hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10106 from egregius313/egregius313/android-backup-allowed

Browse Source 
Java: Query to detect Android backup allowed
This commit is contained in:
Edward Minnix III
2022-09-12 11:14:03 -04:00
committed by GitHub
parent a8a7909d33 817f12cae6
commit eadb8a3988
31 changed files with 279 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
java/ql/test/query-tests/security/CWE-312/AndroidManifest.xml → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/AndroidManifest.xml
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.expected → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.expected
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.java → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.java
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidDatabaseTest.ql → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidDatabaseTest.ql
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.expected → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.expected
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.java → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.java
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageAndroidFilesystemTest.ql → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageAndroidFilesystemTest.ql
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.expected → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.expected
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.java → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.java
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTest.ql → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTest.ql
View File

0
java/ql/test/query-tests/security/CWE-312/CleartextStorageSharedPrefsTestKt.kt → java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/CleartextStorageSharedPrefsTestKt.kt
View File

2
java/ql/test/query-tests/security/CWE-312/android/CleartextStorage/options Normal file
View File

@@ -0,0 +1,2 @@
// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0
// codeql-extractor-kotlin-options: ${testdir}/../../../../../stubs/google-android-9.0.0

2
java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.expected Normal file
View File

@@ -0,0 +1,2 @@
| TestExplicitlyEnabled/AndroidManifest.xml:6:5:27:19 | application | Backups are allowed in this Android application. |
| TestMissing/AndroidManifest.xml:6:5:27:19 | application | Backups are allowed in this Android application. |

3
java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.java Normal file
View File

@@ -0,0 +1,3 @@
class AllowBackupEnabledTest {
}

1
java/ql/test/query-tests/security/CWE-312/android/backup/AllowBackupEnabledTest.qlref Normal file
View File

@@ -0,0 +1 @@
Security/CWE/CWE-312/AllowBackupAttributeEnabled.ql

3
java/ql/test/query-tests/security/CWE-312/android/backup/TestEmptyManifest/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,3 @@
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
package="com.example.myapplication" />

29
java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyDisabled/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,29 @@
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
xmlns:tools="http://schemas.android.com/tools"
package="com.example.myapplication">
<!-- Safe: 'android:allowBackup' explicitly disabled --> <application
android:allowBackup="false"
android:dataExtractionRules="@xml/data_extraction_rules"
android:fullBackupContent="@xml/backup_rules"
android:icon="@mipmap/ic_launcher"
android:label="@string/app_name"
android:roundIcon="@mipmap/ic_launcher_round"
android:supportsRtl="true"
android:theme="@style/Theme.MyApplication"
tools:targetApi="31">
<activity
android:name=".MainActivity"
android:exported="true"
android:label="@string/app_name"
android:theme="@style/Theme.MyApplication.NoActionBar">
<intent-filter>
<action android:name="android.intent.action.MAIN" />
<category android:name="android.intent.category.LAUNCHER" />
</intent-filter>
</activity>
</application>
</manifest>

29
java/ql/test/query-tests/security/CWE-312/android/backup/TestExplicitlyEnabled/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,29 @@
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
xmlns:tools="http://schemas.android.com/tools"
package="com.example.myapplication">
<application
android:allowBackup="true"
android:dataExtractionRules="@xml/data_extraction_rules"
android:fullBackupContent="@xml/backup_rules"
android:icon="@mipmap/ic_launcher"
android:label="@string/app_name"
android:roundIcon="@mipmap/ic_launcher_round"
android:supportsRtl="true"
android:theme="@style/Theme.MyApplication"
tools:targetApi="31">
<activity
android:name=".MainActivity"
android:exported="true"
android:label="@string/app_name"
android:theme="@style/Theme.MyApplication.NoActionBar">
<intent-filter>
<action android:name="android.intent.action.MAIN" />
<category android:name="android.intent.category.LAUNCHER" />
</intent-filter>
</activity>
</application>
</manifest>

6
java/ql/test/query-tests/security/CWE-312/android/backup/TestLibrary/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
package="com.example.myapplication" >
<!-- Safe: application element does not provide the MAIN intent --> <application android:supportsRtl="true">
</application>
</manifest>

29
java/ql/test/query-tests/security/CWE-312/android/backup/TestMissing/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,29 @@
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
xmlns:tools="http://schemas.android.com/tools"
package="com.example.myapplication">
<application
android:dataExtractionRules="@xml/data_extraction_rules"
android:fullBackupContent="@xml/backup_rules"
android:icon="@mipmap/ic_launcher"
android:label="@string/app_name"
android:roundIcon="@mipmap/ic_launcher_round"
android:supportsRtl="true"
android:theme="@style/Theme.MyApplication"
tools:targetApi="31">
<activity
android:name=".ItemDetailHostActivity"
android:exported="true"
android:label="@string/app_name"
android:resizeableActivity="true"
tools:targetApi="24">
<intent-filter>
<action android:name="android.intent.action.MAIN" />
<category android:name="android.intent.category.LAUNCHER" />
</intent-filter>
</activity>
</application>
</manifest>

29
java/ql/test/query-tests/security/CWE-312/android/backup/Testbuild/AndroidManifest.xml Normal file
View File

@@ -0,0 +1,29 @@
<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
xmlns:tools="http://schemas.android.com/tools"
package="com.example.myapplication">
<!-- Safe: files in the build directory are ignored --> <application
android:allowBackup="true"
android:dataExtractionRules="@xml/data_extraction_rules"
android:fullBackupContent="@xml/backup_rules"
android:icon="@mipmap/ic_launcher"
android:label="@string/app_name"
android:roundIcon="@mipmap/ic_launcher_round"
android:supportsRtl="true"
android:theme="@style/Theme.MyApplication"
tools:targetApi="31">
<activity
android:name=".MainActivity"
android:exported="true"
android:label="@string/app_name"
android:theme="@style/Theme.MyApplication.NoActionBar">
<intent-filter>
<action android:name="android.intent.action.MAIN" />
<category android:name="android.intent.category.LAUNCHER" />
</intent-filter>
</activity>
</application>
</manifest>

2
java/ql/test/query-tests/security/CWE-312/android/backup/options Normal file
View File

@@ -0,0 +1,2 @@
// semmle-extractor-options: --javac-args -cp ${testdir}/../../../../../stubs/google-android-9.0.0
// codeql-extractor-kotlin-options: ${testdir}/../../../../../stubs/google-android-9.0.0

2
java/ql/test/query-tests/security/CWE-312/options
View File

@@ -1,2 +0,0 @@
// semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/google-android-9.0.0
// codeql-extractor-kotlin-options: ${testdir}/../../../stubs/google-android-9.0.0