mirror of
https://github.com/github/codeql.git
synced 2026-05-11 01:39:28 +02:00
24 lines
862 B
Plaintext
24 lines
862 B
Plaintext
/** Provides taint tracking configurations to be used in Trust Manager queries. */
|
|
|
|
import java
|
|
import semmle.code.java.dataflow.FlowSources
|
|
import semmle.code.java.security.InsecureTrustManager
|
|
|
|
/**
|
|
* A configuration to model the flow of an insecure `TrustManager`
|
|
* to the initialization of an SSL context.
|
|
*/
|
|
module InsecureTrustManagerConfig implements DataFlow::ConfigSig {
|
|
predicate isSource(DataFlow::Node source) { source instanceof InsecureTrustManagerSource }
|
|
|
|
predicate isSink(DataFlow::Node sink) { sink instanceof InsecureTrustManagerSink }
|
|
|
|
predicate allowImplicitRead(DataFlow::Node node, DataFlow::ContentSet c) {
|
|
(isSink(node) or isAdditionalFlowStep(node, _)) and
|
|
node.getType() instanceof Array and
|
|
c instanceof DataFlow::ArrayContent
|
|
}
|
|
}
|
|
|
|
module InsecureTrustManagerFlow = DataFlow::Global<InsecureTrustManagerConfig>;
|