Nora Dimitrijević
2d9295a5a4
Swift: [generated] library code changes
2023-04-26 15:47:20 +02:00
Mathias Vorreiter Pedersen
6dc6e13caa
Swift: Hide 'DynamicSelfType' from the main AST.
2023-04-26 13:58:54 +01:00
Mathias Vorreiter Pedersen
11aff55a97
Swift: Add default implicit read steps when selecting PostUpdateNodes as sinks.
2023-04-26 13:58:48 +01:00
Mathias Vorreiter Pedersen
e6c8428875
Swift: Add syntax for selecting PostUpdateNodes in CSV rows.
2023-04-26 13:58:42 +01:00
Anders Schack-Mulligen
d681671356
Dataflow: Sync.
2023-04-26 14:45:07 +02:00
Anders Schack-Mulligen
3d01763092
Swift: Remove empty string DataFlowType in PathNode.
2023-04-26 13:10:01 +02:00
Geoffrey White
e16277ef43
Swift: Add source model for UITextField.
2023-04-25 23:14:24 +01:00
Geoffrey White
0ebb06e185
Merge branch 'main' into flowsources
2023-04-25 10:08:15 +01:00
Michael Nebel
8ade7247a1
Merge pull request #12885 from michaelnebel/mergepathgraph3
...
Dataflow: Introduce param module for merging three path graphs.
2023-04-24 12:49:28 +02:00
Geoffrey White
bfbd45a220
Swift: Fix CSV field sinks.
2023-04-20 18:14:34 +01:00
Geoffrey White
d317ad80e5
Swift: Convert to CSV sinks.
2023-04-20 17:53:00 +01:00
Nora Dimitrijević
1f861fda25
Merge pull request #12736 from d10c/swift/capture-flow
...
Swift: Closure Capture Helper APIs
2023-04-20 18:45:56 +02:00
Geoffrey White
380bf21a38
Swift: Update InsecureTLSExtensions.ql sinks to not depend on AssignExpr.
2023-04-20 17:15:48 +01:00
Michael Nebel
656d8d2451
Sync files.
2023-04-20 11:29:51 +02:00
Geoffrey White
7285704807
Merge pull request #12876 from geoffw0/extensiondecl
...
Swift: Improve ExtensionDecl.toString
2023-04-19 16:41:48 +01:00
Geoffrey White
e895cac569
Merge pull request #12877 from geoffw0/deprecated
...
Swift: Delete deprecated classes
2023-04-19 16:41:25 +01:00
Geoffrey White
4484574301
Swift: Rename clashing CleartextStorage modules.
2023-04-19 14:29:25 +01:00
Geoffrey White
10c222e7e2
Swift: Remove deprecated classes from queries.
2023-04-19 14:26:03 +01:00
Geoffrey White
a3c66b6032
Merge pull request #12833 from geoffw0/addmodels
...
Swift: Add some sink models
2023-04-19 14:18:29 +01:00
Geoffrey White
e9ffefaa96
Swift: Improve ExtensionDecl.toString.
2023-04-19 13:38:04 +01:00
Mathias Vorreiter Pedersen
8d62d5916e
Merge pull request #12807 from MathiasVP/dataflow-for-keypaths
...
Swift: Dataflow for keypaths
2023-04-19 10:00:49 +01:00
Nora Dimitrijević
96f06f8eca
Swift: refactor the public API wrt captures
...
This exposes capture- and access-related methods under different names.
2023-04-18 16:50:37 +02:00
Paolo Tranquilli
edb355b47f
Swift: add QLdoc for generated Raw and Synth modules
2023-04-17 09:38:26 +02:00
Geoffrey White
d94ed1b4a3
Merge pull request #12824 from geoffw0/modernsec4
...
Swift: Add CryptoSwift sinks in swift/weak-sensitive-data-hashing
2023-04-14 19:56:37 +01:00
Geoffrey White
2adc4c0feb
Swift: PredicatUpgrade predicate injection sources from RemoteFlowSource to FlowSource. Even local input should be in parameters rather than concatenated into the predicate.
2023-04-14 17:50:57 +01:00
Geoffrey White
7b8606d411
Swift: Delete unnecessary import.
2023-04-14 16:36:22 +01:00
Geoffrey White
9ecba6a94d
Swift: Add missing imports in ExternalFlow.qll.
2023-04-14 14:58:24 +01:00
Geoffrey White
619d572d50
Swift: Add RNCryptor hmacKey encryption-key sinks.
2023-04-14 14:58:15 +01:00
Geoffrey White
46da73cc11
Swift: Add realm path-injection sinks.
2023-04-14 14:50:50 +01:00
Geoffrey White
feccd307da
Swift: Add realm encryption-key sinks.
2023-04-14 14:47:24 +01:00
Geoffrey White
3f8ac1a12b
Merge pull request #12794 from geoffw0/modernsec2
...
Swift: Add CSV extension points to the encryption queries.
2023-04-13 19:43:05 +01:00
Geoffrey White
8c415f3988
Swift: getName() -> getFullName().
2023-04-13 17:56:07 +01:00
Mathias Vorreiter Pedersen
f9d5e56d9c
s/entry/exit
2023-04-13 13:22:07 +01:00
Mathias Vorreiter Pedersen
f32d77b36c
Swift: Add QLDoc.
2023-04-13 13:13:18 +01:00
Mathias Vorreiter Pedersen
33bc7eabbb
Swift: Fix CFG for key-path expressions.
2023-04-13 13:12:09 +01:00
Mathias Vorreiter Pedersen
859b3051b7
Swift: Add consistency queries to CFG tests.
2023-04-13 13:12:02 +01:00
Michael Nebel
1d82b09ec1
Sync files.
2023-04-13 09:21:05 +02:00
Mathias Vorreiter Pedersen
f46ea325e8
Swift: Add dataflow through key-path expressios by modeling them as lambdas that perform a sequence of read steps.
2023-04-12 17:38:34 +01:00
Chris Smowton
7eefa43f5a
Rename and document viableArgParamSpecific to make clear it is a temporary hook.
2023-04-12 14:33:46 +01:00
Chris Smowton
4d8ca3d759
Add dataflow callback to filter out receiver argument flow to Golang interface dispatch candidates.
...
Other langauges stub the callback.
2023-04-12 14:19:06 +01:00
Alexandre Boulgakov
b890e2ef96
Swift: Use camelCase in KeyPathComponent predicates.
2023-04-12 12:50:50 +01:00
Alexandre Boulgakov
64443dfdcf
Swift: Add named predicates for known KeyPathComponent kinds.
2023-04-12 12:06:14 +01:00
Geoffrey White
cdcee5cc75
Swift: Add high-level CryptoSwift sinks.
2023-04-11 19:59:43 +01:00
Geoffrey White
539f8f0f70
Swift: Add mid-level CryptoSwift sinks and prevent duplication that results. Overall this doesn't give us any new results in tests, but makes paths shorter, and in the real world I expect it to add reliability.
2023-04-11 19:54:55 +01:00
Geoffrey White
51a62b54ee
Swift: Add low-level CryptoSwift sinks.
2023-04-11 19:54:48 +01:00
Geoffrey White
d299d92025
Swift: Prevent potentially misleading duplicate results.
2023-04-11 19:39:09 +01:00
Geoffrey White
03a4084c11
Swift: Update some sinks to CSV format.
2023-04-11 18:10:54 +01:00
Geoffrey White
256c3f66ca
Swift: Various minor fixes / consistency improvements to sinks.
2023-04-11 17:04:09 +01:00
Alexandre Boulgakov
b900185ae3
Swift: Add db upgrade/downgrade scripts for key-path component extraction.
...
I've marked both scripts as "partial" since we're extracting different AST components for key-paths and don't have a good way to convert between them in QL. Each deletes the corresponding tables, but leaves non-key-path functionality intact.
2023-04-11 14:00:13 +01:00
Alexandre Boulgakov
35a2d55d18
Swift: Extract structured keypath components.
...
Changes in swift/ql/lib are generated by swift/codegen without manual intervention.
2023-04-11 13:34:17 +01:00
