-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Diff-informed queries: phase 3 (non-trivial locations) #19957
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
d10c
wants to merge
96
commits into
github:main
Choose a base branch
from
d10c:d10c/diff-informed-phase-3
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from 1 commit
Commits
Show all changes
96 commits
Select commit
Hold shift + click to select a range
09daa56
[TEST] C++: CWE-020/ExternalAPI: add tests based on qlhelp (TODO: pro…
d10c b3db51e
[TEST] C++: CleartextSqliteDatabase: add new test
d10c 87db121
[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp
d10c 0bfc400
[TEST] Java: LogInjection: convert test to qlref
d10c e1cce4e
[TEST] Java: UnsafeCertTrust: convert test to qlref
d10c 9fa5760
[TEST] Java: TrustBoundaryViolations: convert test to qlref
d10c 3247321
[TEST] Java: SensitiveLogInfo: convert to qlref
d10c fd18b62
[TEST] Java: ConditionalBypass: convert to qlref
d10c 64689b2
[TEST] Java: SensitiveCommunication: convert to qlref
d10c 29c3916
[TEST] Python: TimingAttackAgainstHash: add qlref test to existing so…
d10c 0874f86
[DIFF-INFORMED] Actions: ArgumentInjection
d10c 96a39da
[DIFF-INFORMED] Actions: ArtifactPoisoning
d10c 3f30cf0
[DIFF-INFORMED] Actions: CodeInjection
d10c 3eb1a87
[DIFF-INFORMED] Actions: CommandInjection
d10c 75b211f
[DIFF-INFORMED] Actions: EnvPathInjection
d10c 570e70d
[DIFF-INFORMED] Actions: EnvVarInjection
d10c 8cc0537
[DIFF-INFORMED] C++: OverflowDestination
d10c fa15582
[DIFF-INFORMED] C++: ConstantSizeArrayOffByOne
d10c 698fbde
[DIFF-INFORMED] C++: DecompressionBombs
d10c 56e6187
[DIFF-INFORMED] C++: NonConstantFormat
d10c 7044eb4
[DIFF-INFORMED] C++: LeapYear
d10c d7ae55a
[DIFF-INFORMED] C++: (IR) ExternalAPIs
d10c 3a83961
[DIFF-INFORMED] C++: TaintedPath
d10c 1cc2793
[DIFF-INFORMED] C++: ExecTainted
d10c db3df32
[DIFF-INFORMED] C++: CgiXss
d10c 803cfcf
[DIFF-INFORMED] C++: SqlTainted
d10c 3b0cfc5
[DIFF-INFORMED] C++: UnboundedWrite
d10c 6ff8746
[DIFF-INFORMED] C++: ImproperNullTerminationTainted
d10c 905635b
[DIFF-INFORMED] C++: CWE-190/ArithmeticTainted,etc.
d10c 89cc942
[DIFF-INFORMED] C++: AuthenticationBypass
d10c 858f4fd
[DIFF-INFORMED] C++: SSLResultConflation (has secondary config but pa…
d10c c75b1f1
[DIFF-INFORMED] C++: CWE-311/Cleartext…
d10c dfc1ace
[DIFF-INFORMED] C++: CleartextSqliteDatabase
d10c 1a24e5d
[DIFF-INFORMED] C++: UseOfHttp
d10c 5bb53d3
[DIFF-INFORMED] C++: InsufficientKeySize
d10c d7710fc
[DIFF-INFORMED] C++: IteratorToExpiredContainer
d10c 382b482
[DIFF-INFORMED] C++: UnsafeCreateProcessCall
d10c 233c015
[DIFF-INFORMED] C++: UnsafeDaclSecurityDescriptor
d10c 94611b8
[DIFF-INFORMED] C++: TaintedCondition
d10c 61a3495
[DIFF-INFORMED] C++: TypeConfusion
d10c f18fbf8
[DIFF-INFORMED] C#: ConditionalBypass
d10c 398ad9a
[DIFF-INFORMED] C#: ExternalAPIs
d10c 0f5fc82
[DIFF-INFORMED] C#: UnsafeDeserializationQuery
d10c 3b56f5b
[DIFF-INFORMED] C#: ThreadUnsafeCryptoTransformLambda
d10c e3714a8
[DIFF-INFORMED] C#: HardcodedConnectionString
d10c f8ba5af
[DIFF-INFORMED] Go: AllocationSizeOverflow
d10c a6547a5
[DIFF-INFORMED] Go: CommandInjection
d10c dab97f3
[DIFF-INFORMED] Go: ExternalAPIs
d10c c1a5881
[DIFF-INFORMED] Go: HardcodedCredentials
d10c 53f4c94
[DIFF-INFORMED] Go: IncorrectIntegerConversion
d10c e7935b6
[DIFF-INFORMED] Go: InsecureRandomness
d10c 40f7a3b
[DIFF-INFORMED] Go: ReflectedXss
d10c 5527221
[DIFF-INFORMED] Go: RequestForgery, SafeUrlFlow
d10c cccf6e6
[DIFF-INFORMED] Go: SensitiveConditionBypass
d10c e94b492
[DIFF-INFORMED] Go: ConditionalBypass
d10c f3453c7
[DIFF-INFORMED] Go: SSRF
d10c 8594d31
[DIFF-INFORMED] Go: AuthCookie
d10c 9ec0d13
[DIFF-INFORMED] Go: UnhandledCloseWritableHandle
d10c 9ecf0f2
[DIFF-INFORMED] Go: InsecureHostKeyCallback
d10c a2b8db8
[DIFF-INFORMED] Go: BadRedirectCheck
d10c 03d4adc
[DIFF-INFORMED] Java: (Android)SensitiveCommunication
d10c f6e7f63
[DIFF-INFORMED] Java: ArithmeticTainted
d10c d837355
[DIFF-INFORMED] Java: ArithmeticUncontrolled
d10c e84c8bd
[DIFF-INFORMED] Java: ConditionalBypass
d10c dbcb1fb
[DIFF-INFORMED] Java: UntrustedDataToExternalAPI
d10c d7258a9
[DIFF-INFORMED] Java: ExternallyControlledFormatString
d10c 94de00b
[DIFF-INFORMED] Java: ImproperValidationOfArray…
d10c 52c0d62
[DIFF-INFORMED] Java: InsecureCookie
d10c 4a985bf
[DIFF-INFORMED] Java: InsecureLdapAuth
d10c 650a5dd
[DIFF-INFORMED] Java: LogInjection
d10c 0b9d638
[DIFF-INFORMED] Java: MaybeBrokenCryptoAlgorithm
d10c 9cb55f3
[DIFF-INFORMED] Java: SensitiveLogging
d10c 5228767
[DIFF-INFORMED] Java: SqlConcatenated
d10c 3197508
[DIFF-INFORMED] Java: TaintedEnvironmentVariable
d10c 69e93eb
[DIFF-INFORMED] Java: TempDirLocalInformationDisclosure
d10c f10210c
[DIFF-INFORMED] Java: TrustBoundaryViolation
d10c 5e05aeb
[DIFF-INFORMED] Java: UnsafeCertTrust
d10c 06add01
[DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess
d10c 89dd8a8
[DIFF-INFORMED] JS: IndirectCommandInjection
d10c 2a5eae2
[DIFF-INFORMED] JS: ShellCommandInjectionFromEnvironment
d10c 81bbcda
[DIFF-INFORMED] JS: EnvValueAndKeyInjection
d10c 272a97d
[DIFF-INFORMED] JS: decodeJwtWithoutVerification
d10c e7b6ad2
[DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash
d10c 9f72a2f
[DIFF-INFORMED] Ruby: MissingFullAnchor
d10c 2ba8234
[DIFF-INFORMED] Rust: RegexInjection
d10c 2afffd3
[DIFF-INFORMED] Rust: TaintedPath
d10c 7e4f37f
[DIFF-INFORMED] Rust: SqlInjection
d10c b3f76ce
[DIFF-INFORMED] Rust: CleartextTransmission
d10c d25c8cd
[DIFF-INFORMED] Rust: CleartextLogging
d10c ca1848e
[DIFF-INFORMED] Rust: UncontrolledAllocationSize
d10c ab6be38
[DIFF-INFORMED] Rust: AccessAfterLifetime
d10c a0215ae
[DIFF-INFORMED] Rust: AccessInvalidPointer
d10c 162781d
[DIFF-INFORMED] Swift: CleartextStorageDatabase
d10c 37e6e2c
[DIFF-INFORMED] Swift: CleartextStoragePreferences
d10c 649df5b
[DIFF-INFORMED] Swift: InsecureTLS
d10c 085720a
[DIFF-INFORMED] Swift: UnsafeWebViewFetch
d10c File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
[TEST] Python: TimingAttackAgainstHash: add qlref test to existing so…
…urce (TODO: add source with true positive)
- Loading branch information
commit 29c3916f4d702d8fbc84f3c75139a36ff69d8fd5
There are no files selected for viewing
12 changes: 12 additions & 0 deletions
12
...tal/query-tests/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.expected
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,12 @@ | ||
edges | ||
| TimingAttackAgainstHash.py:26:5:26:13 | ControlFlowNode for signature | TimingAttackAgainstHash.py:27:24:27:32 | ControlFlowNode for signature | provenance | | | ||
| TimingAttackAgainstHash.py:26:17:26:41 | ControlFlowNode for Attribute() | TimingAttackAgainstHash.py:26:5:26:13 | ControlFlowNode for signature | provenance | | | ||
| TimingAttackAgainstHash.py:30:12:30:47 | ControlFlowNode for Attribute() | TimingAttackAgainstHash.py:37:19:37:48 | ControlFlowNode for sign() | provenance | | | ||
nodes | ||
| TimingAttackAgainstHash.py:26:5:26:13 | ControlFlowNode for signature | semmle.label | ControlFlowNode for signature | | ||
| TimingAttackAgainstHash.py:26:17:26:41 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() | | ||
| TimingAttackAgainstHash.py:27:24:27:32 | ControlFlowNode for signature | semmle.label | ControlFlowNode for signature | | ||
| TimingAttackAgainstHash.py:30:12:30:47 | ControlFlowNode for Attribute() | semmle.label | ControlFlowNode for Attribute() | | ||
| TimingAttackAgainstHash.py:37:19:37:48 | ControlFlowNode for sign() | semmle.label | ControlFlowNode for sign() | | ||
subpaths | ||
#select |
1 change: 1 addition & 0 deletions
1
...mental/query-tests/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.qlref
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql | ||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Check warning
Code scanning / CodeQL
Query test without inline test expectations Warning test