Tony Torralba
1d745a6365
Merge pull request #10774 from atorralba/atorralba/swift/url-field-summaries
...
Swift: Add summaries for tainted URL fields
2022-10-18 15:32:23 +02:00
Tony Torralba
0eeaf71716
Simplify models by introducing TaintInheritingContent
2022-10-18 12:36:18 +02:00
Geoffrey White
040d72e7f1
Merge pull request #10857 from geoffw0/locationstring
...
Swift: Give Location a useful toString
2022-10-17 18:10:51 +01:00
Paolo Tranquilli
3a99b9845e
Merge pull request #10856 from github/redsun82/swift-show-ql-class-in-collapsed-hierarchy-tests
...
Swift: show QL class in generated tests on collapsed hierarchies
2022-10-17 16:38:24 +02:00
Geoffrey White
0281bfedda
Merge pull request #10689 from d10c/swift/cleartext-storage-nsuserdefaults
...
Swift: Query for CWE-312: Exposure of sensitive information using NSUserDefaults
2022-10-17 14:05:17 +01:00
Geoffrey White
13f9834fde
Merge pull request #10780 from karimhamdanali/swift-hardcoded-key
...
Swift: detect hardcoded encryption keys
2022-10-17 14:02:31 +01:00
Geoffrey White
3b9151cb24
Swift: Restore UnknownLocation.toString(), it seems helpful.
2022-10-17 13:11:22 +01:00
Paolo Tranquilli
e49268d036
Swift: show QL class in generated tests on collapsed hierarchies
...
In those kinds of tests the results may have different final classes
that are not necessarily visible (or tested) solely through the string
representation. For better testing and reading of expected results,
`getQlPrimaryClasses` is added in these cases.
2022-10-17 14:08:04 +02:00
Geoffrey White
9c8bbe384b
Swift: Add Location.toString.
2022-10-17 12:48:17 +01:00
Geoffrey White
4d0c23c4da
Swift: Add a test of Location.qll.
2022-10-17 12:45:26 +01:00
Paolo Tranquilli
789be9a1ad
Swift: add ImplicitConversionExpr test
2022-10-17 12:57:44 +02:00
Karim Ali
bbc03a1578
add false negatives to the test case
2022-10-17 12:54:34 +02:00
Karim Ali
d56c82ff75
add a query that detects hardcoded keys
2022-10-17 12:54:34 +02:00
Tony Torralba
81d38132cf
Fix test expectations
2022-10-17 12:00:51 +02:00
Tony Torralba
1e4850044c
Increase precision of the URL(string:relativeTo:) models
2022-10-17 11:29:30 +02:00
Josh Soref
893c5457a8
spelling: disambiguation
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 10:56:40 -04:00
Tony Torralba
4b2aa93a05
Update test expectations after rebase
2022-10-11 17:54:59 +02:00
Mathias Vorreiter Pedersen
fc810ddbf4
Merge pull request #10775 from atorralba/atorralba/swift/custom-url-scheme-sources
...
Swift: Add taint sources for custom URL scheme URLs
2022-10-11 16:47:52 +01:00
Tony Torralba
8525db5af6
Add summaries for tainted URL fields
2022-10-11 17:24:26 +02:00
Tony Torralba
f4d43deec4
Add taint sources for custom URL scheme URLs
2022-10-11 17:19:04 +02:00
Tony Torralba
0892a5795d
Add taint step for subscript expressions
2022-10-11 15:33:45 +02:00
Nora Dimitrijević
b7ad287cb1
Swift: rename stub parameters to match docs.
2022-10-10 18:46:39 +02:00
Nora Dimitrijević
8664017fe4
Swift: Working tests
2022-10-10 14:08:04 +02:00
Mathias Vorreiter Pedersen
10eb548156
Merge pull request #10699 from MathiasVP/swift-mad-summaries
2022-10-06 17:44:35 +01:00
Mathias Vorreiter Pedersen
0065a5af96
Swift: Accept path-explanation test changes.
2022-10-06 10:30:18 +01:00
Mathias Vorreiter Pedersen
1edd4d855a
Swift: Add an example with flow through a callback function.
2022-10-06 10:30:11 +01:00
Mathias Vorreiter Pedersen
0b6ea703ea
Swift: Create explicit parameter nodes for source parameters and MaD parameters.
2022-10-06 10:29:52 +01:00
Geoffrey White
d4742d22a0
Swift: 'Data' should be a struct.
2022-10-04 15:10:41 +01:00
Mathias Vorreiter Pedersen
2593120300
Merge pull request #10597 from geoffw0/swifttaintsource
...
Swift: URL taint sources
2022-10-04 09:22:27 +01:00
Karim Ali
9e3d5f49c5
add interprocedural cases to the tests
2022-10-02 15:54:39 +02:00
Karim Ali
72ba77d900
Add rule that checks for using the insecure ECB block mode for encryption
2022-10-02 15:53:39 +02:00
Karim Ali
2080f0dd36
address style violation in generated alerts
2022-10-02 15:50:26 +02:00
Karim Ali
21d5e417d1
add interprocedural cases to the tests
2022-10-02 15:50:25 +02:00
Karim Ali
746f535ee5
Add rule that checks for using the insecure ECB block mode for encryption
2022-10-02 15:50:25 +02:00
Geoffrey White
1248810e35
Swift: Add model for URL.resourceBytes and URL.lines.
2022-09-27 18:58:56 +01:00
Geoffrey White
fa5e03a53d
Swift: Add tests of URL.resourceBytes and URL.lines.
2022-09-27 18:58:56 +01:00
Geoffrey White
69dd2c0eec
Swift: Add a test of taint sources.
2022-09-27 18:58:56 +01:00
Geoffrey White
3ffb2a3ee6
Swift: Fix.
2022-09-27 18:39:03 +01:00
Geoffrey White
286fcb672c
Swift: Additional test results.
2022-09-27 18:31:43 +01:00
Geoffrey White
d2c74913c8
Swift: Repair UnsafeWebViewFetch query via taint summary.
2022-09-27 18:25:32 +01:00
Geoffrey White
13b2b1f304
Swift: Repair CleartextTransmission query.
2022-09-27 18:25:32 +01:00
Geoffrey White
62aa5de781
Swift: URL is a struct not a class.
2022-09-27 18:25:31 +01:00
Geoffrey White
ed3d3e4ff0
Swift: fix regression.
2022-09-23 21:01:25 +01:00
erik-krogh
1fe76ecc0a
update expected output
2022-09-23 12:27:06 +02:00
Alex Denisov
44f4ff18dd
Swift: accept regression
2022-09-22 11:17:07 +02:00
Alex Denisov
b364647d76
Swift: add stubs for new exprs
2022-09-22 11:17:07 +02:00
Alex Denisov
d937234f83
Swift: add stubs for new types
2022-09-22 11:17:07 +02:00
Alex Denisov
13fe02edfa
Swift: NestedArchetypeType was removed
2022-09-22 11:17:04 +02:00
Paolo Tranquilli
69dfdf5a34
Swift: fix IfConfigDecl in QL libraries
...
This fixes `IfConfigDecl` for both the AST printer and control flow
libraries.
It turns out that the active lements of an `IfConfigDecl` are already
listed in the enclosing scope (like a `BraceStmt`), so they should not
be listed as children, and `IfConfigDecl` can be jsut a leaf in the
control flow.
2022-09-21 12:12:55 +02:00
Paolo Tranquilli
b4df557c5a
Merge branch 'main' into redsun82/swift-do-not-extract-inactive-ifconfig-clauses
2022-09-20 15:41:34 +02:00
