hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 00:35:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Crypto: Remove experimental qll file

Browse Source
This commit is contained in:
REDMOND\brodes
2025-06-25 12:26:41 -04:00
parent 9cd2241bf6
commit f9147cfb2b
1 changed files with 0 additions and 185 deletions
Download Patch File Download Diff File Expand all files Collapse all files

185
cpp/ql/lib/experimental/quantum/OpenSSL/GetInstanceToInitOrUseFlow.qll
View File

@@ -1,185 +0,0 @@
// import semmle.code.cpp.dataflow.new.DataFlow
// signature class GetInstanceCallSig instanceof Call;
// signature class InitCallSig instanceof Call;
// signature class UseCallSig instanceof Call {
// /**
// * Holds if the use is not a final use, such as an `update()` call before `doFinal()`
// */
// predicate isIntermediate();
// }
// module GetInstanceInitUseFlowAnalysis<
// GetInstanceCallSig GetInstance, InitCallSig Init, UseCallSig Uses>
// {
newtype TFlowState =
TUninitialized() or
TInitialized(Init call) or
TIntermediateUse(Use call)
abstract class InitFlowState extends TFlowState {
string toString() {
this = TUninitialized() and result = "Uninitialized"
or
this = TInitialized(_) and result = "Initialized"
// TODO: add intermediate use
}
}
class UninitializedFlowState extends InitFlowState, TUninitialized { }
class InitializedFlowState extends InitFlowState, TInitialized {
Init call;
DataFlow::Node node1;
DataFlow::Node node2;
InitializedFlowState() {
this = TInitialized(call) and
node2.asExpr() = call.(Call).getQualifier() and
DataFlow::localFlowStep(node1, node2) and
node1 != node2
}
Init getInitCall() { result = call }
DataFlow::Node getFstNode() { result = node1 }
DataFlow::Node getSndNode() { result = node2 }
}
class IntermediateUseState extends InitFlowState, TIntermediateUse {
Uses call;
DataFlow::Node node1;
DataFlow::Node node2;
IntermediateUseState() {
this = TIntermediateUse(call) and
call.isIntermediate() and
node1.asExpr() = call.(Call).getQualifier() and
node2 = node1
}
Use getUseCall() { result = call }
DataFlow::Node getFstNode() { result = node1 }
DataFlow::Node getSndNode() { result = node2 }
}
/**
* A flow config from a `GetInstance` to the `Init` or `Use` through any
* intermediate uses or inits.
*/
module GetInstanceToInitOrUseConfig implements DataFlow::StateConfigSig {
class FlowState = InitFlowState;
predicate isSource(DataFlow::Node src, FlowState state) {
state instanceof UninitializedFlowState and
src.asExpr() instanceof GetInstance
or
src = state.(InitializedFlowState).getSndNode()
or
src = state.(IntermediateUseState).getSndNode()
}
// TODO: document this, but this is intentional (avoid cross products?)
predicate isSink(DataFlow::Node sink, FlowState state) { none() }
predicate isSink(DataFlow::Node sink) {
none()
// exists(Init c | c.(Call).getQualifier() = sink.asExpr())
// or
// exists(Use c | not c.isIntermediate() and c.(Call).getQualifier() = sink.asExpr())
}
predicate isAdditionalFlowStep(
DataFlow::Node node1, FlowState state1, DataFlow::Node node2, FlowState state2
) {
state1 = state1 and
(
node1 = state2.(InitializedFlowState).getFstNode() and
node2 = state2.(InitializedFlowState).getSndNode()
or
node1 = state2.(IntermediateUseState).getFstNode() and
node2 = state2.(IntermediateUseState).getSndNode()
)
}
predicate isBarrier(DataFlow::Node node, FlowState state) {
// exists(CipherInitCall call | node.asExpr() = call.getQualifier() |
// state instanceof UninitializedFlowState
// or
// state.(InitializedFlowState).getInitCall() != call
// )
none()
}
}
// module GetInstanceToInitToUseFlow = DataFlow::GlobalWithState<GetInstanceToInitToUseConfig>;
// GetInstance getInstantiationFromUse(
// Use use, GetInstanceToInitToUseFlow::PathNode src, GetInstanceToInitToUseFlow::PathNode sink
// ) {
// src.getNode().asExpr() = result and
// sink.getNode().asExpr() = use.( Call).getQualifier() and
// GetInstanceToInitToUseFlow::flowPath(src, sink)
// }
// GetInstance getInstantiationFromInit(
// Init init, GetInstanceToInitToUseFlow::PathNode src, GetInstanceToInitToUseFlow::PathNode sink
// ) {
// src.getNode().asExpr() = result and
// sink.getNode().asExpr() = init.( Call).getQualifier() and
// GetInstanceToInitToUseFlow::flowPath(src, sink)
// }
// Init getInitFromUse(
// Use use, GetInstanceToInitToUseFlow::PathNode src, GetInstanceToInitToUseFlow::PathNode sink
// ) {
// src.getNode().asExpr() = result.( Call).getQualifier() and
// sink.getNode().asExpr() = use.( Call).getQualifier() and
// GetInstanceToInitToUseFlow::flowPath(src, sink)
// }
// predicate hasInit(Use use) { exists(getInitFromUse(use, _, _)) }
// Use getAnIntermediateUseFromFinalUse(
// Use final, GetInstanceToInitToUseFlow::PathNode src, GetInstanceToInitToUseFlow::PathNode sink
// ) {
// not final.isIntermediate() and
// result.isIntermediate() and
// src.getNode().asExpr() = result.( Call).getQualifier() and
// sink.getNode().asExpr() = final.( Call).getQualifier() and
// GetInstanceToInitToUseFlow::flowPath(src, sink)
// }
// }
// module GetInstanceToInitToUseConfig implements DataFlow::StateConfigSig {
// class FlowState = InitFlowState;
// predicate isSource(DataFlow::Node src, FlowState state) {
// state instanceof UninitializedFlowState and
// src.asExpr() instanceof GetInstance
// or
// src = state.(InitializedFlowState).getSndNode()
// or
// src = state.(IntermediateUseState).getSndNode()
// }
// // TODO: document this, but this is intentional (avoid cross products?)
// predicate isSink(DataFlow::Node sink, FlowState state) { none() }
// predicate isSink(DataFlow::Node sink) {
// exists(Init c | c.( Call).getQualifier() = sink.asExpr())
// or
// exists(Use c | not c.isIntermediate() and c.( Call).getQualifier() = sink.asExpr())
// }
// predicate isAdditionalFlowStep(
// DataFlow::Node node1, FlowState state1, DataFlow::Node node2, FlowState state2
// ) {
// state1 = state1 and
// (
// node1 = state2.(InitializedFlowState).getFstNode() and
// node2 = state2.(InitializedFlowState).getSndNode()
// or
// node1 = state2.(IntermediateUseState).getFstNode() and
// node2 = state2.(IntermediateUseState).getSndNode()
// )
// }
// predicate isBarrier(DataFlow::Node node, FlowState state) {
// exists(CipherInitCall call | node.asExpr() = call.getQualifier() |
// state instanceof UninitializedFlowState
// or
// state.(InitializedFlowState).getInitCall() != call
// )
// }
// }
// module GetInstanceToInitToUseFlow = DataFlow::GlobalWithState<GetInstanceToInitToUseConfig>;