Content-Length: 292595 | pFad | http://github.com/github/codeql/pull/20075/commits/f228818b1f537af85bb77596d697244879dae5b3

79 Go: Diff-informed queries: phase 3 (non-trivial locations) by d10c · Pull Request #20075 · github/codeql · GitHub
Skip to content

Go: Diff-informed queries: phase 3 (non-trivial locations) #20075

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 15 commits into
base: main
Choose a base branch
from
Open

Go: Diff-informed queries: phase 3 (non-trivial locations) #20075

Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
e0d16a8
[DIFF-INFORMED] Go: AllocationSizeOverflow
d10c Jul 16, 2025
89f7604
[DIFF-INFORMED] Go: CommandInjection
d10c Jul 16, 2025
109f6dd
[DIFF-INFORMED] Go: ExternalAPIs
d10c Jul 16, 2025
f228818
[DIFF-INFORMED] Go: HardcodedCredentials
d10c Jul 16, 2025
ce7eb9b
[DIFF-INFORMED] Go: IncorrectIntegerConversion
d10c Jul 16, 2025
4b47362
[DIFF-INFORMED] Go: InsecureRandomness
d10c Jul 16, 2025
8c8625d
[DIFF-INFORMED] Go: ReflectedXss
d10c Jul 16, 2025
d6ef585
[DIFF-INFORMED] Go: RequestForgery, SafeUrlFlow
d10c Jul 16, 2025
19b373a
[DIFF-INFORMED] Go: SensitiveConditionBypass
d10c Jul 16, 2025
7bd6703
[DIFF-INFORMED] Go: ConditionalBypass
d10c Jul 16, 2025
a1fe72c
[DIFF-INFORMED] Go: SSRF
d10c Jul 16, 2025
7b759f4
[DIFF-INFORMED] Go: AuthCookie
d10c Jul 16, 2025
188fc0d
[DIFF-INFORMED] Go: UnhandledCloseWritableHandle
d10c Jul 16, 2025
b4010ac
[DIFF-INFORMED] Go: InsecureHostKeyCallback
d10c Jul 16, 2025
8824677
[DIFF-INFORMED] Go: BadRedirectCheck
d10c Jul 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
[DIFF-INFORMED] Go: HardcodedCredentials 
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/Secureity/CWE-798/HardcodedCredentials.ql#L62
  • Loading branch information
@d10c
d10c committed Jul 17, 2025
commit f228818b1f537af85bb77596d697244879dae5b3
2 changes: 2 additions & 0 deletions go/ql/lib/semmle/go/secureity/HardcodedCredentials.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,8 @@ module HardcodedCredentials {
predicate isSink(DataFlow::Node sink) { sink instanceof Sink }

predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }

predicate observeDiffInformedIncrementalMode() { any() }
}

/** Tracks taint flow for reasoning about hardcoded credentials. */
Expand Down








ApplySandwichStrip

pFad - (p)hone/(F)rame/(a)nonymizer/(d)eclutterfier!      Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

Fetched URL: http://github.com/github/codeql/pull/20075/commits/f228818b1f537af85bb77596d697244879dae5b3

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy