Fredrik Dahlgren
a50a92673c
Updated Bouncy Castle signer unit tests
2025-07-04 10:20:02 +02:00
Fredrik Dahlgren
2098a64c2a
Fixed QL for QL recommendation
2025-07-04 10:18:57 +02:00
Fredrik Dahlgren
bcbd29b8e3
Updated unit tests to list graph nodes, edges, and properties
2025-07-02 16:36:53 +02:00
Fredrik Dahlgren
cdb8f91c86
Removed transient output artifact instances
2025-06-27 16:36:38 +02:00
Fredrik Dahlgren
357ae9206a
Updated Bouncy Castle algorithm instances
...
- Signature operations are now handled by a single algorithm instance
- All key generation operations except generic EC key generation
operations are now handled by a single algorithm instance
- Ed25519 and Ed448 key generation have the algorithm set to Ed25519 and
Ed448 respectively
- For generic EC key generation operations the algorithm is given by the
corresponding curve (since these could be used for either ECDSA or ECDH)
2025-06-19 10:27:51 +02:00
Fredrik Dahlgren
1e5bb5ff14
Updated tests to pass with new key generation modeling
2025-06-16 11:34:01 +02:00
Fredrik Dahlgren
80a29f91d3
Fixed QL for QL findings
2025-06-12 17:05:22 +02:00
Fredrik Dahlgren
7969bdf8ae
Added test cases for Bouncy Castle block cipher modes
...
This commit also reorganizes the Bouncy Castle test cases into separate
sub-directories for signature and cipher modes.
2025-06-12 13:44:57 +02:00
Fredrik Dahlgren
f97be14fe7
Fixed argument to block cipher mode method being tagged as input
2025-06-12 13:44:56 +02:00
Fredrik Dahlgren
192bb7f9a9
Added support for block cipher modes
2025-06-12 13:44:56 +02:00
Fredrik Dahlgren
2eecda3501
Removed duplicate condition in Model.qll
...
Co-authored-by: Arthur Baars <aibaars@github.com >
2025-06-12 13:44:56 +02:00
Fredrik Dahlgren
99b4cb1b7d
Fixed QL for QL findings
2025-06-12 13:44:56 +02:00
Fredrik Dahlgren
1a445b2c7e
Fixed merge conflict resolution issues
2025-06-12 13:44:56 +02:00
Fredrik Dahlgren
3840e93445
Added support for HSS
2025-06-12 13:44:55 +02:00
Fredrik Dahlgren
b64fdc0418
Added BouncyCastle license file to stubs
2025-06-12 13:44:55 +02:00
Fredrik Dahlgren
eb89ee1a36
Updated BouncyCastle tests and corresponding stubs
2025-06-12 13:44:55 +02:00
Fredrik Dahlgren
653ef24f74
Added LMS and ML-DSA names to Model.qll
2025-06-12 13:44:55 +02:00
Fredrik Dahlgren
8b06c3284e
Added support for EllipticCurveConsumingAlgorithm
2025-06-12 13:44:54 +02:00
Fredrik Dahlgren
0406d5c45d
Added documentation for the isConsumedEllipticCurve workaround
2025-06-12 13:44:54 +02:00
Fredrik Dahlgren
f17bc7e995
Added EllipticCurveConsumingAlgorithmInstance to Model.qll
...
This commit adds EllipticCurveConsumingAlgorithmInstance to the shared
model, allowing us to model and graph elliptic curve algorithms.
2025-06-12 13:44:54 +02:00
Fredrik Dahlgren
4a34a5c176
Created additional stubs for ECDSA
2025-06-12 13:44:54 +02:00
Fredrik Dahlgren
b57bf9ad20
Updated signature operations test query
2025-06-12 13:44:54 +02:00
Fredrik Dahlgren
efd3266b1c
Added signature input nodes to signature verify operation nodes
2025-06-12 13:44:53 +02:00
Fredrik Dahlgren
fca90b3292
Added support for BouncyCast ECDSA
...
This commit adds support for ECDSA. This includes tracking the
instantiated curve parameters using data flow.
It also adds SignatureArtifactInstance and SignatureOperationInstance
types to the shared model.
2025-06-12 13:44:53 +02:00
Fredrik Dahlgren
d7f1c701b2
Added unit tests for BouncyCastle EdDSA signatures and key generators
2025-06-12 13:44:53 +02:00
Fredrik Dahlgren
4aecf8b667
Added stubs for BouncyCastle EdDSA signature algorithms and key generators
2025-06-12 13:44:53 +02:00
Fredrik Dahlgren
9c602f8e38
Updated returned key sizes to be integers
2025-06-12 13:44:53 +02:00
Fredrik Dahlgren
45416d28cb
Refactored algorithm instances
...
This commit also adds associated elliptic curves to the key generation
and key nodes.
2025-06-12 13:44:52 +02:00
Fredrik Dahlgren
d8cdd3c2d1
Added support for BouncyCastle key generation algorithms
...
This commit adds the `KeyGenerationOperationInstance` and
`KeyGenerationAlgorithmInstance` types to the BouncyCastle model.
It also adds data flow support from key pairs to the corresponding
public and private components.
2025-06-12 13:44:52 +02:00
Fredrik Dahlgren
e9c6c3350a
Multiple bug fixes in BouncyCastle signature model
2025-06-12 13:44:52 +02:00
Fredrik Dahlgren
c588d11297
Removed unused getIntermediateUse function
2025-06-12 13:44:52 +02:00
Fredrik Dahlgren
43e5e40823
Added initial support for BouncyCastle signers
2025-06-12 13:44:51 +02:00
Tom Hvitved
93fd6ec826
Merge pull request #19729 from hvitved/rust/type-inference-adjust-type-relevant-access
...
Rust: Also apply `adjustedAccessType` in `RelevantAccess`
2025-06-12 13:04:13 +02:00
Tom Hvitved
9e6ce98491
Merge pull request #19728 from hvitved/rust/type-inference-debug-predicates
...
Rust: Add another type inference debug predicate
2025-06-12 12:15:19 +02:00
Owen Mansel-Chan
538a5af1d1
Merge pull request #19738 from owen-mc/pr/felickz/19530
...
Set CWE-134 from 9.3 to 7.3 CVSS score for memory safe languages (#2 )
2025-06-12 10:27:28 +01:00
Tom Hvitved
d667f7d411
Merge pull request #19732 from hvitved/rust/builtin-canonical-paths
...
Rust: Generate canonical paths for builtins
2025-06-12 10:47:00 +02:00
Paolo Tranquilli
85e9f5a3b0
Merge pull request #19559 from github/redsun82/rust-extract-libs
...
Rust: move body skipping logic to code generation
2025-06-12 10:45:30 +02:00
Tom Hvitved
649481e279
Merge pull request #19657 from hvitved/rust/type-inference-index-expr-simple
...
Rust: Simple type inference for index expressions
2025-06-12 10:27:09 +02:00
Owen Mansel-Chan
23cbc6abc4
Merge pull request #19723 from apsscolari/update-precision-java-concatenated-command-line
...
Update precision java concatenated command line
2025-06-12 09:23:00 +01:00
Geoffrey White
fdf1dca28f
Merge pull request #19735 from geoffw0/canonical
...
Rust: Update RegexInjectionExtensions to use getCanonicalPath.
2025-06-12 09:14:52 +01:00
Tom Hvitved
383cc5c2a7
Rust: Rename Bultins.qll -> Builtins.qll
2025-06-12 09:12:32 +02:00
Ana Scolari
a07ce30d30
Update java-code-scanning.qls.expected
...
removing line once this query precision is changed to Medium
2025-06-11 15:27:20 -07:00
Ana Scolari
374d7da4a2
Merge branch 'main' into update-precision-java-concatenated-command-line
2025-06-11 15:24:41 -07:00
Jon Janego
7f76f5b056
Merge pull request #19740 from github/changedocs-2.22.0
...
Changedocs 2.22.0
2025-06-11 17:18:16 -05:00
Jon Janego
94a2d0876c
escaping
2025-06-11 17:02:26 -05:00
Jon Janego
62e17c108c
RST sitedocs for 2.22.0
2025-06-11 16:55:14 -05:00
Jeroen Ketema
7d8d596a35
Merge pull request #19686 from github/idrissrio/lambdaparams
...
C++: Add boolean for explicit lambda parameter lists
2025-06-11 23:53:00 +02:00
Jon Janego
6ec48117b5
Merge pull request #19739 from github/changedocs-2.22.0
...
fixing some improperly escaped URLs
2025-06-11 16:24:29 -05:00
Jon Janego
6336e3d44b
fixing another bracket
2025-06-11 16:02:28 -05:00
Chad Bentz
0135cf661f
Attempt to edit swift change notes for CI failure
2025-06-11 21:49:26 +01:00
