Java: Add more neutrals

Adds more neutral models to help the model generator ignore certain callables.

Also improves the precision of certain URL models by using synthetic fields so that the parts of a URL are tainted separately.
This commit is contained in:
Tony Torralba
2024-03-26 17:26:58 +01:00
parent 2de62dfcdd
commit d786ea90a4
5 changed files with 96 additions and 4 deletions

View File

@@ -4,3 +4,43 @@ extensions:
extensible: sinkModel
data:
- ["java.security.cert", "X509CertSelector", False, "setSubjectPublicKey", "(byte[])", "", "Argument[0]", "credentials-key", "hq-generated"]
- addsTo:
pack: codeql/java-all
extensible: neutralModel
data:
- ["java.security.cert", "CertificateFactory", "CertificateFactory", "(CertificateFactorySpi,Provider,String)", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "generateCertificate", "(InputStream)", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "generateCertificates", "(InputStream)", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "generateCertPath", "", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "generateCRL", "(InputStream)", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "generateCRLs", "(InputStream)", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "getCertPathEncodings", "()", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "getInstance", "", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "getProvider", "()", "summary", "df-manual"]
- ["java.security.cert", "CertificateFactory", "getType", "()", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "CertStore", "(CertStoreSpi,Provider,String,CertStoreParameters)", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "getCertificates", "(CertSelector)", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "getCertStoreCertificates", "()", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "getCRLs", "(CRLSelector)", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "getDefaultType", "()", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "getInstance", "", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "getProvider", "()", "summary", "df-manual"]
- ["java.security.cert", "CertStore", "getType", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "PKIXParameters", "", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "addCertPathChecker", "(PKIXCertPathChecker)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "addCertStore", "(CertStore)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getCertPathCheckers", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getCertStores", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getDate", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getInitialPolicies", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getPolicyQualifiersRejected", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getSigProvider", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getTargetCertConstraints", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "getTrustAnchors", "()", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "setAnyPolicyInhibited", "(boolean)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "setCertPathCheckers", "(List)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "setCertStores", "(List)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "setDate", "(Date)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "setSigProvider", "(String)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "setTargetConstraints", "(CertSelector)", "summary", "df-manual"]
- ["java.security.cert", "PKIXParameters", "setTrustAnchors", "(Set)", "summary", "df-manual"]