Merge branch 'standard-lib-pt-6' into stdlib-339-340-342-346-347

Author: gagliardetto

ql/src/semmle/go/frameworks/Stdlib.qll

@@ -16,6 +16,11 @@ import semmle.go.frameworks.stdlib.Fmt
 import semmle.go.frameworks.stdlib.ContainerHeap
 import semmle.go.frameworks.stdlib.ContainerList
 import semmle.go.frameworks.stdlib.ContainerRing
+import semmle.go.frameworks.stdlib.Crypto
+import semmle.go.frameworks.stdlib.CryptoCipher
+import semmle.go.frameworks.stdlib.CryptoRsa
+import semmle.go.frameworks.stdlib.CryptoTls
+import semmle.go.frameworks.stdlib.CryptoX509
 import semmle.go.frameworks.stdlib.Mime
 import semmle.go.frameworks.stdlib.MimeMultipart
 import semmle.go.frameworks.stdlib.MimeQuotedprintable
@@ -239,15 +244,3 @@ module URL {
     }
   }
 }
-
-/** Provides models of some functions in the `crypto/cipher` package. */
-module CryptoCipher {
-  private class AeadOpenFunction extends TaintTracking::FunctionModel, Method {
-    AeadOpenFunction() { this.hasQualifiedName("crypto/cipher", "AEAD", "Open") }
-
-    override predicate hasTaintFlow(FunctionInput inp, FunctionOutput outp) {
-      inp.isParameter(2) and
-      outp.isResult(0)
-    }
-  }
-}

ql/src/semmle/go/frameworks/stdlib/Crypto.qll

@@ -0,0 +1,23 @@
+/**
+ * Provides classes modeling security-relevant aspects of the `crypto` package.
+ */
+
+import go
+
+/** Provides models of commonly used functions in the `crypto` package. */
+module Crypto {
+  private class MethodModels extends TaintTracking::FunctionModel, Method {
+    FunctionInput inp;
+    FunctionOutput outp;
+
+    MethodModels() {
+      // signature: func (Decrypter).Decrypt(rand io.Reader, msg []byte, opts DecrypterOpts) (plaintext []byte, err error)
+      this.implements("crypto", "Decrypter", "Decrypt") and
+      (inp.isParameter(1) and outp.isResult(0))
+    }
+
+    override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
+      input = inp and output = outp
+    }
+  }
+}

ql/src/semmle/go/frameworks/stdlib/CryptoCipher.qll

@@ -0,0 +1,30 @@
+/**
+ * Provides classes modeling security-relevant aspects of the `crypto/cipher` package.
+ */
+
+import go
+
+/** Provides models of commonly used functions in the `crypto/cipher` package. */
+module CryptoCipher {
+  private class MethodModels extends TaintTracking::FunctionModel, Method {
+    FunctionInput inp;
+    FunctionOutput outp;
+
+    MethodModels() {
+      // signature: func (Block).Decrypt(dst []byte, src []byte)
+      this.implements("crypto/cipher", "Block", "Decrypt") and
+      (inp.isParameter(1) and outp.isParameter(0))
+      or
+      // signature: func (AEAD).Open(dst []byte, nonce []byte, ciphertext []byte, additionalData []byte) ([]byte, error)
+      this.implements("crypto/cipher", "AEAD", "Open") and
+      (
+        inp.isParameter(2) and
+        (outp.isParameter(0) or outp.isResult(0))
+      )
+    }
+
+    override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
+      input = inp and output = outp
+    }
+  }
+}

ql/src/semmle/go/frameworks/stdlib/CryptoRsa.qll

@@ -0,0 +1,42 @@
+/**
+ * Provides classes modeling security-relevant aspects of the `crypto/rsa` package.
+ */
+
+import go
+
+/** Provides models of commonly used functions in the `crypto/rsa` package. */
+module CryptoRsa {
+  private class FunctionModels extends TaintTracking::FunctionModel {
+    FunctionInput inp;
+    FunctionOutput outp;
+
+    FunctionModels() {
+      // signature: func DecryptOAEP(hash hash.Hash, random io.Reader, priv *PrivateKey, ciphertext []byte, label []byte) ([]byte, error)
+      hasQualifiedName("crypto/rsa", "DecryptOAEP") and
+      (inp.isParameter(3) and outp.isResult(0))
+      or
+      // signature: func DecryptPKCS1v15(rand io.Reader, priv *PrivateKey, ciphertext []byte) ([]byte, error)
+      hasQualifiedName("crypto/rsa", "DecryptPKCS1v15") and
+      (inp.isParameter(2) and outp.isResult(0))
+    }
+
+    override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
+      input = inp and output = outp
+    }
+  }
+
+  private class MethodModels extends TaintTracking::FunctionModel, Method {
+    FunctionInput inp;
+    FunctionOutput outp;
+
+    MethodModels() {
+      // signature: func (*PrivateKey).Decrypt(rand io.Reader, ciphertext []byte, opts crypto.DecrypterOpts) (plaintext []byte, err error)
+      this.hasQualifiedName("crypto/rsa", "PrivateKey", "Decrypt") and
+      (inp.isParameter(1) and outp.isResult(0))
+    }
+
+    override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
+      input = inp and output = outp
+    }
+  }
+}

ql/src/semmle/go/frameworks/stdlib/CryptoTls.qll

@@ -0,0 +1,39 @@
+/**
+ * Provides classes modeling security-relevant aspects of the `crypto/tls` package.
+ */
+
+import go
+
+/** Provides models of commonly used functions in the `crypto/tls` package. */
+module CryptoTls {
+  private class FunctionModels extends TaintTracking::FunctionModel {
+    FunctionInput inp;
+    FunctionOutput outp;
+
+    FunctionModels() {
+      // signature: func Client(conn net.Conn, config *Config) *Conn
+      hasQualifiedName("crypto/tls", "Client") and
+      (
+        inp.isParameter(0) and outp.isResult()
+        or
+        inp.isResult() and outp.isParameter(0)
+      )
+      or
+      // signature: func NewListener(inner net.Listener, config *Config) net.Listener
+      hasQualifiedName("crypto/tls", "NewListener") and
+      (inp.isParameter(0) and outp.isResult())
+      or
+      // signature: func Server(conn net.Conn, config *Config) *Conn
+      hasQualifiedName("crypto/tls", "Server") and
+      (
+        inp.isParameter(0) and outp.isResult()
+        or
+        inp.isResult() and outp.isParameter(0)
+      )
+    }
+
+    override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
+      input = inp and output = outp
+    }
+  }
+}

ql/src/semmle/go/frameworks/stdlib/CryptoX509.qll

@@ -0,0 +1,23 @@
+/**
+ * Provides classes modeling security-relevant aspects of the `crypto/x509` package.
+ */
+
+import go
+
+/** Provides models of commonly used functions in the `crypto/x509` package. */
+module CryptoX509 {
+  private class FunctionModels extends TaintTracking::FunctionModel {
+    FunctionInput inp;
+    FunctionOutput outp;
+
+    FunctionModels() {
+      // signature: func DecryptPEMBlock(b *encoding/pem.Block, password []byte) ([]byte, error)
+      hasQualifiedName("crypto/x509", "DecryptPEMBlock") and
+      (inp.isParameter(0) and outp.isResult(0))
+    }
+
+    override predicate hasTaintFlow(FunctionInput input, FunctionOutput output) {
+      input = inp and output = outp
+    }
+  }
+}