Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Rust: Recognize more sensitive data sources #19470

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 15 commits into from
May 27, 2025
+242 −63
Merged

Rust: Recognize more sensitive data sources #19470

Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
87218cb
Rust: Test more examples of sensitive data.
geoffw0 May 8, 2025
8825eef
Rust: More counterexamples for sensitive data as well.
geoffw0 May 8, 2025
a537197
Rust: Understand sensitive field access expressions.
geoffw0 May 9, 2025
0f36e1d
Rust: Understand sensitive qualifier expressions.
geoffw0 May 9, 2025
5f5d6f6
Rust: Understand sensitive enum variants calls.
geoffw0 May 9, 2025
d02d5c5
Rust: Update cleartext logging test with new found results.
geoffw0 May 9, 2025
0a3275e
Rust: One more test case.
geoffw0 May 12, 2025
b907cfe
Rust: Add a few more test cases involving 'map'.
geoffw0 May 12, 2025
ac5ec06
Rust: Constrain SensitiveFieldAccess to avoid including unwanted pare…
geoffw0 May 12, 2025
682f59f
Rust: Make helper predicate private + autoformat.
geoffw0 May 12, 2025
f04d6fd
Rust: Accept minor test changes for the cleartext logging query.
geoffw0 May 12, 2025
65456b5
Merge branch 'main' into moresensitive
geoffw0 May 19, 2025
4bbdc9a
Rust: Simplify SensitiveData.qll.
geoffw0 May 19, 2025
b503b1e
Rust: Prefer getExpr() over getAstNode().
geoffw0 May 19, 2025
9ac24c7
Merge branch 'main' into moresensitive
geoffw0 May 22, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Rust: Accept minor test changes for the cleartext logging query.
  • Loading branch information
@geoffw0
geoffw0 committed May 12, 2025
commit f04d6fd8c827d585dfc4e543193e86b6240bb635
8 changes: 6 additions & 2 deletions 8 rust/ql/test/query-tests/security/CWE-312/CleartextLogging.expected
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,8 @@
| test_logging.rs:100:5:100:19 | ...::log | test_logging.rs:99:38:99:45 | password | test_logging.rs:100:5:100:19 | ...::log | This operation writes $@ to a log file. | test_logging.rs:99:38:99:45 | password | password |
| test_logging.rs:118:5:118:42 | ...::log | test_logging.rs:118:28:118:41 | get_password(...) | test_logging.rs:118:5:118:42 | ...::log | This operation writes $@ to a log file. | test_logging.rs:118:28:118:41 | get_password(...) | get_password(...) |
| test_logging.rs:131:5:131:32 | ...::log | test_logging.rs:129:25:129:32 | password | test_logging.rs:131:5:131:32 | ...::log | This operation writes $@ to a log file. | test_logging.rs:129:25:129:32 | password | password |
| test_logging.rs:138:5:138:38 | ...::log | test_logging.rs:138:11:138:37 | MacroExpr | test_logging.rs:138:5:138:38 | ...::log | This operation writes $@ to a log file. | test_logging.rs:138:11:138:37 | MacroExpr | MacroExpr |
| test_logging.rs:145:5:145:38 | ...::log | test_logging.rs:145:11:145:37 | MacroExpr | test_logging.rs:145:5:145:38 | ...::log | This operation writes $@ to a log file. | test_logging.rs:145:11:145:37 | MacroExpr | MacroExpr |
| test_logging.rs:138:5:138:38 | ...::log | test_logging.rs:138:27:138:37 | s1.password | test_logging.rs:138:5:138:38 | ...::log | This operation writes $@ to a log file. | test_logging.rs:138:27:138:37 | s1.password | s1.password |
| test_logging.rs:145:5:145:38 | ...::log | test_logging.rs:145:27:145:37 | s2.password | test_logging.rs:145:5:145:38 | ...::log | This operation writes $@ to a log file. | test_logging.rs:145:27:145:37 | s2.password | s2.password |
| test_logging.rs:152:5:152:38 | ...::_print | test_logging.rs:152:30:152:37 | password | test_logging.rs:152:5:152:38 | ...::_print | This operation writes $@ to a log file. | test_logging.rs:152:30:152:37 | password | password |
| test_logging.rs:153:5:153:38 | ...::_print | test_logging.rs:153:30:153:37 | password | test_logging.rs:153:5:153:38 | ...::_print | This operation writes $@ to a log file. | test_logging.rs:153:30:153:37 | password | password |
| test_logging.rs:154:5:154:39 | ...::_eprint | test_logging.rs:154:31:154:38 | password | test_logging.rs:154:5:154:39 | ...::_eprint | This operation writes $@ to a log file. | test_logging.rs:154:31:154:38 | password | password |
Expand Down Expand Up @@ -151,7 +151,9 @@ edges
| test_logging.rs:131:28:131:29 | t1 [tuple.1] | test_logging.rs:131:28:131:31 | t1.1 | provenance | |
| test_logging.rs:131:28:131:31 | t1.1 | test_logging.rs:131:12:131:31 | MacroExpr | provenance | |
| test_logging.rs:138:11:138:37 | MacroExpr | test_logging.rs:138:5:138:38 | ...::log | provenance | MaD:9 Sink:MaD:9 |
| test_logging.rs:138:27:138:37 | s1.password | test_logging.rs:138:11:138:37 | MacroExpr | provenance | |
| test_logging.rs:145:11:145:37 | MacroExpr | test_logging.rs:145:5:145:38 | ...::log | provenance | MaD:9 Sink:MaD:9 |
| test_logging.rs:145:27:145:37 | s2.password | test_logging.rs:145:11:145:37 | MacroExpr | provenance | |
| test_logging.rs:152:12:152:37 | MacroExpr | test_logging.rs:152:5:152:38 | ...::_print | provenance | MaD:8 Sink:MaD:8 |
| test_logging.rs:152:30:152:37 | password | test_logging.rs:152:12:152:37 | MacroExpr | provenance | |
| test_logging.rs:153:14:153:37 | MacroExpr | test_logging.rs:153:5:153:38 | ...::_print | provenance | MaD:8 Sink:MaD:8 |
Expand Down Expand Up @@ -358,8 +360,10 @@ nodes
| test_logging.rs:131:28:131:31 | t1.1 | semmle.label | t1.1 |
| test_logging.rs:138:5:138:38 | ...::log | semmle.label | ...::log |
| test_logging.rs:138:11:138:37 | MacroExpr | semmle.label | MacroExpr |
| test_logging.rs:138:27:138:37 | s1.password | semmle.label | s1.password |
| test_logging.rs:145:5:145:38 | ...::log | semmle.label | ...::log |
| test_logging.rs:145:11:145:37 | MacroExpr | semmle.label | MacroExpr |
| test_logging.rs:145:27:145:37 | s2.password | semmle.label | s2.password |
| test_logging.rs:152:5:152:38 | ...::_print | semmle.label | ...::_print |
| test_logging.rs:152:12:152:37 | MacroExpr | semmle.label | MacroExpr |
| test_logging.rs:152:30:152:37 | password | semmle.label | password |
Expand Down
Morty Proxy This is a proxified and sanitized view of the page, visit original site.