Repository navigation

Diff-informed queries: phase 3 (non-trivial locations) - #19957

Closed

d10c wants to merge 96 commits into

github:mainfrom

d10c:d10c/diff-informed-phase-3

Closed

Diff-informed queries: phase 3 (non-trivial locations)#19957
d10c wants to merge 96 commits into
github:mainfrom
d10c:d10c/diff-informed-phase-3

Commits on Jul 17, 2025
- [TEST] C++: CWE-020/ExternalAPI: add tests based on qlhelp (TODO: probably need to add MaD source)
  d10c
  committed
  09daa56
- [TEST] C++: CleartextSqliteDatabase: add new test
  d10c
  committed
  b3db51e
- [TEST] Java: CWE-020/ExternalAPI: new test based on qhelp
  d10c
  committed
  87db121
- [TEST] Java: LogInjection: convert test to qlref
  d10c
  committed
  0bfc400
- [TEST] Java: UnsafeCertTrust: convert test to qlref
  d10c
  committed
  e1cce4e
- [TEST] Java: TrustBoundaryViolations: convert test to qlref
  d10c
  committed
  9fa5760
- [TEST] Java: SensitiveLogInfo: convert to qlref
  d10c
  committed
  3247321
- [TEST] Java: ConditionalBypass: convert to qlref
  d10c
  committed
  fd18b62
- [TEST] Java: SensitiveCommunication: convert to qlref
  d10c
  committed
  64689b2
- [TEST] Python: TimingAttackAgainstHash: add qlref test to existing source (TODO: add source with true positive)
  d10c
  committed
  29c3916
- [DIFF-INFORMED] Actions: ArgumentInjection
  d10c
  committed
  0874f86
- [DIFF-INFORMED] Actions: ArtifactPoisoning
  d10c
  committed
  96a39da
- [DIFF-INFORMED] Actions: CodeInjection
  d10c
  committed
  3f30cf0
- [DIFF-INFORMED] Actions: CommandInjection
  d10c
  committed
  3eb1a87
- [DIFF-INFORMED] Actions: EnvPathInjection
  d10c
  committed
  75b211f
- [DIFF-INFORMED] Actions: EnvVarInjection
  d10c
  committed
  570e70d
- [DIFF-INFORMED] C++: OverflowDestination
  d10c
  committed
  8cc0537
- [DIFF-INFORMED] C++: ConstantSizeArrayOffByOne
  d10c
  committed
  fa15582
- [DIFF-INFORMED] C++: DecompressionBombs
  d10c
  committed
  698fbde
- [DIFF-INFORMED] C++: NonConstantFormat
  d10c
  committed
  56e6187
- [DIFF-INFORMED] C++: LeapYear
  d10c
  committed
  7044eb4
- [DIFF-INFORMED] C++: (IR) ExternalAPIs
  d10c
  committed
  d7ae55a
- [DIFF-INFORMED] C++: TaintedPath
  d10c
  committed
  3a83961
- [DIFF-INFORMED] C++: ExecTainted
  d10c
  committed
  1cc2793
- [DIFF-INFORMED] C++: CgiXss
  d10c
  committed
  db3df32
- [DIFF-INFORMED] C++: SqlTainted
  d10c
  committed
  803cfcf
- [DIFF-INFORMED] C++: UnboundedWrite
  d10c
  committed
  3b0cfc5
- [DIFF-INFORMED] C++: ImproperNullTerminationTainted
  d10c
  committed
  6ff8746
- [DIFF-INFORMED] C++: CWE-190/ArithmeticTainted,etc.
  d10c
  committed
  905635b
- [DIFF-INFORMED] C++: AuthenticationBypass
  d10c
  committed
  89cc942
- [DIFF-INFORMED] C++: SSLResultConflation (has secondary config but passes test)
  d10c
  committed
  858f4fd
- [DIFF-INFORMED] C++: CWE-311/Cleartext…
  d10c
  committed
  c75b1f1
- [DIFF-INFORMED] C++: CleartextSqliteDatabase
  d10c
  committed
  dfc1ace
- [DIFF-INFORMED] C++: UseOfHttp
  d10c
  committed
  1a24e5d
- [DIFF-INFORMED] C++: InsufficientKeySize
  d10c
  committed
  5bb53d3
- [DIFF-INFORMED] C++: IteratorToExpiredContainer
  d10c
  committed
  d7710fc
- [DIFF-INFORMED] C++: UnsafeCreateProcessCall
  d10c
  committed
  382b482
- [DIFF-INFORMED] C++: UnsafeDaclSecurityDescriptor
  d10c
  committed
  233c015
- [DIFF-INFORMED] C++: TaintedCondition
  d10c
  committed
  94611b8
- [DIFF-INFORMED] C++: TypeConfusion
  d10c
  committed
  61a3495
- [DIFF-INFORMED] C#: ConditionalBypass
  d10c
  committed
  f18fbf8
- [DIFF-INFORMED] C#: ExternalAPIs
  d10c
  committed
  398ad9a
- [DIFF-INFORMED] C#: UnsafeDeserializationQuery
  d10c
  committed
  0f5fc82
- [DIFF-INFORMED] C#: ThreadUnsafeCryptoTransformLambda
  d10c
  committed
  3b56f5b
- [DIFF-INFORMED] C#: HardcodedConnectionString
  d10c
  committed
  e3714a8
- [DIFF-INFORMED] Go: AllocationSizeOverflow
  d10c
  committed
  f8ba5af
- [DIFF-INFORMED] Go: CommandInjection
  d10c
  committed
  a6547a5
- [DIFF-INFORMED] Go: ExternalAPIs
  d10c
  committed
  dab97f3
- [DIFF-INFORMED] Go: HardcodedCredentials
  d10c
  committed
  c1a5881
- [DIFF-INFORMED] Go: IncorrectIntegerConversion
  d10c
  committed
  53f4c94
- [DIFF-INFORMED] Go: InsecureRandomness
  d10c
  committed
  e7935b6
- [DIFF-INFORMED] Go: ReflectedXss
  d10c
  committed
  40f7a3b
- [DIFF-INFORMED] Go: RequestForgery, SafeUrlFlow
  d10c
  committed
  5527221
- [DIFF-INFORMED] Go: SensitiveConditionBypass
  d10c
  committed
  cccf6e6
- [DIFF-INFORMED] Go: ConditionalBypass
  d10c
  committed
  e94b492
- [DIFF-INFORMED] Go: SSRF
  d10c
  committed
  f3453c7
- [DIFF-INFORMED] Go: AuthCookie
  d10c
  committed
  8594d31
- [DIFF-INFORMED] Go: UnhandledCloseWritableHandle
  d10c
  committed
  9ec0d13
- [DIFF-INFORMED] Go: InsecureHostKeyCallback
  d10c
  committed
  9ecf0f2
- [DIFF-INFORMED] Go: BadRedirectCheck
  d10c
  committed
  a2b8db8
- [DIFF-INFORMED] Java: (Android)SensitiveCommunication
  d10c
  committed
  03d4adc
- [DIFF-INFORMED] Java: ArithmeticTainted
  d10c
  committed
  f6e7f63
- [DIFF-INFORMED] Java: ArithmeticUncontrolled
  d10c
  committed
  d837355
- [DIFF-INFORMED] Java: ConditionalBypass
  d10c
  committed
  e84c8bd
- [DIFF-INFORMED] Java: UntrustedDataToExternalAPI
  d10c
  committed
  dbcb1fb
- [DIFF-INFORMED] Java: ExternallyControlledFormatString
  d10c
  committed
  d7258a9
- [DIFF-INFORMED] Java: ImproperValidationOfArray…
  d10c
  committed
  94de00b
- [DIFF-INFORMED] Java: InsecureCookie
  d10c
  committed
  52c0d62
- [DIFF-INFORMED] Java: InsecureLdapAuth
  d10c
  committed
  4a985bf
- [DIFF-INFORMED] Java: LogInjection
  d10c
  committed
  650a5dd
- [DIFF-INFORMED] Java: MaybeBrokenCryptoAlgorithm
  d10c
  committed
  0b9d638
- [DIFF-INFORMED] Java: SensitiveLogging
  d10c
  committed
  9cb55f3
- [DIFF-INFORMED] Java: SqlConcatenated
  d10c
  committed
  5228767
- [DIFF-INFORMED] Java: TaintedEnvironmentVariable
  d10c
  committed
  3197508
- [DIFF-INFORMED] Java: TempDirLocalInformationDisclosure
  d10c
  committed
  69e93eb
- [DIFF-INFORMED] Java: TrustBoundaryViolation
  d10c
  committed
  f10210c
- [DIFF-INFORMED] Java: UnsafeCertTrust
  d10c
  committed
  5e05aeb
- [DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess
  d10c
  committed
  06add01
- [DIFF-INFORMED] JS: IndirectCommandInjection
  d10c
  committed
  89dd8a8
- [DIFF-INFORMED] JS: ShellCommandInjectionFromEnvironment
  d10c
  committed
  2a5eae2
- [DIFF-INFORMED] JS: EnvValueAndKeyInjection
  d10c
  committed
  81bbcda
- [DIFF-INFORMED] JS: decodeJwtWithoutVerification
  d10c
  committed
  272a97d
- [DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash
  d10c
  committed
  e7b6ad2
- [DIFF-INFORMED] Ruby: MissingFullAnchor
  d10c
  committed
  9f72a2f
- [DIFF-INFORMED] Rust: RegexInjection
  d10c
  committed
  2ba8234
- [DIFF-INFORMED] Rust: TaintedPath
  d10c
  committed
  2afffd3
- [DIFF-INFORMED] Rust: SqlInjection
  d10c
  committed
  7e4f37f
- [DIFF-INFORMED] Rust: CleartextTransmission
  d10c
  committed
  b3f76ce
- [DIFF-INFORMED] Rust: CleartextLogging
  d10c
  committed
  d25c8cd
- [DIFF-INFORMED] Rust: UncontrolledAllocationSize
  d10c
  committed
  ca1848e
- [DIFF-INFORMED] Rust: AccessAfterLifetime
  d10c
  committed
  ab6be38
- [DIFF-INFORMED] Rust: AccessInvalidPointer
  d10c
  committed
  a0215ae
- [DIFF-INFORMED] Swift: CleartextStorageDatabase
  d10c
  committed
  162781d
- [DIFF-INFORMED] Swift: CleartextStoragePreferences
  d10c
  committed
  37e6e2c
- [DIFF-INFORMED] Swift: InsecureTLS
  d10c
  committed
  649df5b
- [DIFF-INFORMED] Swift: UnsafeWebViewFetch
  d10c
  committed
  085720a

Commits

Commits on Jul 17, 2025