Merge pull request #22 from github/uboot

Uboot

Author: xcorail

.github/workflows/publish.yml

@@ -27,3 +27,15 @@ jobs:
       run: cd courses/cpp/ctf-segv/image && ./publish.sh
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  publish-courses-cpp-u-boot:
+    needs: publish-codeql-learninglab-check
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v1
+
+    - name: Build and Publish Course Docker Image
+      run: cd courses/cpp/uboot/image && ./publish.sh
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

courses/cpp/uboot/README.md

@@ -0,0 +1,19 @@
+# CodeQL LearningLab Course Action Template
+
+Copy this entire directory,
+and replace the following:
+
+* Replace `<owner>`, `<repo>` and `<pkg>` in the `image` property in
+  [`action.yml`](action.yml) to reference the correct repository
+  where the docker image will be published,
+  and with a package name of your choice.
+  (For courses in this repository,
+  we use the convention of taking the course path,
+  and replacing slashes with dashes,
+  e.g. `courses/cpp/ctf-segv` becomes `courses-cpp-ctf-segv`)
+* Replace the zip file URL in [`image/Dockerfile`](image/Dockerfile)
+  to point to the CodeQL database that will be used in your course.
+
+After this,
+update [`answers/`](answers) and [`image/config/`](image/config)
+to add your model answers and expected query results as appropriate.

courses/cpp/uboot/action.yml

@@ -0,0 +1,9 @@
+name: 'Check queries'
+description: 'Check that the queries that have been pushed produce the correct results'
+author: 'GitHub <[email protected]>'
+runs:
+  using: 'docker'
+  image: 'docker://docker.pkg.github.com/github/codeql-learninglab-actions/courses-cpp-uboot'
+branding:
+  icon: 'check-circle'
+  color: 'purple'

courses/cpp/uboot/answers/11_function_definitions.ql

@@ -0,0 +1,9 @@
+/**
+ * @kind problem
+ */
+
+import cpp
+
+from Function f
+where f.getName() = "strlen"
+select f, "a function named strlen"

courses/cpp/uboot/answers/12_memcpy_definitions.ql

@@ -0,0 +1,9 @@
+/**
+ * @kind problem
+ */
+
+import cpp
+
+from Function f
+where f.getName() = "memcpy"
+select f, "a function named memcpy"

courses/cpp/uboot/answers/13_macro_definitions.ql

@@ -0,0 +1,10 @@
+/**
+ * @kind problem
+ */
+
+import cpp
+
+from Macro m
+where m.getName().regexpMatch("ntoh(s|ll?)")
+select m, "a macro reading from the network"
+

courses/cpp/uboot/answers/21_memcpy_calls.ql

@@ -0,0 +1,10 @@
+/**
+ * @kind problem
+ */
+
+import cpp
+
+from Function f, FunctionCall fc
+where f.getName() = "memcpy" and 
+    fc.getTarget() = f
+select fc, "a call to memcpy"

courses/cpp/uboot/answers/22_macro_invocations.ql

@@ -0,0 +1,9 @@
+/**
+ * @kind problem
+ */
+
+import cpp
+
+from Macro m, MacroInvocation mi
+where mi.getMacro() = m and m.getName().regexpMatch("ntoh(s|ll?)")
+select mi, "Invoking a macro reading from the network"

courses/cpp/uboot/answers/23_macro_expressions.ql

@@ -0,0 +1,9 @@
+/**
+ * @kind problem
+ */
+
+import cpp
+
+from Macro m, MacroInvocation mi
+where mi.getMacro() = m and m.getName().regexpMatch("ntoh(s|ll?)")
+select mi.getExpr(), "Invoking a macro reading from the network"

courses/cpp/uboot/answers/24_class_network_reads.ql

@@ -0,0 +1,14 @@
+/**
+ * @kind problem
+ */
+
+import cpp
+
+class NetworkRead extends Expr {
+  NetworkRead() {
+    exists (MacroInvocation mi | mi.getMacro().getName().regexpMatch("ntoh(s|ll?)") and this = mi.getExpr())
+  }
+}
+ 
+from NetworkRead n
+select n, "Reading from the network"