Skip to content

Go: Diff-informed queries: phase 3 (non-trivial locations) #20075

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 15 commits into
base: main
Choose a base branch
from
Open

Go: Diff-informed queries: phase 3 (non-trivial locations) #20075

Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
e0d16a8
[DIFF-INFORMED] Go: AllocationSizeOverflow
d10c Jul 16, 2025
89f7604
[DIFF-INFORMED] Go: CommandInjection
d10c Jul 16, 2025
109f6dd
[DIFF-INFORMED] Go: ExternalAPIs
d10c Jul 16, 2025
f228818
[DIFF-INFORMED] Go: HardcodedCredentials
d10c Jul 16, 2025
ce7eb9b
[DIFF-INFORMED] Go: IncorrectIntegerConversion
d10c Jul 16, 2025
4b47362
[DIFF-INFORMED] Go: InsecureRandomness
d10c Jul 16, 2025
8c8625d
[DIFF-INFORMED] Go: ReflectedXss
d10c Jul 16, 2025
d6ef585
[DIFF-INFORMED] Go: RequestForgery, SafeUrlFlow
d10c Jul 16, 2025
19b373a
[DIFF-INFORMED] Go: SensitiveConditionBypass
d10c Jul 16, 2025
7bd6703
[DIFF-INFORMED] Go: ConditionalBypass
d10c Jul 16, 2025
a1fe72c
[DIFF-INFORMED] Go: SSRF
d10c Jul 16, 2025
7b759f4
[DIFF-INFORMED] Go: AuthCookie
d10c Jul 16, 2025
188fc0d
[DIFF-INFORMED] Go: UnhandledCloseWritableHandle
d10c Jul 16, 2025
b4010ac
[DIFF-INFORMED] Go: InsecureHostKeyCallback
d10c Jul 16, 2025
8824677
[DIFF-INFORMED] Go: BadRedirectCheck
d10c Jul 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
[DIFF-INFORMED] Go: AllocationSizeOverflow 
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/Security/CWE-190/AllocationSizeOverflow.ql#L24
  • Loading branch information
@d10c
d10c committed Jul 17, 2025
commit e0d16a863bb7ec749386741f527f99075d9359e8
11 changes: 11 additions & 0 deletions go/ql/lib/semmle/go/security/AllocationSizeOverflow.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,6 +56,17 @@ module AllocationSizeOverflow {
succ = c
)
}

predicate observeDiffInformedIncrementalMode() { any() }

Location getASelectedSinkLocation(DataFlow::Node sink) {
result = sink.getLocation()
or
exists(DataFlow::Node allocsz |
isSinkWithAllocationSize(sink, allocsz) and
result = allocsz.getLocation()
)
}
}

/** Tracks taint flow to find allocation-size overflows. */
Expand Down
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy