Content-Length: 295559 | pFad | http://github.com/github/codeql/pull/20075/commits/a1fe72c423570dc437ce1cbd9671ad2bdf792bc3

8F Go: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #20075 · github/codeql · GitHub
Skip to content

Go: Diff-informed queries: phase 3 (non-trivial locations) #20075

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 15 commits into
base: main
Choose a base branch
from
+96 −0
Open

Go: Diff-informed queries: phase 3 (non-trivial locations) #20075

Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
e0d16a8
[DIFF-INFORMED] Go: AllocationSizeOverflow
d10c Jul 16, 2025
89f7604
[DIFF-INFORMED] Go: CommandInjection
d10c Jul 16, 2025
109f6dd
[DIFF-INFORMED] Go: ExternalAPIs
d10c Jul 16, 2025
f228818
[DIFF-INFORMED] Go: HardcodedCredentials
d10c Jul 16, 2025
ce7eb9b
[DIFF-INFORMED] Go: IncorrectIntegerConversion
d10c Jul 16, 2025
4b47362
[DIFF-INFORMED] Go: InsecureRandomness
d10c Jul 16, 2025
8c8625d
[DIFF-INFORMED] Go: ReflectedXss
d10c Jul 16, 2025
d6ef585
[DIFF-INFORMED] Go: RequestForgery, SafeUrlFlow
d10c Jul 16, 2025
19b373a
[DIFF-INFORMED] Go: SensitiveConditionBypass
d10c Jul 16, 2025
7bd6703
[DIFF-INFORMED] Go: ConditionalBypass
d10c Jul 16, 2025
a1fe72c
[DIFF-INFORMED] Go: SSRF
d10c Jul 16, 2025
7b759f4
[DIFF-INFORMED] Go: AuthCookie
d10c Jul 16, 2025
188fc0d
[DIFF-INFORMED] Go: UnhandledCloseWritableHandle
d10c Jul 16, 2025
b4010ac
[DIFF-INFORMED] Go: InsecureHostKeyCallback
d10c Jul 16, 2025
8824677
[DIFF-INFORMED] Go: BadRedirectCheck
d10c Jul 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
[DIFF-INFORMED] Go: SSRF 
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/experimental/CWE-918/SSRF.ql#L23
  • Loading branch information
@d10c
d10c committed Jul 17, 2025
commit a1fe72c423570dc437ce1cbd9671ad2bdf792bc3
8 changes: 8 additions & 0 deletions go/ql/src/experimental/CWE-918/SSRF.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,14 @@ module ServerSideRequestForgery {
predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }

predicate isBarrierOut(DataFlow::Node node) { node instanceof SanitizerEdge }

predicate observeDiffInformedIncrementalMode() { any() }

Location getASelectedSourceLocation(DataFlow::Node source) { none() }

Location getASelectedSinkLocation(DataFlow::Node sink) {
result = sink.(Sink).getARequest().getLocation()
}
}

/** Tracks taint flow for reasoning about request forgery vulnerabilities. */
Expand Down








ApplySandwichStrip

pFad - (p)hone/(F)rame/(a)nonymizer/(d)eclutterfier!      Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

Fetched URL: http://github.com/github/codeql/pull/20075/commits/a1fe72c423570dc437ce1cbd9671ad2bdf792bc3

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy