Nora Dimitrijević
20030d56a5
[DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash
2025-07-17 14:40:31 +02:00
Nora Dimitrijević
9408a96ba5
[TEST] Python: TimingAttackAgainstHash: add qlref test to existing source (TODO: add source with true positive)
2025-07-17 14:40:29 +02:00
Anders Schack-Mulligen
088a0a54ba
Python: Add empty provenance column to expected files.
2024-02-09 11:32:08 +01:00
Rasmus Lerchedahl Petersen
11c71fdd18
Python: remove EssaNodes
...
This commit removes SSA nodes from the data flow graph. Specifically, for a definition and use such as
```python
x = expr
y = x + 2
```
we used to have flow from `expr` to an SSA variable representing x and from that SSA variable to the use of `x` in the definition of `y`. Now we instead have flow from `expr` to the control flow node for `x` at line 1 and from there to the control flow node for `x` at line 2.
Specific changes:
- `EssaNode` from the data flow layer no longer exists.
- Several glue steps between `EssaNode`s and `CfgNode`s have been deleted.
- Entry nodes are now admitted as `CfgNodes` in the data flow layer (they were filtered out before).
- Entry nodes now have a new `toString` taking into account that the module name may be ambigous.
- Some tests have been rewritten to accomodate the changes, but only `python/ql/test/experimental/dataflow/basic/maximalFlowsConfig.qll` should have semantic changes.
- Comments have been updated
- Test output has been updated, but apart from `python/ql/test/experimental/dataflow/basic/maximalFlows.expected` only `python/ql/test/experimental/dataflow/typetracking-summaries/summaries.py` should have a semantic change. This is a bonus fix, probably meaning that something was never connected up correctly.
2023-11-20 21:35:32 +01:00
Rasmus Wriedt Larsen
1a4e8d9464
Python: Move experimental PossibleTimingAttackAgainstSensitiveInfo to new dataflow API
2023-08-28 15:31:07 +02:00
Rasmus Wriedt Larsen
ca93f4d223
Python: Accept .expected changes
2023-08-11 10:36:05 +02:00
Rasmus Wriedt Larsen
d73289ac4e
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
Taus
eaf2930205
Python: Accept test changes
...
(These look like they were the result of changes elsewhere in the
analysis.)
2023-03-27 12:17:13 +00:00
Taus
0b8bdc0f85
Python: Fix broken test
2022-09-06 16:37:43 +00:00
Ahmed Farid
8153b790ad
Update test result
2022-08-31 16:01:09 +01:00
Ahmed Farid
56d48e6264
Add more tests
2022-08-31 15:59:51 +01:00
Taus
687cd92903
Python: Update .expected file
2022-08-19 11:43:57 +00:00
Ahmed Farid
9cb7a0ac2e
Rename python/ql/test/experimental/query-tests/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.qlref to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.qlref
2022-08-16 16:29:05 +01:00
Ahmed Farid
685cd97b8e
Rename python/ql/test/experimental/query-tests/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.expected to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.expected
2022-08-16 16:28:51 +01:00
Ahmed Farid
2377880d0c
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstSensitiveInfo.py to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.py
2022-08-16 16:28:36 +01:00
Ahmed Farid
f956fe12d5
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue.qlref to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.qlref
2022-08-16 16:28:17 +01:00
Ahmed Farid
6536b602df
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue.expected to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.expected
2022-08-16 16:28:00 +01:00
Ahmed Farid
b8fe0e2eee
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeader.py to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeader.py
2022-08-16 16:27:45 +01:00
Ahmed Farid
87b67ed64f
Rename python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash.py to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.py
2022-08-16 16:27:19 +01:00
Ahmed Farid
fa3940f69a
Rename python/ql/test/experimental/query-tests/Security/CWE-208/PossibleTimingAttackAgainstHash.qlref to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.qlref
2022-08-16 16:27:02 +01:00
Ahmed Farid
6a94d45643
Rename python/ql/test/experimental/query-tests/Security/CWE-208/PossibleTimingAttackAgainstHash.expected to python/ql/test/experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.expected
2022-08-16 16:26:45 +01:00
Ahmed Farid
31ecb0727f
Rename TimingAttackAgainstHeader.expected to TimingAttackAgainstHeaderValue.expected
2022-08-16 14:50:54 +01:00
Ahmed Farid
d8719f3b1f
Rename TimingAttackAgainstSensitiveInfo.expected to PossibleTimingAttackAgainstSensitiveInfo.expected
2022-08-16 14:50:21 +01:00
Ahmed Farid
67476d0a36
Rename TimingAttackAgainstSensitiveInfo.qlref to PossibleTimingAttackAgainstSensitiveInfo.qlref
2022-08-16 13:36:59 +01:00
Ahmed Farid
e8376a522c
Update TimingAttackAgainstHeaderValue.qlref
2022-08-16 13:35:20 +01:00
Ahmed Farid
ecbe663c2f
Update TimingAttackAgainstSensitiveInfo.qlref
2022-08-16 13:34:24 +01:00
Ahmed Farid
1dd4400c67
Update PossibleTimingAttackAgainstHash.qlref
2022-08-16 13:33:17 +01:00
Ahmed Farid
44f054bede
Update PossibleTimingAttackAgainstHash.expected
2022-08-16 12:31:33 +01:00
Ahmed Farid
abc49bd62b
Update TimingAttackAgainstHeader.py
2022-08-16 12:06:34 +01:00
Ahmed Farid
68cf084b8f
Update TimingAttackAgainstSensitiveInfo.expected
2022-08-16 12:03:14 +01:00
Ahmed Farid
c85ad1b2c0
Update TimingAttackAgainstHash.py
2022-08-16 11:50:37 +01:00
Ahmed Farid
5ecadd06ae
Update TimingAttackAgainstHash.py
2022-08-15 15:21:10 +01:00
Ahmed Farid
f2bf58bdb6
Update TimingAttackAgainstSensitiveInfo.py
2022-08-15 15:16:30 +01:00
Ahmed Farid
18b103dbd5
Update TimingAttackAgainstHash.py
2022-08-15 11:29:29 +01:00
Ahmed Farid
7d23b80582
Update TimingAttackAgainstHash.py
2022-08-15 11:29:09 +01:00
Ahmed Farid
521dbd0e82
Update TimingAttackAgainstSensitiveInfo.py
2022-08-15 11:28:51 +01:00
Ahmed Farid
5de103303d
Update TimingAttackAgainstHeader.py
2022-08-15 11:26:34 +01:00
Ahmed Farid
7cb1683f5b
Update TimingAttackAgainstSensitiveInfo.py
2022-08-15 11:21:40 +01:00
Ahmed Farid
01490414e8
Update TimingAttackAgainstHeader.py
2022-08-12 12:25:31 +01:00
Ahmed Farid
ae4ded08fa
Update and rename TimingAttackAgainstHeader.qlref to TimingAttackAgainstHeaderValue.qlref
2022-08-04 12:42:52 +01:00
Ahmed Farid
e3340c9345
Update TimingAttackAgainstSensitiveInfo.py
2022-07-27 00:25:42 +01:00
Ahmed Farid
ad57ff4def
Rename PossibleTimingAttackAgainstSignature.qlref to PossibleTimingAttackAgainstHash.qlref
2022-07-26 23:56:24 +01:00
Ahmed Farid
f35985097d
Update and rename PossibleTimingAttackAgainstSignature.expected to PossibleTimingAttackAgainstHash.expected
2022-07-26 23:50:44 +01:00
Ahmed Farid
4f082e28e5
Update and rename TimingAttackAgainstSignature.py to TimingAttackAgainstHash.py
2022-07-20 12:26:57 +01:00
Ahmed Farid
b3925ae988
Update PossibleTimingAttackAgainstSignature.qlref
2022-07-20 00:57:26 +01:00
root
655b9d4262
Python: Timing attack
2022-06-27 12:18:45 -04:00
