github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

Convert Fasthttp::Request::RemoteFlowSource to MaD

This commit is contained in:
Owen Mansel-Chan 2024-06-23 14:40:57 +01:00
Родитель c3169d258f
Коммит 729069e3d9
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 67E427E02E6DA1B8
2 изменённых файлов: 16 добавлений и 2 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

12
go/ql/lib/ext/github.com.valyala.fasthttp.model.yml
Просмотреть файл

@ -25,3 +25,15 @@ extensions:
- ["github.com/valyala/fasthttp", "URI", True, "PathOriginal", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/valyala/fasthttp", "URI", True, "QueryString", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/valyala/fasthttp", "URI", True, "String", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "Body", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyGunzip", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyInflate", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyStream", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyUnbrotli", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyUncompressed", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ContinueReadBody", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ContinueReadBodyStream", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "Host", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ReadBody", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ReadLimitBody", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "RequestURI", "", "", "ReturnValue[0]", "request", "manual"]

6
go/ql/lib/semmle/go/frameworks/Fasthttp.qll
Просмотреть файл

@ -405,14 +405,16 @@ module Fasthttp {
*/
module Request {
/**
* DEPRECATED: Use `RemoteFlowSource` instead.
* DEPRECATED: Use `RemoteFlowSource::range` instead.
*/
deprecated class UntrustedFlowSource = RemoteFlowSource;
/**
* DEPRECATED: Use `RemoteFlowSource::range` instead.
*
* The methods as Remote user controllable source which can be many part of request.
*/
class RemoteFlowSource extends RemoteFlowSource::Range instanceof DataFlow::Node {
deprecated class RemoteFlowSource extends RemoteFlowSource::Range instanceof DataFlow::Node {
RemoteFlowSource() {
exists(Method m |
m.hasQualifiedName(packagePath(), "Request",