextStoragePreferencesBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class CleartextStoragePreferencesAdditionalTaintStep extends Unit {
class CleartextStoragePreferencesAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to cleartext preferences storage vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/CleartextStoragePreferencesQuery.qll
View File

@@ -23,7 +23,7 @@ module CleartextStoragePreferencesConfig implements DataFlow::ConfigSig {
}
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(CleartextStoragePreferencesAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(CleartextStoragePreferencesAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
predicate isBarrierIn(DataFlow::Node node) {

6
swift/ql/lib/codeql/swift/security/CleartextTransmissionExtensions.qll
View File

@@ -20,11 +20,11 @@ abstract class CleartextTransmissionSink extends DataFlow::Node { }
abstract class CleartextTransmissionBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class CleartextTransmissionAdditionalTaintStep extends Unit {
class CleartextTransmissionAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to cleartext transmission vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/CleartextTransmissionQuery.qll
View File

@@ -21,7 +21,7 @@ module CleartextTransmissionConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof CleartextTransmissionBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(CleartextTransmissionAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(CleartextTransmissionAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
predicate isBarrierIn(DataFlow::Node node) {

6
swift/ql/lib/codeql/swift/security/ConstantPasswordExtensions.qll
View File

@@ -19,11 +19,11 @@ abstract class ConstantPasswordSink extends DataFlow::Node { }
abstract class ConstantPasswordBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class ConstantPasswordAdditionalTaintStep extends Unit {
class ConstantPasswordAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to constant password vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/ConstantPasswordQuery.qll
View File

@@ -31,7 +31,7 @@ module ConstantPasswordConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof ConstantPasswordBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(ConstantPasswordAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(ConstantPasswordAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/ConstantSaltExtensions.qll
View File

@@ -19,11 +19,11 @@ abstract class ConstantSaltSink extends DataFlow::Node { }
abstract class ConstantSaltBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class ConstantSaltAdditionalTaintStep extends Unit {
class ConstantSaltAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to constant salt vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/ConstantSaltQuery.qll
View File

@@ -32,7 +32,7 @@ module ConstantSaltConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof ConstantSaltBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(ConstantSaltAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(ConstantSaltAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/ECBEncryptionExtensions.qll
View File

@@ -27,11 +27,11 @@ abstract class EcbEncryptionSink extends DataFlow::Node { }
abstract class EcbEncryptionBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class EcbEncryptionAdditionalTaintStep extends Unit {
class EcbEncryptionAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to ECB encryption vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/ECBEncryptionQuery.qll
View File

@@ -20,7 +20,7 @@ module EcbEncryptionConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof EcbEncryptionBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(EcbEncryptionAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(EcbEncryptionAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/HardcodedEncryptionKeyExtensions.qll
View File

@@ -19,11 +19,11 @@ abstract class HardcodedEncryptionKeySink extends DataFlow::Node { }
abstract class HardcodedEncryptionKeyBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class HardcodedEncryptionKeyAdditionalTaintStep extends Unit {
class HardcodedEncryptionKeyAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to hard-coded encryption key vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/HardcodedEncryptionKeyQuery.qll
View File

@@ -37,7 +37,7 @@ module HardcodedKeyConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof HardcodedEncryptionKeyBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(HardcodedEncryptionKeyAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(HardcodedEncryptionKeyAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/InsecureTLSExtensions.qll
View File

@@ -25,11 +25,11 @@ abstract class InsecureTlsExtensionsSink extends DataFlow::Node { }
abstract class InsecureTlsExtensionsBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class InsecureTlsExtensionsAdditionalTaintStep extends Unit {
class InsecureTlsExtensionsAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to insecure TLS configuration vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/InsecureTLSQuery.qll
View File

@@ -19,7 +19,7 @@ module InsecureTlsConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof InsecureTlsExtensionsBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(InsecureTlsExtensionsAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(InsecureTlsExtensionsAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/InsufficientHashIterationsExtensions.qll
View File

@@ -20,11 +20,11 @@ abstract class InsufficientHashIterationsSink extends DataFlow::Node { }
abstract class InsufficientHashIterationsBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class InsufficientHashIterationsAdditionalTaintStep extends Unit {
class InsufficientHashIterationsAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to insufficient hash interation vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/InsufficientHashIterationsQuery.qll
View File

@@ -32,7 +32,7 @@ module InsufficientHashIterationsConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof InsufficientHashIterationsBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(InsufficientHashIterationsAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(InsufficientHashIterationsAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

8
swift/ql/lib/codeql/swift/security/PathInjectionExtensions.qll
View File

@@ -16,14 +16,14 @@ abstract class PathInjectionSink extends DataFlow::Node { }
abstract class PathInjectionBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*
* Extend this class to add additional taint steps that should apply to paths related to
* Extend this class to add additional flow steps that should apply to paths related to
* path injection vulnerabilities.
*/
class PathInjectionAdditionalTaintStep extends Unit {
class PathInjectionAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to path injection vulnerabilities.
*/
abstract predicate step(DataFlow::Node node1, DataFlow::Node node2);

2
swift/ql/lib/codeql/swift/security/PathInjectionQuery.qll
View File

@@ -21,7 +21,7 @@ module PathInjectionConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof PathInjectionBarrier }
predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
any(PathInjectionAdditionalTaintStep s).step(node1, node2)
any(PathInjectionAdditionalFlowStep s).step(node1, node2)
}
}

8
swift/ql/lib/codeql/swift/security/PredicateInjectionExtensions.qll
View File

@@ -11,14 +11,14 @@ abstract class PredicateInjectionSink extends DataFlow::Node { }
abstract class PredicateInjectionBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*
* Extend this class to add additional taint steps that should apply to paths related to
* Extend this class to add additional flow steps that should apply to paths related to
* predicate injection vulnerabilities.
*/
class PredicateInjectionAdditionalTaintStep extends Unit {
class PredicateInjectionAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to predicate injection vulnerabilities.
*/
abstract predicate step(DataFlow::Node n1, DataFlow::Node n2);

2
swift/ql/lib/codeql/swift/security/PredicateInjectionQuery.qll
View File

@@ -20,7 +20,7 @@ module PredicateInjectionConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof PredicateInjectionBarrier }
predicate isAdditionalFlowStep(DataFlow::Node n1, DataFlow::Node n2) {
any(PredicateInjectionAdditionalTaintStep s).step(n1, n2)
any(PredicateInjectionAdditionalFlowStep s).step(n1, n2)
}
}

4
swift/ql/lib/codeql/swift/security/SqlInjectionExtensions.qll
View File

@@ -19,9 +19,9 @@ abstract class SqlInjectionSink extends DataFlow::Node { }
abstract class SqlInjectionBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class SqlInjectionAdditionalTaintStep extends Unit {
class SqlInjectionAdditionalFlowStep extends Unit {
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
}

2
swift/ql/lib/codeql/swift/security/SqlInjectionQuery.qll
View File

@@ -21,7 +21,7 @@ module SqlInjectionConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof SqlInjectionBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(SqlInjectionAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(SqlInjectionAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/StaticInitializationVectorExtensions.qll
View File

@@ -19,11 +19,11 @@ abstract class StaticInitializationVectorSink extends DataFlow::Node { }
abstract class StaticInitializationVectorBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class StaticInitializationVectorAdditionalTaintStep extends Unit {
class StaticInitializationVectorAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to static initialization vector vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/StaticInitializationVectorQuery.qll
View File

@@ -33,7 +33,7 @@ module StaticInitializationVectorConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof StaticInitializationVectorBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(StaticInitializationVectorAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(StaticInitializationVectorAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/StringLengthConflationExtensions.qll
View File

@@ -104,11 +104,11 @@ abstract class StringLengthConflationSink extends DataFlow::Node {
abstract class StringLengthConflationBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class StringLengthConflationAdditionalTaintStep extends Unit {
class StringLengthConflationAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to string length conflation vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/StringLengthConflationQuery.qll
View File

@@ -34,7 +34,7 @@ module StringLengthConflationConfig implements DataFlow::StateConfigSig {
predicate isBarrier(DataFlow::Node barrier, FlowState flowstate) { none() }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(StringLengthConflationAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(StringLengthConflationAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
predicate isAdditionalFlowStep(

4
swift/ql/lib/codeql/swift/security/UncontrolledFormatStringExtensions.qll
View File

@@ -20,9 +20,9 @@ abstract class UncontrolledFormatStringSink extends DataFlow::Node { }
abstract class UncontrolledFormatStringBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class UncontrolledFormatStringAdditionalTaintStep extends Unit {
class UncontrolledFormatStringAdditionalFlowStep extends Unit {
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
}

2
swift/ql/lib/codeql/swift/security/UncontrolledFormatStringQuery.qll
View File

@@ -21,7 +21,7 @@ module TaintedFormatConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof UncontrolledFormatStringBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(UncontrolledFormatStringAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(UncontrolledFormatStringAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/UnsafeJsEvalExtensions.qll
View File

@@ -19,9 +19,9 @@ abstract class UnsafeJsEvalSink extends DataFlow::Node { }
abstract class UnsafeJsEvalBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class UnsafeJsEvalAdditionalTaintStep extends Unit {
class UnsafeJsEvalAdditionalFlowStep extends Unit {
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
}
@@ -96,7 +96,7 @@ private class JSEvaluateScriptDefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
/**
* A default SQL injection additional taint step.
*/
private class DefaultUnsafeJsEvalAdditionalTaintStep extends UnsafeJsEvalAdditionalTaintStep {
private class DefaultUnsafeJsEvalAdditionalFlowStep extends UnsafeJsEvalAdditionalFlowStep {
override predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
exists(Argument arg |
arg =

2
swift/ql/lib/codeql/swift/security/UnsafeJsEvalQuery.qll
View File

@@ -20,7 +20,7 @@ module UnsafeJsEvalConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof UnsafeJsEvalBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(UnsafeJsEvalAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(UnsafeJsEvalAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

4
swift/ql/lib/codeql/swift/security/UnsafeWebViewFetchExtensions.qll
View File

@@ -24,9 +24,9 @@ abstract class UnsafeWebViewFetchSink extends DataFlow::Node {
abstract class UnsafeWebViewFetchBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class UnsafeWebViewFetchAdditionalTaintStep extends Unit {
class UnsafeWebViewFetchAdditionalFlowStep extends Unit {
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
}

2
swift/ql/lib/codeql/swift/security/UnsafeWebViewFetchQuery.qll
View File

@@ -26,7 +26,7 @@ module UnsafeWebViewFetchConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof UnsafeWebViewFetchBarrier }
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(UnsafeWebViewFetchAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(UnsafeWebViewFetchAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/WeakSensitiveDataHashingExtensions.qll
View File

@@ -25,11 +25,11 @@ abstract class WeakSensitiveDataHashingSink extends DataFlow::Node {
abstract class WeakSensitiveDataHashingBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*/
class WeakSensitiveDataHashingAdditionalTaintStep extends Unit {
class WeakSensitiveDataHashingAdditionalFlowStep extends Unit {
/**
* Holds if the step from `node1` to `node2` should be considered a taint
* Holds if the step from `node1` to `node2` should be considered a flow
* step for paths related to weak sensitive data hashing vulnerabilities.
*/
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

2
swift/ql/lib/codeql/swift/security/WeakSensitiveDataHashingQuery.qll
View File

@@ -31,7 +31,7 @@ module WeakHashingConfig implements DataFlow::ConfigSig {
}
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
any(WeakSensitiveDataHashingAdditionalTaintStep s).step(nodeFrom, nodeTo)
any(WeakSensitiveDataHashingAdditionalFlowStep s).step(nodeFrom, nodeTo)
}
}

6
swift/ql/lib/codeql/swift/security/XXEExtensions.qll
View File

@@ -13,12 +13,12 @@ abstract class XxeSink extends DataFlow::Node { }
abstract class XxeBarrier extends DataFlow::Node { }
/**
* A unit class for adding additional taint steps.
* A unit class for adding additional flow steps.
*
* Extend this class to add additional taint steps that should apply to paths related to
* Extend this class to add additional flow steps that should apply to paths related to
* XML external entities (XXE) vulnerabilities.
*/
class XxeAdditionalTaintStep extends Unit {
class XxeAdditionalFlowStep extends Unit {
abstract predicate step(DataFlow::Node n1, DataFlow::Node n2);
}

2
swift/ql/lib/codeql/swift/security/XXEQuery.qll
View File

@@ -20,7 +20,7 @@ module XxeConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof XxeBarrier }
predicate isAdditionalFlowStep(DataFlow::Node n1, DataFlow::Node n2) {
any(XxeAdditionalTaintStep s).step(n1, n2)
any(XxeAdditionalFlowStep s).step(n1, n2)
}
}