Java: Promote insufficient key size query from experimental by jcogs33 · Pull Request #10785 · github/codeql

Commits on Oct 11, 2022

move files

Jami Cogswell
authored and
Jami Cogswell
committed
update metadata

Jami Cogswell
authored and
Jami Cogswell
committed
start refactoring query logic into lib file

Jami Cogswell
authored and
Jami Cogswell
committed
refactor tests and code, update help file

Jami Cogswell
authored and
Jami Cogswell
committed
add change note

Jami Cogswell
authored and
Jami Cogswell
committed
false negative testing - before rewrite for variable dataflow

Jami Cogswell
authored and
Jami Cogswell
committed
use CompileTimeConstantExpr for FN with VarAccess, and remove KeyGeneratorInitConfiguration

Jami Cogswell
authored and
Jami Cogswell
committed
handle FN case with simple VarAccess; add draft of dataflow config to handle complex VarAccess

Jami Cogswell
authored and
Jami Cogswell
committed
add draft code to find algo type to replace tainttracking configs

Jami Cogswell
authored and
Jami Cogswell
committed
commit before adding taint flow back (since no taint flow doesn't capture all cases)

Jami Cogswell
authored and
Jami Cogswell
committed
refactoring to use both dataflow configs; commit before deleting unused code

Jami Cogswell
authored and
Jami Cogswell
committed
add ECC dataflow config; passes all test cases; still don't have algo name tracking

Jami Cogswell
authored and
Jami Cogswell
committed
add local algo name tracking, still need to add ability to track algo name when KeyGen obj is param to other method

Jami Cogswell
authored and
Jami Cogswell
committed
draft of adding kpg tracking into dataflow config

Jami Cogswell
authored and
Jami Cogswell
committed
added kg taintracking config to all

Jami Cogswell
authored and
Jami Cogswell
committed
update tests for non-path version

Jami Cogswell
authored and
Jami Cogswell
committed
clean up code somewhat

Jami Cogswell
authored and
Jami Cogswell
committed
updates from discussing with Tony

Jami Cogswell
authored and
Jami Cogswell
committed
clean-up and update configurations to have specs as sink

Jami Cogswell
authored and
Jami Cogswell
committed
delete experimental files

Jami Cogswell
authored and
Jami Cogswell
committed
fix code-scanning bot problems

Jami Cogswell
authored and
Jami Cogswell
committed
remove globalflow for key(pair)gen

Jami Cogswell
authored and
Jami Cogswell
committed
add path-graph back to query alerts

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 12, 2022

make one config for asymm with flow states; seems to work...

Jami Cogswell
authored and
Jami Cogswell
committed
add symm to the single config; still seems to work

Jami Cogswell
authored and
Jami Cogswell
committed
remove commented-out code

Jami Cogswell
authored and
Jami Cogswell
committed
refactor code into InsufficientKeySize.qll

Jami Cogswell
authored and
Jami Cogswell
committed
clean up code

Jami Cogswell
authored and
Jami Cogswell
committed
add placeholder qldocs

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 13, 2022

condense code

Jami Cogswell
authored and
Jami Cogswell
committed
combine three configs into one

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 14, 2022

experiment with more code condensing

Jami Cogswell
authored and
Jami Cogswell
committed
remove dependence on typeFlag

Jami Cogswell
authored and
Jami Cogswell
committed
remove commented-out 3 configs

Jami Cogswell
authored and
Jami Cogswell
committed
remove commented out predicates that relied on typeFlag

Jami Cogswell
authored and
Jami Cogswell
committed
clean up code

Jami Cogswell
authored and
Jami Cogswell
committed
update tests

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 17, 2022

minor code restructure

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 19, 2022

update select statement to be closer to cpp's

Jami Cogswell
authored and
Jami Cogswell
committed
add min key size predicates

Jami Cogswell
authored and
Jami Cogswell
committed
add support for AlgorithmParameterGenerator

Jami Cogswell
authored and
Jami Cogswell
committed
update tests

Jami Cogswell
authored and
Jami Cogswell
committed
minor updates

Jami Cogswell
authored and
Jami Cogswell
committed
minor updates

Jami Cogswell
authored and
Jami Cogswell
committed
rename change note

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 21, 2022

remove unnecessary 'exists'

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 24, 2022

update qldoc of JavaSecurityKeyPairGenerator and JavaSecurityAlgoParamGenerator

Jami Cogswell
authored and
Jami Cogswell
committed
update qldoc for AlgorithmParameterSpec

Jami Cogswell
authored and
Jami Cogswell
committed
remove separators

Jami Cogswell
authored and
Jami Cogswell
committed
remove KeyGenInitMethodAccess class

Jami Cogswell
authored and
Jami Cogswell
committed
simplify instanceof usage

Jami Cogswell
authored and
Jami Cogswell
committed
update getAlgoSpec

Jami Cogswell
authored and
Jami Cogswell
committed
remove AlgoSpec class

Jami Cogswell
authored and
Jami Cogswell
committed
remove getNodeIntValue

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 25, 2022

add modules

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 26, 2022

shorten class/predicate names

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Oct 27, 2022

simplify algorithm.matches

Jami Cogswell
authored and
Jami Cogswell
committed
use CompileTimeConstantExpr instead of StringLiteral

Jami Cogswell
authored and
Jami Cogswell
committed

Commits on Nov 3, 2022

update change note

Jami Cogswell
authored and
Jami Cogswell
committed