411 Commits

Author	SHA1	Message	Date
Michael Nebel	4a0b2b64b3	Java: Explicitly tie ReturnNode to TargetApi before calling returnNodeAsOutput.	2022-02-28 16:48:23 +01:00
Tom Hvitved	44949b6353	Java: Add bindingset to returnNodeAsOutput	2022-02-28 16:48:23 +01:00
Anders Schack-Mulligen	908cc40c9f	Java: Fix bug in model flow sanitizer.	2022-02-28 16:48:23 +01:00
Anders Schack-Mulligen	16a5ccddea	Java: Simplify model generator query using flow state.	2022-02-28 16:48:23 +01:00
Ian Lynagh	1e62b485a5	Merge pull request #8241 from igfoo/igfoo/stats4 ... Java: Update stats and make some performance tweaks	2022-02-28 12:58:06 +00:00
Ian Lynagh	7ce9b160d0	Java: Performance tweaks	2022-02-21 17:05:00 +00:00
Asger Feldthaus	a121b73181	Java: update CSV rows to dot-separated syntax	2022-02-21 08:16:55 +01:00
Asger Feldthaus	7f808710ec	Java: update model generator	2022-02-21 08:16:54 +01:00
Benjamin Muskalla	bc5753cb20	Fix path expression	2022-02-04 11:43:18 +01:00
Benjamin Muskalla	b747391c74	Improve error handling and refactor base path	2022-02-04 11:26:19 +01:00
Benjamin Muskalla	c1b5565e4d	Automation to regenerate framework models	2022-01-27 11:15:10 +01:00
Erik Krogh Kristensen	a235f8f023	remove redundant inline type casts	2022-01-21 11:46:33 +01:00
Benjamin Muskalla	52406dc8df	Exclude logging sinks ... Those sinks are too coarse grained to be exposed as sinks on any model.	2022-01-19 16:11:59 +01:00
Benjamin Muskalla	25d251c24f	Exclude main methods from models	2022-01-19 16:11:59 +01:00
Nick Rolfe	28912c508f	Fix non-US spelling of 'behavior'	2021-12-17 15:29:31 +00:00
Erik Krogh Kristensen	6ff8d4de5c	add all remaining explicit this	2021-11-26 13:50:10 +01:00
Benjamin Muskalla	0e6bb28016	Only consider store steps	2021-11-16 10:46:24 +01:00
Benjamin Muskalla	fd9199c0c0	Simplify handling of tainting fields	2021-11-15 16:40:09 +01:00
Benjamin Muskalla	d7ed325b3f	Refactor content flow into predicate	2021-11-15 16:30:55 +01:00
Benjamin Muskalla	f4310898b3	Capture sources flowing into parameters	2021-11-15 16:28:28 +01:00
Benjamin Muskalla	8040d9cfcf	Only consider true return statements as sinks	2021-11-15 15:29:01 +01:00
Benjamin Muskalla	e6e52a3b32	190	2021-11-15 15:18:03 +01:00
Benjamin Muskalla	dc022430ee	Remove superflous instanceof	2021-11-15 13:07:02 +01:00
Benjamin Muskalla	412bd32f45	Move more predicates into configuration	2021-11-15 13:04:23 +01:00
Benjamin Muskalla	b84c03672d	Prefer types to TargetAPI	2021-11-15 12:43:46 +01:00
Benjamin Muskalla	bca6cecd1c	Remove basic support for lambda flow	2021-11-15 12:38:30 +01:00
Benjamin Muskalla	78e3906ea7	Exclude more JDK internals	2021-11-15 11:58:10 +01:00
Benjamin Muskalla	cce3780481	Restrict param2return value features	2021-11-15 09:57:23 +01:00
Benjamin Muskalla	a0b7f267ff	Only capture taint from own fields ... Also exclude `Charset` as relevant taint-carrying type. This is generally what we want to lets us avoid tracking arguments that lead to FP.	2021-11-12 10:15:15 +01:00
Benjamin Muskalla	0234e77d2f	Let sink node be pluggable in any call context	2021-11-12 09:43:05 +01:00
Benjamin Muskalla	b8809a20d8	Support propagating taint of inner object	2021-11-12 09:39:59 +01:00
Benjamin Muskalla	2d4176bec0	Ignore Number-derived types	2021-11-10 16:30:27 +01:00
Benjamin Muskalla	dbd393b77a	Support flow into field of referenced objects	2021-11-10 16:30:27 +01:00
Benjamin Muskalla	974c7b0898	Avoid cross-class flow for field writes	2021-11-10 16:30:26 +01:00
Benjamin Muskalla	74ac234f1c	Restrict field access to same type	2021-11-10 16:30:26 +01:00
Benjamin Muskalla	8740e879b4	Fix docs	2021-11-10 16:30:26 +01:00
Benjamin Muskalla	a546b38ee0	Restrict field access to corresponding type	2021-11-10 16:30:26 +01:00
Benjamin Muskalla	6960a7b97e	Remove extraneous last column	2021-11-10 16:30:25 +01:00
Benjamin Muskalla	ef972159a6	Fix bug when generating output in a subfolder	2021-11-10 16:30:25 +01:00
Benjamin Muskalla	4cfd978bfe	Support generating in respective folders	2021-11-10 16:30:25 +01:00
Benjamin Muskalla	b92758883b	Auto-format generated qll files	2021-11-10 16:30:25 +01:00
Benjamin Muskalla	e2bd792fc2	Consider bulk-like data for argument accessors	2021-11-10 16:30:25 +01:00
Benjamin Muskalla	739fe75194	Support flow for factory and strategy pattern ... * Support models for factories that create new instances of an object while tainting it with incoming data * Support models to infer super types for private implementations to expose the models at the right level	2021-11-10 16:30:24 +01:00
Benjamin Muskalla	58de6d143f	Add docs to explain the models captured by the predicates	2021-11-10 16:30:24 +01:00
Benjamin Muskalla	747ab122c3	Restrict fluent api models to same type access	2021-11-10 16:30:24 +01:00
Benjamin Muskalla	8564c9001a	Fix naming for source nodes	2021-11-10 16:30:24 +01:00
Benjamin Muskalla	9500c9c8bc	Support lambda flow for source models ... Also rely on public API to detect the source node	2021-11-10 16:30:24 +01:00
Benjamin Muskalla	35baa1c3df	Support bulkdata for boxed types as well	2021-11-10 16:30:23 +01:00
Benjamin Muskalla	83b4070f31	Fix bug to accept bulk data for char/byte arrays	2021-11-10 16:30:23 +01:00
Benjamin Muskalla	281f25403d	Match enclosing unit without casting to specific nodes	2021-11-10 16:30:23 +01:00