13 Commits

Author	SHA1	Message	Date
Jonathan Leitschuh	2753521650	Java: Fix Local Temp File/Dir Incorrect Guard Logic ... Resolves https://github.com/github/codeql/pull/8032#discussion_r841723906	2022-04-06 12:16:09 -04:00
Jonathan Leitschuh	5b651f29d8	Fix insufficient tests and add documentation	2022-03-07 16:39:40 -05:00
Jonathan Leitschuh	dad9a02fbd	Update TempDirInfoDisclosure with new OS Guards	2022-03-02 12:51:15 -05:00
Jonathan Leitschuh	39828fd596	Apply OS guard checks to TempDirLocalInformationDisclosure	2022-03-02 12:50:37 -05:00
Jonathan Leitschuh	49a73673b6	Fix FP from mkdirs call on exact temp directory	2022-02-09 11:04:23 -05:00
Jonathan Leitschuh	7f46640176	Consider calls to setReadable(false, false) then setReadable(true, true) to be safe	2022-02-08 17:57:10 -05:00
Jonathan Leitschuh	9299c7996d	Add information disclosure test fix suggestions	2022-02-04 17:10:27 -05:00
Jonathan Leitschuh	7e514e9ef9	Add QLdoc and fix Compiler Errors in Tests	2022-02-04 17:10:26 -05:00
Jonathan Leitschuh	13fed0e9b6	Temp Dir Info Disclosure: Final pass and add documentation	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	bc12e994b0	Add java.nio.file.Files API checks	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	ecad7534ae	Add mkdirs check	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	cf0ed81575	Add TempDir taint tracking for Files.write	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	3a15678b1e	Java: CWE-200: Temp directory local information disclosure vulnerability	2022-02-04 17:10:23 -05:00