Ahmed Farid
76c8e7d2e8
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.ql
2022-08-04 12:44:45 +01:00
Ahmed Farid
428132a58e
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:44:10 +01:00
Ahmed Farid
a34478d58f
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:43:53 +01:00
Ahmed Farid
59f05b4d62
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstSensitiveInfo.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:43:35 +01:00
Ahmed Farid
fe51a917ec
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:43:21 +01:00
Ahmed Farid
ae4ded08fa
Update and rename TimingAttackAgainstHeader.qlref to TimingAttackAgainstHeaderValue.qlref
2022-08-04 12:42:52 +01:00
Ahmed Farid
a747bacbe5
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql
2022-08-04 12:42:08 +01:00
Ahmed Farid
cf36a30909
Rename python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.qhelp
2022-08-04 12:41:51 +01:00
Ahmed Farid
4b0c42951f
Rename python/ql/src/experimental/Security/CWE-208/UnSafeComparisonOfHash.py to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/UnSafeComparisonOfHash.py
2022-08-04 12:41:27 +01:00
Ahmed Farid
cf47104f62
Update TimingAttackAgainstHeaderValue.ql
2022-08-04 12:39:31 +01:00
Ahmed Farid
8490a54af5
Update TimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:38:31 +01:00
Ahmed Farid
31692f523f
Update PossibleTimingAttackAgainstHash.ql
2022-08-04 12:37:57 +01:00
Ahmed Farid
61b7d89813
Update TimingAttackAgainstHash.ql
2022-08-04 12:36:58 +01:00
Ahmed Farid
b5ff606b41
Update PossibleTimingAttackAgainstSensitiveInfo.ql
2022-08-04 12:36:36 +01:00
Ahmed Farid
ad53176546
Rename python/ql/src/experimental/Security/CWE-208/TimingAttack.qll to python/ql/src/experimental/semmle/python/security/TimingAttack.qll
2022-08-04 12:35:24 +01:00
Ahmed Farid
028ac19259
Rename python/ql/src/experimental/Security/CWE-208/SafeComparisonOfHash.py to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/SafeComparisonOfHash.py
2022-08-04 12:30:56 +01:00
Ahmed Farid
5afc0a7773
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstHash.ql to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.ql
2022-08-04 12:30:38 +01:00
Ahmed Farid
035de1fffe
Rename python/ql/src/experimental/Security/CWE-208/PossibleTimingAttackAgainstHash.qhelp to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.qhelp
2022-08-04 12:30:12 +01:00
Ahmed Farid
e28cf7ebe2
Create UnSafeComparisonOfHash.py
2022-08-04 12:28:46 +01:00
Ahmed Farid
9c0a71d880
Update SafeComparisonOfHash.py
2022-08-04 12:27:35 +01:00
Ahmed Farid
1fed6074e9
Create SafeComparisonOfHash.py
2022-08-04 12:25:47 +01:00
Ahmed Farid
c59a8b0c57
Create PossibleTimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:17:43 +01:00
Ahmed Farid
c13477c14f
Update and rename TimingAttack.qhelp to TimingAttackAgainstSensitiveInfo.qhelp
2022-08-04 12:16:06 +01:00
Ahmed Farid
10df8e6c02
Rename TimingAttackAgainstHeader.ql to TimingAttackAgainstHeaderValue.ql
2022-08-04 12:12:44 +01:00
Ahmed Farid
399972071c
Rename TimingAttackAgainstHeaderValue.ql to TimingAttackAgainstHeaderValue.qhelp
2022-08-04 12:11:28 +01:00
Ahmed Farid
89e1ad40f2
Create TimingAttackAgainstHeaderValue.ql
2022-08-04 12:10:06 +01:00
Ahmed Farid
2bb9448c9f
Create PossibleTimingAttackAgainstHash.qhelp
2022-08-04 12:03:48 +01:00
Ahmed Farid
473ff0ef59
Create TimingAttackAgainstHash.qhelp
2022-08-04 12:02:50 +01:00
Ahmed Farid
9b2ff70332
format document
2022-08-04 00:56:30 +01:00
Ahmed Farid
813e2394f7
Merge branch 'main' into timing-attack-py
2022-07-27 14:40:55 +01:00
Anders Schack-Mulligen
70e6db3ce1
Merge pull request #9902 from aschackmull/java/junit5-assertnotnull
...
Java: Add support for JUnit5 assertions in the nullness queries.
2022-07-27 13:52:01 +02:00
Chris Smowton
9e7fc1731f
Merge pull request #9898 from smowton/smowton/fix/kotlin-super-calls
...
Kotlin: implement super-method calls
2022-07-27 11:31:36 +01:00
Tony Torralba
e179126abb
Merge pull request #9129 from atorralba/atorralba/get-underlying-expr
...
Java: Add Expr::getUnderlyingExpr predicate
2022-07-27 11:42:28 +02:00
Anders Schack-Mulligen
cc423af8f1
Java: Add support for JUnit5 assertions in the nullness queries.
2022-07-27 10:20:47 +02:00
Anders Schack-Mulligen
f2670bcd61
Merge pull request #9900 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2022-07-27 09:14:28 +02:00
AlexDenisov
f9bdca3079
Merge pull request #9818 from github/redsun82/swift-file-label-caching
...
Swift: cache file labels
2022-07-27 09:12:20 +02:00
github-actions[bot]
30accecd8a
Add changed framework coverage reports
2022-07-27 00:19:16 +00:00
Ahmed Farid
e3340c9345
Update TimingAttackAgainstSensitiveInfo.py
2022-07-27 00:25:42 +01:00
Ahmed Farid
11e888f0ac
Update TimingAttackAgainstSensitiveInfo.expected
2022-07-27 00:25:13 +01:00
Ahmed Farid
ca4fa0aaae
Update TimingAttack.qll
2022-07-27 00:06:28 +01:00
Ahmed Farid
ad57ff4def
Rename PossibleTimingAttackAgainstSignature.qlref to PossibleTimingAttackAgainstHash.qlref
2022-07-26 23:56:24 +01:00
Ahmed Farid
d01d7ba766
Create PossibleTimingAttackAgainstSensitiveInfo.ql
2022-07-26 23:53:39 +01:00
Ahmed Farid
0083a7fa6d
Update TimingAttackAgainstSensitiveInfo.ql
2022-07-26 23:53:18 +01:00
Ahmed Farid
f35985097d
Update and rename PossibleTimingAttackAgainstSignature.expected to PossibleTimingAttackAgainstHash.expected
2022-07-26 23:50:44 +01:00
Chris Smowton
5086841b46
Kotlin: implement super-method calls
...
If we only look at the dispatch receiver, these show up like `this` references rather than `super` references, preventing flow through super-calls. The super-interface case requires properly noting that interface methods with a body get a `default` modifier in order to avoid QL discarding the method as a possible callee.
2022-07-26 17:03:46 +01:00
Ahmed Farid
d68f8c5325
Update PossibleTimingAttackAgainstHash.ql
2022-07-26 16:44:33 +01:00
Ahmed Farid
bdf94ceeee
Update TimingAttackAgainstHash.ql
2022-07-26 16:44:08 +01:00
Ahmed Farid
32d380828d
Update TimingAttackAgainstSensitiveInfo.ql
2022-07-26 16:41:23 +01:00
Ahmed Farid
b42293dbbb
Update TimingAttackAgainstSensitiveInfo.ql
2022-07-26 16:40:24 +01:00
Ahmed Farid
735fee53a4
Update TimingAttack.qll
2022-07-26 16:35:26 +01:00
