75 Commits

Author	SHA1	Message	Date
Benjamin Muskalla	157f56f48a	Capture model for defining interface ... Instead of modeling individual implementations, take a more general approach of reuse dataflows for interfaces defined by a library. This allows tracking flows across all implementations and aligns better with how we manually model frameworks. This may have some FPs given all possible flows are modeled for a specific interface but also covers more scenarios where we don't know which implementation of an interface is used.	2021-11-10 16:30:22 +01:00
Benjamin Muskalla	f36bb8baaf	Exclude models for simpler types ... Avoid generating models for types that can't really propagate taint in a valuable way (e.g. primitivies, BigInt, ..). Keep tracking bulk-like data (e.g. char[] or byte[]).	2021-11-10 16:30:22 +01:00
Benjamin Muskalla	842f617bc1	Order sinks and sources first	2021-11-10 16:30:22 +01:00
Benjamin Muskalla	be150f269b	Formatting	2021-11-10 16:30:22 +01:00
Benjamin Muskalla	2654e27123	Exclude known internal APIs from being modeled	2021-11-10 16:30:22 +01:00
Benjamin Muskalla	6b2460d4a1	Formatting	2021-11-10 16:30:21 +01:00
Benjamin Muskalla	060862ab3b	Avoid certain test sources in models	2021-11-10 16:30:21 +01:00
Benjamin Muskalla	e607953b9c	Simplify query	2021-11-10 16:30:21 +01:00
Benjamin Muskalla	9a859334d4	Formatting	2021-11-10 16:30:21 +01:00
Benjamin Muskalla	6c59333716	Remove workaround that accounted for missing flow	2021-11-10 16:30:21 +01:00
Benjamin Muskalla	ca9d5439f0	Restrict source configuration to return nodes	2021-11-10 16:30:20 +01:00
Benjamin Muskalla	7a7ec06819	Simplify sink configuration	2021-11-10 16:30:20 +01:00
Benjamin Muskalla	1a4fd7bc7d	Allow camelcase names	2021-11-10 16:30:20 +01:00
Benjamin Muskalla	2b2ac82fb7	Fix bug in sink detection	2021-11-10 16:30:20 +01:00
Benjamin Muskalla	c616eb1473	Fix finding more sources	2021-11-10 16:30:19 +01:00
Benjamin Muskalla	38579ef25b	Add proper metadata to queries	2021-11-10 16:30:19 +01:00
Benjamin Muskalla	a80d50cbc0	Simplify field flow	2021-11-10 16:30:19 +01:00
Benjamin Muskalla	a1d8dfb524	Initial support for source models	2021-11-10 16:30:19 +01:00
Benjamin Muskalla	c844f5382f	Add script to generate flow models	2021-11-10 16:30:19 +01:00
Benjamin Muskalla	f9fea15a52	Initial support for capturing sink models	2021-11-10 16:30:18 +01:00
Benjamin Muskalla	364de55b8d	Support parameter->parameter flow	2021-11-10 16:30:18 +01:00
Benjamin Muskalla	cd11ef3bf6	Support outgoing taint flow from fields	2021-11-10 16:30:18 +01:00
Benjamin Muskalla	c3462be2c9	Capture argument->return value flows	2021-11-10 16:30:18 +01:00
Benjamin Muskalla	ec772fb6b2	Add support for qualifier flow	2021-11-10 16:30:17 +01:00
Benjamin Muskalla	32ef40c77b	Add scaffolding for summary model generator	2021-11-10 16:30:17 +01:00