Skip to content

Commit 815af34

Browse files
committed
Rust: Add additional barriers to queries
1 parent 081ab49 commit 815af34

File tree

3 files changed

+12
-0
lines changed

3 files changed

+12
-0
lines changed

rust/ql/lib/codeql/rust/security/CleartextLoggingExtensions.qll

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ private import codeql.rust.dataflow.DataFlow
88
private import codeql.rust.dataflow.FlowSink
99
private import codeql.rust.security.SensitiveData
1010
private import codeql.rust.Concepts
11+
private import codeql.rust.security.Barriers as Barriers
1112

1213
/**
1314
* Provides default sources, sinks and barriers for detecting cleartext logging
@@ -42,4 +43,9 @@ module CleartextLogging {
4243
private class ModelsAsDataSink extends Sink {
4344
ModelsAsDataSink() { sinkNode(this, "log-injection") }
4445
}
46+
47+
private class BooleanTypeBarrier extends Barrier instanceof Barriers::BooleanTypeBarrier { }
48+
49+
private class FieldlessEnumTypeBarrier extends Barrier instanceof Barriers::FieldlessEnumTypeBarrier
50+
{ }
4551
}

rust/ql/lib/codeql/rust/security/LogInjectionExtensions.qll

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,4 +51,7 @@ module LogInjection {
5151
private class NumericTypeBarrier extends Barrier instanceof Barriers::NumericTypeBarrier { }
5252

5353
private class BooleanTypeBarrier extends Barrier instanceof Barriers::BooleanTypeBarrier { }
54+
55+
private class FieldlessEnumTypeBarrier extends Barrier instanceof Barriers::FieldlessEnumTypeBarrier
56+
{ }
5457
}

rust/ql/lib/codeql/rust/security/SqlInjectionExtensions.qll

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,4 +66,7 @@ module SqlInjection {
6666
private class NumericTypeBarrier extends Barrier instanceof Barriers::NumericTypeBarrier { }
6767

6868
private class BooleanTypeBarrier extends Barrier instanceof Barriers::BooleanTypeBarrier { }
69+
70+
private class FieldlessEnumTypeBarrier extends Barrier instanceof Barriers::FieldlessEnumTypeBarrier
71+
{ }
6972
}

0 commit comments

Comments
 (0)