Skip to content

Java: Promote insufficient key size query from experimental #10785

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jcogs33 merged 59 commits into from
Nov 8, 2022
Merged

Java: Promote insufficient key size query from experimental #10785

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
59 commits
Select commit Hold shift + click to select a range
9b7df35
move files
Sep 29, 2022
3643c9e
update metadata
Sep 29, 2022
657e1e6
start refactoring query logic into lib file
Sep 29, 2022
9eb45c3
refactor tests and code, update help file
Oct 3, 2022
7d94590
add change note
Oct 3, 2022
75794ec
false negative testing - before rewrite for variable dataflow
Oct 4, 2022
7de9c05
use CompileTimeConstantExpr for FN with VarAccess, and remove KeyGene…
Oct 4, 2022
d3b1a04
handle FN case with simple VarAccess; add draft of dataflow config to…
Oct 5, 2022
8ffd252
add draft code to find algo type to replace tainttracking configs
Oct 5, 2022
ac70719
commit before adding taint flow back (since no taint flow doesn't cap…
Oct 5, 2022
5e2ef66
refactoring to use both dataflow configs; commit before deleting unus…
Oct 6, 2022
c414ee0
add ECC dataflow config; passes all test cases; still don't have algo…
Oct 6, 2022
cdac0e2
add local algo name tracking, still need to add ability to track algo…
Oct 7, 2022
b7123c1
draft of adding kpg tracking into dataflow config
Oct 8, 2022
b0af9f9
added kg taintracking config to all
Oct 10, 2022
f5a2fef
update tests for non-path version
Oct 10, 2022
3cc7f14
clean up code somewhat
Oct 10, 2022
0c2cff2
updates from discussing with Tony
Oct 10, 2022
bd76b1f
clean-up and update configurations to have specs as sink
Oct 10, 2022
b6a8c27
delete experimental files
Oct 10, 2022
e64825f
fix code-scanning bot problems
Oct 11, 2022
26f4abf
remove globalflow for key(pair)gen
Oct 11, 2022
3e8748e
add path-graph back to query alerts
Oct 11, 2022
29de0c6
make one config for asymm with flow states; seems to work...
Oct 12, 2022
01c2a8c
add symm to the single config; still seems to work
Oct 12, 2022
0fc4a33
remove commented-out code
Oct 12, 2022
37d8558
refactor code into InsufficientKeySize.qll
Oct 12, 2022
bfbb6db
clean up code
Oct 12, 2022
bcb506b
add placeholder qldocs
Oct 12, 2022
e0f0d55
condense code
Oct 13, 2022
2daa345
combine three configs into one
Oct 13, 2022
c61f23b
experiment with more code condensing
Oct 14, 2022
6eb58d8
remove dependence on typeFlag
Oct 14, 2022
47030df
remove commented-out 3 configs
Oct 14, 2022
0334470
remove commented out predicates that relied on typeFlag
Oct 14, 2022
da218fd
clean up code
Oct 14, 2022
2714c7f
update tests
Oct 14, 2022
5f39888
minor code restructure
Oct 17, 2022
383b8a8
update select statement to be closer to cpp's
Oct 19, 2022
ff557a2
add min key size predicates
Oct 19, 2022
dc8b62b
add support for AlgorithmParameterGenerator
Oct 19, 2022
4df0fbc
update tests
Oct 19, 2022
961e5c7
minor updates
Oct 19, 2022
e5982f1
minor updates
Oct 19, 2022
b7f3606
rename change note
Oct 19, 2022
345e4e0
remove unnecessary 'exists'
Oct 21, 2022
4c8e0a7
update qldoc of JavaSecurityKeyPairGenerator and JavaSecurityAlgoPara…
Oct 24, 2022
2ee23f0
update qldoc for AlgorithmParameterSpec
Oct 24, 2022
eb69b98
remove separators
Oct 24, 2022
8bc0a64
remove KeyGenInitMethodAccess class
Oct 24, 2022
09829d7
simplify instanceof usage
Oct 24, 2022
d569f93
update getAlgoSpec
Oct 24, 2022
c742a09
remove AlgoSpec class
Oct 24, 2022
1a12453
remove getNodeIntValue
Oct 24, 2022
1e80fa1
add modules
Oct 25, 2022
1bfdfc9
shorten class/predicate names
Oct 26, 2022
65f7474
simplify algorithm.matches
Oct 27, 2022
f40eefc
use CompileTimeConstantExpr instead of StringLiteral
Oct 27, 2022
910eebc
update change note
Nov 3, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
add ECC dataflow config; passes all test cases; still don't have algo… 
… name tracking
  • Loading branch information
Jami Cogswell Jami Cogswell
Jami Cogswell authored and Jami Cogswell committed Oct 11, 2022
commit c414ee0e254d0a303a6fe187ef7381ea8b60ec57
Loading