hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 14:23:03 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add barrier guard for comparison

Browse Source
This commit is contained in:
Owen Mansel-Chan
2021-10-27 10:31:03 +01:00
parent e784c35691
commit cdee44bbd1
3 changed files with 50 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
ql/src/Security/CWE-326/InsufficientKeySize.ql
View File

@@ -27,6 +27,18 @@ class RsaKeyTrackingConfiguration extends DataFlow::Configuration {
c.getTarget().hasQualifiedName("crypto/rsa", "GenerateKey")
)
}
override predicate isBarrierGuard(DataFlow::BarrierGuard guard) {
guard instanceof ComparisonBarrierGuard
}
}
class ComparisonBarrierGuard extends DataFlow::BarrierGuard, DataFlow::RelationalComparisonNode {
override predicate checks(Expr e, boolean branch) {
exists(DataFlow::Node lesser , DataFlow::Node greater, int bias | this.leq(branch, lesser, greater, bias) |
globalValueNumber(DataFlow::exprNode(e)) = globalValueNumber(greater) and lesser.getIntValue() - bias >= 2048
)
}
}
from RsaKeyTrackingConfiguration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

8
ql/test/query-tests/Security/CWE-326/InsufficientKeySize.expected
View File

@@ -2,6 +2,8 @@ edges
| InsufficientKeySize.go:13:10:13:13 | 1024 : int | InsufficientKeySize.go:14:31:14:34 | size |
| InsufficientKeySize.go:18:7:18:10 | 1024 : int | InsufficientKeySize.go:25:11:25:14 | definition of size : int |
| InsufficientKeySize.go:25:11:25:14 | definition of size : int | InsufficientKeySize.go:26:31:26:34 | size |
| InsufficientKeySize.go:30:13:30:16 | 1024 : int | InsufficientKeySize.go:32:32:32:38 | keyBits |
| InsufficientKeySize.go:44:13:44:16 | 1024 : int | InsufficientKeySize.go:47:32:47:38 | keyBits |
nodes
| InsufficientKeySize.go:9:31:9:34 | 1024 | semmle.label | 1024 |
| InsufficientKeySize.go:13:10:13:13 | 1024 : int | semmle.label | 1024 : int |
@@ -9,7 +11,13 @@ nodes
| InsufficientKeySize.go:18:7:18:10 | 1024 : int | semmle.label | 1024 : int |
| InsufficientKeySize.go:25:11:25:14 | definition of size : int | semmle.label | definition of size : int |
| InsufficientKeySize.go:26:31:26:34 | size | semmle.label | size |
| InsufficientKeySize.go:30:13:30:16 | 1024 : int | semmle.label | 1024 : int |
| InsufficientKeySize.go:32:32:32:38 | keyBits | semmle.label | keyBits |
| InsufficientKeySize.go:44:13:44:16 | 1024 : int | semmle.label | 1024 : int |
| InsufficientKeySize.go:47:32:47:38 | keyBits | semmle.label | keyBits |
#select
| InsufficientKeySize.go:9:31:9:34 | 1024 | InsufficientKeySize.go:9:31:9:34 | 1024 | InsufficientKeySize.go:9:31:9:34 | 1024 | The size of this RSA key should be at least 2048 bits. |
| InsufficientKeySize.go:14:31:14:34 | size | InsufficientKeySize.go:13:10:13:13 | 1024 : int | InsufficientKeySize.go:14:31:14:34 | size | The size of this RSA key should be at least 2048 bits. |
| InsufficientKeySize.go:26:31:26:34 | size | InsufficientKeySize.go:18:7:18:10 | 1024 : int | InsufficientKeySize.go:26:31:26:34 | size | The size of this RSA key should be at least 2048 bits. |
| InsufficientKeySize.go:32:32:32:38 | keyBits | InsufficientKeySize.go:30:13:30:16 | 1024 : int | InsufficientKeySize.go:32:32:32:38 | keyBits | The size of this RSA key should be at least 2048 bits. |
| InsufficientKeySize.go:47:32:47:38 | keyBits | InsufficientKeySize.go:44:13:44:16 | 1024 : int | InsufficientKeySize.go:47:32:47:38 | keyBits | The size of this RSA key should be at least 2048 bits. |

30
ql/test/query-tests/Security/CWE-326/InsufficientKeySize.go
View File

@@ -25,3 +25,33 @@ func foo4() {
func foo5(size int) {
rsa.GenerateKey(rand.Reader, size)
}
func foo6() {
keyBits := 1024
if keyBits >= 2047 {
rsa.GenerateKey(rand.Reader, keyBits) // BAD
}
}
func foo7() {
keyBits := 1024
if keyBits >= 2048 {
rsa.GenerateKey(rand.Reader, keyBits) // GOOD
}
}
func foo8() {
keyBits := 1024
switch {
case keyBits >= 2047:
rsa.GenerateKey(rand.Reader, keyBits) // BAD
}
}
func foo9() {
keyBits := 1024
switch {
case keyBits >= 2048:
rsa.GenerateKey(rand.Reader, keyBits) // GOOD
}
}