hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #14725 from RasmusWL/re-modeling

Browse Source 
Python: Add taint-flow modeling for `re` module
This commit is contained in:
Rasmus Wriedt Larsen
2023-11-23 11:35:36 +01:00
committed by GitHub
parent ef8d38e9e0 3d46129bbf
commit d056706af5
9 changed files with 342 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
python/ql/test/experimental/dataflow/summaries-checks/dummy.py Normal file
View File

@@ -0,0 +1 @@
# an empty file, since we want the test to run on an empty db

0
python/ql/test/experimental/dataflow/summaries-checks/invalid-spec.expected Normal file
View File

8
python/ql/test/experimental/dataflow/summaries-checks/invalid-spec.ql Normal file
View File

@@ -0,0 +1,8 @@
import python
import semmle.python.dataflow.new.FlowSummary
import semmle.python.dataflow.new.internal.FlowSummaryImpl
query predicate invalidSpecComponent(SummarizedCallable sc, string s, string c) {
(sc.propagatesFlowExt(s, _, _) or sc.propagatesFlowExt(_, s, _)) and
Private::External::invalidSpecComponent(s, c)
}

0
python/ql/test/experimental/dataflow/summaries-checks/missing-attribute-content.expected Normal file
View File

11
python/ql/test/experimental/dataflow/summaries-checks/missing-attribute-content.ql Normal file
View File

@@ -0,0 +1,11 @@
import python
import semmle.python.dataflow.new.FlowSummary
import semmle.python.dataflow.new.internal.FlowSummaryImpl
from SummarizedCallable sc, string s, string c, string attr
where
(sc.propagatesFlowExt(s, _, _) or sc.propagatesFlowExt(_, s, _)) and
Private::External::invalidSpecComponent(s, c) and
c = "Attribute[" + attr + "]"
select "The attribute \"" + attr +
"\" is not a valid TAttributeContent, please add it to the hardcoded list of TAttributeContent in the dataflow library."