Skip to content
This repository was archived by the owner on Jan 5, 2023. It is now read-only.

Commit 1e034a1

Browse files
author
Sauyon Lee
committed
Add logrus to go.qll
1 parent 82de513 commit 1e034a1

File tree

2 files changed

+9
-0
lines changed

2 files changed

+9
-0
lines changed

ql/src/go.qll

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,7 @@ import semmle.go.frameworks.Email
3434
import semmle.go.frameworks.Encoding
3535
import semmle.go.frameworks.Gin
3636
import semmle.go.frameworks.Glog
37+
import semmle.go.frameworks.Logrus
3738
import semmle.go.frameworks.HTTP
3839
import semmle.go.frameworks.Macaron
3940
import semmle.go.frameworks.Mux

ql/test/query-tests/Security/CWE-312/CleartextLogging.expected

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
edges
22
| klog.go:20:30:20:37 | selection of Header : Header | klog.go:22:15:22:20 | header |
33
| klog.go:28:13:28:20 | selection of Header : Header | klog.go:28:13:28:41 | call to Get |
4+
| main.go:21:19:21:26 | password : string | main.go:22:29:22:34 | fields |
45
| overrides.go:9:9:9:16 | password : string | overrides.go:13:14:13:23 | call to String |
56
| passwords.go:8:12:8:12 | definition of x : string | passwords.go:9:14:9:14 | x |
67
| passwords.go:30:8:30:15 | password : string | passwords.go:8:12:8:12 | definition of x : string |
@@ -31,6 +32,10 @@ nodes
3132
| klog.go:28:13:28:41 | call to Get | semmle.label | call to Get |
3233
| main.go:15:14:15:21 | password | semmle.label | password |
3334
| main.go:17:12:17:19 | password | semmle.label | password |
35+
| main.go:18:17:18:24 | password | semmle.label | password |
36+
| main.go:21:19:21:26 | password : string | semmle.label | password : string |
37+
| main.go:22:29:22:34 | fields | semmle.label | fields |
38+
| main.go:25:35:25:42 | password | semmle.label | password |
3439
| overrides.go:9:9:9:16 | password : string | semmle.label | password : string |
3540
| overrides.go:13:14:13:23 | call to String | semmle.label | call to String |
3641
| passwords.go:8:12:8:12 | definition of x : string | semmle.label | definition of x : string |
@@ -78,6 +83,9 @@ nodes
7883
| klog.go:28:13:28:41 | call to Get | klog.go:28:13:28:20 | selection of Header : Header | klog.go:28:13:28:41 | call to Get | Sensitive data returned by $@ is logged here. | klog.go:28:13:28:20 | selection of Header | HTTP request headers |
7984
| main.go:15:14:15:21 | password | main.go:15:14:15:21 | password | main.go:15:14:15:21 | password | Sensitive data returned by $@ is logged here. | main.go:15:14:15:21 | password | an access to password |
8085
| main.go:17:12:17:19 | password | main.go:17:12:17:19 | password | main.go:17:12:17:19 | password | Sensitive data returned by $@ is logged here. | main.go:17:12:17:19 | password | an access to password |
86+
| main.go:18:17:18:24 | password | main.go:18:17:18:24 | password | main.go:18:17:18:24 | password | Sensitive data returned by $@ is logged here. | main.go:18:17:18:24 | password | an access to password |
87+
| main.go:22:29:22:34 | fields | main.go:21:19:21:26 | password : string | main.go:22:29:22:34 | fields | Sensitive data returned by $@ is logged here. | main.go:21:19:21:26 | password | an access to password |
88+
| main.go:25:35:25:42 | password | main.go:25:35:25:42 | password | main.go:25:35:25:42 | password | Sensitive data returned by $@ is logged here. | main.go:25:35:25:42 | password | an access to password |
8189
| overrides.go:13:14:13:23 | call to String | overrides.go:9:9:9:16 | password : string | overrides.go:13:14:13:23 | call to String | Sensitive data returned by $@ is logged here. | overrides.go:9:9:9:16 | password | an access to password |
8290
| passwords.go:9:14:9:14 | x | passwords.go:30:8:30:15 | password : string | passwords.go:9:14:9:14 | x | Sensitive data returned by $@ is logged here. | passwords.go:30:8:30:15 | password | an access to password |
8391
| passwords.go:25:14:25:21 | password | passwords.go:25:14:25:21 | password | passwords.go:25:14:25:21 | password | Sensitive data returned by $@ is logged here. | passwords.go:25:14:25:21 | password | an access to password |

0 commit comments

Comments
 (0)