1641 Commits

Author	SHA1	Message	Date
Karim Ali	f6bc88471a	update the expected output for CWE-079 ... Now that we have support for taint through fields of String, we can now detect certain flows that we previously marked as [NOT DETECTED]. This commit updates the expected output of CWE-079 (and the in-code annotation of the accompanying test case) to reflect that update.	2022-11-30 16:34:24 +02:00
Tony Torralba	e222807693	Remove dubious sinks	2022-11-30 13:25:17 +01:00
Alex Denisov	f618d53302	Swift: add new implicit conversion	2022-11-30 12:40:34 +01:00
Alex Denisov	90d471b486	Swift: upgrade to Swift 5.7.1	2022-11-30 12:40:27 +01:00
Nora Dimitrijević	91edeacb9f	Swift: update .expected test files	2022-11-29 19:39:48 +01:00
Nora Dimitrijević	c5b4e87f6d	Swift: AccessorDecl tests for new cases	2022-11-29 16:00:00 +01:00
Karim Ali	9048d5d79b	fix expected output for LocalTaint	2022-11-29 15:38:44 +02:00
Karim Ali	9d17fae00c	fix expected output for TaintInline	2022-11-29 15:24:12 +02:00
Karim Ali	c0085cbb1a	fix expected output for Taint.ql	2022-11-29 15:18:39 +02:00
Tony Torralba	bf023b0aed	Use dominance in path injection sanitizer to avoid FNs	2022-11-29 13:33:27 +01:00
Tony Torralba	52ebf66d21	Add basic path sanitizer	2022-11-29 11:55:04 +01:00
Tony Torralba	1576ee9410	Add additional stub to avoid errors when building on Linux	2022-11-29 11:55:03 +01:00
Tony Torralba	8cc66172c3	Add path injection query	2022-11-29 11:55:03 +01:00
Nora Dimitrijević	931173350f	Swift: extract missing cases of AccessorKind and AccessSemantics ... This resolves the warnings that were showing up during extractor-pack compilation.	2022-11-29 11:31:07 +01:00
Karim Ali	f0d9dabca2	updated expected output for LocalTaint and Tain	2022-11-29 12:13:10 +02:00
Karim Ali	9b3c4e8db2	add test case for unicodeScalars	2022-11-29 12:12:10 +02:00
Karim Ali	7541b01a86	add test case for utf8CString	2022-11-29 12:12:10 +02:00
Karim Ali	58a87396ba	add taint steps for fields of String ... if a String is tainted, then all its fields (including those declared in extensions) should be tainted as well	2022-11-29 12:12:10 +02:00
Tony Torralba	0e59257442	Fix local taint steps ... Local taint should include local flow and simple summaries through library code	2022-11-29 10:36:56 +01:00
Geoffrey White	cf7cd2b470	Swift: Convert to MaD.	2022-11-28 19:02:56 +00:00
Geoffrey White	30468dd419	Swift: Implement field content as well.	2022-11-28 12:27:33 +00:00
Geoffrey White	ffbd201450	Swift: Implement basic model of WKUserScript.	2022-11-28 12:20:29 +00:00
Geoffrey White	116d9667e7	Swift: Remove special case from query.	2022-11-28 12:15:38 +00:00
Geoffrey White	3971cbf294	Swift: Extend the taint test with WKUserScript.	2022-11-28 12:11:38 +00:00
Geoffrey White	208a728d39	Swift: Fixes.	2022-11-25 00:28:53 +00:00
Geoffrey White	37cdef7ab1	Swift: add basic Alamofire taint source model.	2022-11-25 00:14:23 +00:00
Geoffrey White	afb5dc7da3	Swift: Add test for Alamofire sources.	2022-11-25 00:08:51 +00:00
Tony Torralba	1d57663343	Merge pull request #11345 from atorralba/atorralba/swift/data-models ... Swift: Add taint models for the Data class	2022-11-24 14:23:41 +01:00
Geoffrey White	32442a33de	Merge pull request #11270 from geoffw0/optionals2 ... Swift: Dataflow through ?? and ? :	2022-11-24 13:20:54 +00:00
Tony Torralba	e4e5291511	Fix more test expectations after rebase	2022-11-24 13:03:12 +01:00
Tony Torralba	fc7c66dab2	Remove now unnecessary additional taint step in UnsafeJsEval	2022-11-24 12:35:52 +01:00
Tony Torralba	e67b72d954	Update test expectations	2022-11-24 12:35:51 +01:00
Tony Torralba	25354d2dd8	Apply code review suggestions	2022-11-24 12:35:51 +01:00
Tony Torralba	6a8b9fde78	Add data flowsources test	2022-11-24 12:35:51 +01:00
Tony Torralba	d6b14a1395	Update test expectations	2022-11-24 12:35:50 +01:00
Tony Torralba	2284127650	Add MaD rows for the Data class	2022-11-24 12:35:50 +01:00
Tony Torralba	4f8ef13cd8	Fix expectation in NSData tests	2022-11-24 12:13:46 +01:00
Tony Torralba	04450c5173	Merge pull request #11378 from atorralba/atorralba/swift/nsdata-models ... Swift: Add models for NSData and NSMutableData	2022-11-24 11:19:14 +01:00
Tony Torralba	2ac06b8db9	Turns out lambda flow is already supported	2022-11-24 10:52:27 +01:00
Nora Dimitrijević	8f065e9483	Merge pull request #11001 from d10c/swift/js-injection	2022-11-24 10:52:05 +01:00
Geoffrey White	2b52a44024	Merge pull request #11210 from geoffw0/alamofire2 ... Swift: Add Alamofire model to swift/cleartext-transmission	2022-11-23 18:23:44 +00:00
Geoffrey White	ef837f72e4	Swift: Test .expected changes resulting from merge.	2022-11-23 14:57:08 +00:00
Geoffrey White	7d45ca6293	Merge branch 'main' into optionals2	2022-11-22 17:35:27 +00:00
Tony Torralba	2e1a78e1bf	Add models for NSData and NSMutableData	2022-11-22 15:48:58 +01:00
Geoffrey White	949cfb758d	Merge branch 'main' into alamofire2	2022-11-22 09:29:53 +00:00
Tony Torralba	16a76853f4	Add libxml2 sinks	2022-11-21 16:25:51 +01:00
Tom Hvitved	0d89f57680	Swift: Update expected test output	2022-11-21 12:55:40 +01:00
Nora Dimitrijević	8f5af3fca6	Merge branch 'main' into swift/js-injection	2022-11-18 17:07:20 +01:00
Geoffrey White	16a84bd94a	Merge branch 'main' into alamofire2	2022-11-18 09:28:46 +00:00
Geoffrey White	2780d9a9a3	Merge branch 'main' into optionals2	2022-11-17 18:16:46 +00:00