Fix credential-other

This commit is contained in:
Ed Minnix
2023-08-16 01:46:38 -04:00
parent f783ca7940
commit f8c3b2977a
15 changed files with 63 additions and 63 deletions

View File

@@ -3,5 +3,5 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "credential-other", "Argument[1]", "manual"]
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["ch.ethz.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "", "Argument[1]", "credential-other", "manual"]

View File

@@ -3,5 +3,5 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String, String)", "credential-other", "Argument[1]", "manual"]
- ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.amazonaws.auth", "BasicAWSCredentials", False, "BasicAWSCredentials", "(String, String)", "", "Argument[1]", "credential-other", "manual"]

View File

@@ -3,9 +3,9 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(byte[])", "credential-other", "Argument[0]", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(byte[])", "credential-other", "Argument[0]", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(byte[])", "credential-other", "Argument[0]", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC256", "(byte[])", "", "Argument[0]", "credential-other", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC384", "(byte[])", "", "Argument[0]", "credential-other", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.auth0.jwt.algorithms", "Algorithm", False, "HMAC512", "(byte[])", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.azure.identity", "ClientSecretCredentialBuilder", False, "clientSecret", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "password", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "username", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.azure.identity", "ClientSecretCredentialBuilder", False, "clientSecret", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "password", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.azure.identity", "UsernamePasswordCredentialBuilder", False, "username", "(String)", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -4,10 +4,10 @@ extensions:
extensible: sinkModel
data:
- ["com.jcraft.jsch", "JSch", True, "getSession", "(String,String,int)", "", "Argument[1]", "request-forgery", "ai-manual"]
- ["com.jcraft.jsch", "JSch", False, "getSession", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["com.jcraft.jsch", "JSch", False, "getSession", "(String, String, int)", "credential-other", "Argument[0]", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(byte[])", "credential-other", "Argument[0]", "manual"]
- ["com.jcraft.jsch", "JSch", False, "getSession", "(String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.jcraft.jsch", "JSch", False, "getSession", "(String, String, int)", "", "Argument[0]", "credential-other", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.jcraft.jsch", "Session", False, "setPassword", "(byte[])", "", "Argument[0]", "credential-other", "manual"]
- addsTo:
pack: codeql/java-all
extensible: summaryModel

View File

@@ -3,7 +3,7 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String, String)", "credential-other", "Argument[1]", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setPassword", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setUser", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "getConnection", "(String, String)", "", "Argument[1]", "credential-other", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setPassword", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.microsoft.sqlserver.jdbc", "SQLServerDataSource", False, "setUser", "(String)", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -3,13 +3,13 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.mongodb", "MongoCredential", False, "createCredential", "(String, String, char[])", "credential-other", "Argument[0]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createCredential", "(String, String, char[])", "credential-other", "Argument[2]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createGSSAPICredential", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "(String, String, char[])", "credential-other", "Argument[0]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "(String, String, char[])", "credential-other", "Argument[2]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoX509Credential", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createPlainCredential", "(String, String, char[])", "credential-other", "Argument[0]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createPlainCredential", "(String, String, char[])", "credential-other", "Argument[2]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "(String, String, char[])", "credential-other", "Argument[0]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "(String, String, char[])", "credential-other", "Argument[2]", "manual"]
- ["com.mongodb", "MongoCredential", False, "createCredential", "(String, String, char[])", "", "Argument[0]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createCredential", "(String, String, char[])", "", "Argument[2]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createGSSAPICredential", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "(String, String, char[])", "", "Argument[0]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoCRCredential", "(String, String, char[])", "", "Argument[2]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createMongoX509Credential", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createPlainCredential", "(String, String, char[])", "", "Argument[0]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createPlainCredential", "(String, String, char[])", "", "Argument[2]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "(String, String, char[])", "", "Argument[0]", "credential-other", "manual"]
- ["com.mongodb", "MongoCredential", False, "createScramSha1Credential", "(String, String, char[])", "", "Argument[2]", "credential-other", "manual"]

View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setPassword", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setUsername", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.sshtools.j2ssh.authentication", "SshAuthenticationClient", False, "setUsername", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setPassword", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.sshtools.j2ssh.authentication", "PasswordAuthenticationClient", False, "setUsername", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.sshtools.j2ssh.authentication", "SshAuthenticationClient", False, "setUsername", "(String)", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -3,16 +3,16 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String, String, String)", "credential-other", "Argument[0]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String, String, String)", "credential-other", "Argument[1]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String, String, String)", "credential-other", "Argument[2]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithNone", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "credential-other", "Argument[1]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, File, String)", "credential-other", "Argument[0]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, File, String)", "credential-other", "Argument[2]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, char[], String)", "credential-other", "Argument[0]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, char[], String)", "credential-other", "Argument[1]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, char[], String)", "credential-other", "Argument[2]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "getRemainingAuthMethods", "(String)", "credential-other", "Argument[0]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "isAuthMethodAvailable", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String, String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String, String, String)", "", "Argument[1]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithDSA", "(String, String, String)", "", "Argument[2]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithNone", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPassword", "(String, String)", "", "Argument[1]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, File, String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, File, String)", "", "Argument[2]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, char[], String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, char[], String)", "", "Argument[1]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "authenticateWithPublicKey", "(String, char[], String)", "", "Argument[2]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "getRemainingAuthMethods", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["com.trilead.ssh2", "Connection", False, "isAuthMethodAvailable", "(String, String)", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -11,8 +11,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["javax.crypto.spec", "IvParameterSpec", False, "IvParameterSpec", "(byte[])", "credential-other", "Argument[0]", "manual"]
- ["javax.crypto.spec", "IvParameterSpec", False, "IvParameterSpec", "(byte[], int, int)", "credential-other", "Argument[0]", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[])", "", "Argument[0]", "credential-password", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[], byte[], int)", "", "Argument[0]", "credential-password", "manual"]
- ["javax.crypto.spec", "PBEKeySpec", False, "PBEKeySpec", "(char[], byte[], int, int)", "", "Argument[0]", "credential-password", "manual"]
@@ -25,3 +23,5 @@ extensions:
- ["javax.crypto.spec", "DESedeKeySpec", False, "isParityAdjusted", "(byte[], int)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["javax.crypto.spec", "SecretKeySpec", False, "SecretKeySpec", "(byte[], String)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["javax.crypto.spec", "SecretKeySpec", False, "SecretKeySpec", "(byte[], int, int, String)", "", "Argument[0]", "crypto-parameter", "manual"]
- ["javax.crypto.spec", "IvParameterSpec", False, "IvParameterSpec", "(byte[])", "", "Argument[0]", "credential-other", "manual"]
- ["javax.crypto.spec", "IvParameterSpec", False, "IvParameterSpec", "(byte[], int, int)", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -3,7 +3,7 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, String)", "credential-other", "Argument[1]", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, char[])", "credential-other", "Argument[0]", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, char[])", "credential-other", "Argument[1]", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, String)", "", "Argument[1]", "credential-other", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, char[])", "", "Argument[0]", "credential-other", "manual"]
- ["net.schmizz.sshj", "SSHClient", False, "authPassword", "(String, char[])", "", "Argument[1]", "credential-other", "manual"]

View File

@@ -3,7 +3,7 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String)", "credential-other", "Argument[0]", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String)", "credential-other", "Argument[1]", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String, String)", "credential-other", "Argument[0]", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String, String)", "credential-other", "Argument[1]", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String)", "", "Argument[1]", "credential-other", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String, String)", "", "Argument[0]", "credential-other", "manual"]
- ["org.apache.commons.net.ftp", "FTPClient", False, "login", "(String, String, String)", "", "Argument[1]", "credential-other", "manual"]

View File

@@ -3,4 +3,4 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["org.apache.shiro.mgt", "AbstractRememberMeManager", False, "setCipherKey", "(byte[])", "credential-other", "Argument[0]", "manual"]
- ["org.apache.shiro.mgt", "AbstractRememberMeManager", False, "setCipherKey", "(byte[])", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -3,6 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["org.apache.sshd.client.session", "AbstractClientSession", False, "addPasswordIdentity", "(String)", "credential-other", "Argument[0]", "manual"]
- ["org.apache.sshd.client.session", "ClientSessionCreator", False, "connect", "(String, SocketAddress)", "credential-other", "Argument[0]", "manual"]
- ["org.apache.sshd.client.session", "ClientSessionCreator", False, "connect", "(String, String, int)", "credential-other", "Argument[0]", "manual"]
- ["org.apache.sshd.client.session", "AbstractClientSession", False, "addPasswordIdentity", "(String)", "", "Argument[0]", "credential-other", "manual"]
- ["org.apache.sshd.client.session", "ClientSessionCreator", False, "connect", "(String, SocketAddress)", "", "Argument[0]", "credential-other", "manual"]
- ["org.apache.sshd.client.session", "ClientSessionCreator", False, "connect", "(String, String, int)", "", "Argument[0]", "credential-other", "manual"]

View File

@@ -3,5 +3,5 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["org.springframework.security.core.userdetails", "User", False, "User", "(String, String, boolean, boolean, boolean, boolean, Collection<? extends GrantedAuthority>)", "credential-other", "Argument[0]", "manual"]
- ["org.springframework.security.core.userdetails", "User", False, "User", "(String, String, boolean, boolean, boolean, boolean, Collection<? extends GrantedAuthority>)", "credential-other", "Argument[1]", "manual"]
- ["org.springframework.security.core.userdetails", "User", False, "User", "(String, String, boolean, boolean, boolean, boolean, Collection)", "", "Argument[0]", "credential-other", "manual"]
- ["org.springframework.security.core.userdetails", "User", False, "User", "(String, String, boolean, boolean, boolean, boolean, Collection)", "", "Argument[1]", "credential-other", "manual"]