221 Commits

Author	SHA1	Message	Date
Karim Ali	27d2dc6d9e	update expected results	2022-11-02 16:13:50 +02:00
Karim Ali	eefda61445	add a query that checks for the use of static IVs	2022-11-02 16:09:00 +02:00
Karim Ali	fe408cfb41	add a query that detects the use of constant passwords	2022-11-01 14:03:27 +02:00
Geoffrey White	c3577b2256	Swift: Rename test directory.	2022-11-01 09:21:50 +00:00
Geoffrey White	7d80c5c7f7	Swift: Rename query directory.	2022-11-01 09:21:10 +00:00
Mathias Vorreiter Pedersen	062a0abceb	Swift: Fix flow out of summarized callables.	2022-10-28 12:09:05 +02:00
Karim Ali	420c35d4a2	add a query that detects the use of constant salts	2022-10-26 15:32:59 +02:00
Karim Ali	18dd0f650c	update iterations threshold to most recent OWASP recommendation ... which is at least 120,000 iterations for secure password hashing	2022-10-25 14:01:40 +02:00
Karim Ali	408c7bebe5	fix .expected file	2022-10-25 13:24:37 +02:00
Karim Ali	0d2e7d43b9	add expected output	2022-10-25 13:24:37 +02:00
Karim Ali	5179a99abb	fix test cases to use the correct class name	2022-10-25 13:24:37 +02:00
Karim Ali	c4b2519e6c	initial draft of the Swift query for CWE-916	2022-10-25 13:24:37 +02:00
Paolo Tranquilli	408968a417	Swift: fix swift compilation in QL tests	2022-10-21 15:20:38 +02:00
Geoffrey White	138643519c	Merge pull request #10757 from geoffw0/sqlinject ... Swift: Query for SQL injection	2022-10-20 18:55:38 +01:00
Geoffrey White	027b71381a	Swift: annotate all cases.	2022-10-18 16:38:02 +01:00
Geoffrey White	0281bfedda	Merge pull request #10689 from d10c/swift/cleartext-storage-nsuserdefaults ... Swift: Query for CWE-312: Exposure of sensitive information using NSUserDefaults	2022-10-17 14:05:17 +01:00
Geoffrey White	9767064310	Swift: Fix bug for sqlite3_prepare_v3.	2022-10-17 13:40:35 +01:00
Geoffrey White	1221cbaee7	Swift: Updated results after merge with main.	2022-10-17 13:35:46 +01:00
Geoffrey White	13018150ed	Merge branch 'main' into sqlinject	2022-10-17 13:30:14 +01:00
Karim Ali	bbc03a1578	add false negatives to the test case	2022-10-17 12:54:34 +02:00
Karim Ali	d56c82ff75	add a query that detects hardcoded keys	2022-10-17 12:54:34 +02:00
Geoffrey White	f96e4eb87e	Swift: One more go at getting the query message how ql-for-ql wants it.	2022-10-14 15:28:14 +01:00
Geoffrey White	24c6bb4c52	Swift: More modern (?) phrasing.	2022-10-14 14:41:02 +01:00
Geoffrey White	3da3a278ab	Swift: Query metadata.	2022-10-14 14:31:38 +01:00
Geoffrey White	76ff593cc5	Swift: Bring it all together into a query.	2022-10-13 16:06:44 +01:00
Geoffrey White	7d78df25bf	Swift: Define SQL sinks.	2022-10-13 15:50:57 +01:00
Geoffrey White	ce5631e7cb	Swift: Complete the rename.	2022-10-13 15:22:36 +01:00
Geoffrey White	12cb099376	Swift: Rename to match other languages (except Java).	2022-10-13 15:21:39 +01:00
Geoffrey White	398b2a392f	Swift: Add more test variants.	2022-10-13 15:13:29 +01:00
Geoffrey White	5496b11153	Swift: Update tests based on feedback.	2022-10-12 14:52:14 +01:00
Nora Dimitrijević	b7ad287cb1	Swift: rename stub parameters to match docs.	2022-10-10 18:46:39 +02:00
Geoffrey White	4258147edf	Swift: Test SQL injection via the SQLite.swift library.	2022-10-10 17:40:22 +01:00
Geoffrey White	964c92418c	Swift: Test SQL injection via the C API.	2022-10-10 17:40:22 +01:00
Geoffrey White	bcab9d8e7c	Swift: Add framework for SQL Injection query.	2022-10-10 17:25:08 +01:00
Nora Dimitrijević	8664017fe4	Swift: Working tests	2022-10-10 14:08:04 +02:00
Mathias Vorreiter Pedersen	10eb548156	Merge pull request #10699 from MathiasVP/swift-mad-summaries	2022-10-06 17:44:35 +01:00
Mathias Vorreiter Pedersen	0065a5af96	Swift: Accept path-explanation test changes.	2022-10-06 10:30:18 +01:00
Geoffrey White	d4742d22a0	Swift: 'Data' should be a struct.	2022-10-04 15:10:41 +01:00
Karim Ali	9e3d5f49c5	add interprocedural cases to the tests	2022-10-02 15:54:39 +02:00
Karim Ali	72ba77d900	Add rule that checks for using the insecure ECB block mode for encryption	2022-10-02 15:53:39 +02:00
Karim Ali	2080f0dd36	address style violation in generated alerts	2022-10-02 15:50:26 +02:00
Karim Ali	21d5e417d1	add interprocedural cases to the tests	2022-10-02 15:50:25 +02:00
Karim Ali	746f535ee5	Add rule that checks for using the insecure ECB block mode for encryption	2022-10-02 15:50:25 +02:00
Geoffrey White	d2c74913c8	Swift: Repair UnsafeWebViewFetch query via taint summary.	2022-09-27 18:25:32 +01:00
Geoffrey White	13b2b1f304	Swift: Repair CleartextTransmission query.	2022-09-27 18:25:32 +01:00
Geoffrey White	62aa5de781	Swift: URL is a struct not a class.	2022-09-27 18:25:31 +01:00
Geoffrey White	ed3d3e4ff0	Swift: fix regression.	2022-09-23 21:01:25 +01:00
erik-krogh	1fe76ecc0a	update expected output	2022-09-23 12:27:06 +02:00
Alex Denisov	44f4ff18dd	Swift: accept regression	2022-09-22 11:17:07 +02:00
Mathias Vorreiter Pedersen	90f24d3e82	Merge pull request #10430 from geoffw0/cleartextmissing ... Swift: Fix missing results in swift/cleartext-storage-database	2022-09-20 14:23:29 +01:00