55 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	6c02e30f56	Java: Update models.	2023-08-23 13:24:55 +02:00
Jami Cogswell	19622aec49	Java: remove duplicate 'Files.newOutputStream' ai model	2023-08-04 14:06:57 -04:00
Jami Cogswell	e64d581f7a	Java: remove duplicate 'Files.newInputStream' ai model	2023-08-04 14:05:05 -04:00
Jami Cogswell	d2a24dee7f	Java: remove duplicate 'Files.delete' ai model	2023-08-04 14:02:59 -04:00
Jami Cogswell	516831aa41	Java: remove duplicate 'Files.move' ai model	2023-08-04 14:01:27 -04:00
Jami Cogswell	c510d33fbf	Java: remove duplicate 'Files.deleteIfExists' ai model	2023-08-04 13:52:18 -04:00
Stephan Brandauer	c6f10519fa	Merge branch 'main' into java/update-mad-decls-after-triage-2023-06-08T08-51-47	2023-06-08 12:00:07 +02:00
Stephan Brandauer	bda938c544	Update MaD Declarations after Triage	2023-06-08 10:51:48 +02:00
Tony Torralba	6d7234f8ed	Merge pull request #13225 from atorralba/atorralba/java/path-injection-mad-sinks-2 ... Java: Migrate path injection sinks to models-as-data (simplified)	2023-06-07 14:27:36 +02:00
Tony Torralba	0065e6e1d6	Apply suggestions from code review ... Fix incorrect models-as-data rows	2023-06-06 10:04:22 +02:00
Taus	7ad860fc98	Java: Update MaD declarations after triage ... Co-authored-by: Stephan Brandauer <kaeluka@github.com>	2023-06-05 18:00:40 +02:00
Tony Torralba	527fe523a8	Add PathCreation.qll sinks to models-as-data ... The old PathCreation sinks can't be removed because doing so would cause alert wobble in the path injection queries. See their getReportingNode predicates.	2023-06-02 09:14:35 +02:00
Jami	617107de35	Merge pull request #12916 from jcogs33/jcogs33/revamp-java-sink-kinds ... Java: revamp MaD sink kinds	2023-06-01 12:48:30 -04:00
Jami Cogswell	cb10f4976b	Java: update create/read-file sink kinds to path-injection	2023-05-31 15:49:07 -04:00
Jami Cogswell	eb1a8e2189	Java: update write-file sink kind to file-system-store	2023-05-31 15:49:07 -04:00
Jami Cogswell	f255b6acb8	Java: fix typos	2023-05-26 18:55:13 -04:00
Jami Cogswell	7e6913af62	Java: update provenance to 'hq-manual'	2023-05-26 18:55:13 -04:00
Jami Cogswell	65dd7eb8e7	Java: add neutral models discovered with path-inj and ssrf heuristics	2023-05-26 18:55:13 -04:00
Tony Torralba	654bb00946	Java: Tweak java.nio.files.Files.copy models	2023-05-23 10:27:19 +02:00
Michael Nebel	bd23814e7c	Java: Update existing neutrals to include kind information.	2023-05-08 16:18:59 +02:00
Mathew Payne	44c1b48f94	Merge branch 'main' into main	2023-04-17 12:40:23 +01:00
Michael Nebel	169d8d5cf9	Java: All ai-generated models have been manually verified.	2023-04-13 09:21:06 +02:00
Mathew Payne	824ff8ad88	Add function signature to model	2023-04-12 14:54:06 +00:00
Mathew Payne	d0529bba2b	Add missing models for Java IO ... - java.io.OutputStream - java.nio.file.Files	2023-04-12 14:43:11 +00:00
Stephan Brandauer	18801b39c6	Update MaD Declarations after Triage	2023-04-06 12:23:50 +02:00
Tony Torralba	bced2d692b	Apply suggestions from code review	2023-04-05 15:19:21 +02:00
Stephan Brandauer	f87618238f	Review suggestions	2023-04-05 15:15:03 +02:00
Stephan Brandauer	0a5d19fc71	Update MaD Declarations after Triage	2023-04-05 15:15:02 +02:00
Jami Cogswell	b8ceb7112d	Java: update ordering of Path.getFileName model	2023-03-23 18:07:06 -04:00
Jami Cogswell	8046ec2f78	Java: update -1 to this	2023-03-23 18:01:28 -04:00
Jami Cogswell	17e0920325	Java: resolve more conflicts	2023-03-23 18:00:14 -04:00
Jami Cogswell	c213d56d2c	Java: resolve some more -1 to this conflicts	2023-03-23 17:56:46 -04:00
Jami Cogswell	44c3a41194	Java: resolve more -1 to this conflicts	2023-03-23 17:53:27 -04:00
Tony Torralba	1258812428	Fix Argument[this]	2023-03-20 17:13:44 +01:00
Tony Torralba	a66b7ed54a	Fix incorrect model, add missing model	2023-03-20 17:09:48 +01:00
Stephan Brandauer	0cab45e4b9	update old data to current standard (stream creation arg is a sink)	2023-03-20 17:09:48 +01:00
Stephan Brandauer	8802fbdfe7	Update java/ql/lib/ext/java.nio.file.model.yml ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-20 17:09:48 +01:00
Tony Torralba	bc99a44f3a	Apply suggestions from code review	2023-03-20 17:09:48 +01:00
Stephan Brandauer	12bb0d98c0	move toFile back to its original location	2023-03-20 17:09:48 +01:00
Stephan Brandauer	4761c3a328	remove duplicates	2023-03-20 17:09:48 +01:00
Stephan Brandauer	bd21dc9460	remove nonexploitable sinks	2023-03-20 17:09:48 +01:00
Stephan Brandauer	2236db43ec	sort the changed MaD declarations	2023-03-20 17:09:46 +01:00
Stephan Brandauer	ec1762e015	Update MaD Declarations after Triage	2023-03-20 17:06:37 +01:00
Michael Nebel	9039a468cb	Java: Update models that uses -1 in a range.	2023-03-20 10:14:20 +01:00
Michael Nebel	e86f1e4961	Java: Replace Argument[-1] with Argument[this].	2023-03-20 10:14:20 +01:00
Tony Torralba	d54abddab1	java.nio.file tests	2023-03-14 12:22:56 +01:00
Tony Torralba	2e7ad99059	Fix java.nio.file models	2023-03-14 11:51:44 +01:00
Stephan Brandauer	ccf7d9beec	Update MaD Declarations after Triage	2023-03-14 10:32:19 +01:00
Jami Cogswell	ad8849c6b8	Java: fix typo	2023-02-12 16:33:26 -05:00
Jami Cogswell	2d7e71dfce	Java: add read-file sink kind for first arg of copy	2023-02-03 17:28:46 -05:00