Commits

Breadcrumbs

History for

onf257c7a

User selector

All users

All time

Commit History

Commits on Oct 23, 2025

• Guards: Align the SSA signature with the one from shared SSA.

  aschackmull

  committed
  f257c7a

  Copy full SHA for f257c7a

• Shared/Java: Rename ControlFlowReachability library.

  aschackmull

  committed
  20147cd

  Copy full SHA for 20147cd

• Merge pull request #20558 from aschackmull/csharp/guards3

  Show description for 8a3f62b
  aschackmull

  authored
  8a3f62b

  Copy full SHA for 8a3f62b

Commits on Oct 22, 2025

• Crypto: Fixed alphabetical ordering issue in not_included_in_qls.expected

  bdrodes

  committed
  bdad95d

  Copy full SHA for bdad95d

• Crypto: Fix off by one column issue in unit tests.

  bdrodes

  committed
  0837939

  Copy full SHA for 0837939

• Crytpo: Trying to fix in pipeline test failure, experimentally altering a line to see if this forces the test to pass. The test is off by one column in the piepline

  bdrodes

  committed
  3561d01

  Copy full SHA for 3561d01

• Crypto: Fix typo in not_included_in_qls.expected.

  bdrodes

  committed
  db6d3ad

  Copy full SHA for db6d3ad

• Crypto: Adjust output of bad mac order queries, update associated bad mac order expected results, fix erroneous change to ID for a slicing query, update model to specify elliptic curve type as a pr…

  Show description for dd60cf9
  bdrodes

  committed
  dd60cf9

  Copy full SHA for dd60cf9

Commits on Oct 21, 2025

• Crypto: Updating java 'location' information to be just a location's toString to be more verbose/precise.

  bdrodes

  committed
  b374ba3

  Copy full SHA for b374ba3

• Crypto: Adding false positive to BadMacUse.java, we have no way to avoid this FP currently but should note it exists in the test case.

  bdrodes

  committed
  ddeb42c

  Copy full SHA for ddeb42c

• Crypto: ql-for-ql alert fixes.

  bdrodes

  committed
  c50175b

  Copy full SHA for c50175b

Commits on Oct 20, 2025

• Crypto: Adding a proof of concept bad mac ordering predicate that takes in an ArtifactNode to be used for graph generation to intercept nodes with known mac ordering issues, in order to format the …

  Show description for 22c0f9f
  bdrodes

  committed
  22c0f9f

  Copy full SHA for 22c0f9f

• Crypto: To allow for graph generation to have properties informed by assessments, altering a few queries weak/vuln/bad crypto to have qll files that can be accessed for other purposes, like graph g…

  Show description for eff94ef
  bdrodes

  committed
  eff94ef

  Copy full SHA for eff94ef

• Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check

  bdrodes

  committed
  cc436e8

  Copy full SHA for cc436e8

• Crypto: Missing hash algorithms for HMAC operations in jca.

  bdrodes

  committed
  354effe

  Copy full SHA for 354effe

Commits on Oct 18, 2025

• Merge branch 'main' into santander-java-crypto-check

  bdrodes

  authored
  2b683c2

  Copy full SHA for 2b683c2

Commits on Oct 17, 2025

• Crypto: more ID renaming to include "examples", fix singleton issues with ql-for-ql, use formatted test for WeakAsymmetricKeyGenSize (add post processing in the qlref), misc expected files updated …

  Show description for c01c060
  bdrodes

  committed
  c01c060

  Copy full SHA for c01c060

• Crypto: weak symmetric cipher tests.

  bdrodes

  committed
  540daa6

  Copy full SHA for 540daa6

• Crypto: altering all query IDs in examples to have "examples" in the ID, to make clear the query is not intended for production.

  bdrodes

  committed
  b06e053

  Copy full SHA for b06e053

• Removing WeakRSA, this is redundant with weak asymmetric key size.

  bdrodes

  committed
  1b205d8

  Copy full SHA for 1b205d8

• Crypto: Add missing cipher algorithms to JCA. Update node tests to account for missing cipher algorithms.

  bdrodes

  committed
  b4ecb91

  Copy full SHA for b4ecb91

• Crypto: Add missing block mode JCA Models, add block mode unit tests

  bdrodes

  committed
  f480d90

  Copy full SHA for f480d90

• Crypto: WeakKDFKeySize tests.

  bdrodes

  committed
  e127341

  Copy full SHA for e127341

• Crypto: Modify BadMacOrderMacOnEncryptPlaintext to be a path query that traces through any intermediate encrypt or mac to the final encrypt or mac.

  bdrodes

  committed
  628bab9

  Copy full SHA for 628bab9

• Crypto: removing precision tags on experimental queries.

  bdrodes

  committed
  ff7840d

  Copy full SHA for ff7840d

• Merge pull request #20603 from owen-mc/update-broken-algo-qhelp

  Show description for 66f95bc
  owen-mc

  authored
  66f95bc

  Copy full SHA for 66f95bc

Commits on Oct 16, 2025

• Crypto: Addressing FPs in BadMacOrderMacOnEncryptPlaintext

  bdrodes

  committed
  ef6f022

  Copy full SHA for ef6f022

• Crypto: Bad expected files in last push.

  bdrodes

  committed
  5923e5c

  Copy full SHA for 5923e5c

• Crypto: Bad Mac use tests, and fix for BadMacOrderMacOnEncryptPlaintext (barriers were blocking flow through an encrypt to a subsequent mac on the same plaintext)

  bdrodes

  committed
  700f34e

  Copy full SHA for 700f34e

• Crypto: Comment todo for observed missing modeled case. Tests for weak and unknown KDF iteration count.

  bdrodes

  committed
  b9b0037

  Copy full SHA for b9b0037

• Crypto: Rename tests for weak asymmetric key gen size.

  bdrodes

  committed
  3f36b09

  Copy full SHA for 3f36b09

• Crypto: Comment in Language.qll

  bdrodes

  committed
  a64a24d

  Copy full SHA for a64a24d

• Crypto: Initial sketch for unknown hash, the model needs to recognize unknowns but where the algorithm category (e.g., hashing) is known.

  bdrodes

  committed
  79ccef3

  Copy full SHA for 79ccef3

• Crypto: Updating weak hash tests

  bdrodes

  committed
  d2598d4

  Copy full SHA for d2598d4

• Crypto: Weak Hash test cases update and expected file.

  bdrodes

  committed
  4860034

  Copy full SHA for 4860034