Jeroen Ketema
e8bfb87f67
Swift: Rewrite CleartextStoragePreferences to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
a45f381ab9
Swift: Rewrite CleartextLogging to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
5deafeaf9e
Swift: Rewrite UnsafeWebViewFetch to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
56156cfa36
Swift: Rewrite UnsafeJsEval to use `DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
db641e508a
Swift: Rewrite UncontrolledFormatString to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
0ff607c930
Swift: Rewrite XXEQuery to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
9220bea3ec
Swift: Rewrite SqlInjectionQuery to use DataFlow::ConfigSig
2023-04-04 09:10:15 +02:00
Geoffrey White
e62a6a037c
Swift: Split encryption queries into three parts (trivial re-organization of existing code).
2023-04-03 17:20:34 +01:00
Jeroen Ketema
70d0e987c4
Swift: Rewrite PredicateInjection to use DataFlow::ConfigSig
2023-04-03 16:19:30 +02:00
Paolo Tranquilli
bc698546e5
Swift: specify treatment for multi-line things
2023-03-31 10:32:40 +02:00
Paolo Tranquilli
33b4d2d653
Swift: add SuccessfullyExtractedLines query
...
This counts how many lines we have extracted some entity in. If we test
changes in this, we can have a more fine grained look into how much we
actually extract than looking at the extracted files.
2023-03-31 10:02:19 +02:00
Jeroen Ketema
edfd8715c8
Merge pull request #12695 from jketema/swift-configsig
...
Swift: Refactor a number of queries to use `DataFlow::ConfigSig`
2023-03-29 16:07:47 +02:00
Mathias Vorreiter Pedersen
e3e68b7753
Merge pull request #12642 from geoffw0/modernstring
...
Swift: Modernize the swift/string-length-conflation query
2023-03-29 14:55:40 +01:00
Jeroen Ketema
a381aa4d37
Swift: Use DataFlow::ConfigSig in InsufficientHashIterations.ql
2023-03-28 17:39:58 +02:00
Jeroen Ketema
60f033f10c
Swift: Use DataFlow::ConfigSig in ConstantSalt.ql
2023-03-28 17:39:18 +02:00
Jeroen Ketema
b97b3d9975
Swift: Use DtatFlow::ConfigSig in InsecureTLS.ql
2023-03-28 17:38:46 +02:00
Jeroen Ketema
42248220b4
Swift: Use DataFlow::ConfigSig in WeakSensitiveDataHashing.ql
2023-03-28 17:38:11 +02:00
Jeroen Ketema
a8599eb689
Swift: Use DataFlow::ConfigSig in ECBEncryption.ql
2023-03-28 17:37:37 +02:00
Jeroen Ketema
cc23ba3698
Swift: Use DataFlow::ConfigSig in HardcodedEncryptionKey.ql
2023-03-28 17:37:05 +02:00
Jeroen Ketema
1592b578d9
Swift: Use DataFlow::ConfigSig in ConstantPassword.ql
2023-03-28 17:36:37 +02:00
Jeroen Ketema
31512b8627
Swift: Use DataFlow::ConfigSig in StaticInitializationVector.ql
2023-03-28 17:36:00 +02:00
Geoffrey White
28998ccafe
Merge pull request #12471 from geoffw0/dbsinks2
...
Swift: Better sinks for swift/cleartext-storage-database
2023-03-27 12:51:13 +01:00
Anders Schack-Mulligen
d0b7ffda70
Python/Ruby/Swift: Rename references.
2023-03-23 13:06:19 +01:00
Geoffrey White
4c0d02a87d
Swift: Standardize the sources, sinks etc.
2023-03-23 10:39:03 +00:00
Geoffrey White
dfcad7fa84
Swift: Split the query into the usual three files.
2023-03-23 10:39:03 +00:00
Geoffrey White
a4e9d38abb
Swift: Fix the test regression.
2023-03-22 16:44:29 +00:00
Paolo Tranquilli
a131966066
Swift: make SuccessfullyExtractedFiles.ql more precise
...
This is done by adding a `isSuccessfullyExtracted` predicate that is
filled for primary files at the very end of the extractor invocation if
the frontend was performed successfully. If for example the extractor
crashes this will therefore not be filled.
The upgrade script is written so that `SuccessfullyExtractedFiles.ql`
on an upgraded script will give exactly the same results as before it.
2023-03-20 08:34:34 +01:00
Alex Denisov
7c15527300
Swift: add a query showing successfully extracted files
2023-03-17 11:27:03 +01:00
Geoffrey White
237669aab7
Merge branch 'main' into dbsinks2
2023-03-14 16:26:36 +00:00
Geoffrey White
725d784be8
Swift: Make the same result presentation change to swift/cleartext-storage-preferences.
2023-03-14 16:13:26 +00:00
Geoffrey White
bfbd3d95f9
Swift: Clean up the result message.
2023-03-14 16:03:55 +00:00
Geoffrey White
7bd0f53df9
Swift: Update swift/summary/summary-statistics to DataFlow::ConfigSig.
2023-03-10 14:39:03 +00:00
Geoffrey White
7f06109a4f
Swift: Add detail to the swift/summary/summary-statistics query.
2023-03-10 13:20:25 +00:00
Geoffrey White
9aaf30691c
Merge pull request #12307 from geoffw0/stringconflationtaint
...
Swift: Update swift/string-length-conflation to taint tracking
2023-03-03 17:27:15 +00:00
Geoffrey White
c21ec1c3f5
Swift: Standardize the taint sources, sinks, sanitizers.
2023-02-27 23:01:04 +00:00
Geoffrey White
6928e62d8b
Swift: Split the three sensitive exprs queries into separate QL and QLL files.
2023-02-27 23:01:04 +00:00
Geoffrey White
cb8f5979d1
Swift: Update swift/string-length-conflation to taint tracking and remove a special case that's now covered by taint.
2023-02-20 18:18:15 +00:00
Geoffrey White
ee442e4d4b
Merge pull request #11979 from geoffw0/modern1
...
Swift: Modernize injection queries
2023-01-31 10:54:35 +00:00
Nora Dimitrijević
9346f4d760
Swift: fix failing tests
2023-01-30 11:39:06 +01:00
Geoffrey White
794ba428a7
Merge pull request #11942 from geoffw0/rncrypt4
...
Swift: add RNCryptor sinks to swift/static-initialization-vector
2023-01-27 14:33:06 +00:00
Geoffrey White
e92a5eb467
Merge pull request #11911 from geoffw0/rncrypt2
...
Swift: Add RNCryptor sinks to swift/hardcoded-key
2023-01-25 15:11:16 +00:00
Geoffrey White
f6fe627f4b
Merge pull request #11914 from geoffw0/rncrypt3
...
Swift: Add RNCryptor sinks to swift/constant-salt
2023-01-25 13:05:33 +00:00
Geoffrey White
13d308a4d6
Swift: Autoformat.
2023-01-24 19:15:51 +00:00
Geoffrey White
6a946f6eed
Swift: Modernize.
2023-01-24 17:26:51 +00:00
Geoffrey White
cbfa7e7252
Swift: Move query logic into .qlls.
2023-01-24 15:04:10 +00:00
Geoffrey White
f05be77a0b
Swift: Recognize more array sources.
2023-01-20 15:25:00 +00:00
Geoffrey White
7648e8f6a3
Swift: Recognize more sources.
2023-01-20 15:08:12 +00:00
Geoffrey White
581c478872
Swift: Model RNCryptor.
2023-01-20 14:50:23 +00:00
Geoffrey White
5d6f2436e4
Merge branch 'main' into coredata
2023-01-18 13:39:02 +00:00
Geoffrey White
71c1ca53a9
Merge branch 'main' into rncrypt
2023-01-18 11:09:09 +00:00
