REDMOND\brodes
|
a64a24d25d
|
Crypto: Comment in Language.qll
|
2025-10-16 11:03:49 -04:00 |
|
REDMOND\brodes
|
79ccef3a58
|
Crypto: Initial sketch for unknown hash, the model needs to recognize unknowns but where the algorithm category (e.g., hashing) is known.
|
2025-10-16 11:03:16 -04:00 |
|
REDMOND\brodes
|
d2598d4f5d
|
Crypto: Updating weak hash tests
|
2025-10-16 10:56:08 -04:00 |
|
REDMOND\brodes
|
4860034d41
|
Crypto: Weak Hash test cases update and expected file.
|
2025-10-16 10:40:53 -04:00 |
|
REDMOND\brodes
|
25599e9b4b
|
crypto: Update JCA model macs to take into consideration update calls (use prior pattern for signatures). Misc. bug fixes.
|
2025-10-15 16:25:36 -04:00 |
|
REDMOND\brodes
|
15e266db94
|
Crypto: Tweaks to bad crypto ordering queries.
|
2025-10-15 14:20:40 -04:00 |
|
REDMOND\brodes
|
9a6aac1300
|
Crypto: To get unreferenced parameters as general sources for Java, I've included the caveat that if a function is called, all the calls appear to be in test files.
|
2025-10-15 14:20:16 -04:00 |
|
REDMOND\brodes
|
c6174fbb93
|
Crypto: remove precision tag
|
2025-10-15 14:10:16 -04:00 |
|
REDMOND\brodes
|
c7be23e1fe
|
Crypto: Remove all precision tags from all experimental queries. Precision is largely in flux while the models are being developed.
|
2025-10-15 09:22:04 -04:00 |
|
REDMOND\brodes
|
bf9a249624
|
Crypto: Experimental queries for mac ordering
|
2025-10-15 08:06:50 -04:00 |
|
REDMOND\brodes
|
ee08385e31
|
Crytpo: Update JCA keyagreement to type conversion, XDH is a type of ECDH.
|
2025-10-15 08:06:19 -04:00 |
|
Joe Farebrother
|
f57526eedc
|
Merge pull request #20572 from joefarebrother/java-httponly-cookie-promote
Java: Promote Sensitive Cookie without HttpOnly query from experimental
|
2025-10-15 10:28:40 +01:00 |
|
Joe Farebrother
|
e95e1a0386
|
Update integration test
|
2025-10-14 16:27:28 +01:00 |
|
Joe Farebrother
|
d8b37d0cde
|
Review suggestions - update comments and description
|
2025-10-14 16:03:40 +01:00 |
|
github-actions[bot]
|
6dd07790ac
|
Post-release preparation for codeql-cli-2.23.3
|
2025-10-14 11:16:33 +00:00 |
|
github-actions[bot]
|
33542f7d40
|
Release preparation for version 2.23.3
|
2025-10-14 09:30:24 +00:00 |
|
REDMOND\brodes
|
55bbcee301
|
Crypto: Make WeakAsymmetricKeyGenSize a path problem.
|
2025-10-13 17:04:29 -04:00 |
|
REDMOND\brodes
|
7e8acd76c3
|
Crypto: Update WeakAsymmetricKeyGenSize to a path problem.
|
2025-10-13 15:48:32 -04:00 |
|
REDMOND\brodes
|
8b5a42328e
|
Crypto: Convert ReusedNonce.ql into a path problem.
|
2025-10-13 15:34:41 -04:00 |
|
REDMOND\brodes
|
7847e92670
|
Crypto: Update KDF iteration and count to be path problems
|
2025-10-13 15:30:53 -04:00 |
|
REDMOND\brodes
|
76128ed8dc
|
Crypto: Update InsecureIVorNonce to be a path problem.
|
2025-10-13 15:29:57 -04:00 |
|
REDMOND\brodes
|
bd068c2a69
|
Crypto: Updating expected file for weak asymmetric key gen size.
|
2025-10-13 12:08:07 -04:00 |
|
REDMOND\brodes
|
4b241d7065
|
Crypto: adding initial weak hash query overhaul and tests, but no expected file yet.
|
2025-10-13 12:04:51 -04:00 |
|
REDMOND\brodes
|
08abdb8c85
|
Crypto: Adding a "javaConstant" concept to handle config files.
|
2025-10-13 12:03:41 -04:00 |
|
Joe Farebrother
|
9cb593b020
|
Update tests
|
2025-10-13 14:51:37 +01:00 |
|
Joe Farebrother
|
093b04f79f
|
Update comments
|
2025-10-13 14:51:30 +01:00 |
|
Joe Farebrother
|
696ec29dae
|
Upgrade integration tests
|
2025-10-13 14:51:24 +01:00 |
|
Joe Farebrother
|
1c54296545
|
Add change note
|
2025-10-13 14:51:17 +01:00 |
|
Joe Farebrother
|
c4781146c0
|
Remove experimental query and tests
|
2025-10-13 14:51:10 +01:00 |
|
Joe Farebrother
|
c799f93811
|
Update tests and add inline expectations
|
2025-10-13 14:51:04 +01:00 |
|
Joe Farebrother
|
e1cf3d30d2
|
Update documentation, rename things and add more comments to explain how the implementation works, remove filter for test code (prefer to filter in code scanning ui than in query logic)
|
2025-10-13 14:50:57 +01:00 |
|
Joe Farebrother
|
54aefe0dce
|
Copy experimental query to main
|
2025-10-13 14:50:51 +01:00 |
|
REDMOND\brodes
|
e76ced1513
|
Crypto: Updating weak asymmetric key gen to include key exchange.
|
2025-10-10 15:32:39 -04:00 |
|
REDMOND\brodes
|
d68f3cff8b
|
Crypto: InsecureIVorNonceSource now ignored null to avoid being too noisy.
|
2025-10-10 14:51:16 -04:00 |
|
REDMOND\brodes
|
36673659ad
|
Crypto: Weak asymmetric key gen size fixes and test.
|
2025-10-10 14:49:35 -04:00 |
|
REDMOND\brodes
|
758759a304
|
Crypto: Reused nonce query updates and test updates to address false positives.
|
2025-10-10 12:25:31 -04:00 |
|
REDMOND\brodes
|
fba80870a6
|
Crypto: Example query reorg - moving queries of this PR into 'examples' subdirectories.
|
2025-10-09 09:03:00 -04:00 |
|
REDMOND\brodes
|
deb43735be
|
Crypto: Minor fixes to WeakSymmetricCipher, change to a singular name for consistency.
|
2025-10-09 08:39:39 -04:00 |
|
yoff
|
5109babd92
|
java: add qldoc
These interfaces were previously in a .ql file.
Also, use the XXAccess variants.
|
2025-10-09 14:20:28 +02:00 |
|
REDMOND\brodes
|
3dedda4233
|
Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check
|
2025-10-09 08:18:04 -04:00 |
|
REDMOND\brodes
|
c6cc4fff51
|
Crypto: Minor fixes to WeakBlockModes, WeakHash to consider SHA3 ok, Added unknown hash.
|
2025-10-09 08:16:28 -04:00 |
|
Nicolas Will
|
fdba3acc4b
|
Crypto: Fix QL-for-QL alert and auto-format
|
2025-10-09 13:59:51 +02:00 |
|
yoff
|
1ad239459f
|
java: move shared code into Concurrency.qll
|
2025-10-09 13:36:35 +02:00 |
|
yoff
|
f90e9dbb5e
|
java: favour inline_late over inline
This gives much greater control over the join-order
|
2025-10-09 13:01:25 +02:00 |
|
yoff
|
26c1b2f143
|
java: adjust test expectations; new queries are enabled in extended
|
2025-10-09 12:29:42 +02:00 |
|
yoff
|
830f02af1f
|
java: fixes from the CI bots
|
2025-10-09 09:37:31 +02:00 |
|
yoff
|
93fc287ef1
|
java: add auto-generated overlay annotations
|
2025-10-09 09:25:57 +02:00 |
|
yoff
|
a1671ea8af
|
java: small cleanups
- add missing qldoc
- remove use of `getErasure`
- remove use of `getTypeDescriptor`
- define `ExposedField`
|
2025-10-09 09:16:25 +02:00 |
|
yoff
|
821b1de5b3
|
java: inline char pred
|
2025-10-09 09:16:25 +02:00 |
|
yoff
|
01ddc11fa7
|
java: address some review comments
|
2025-10-09 09:16:25 +02:00 |
|