ThreatModels: Add stdin kind

RasmusWL · RasmusWL · commit 157d0b7f379c · 2024-08-15T15:36:28.000+02:00
None of the current local subgroups precisely captures stdin, so
although it's much like both commandargs and file, a separate kind seems
better.
diff --git a/shared/mad/codeql/mad/ModelValidation.qll b/shared/mad/codeql/mad/ModelValidation.qll
@@ -119,6 +119,7 @@ module KindValidation<KindValidationConfigSig Config> {
         [
           // shared
           "local", "remote", "file", "commandargs", "database", "environment", "reverse-dns",
+          "stdin",
           // Java
           "android-external-storage-dir", "contentprovider",
           // C#
diff --git a/shared/threat-models/ext/threat-model-grouping.model.yml b/shared/threat-models/ext/threat-model-grouping.model.yml
@@ -15,6 +15,7 @@ extensions:
       - ["database", "local"]
       - ["commandargs", "local"]
       - ["environment", "local"]
+      - ["stdin", "local"]
       - ["file", "local"]
       - ["windows-registry", "local"]
 

Original file line number	Diff line number	Diff line change
`@@ -119,6 +119,7 @@ module KindValidation<KindValidationConfigSig Config> {`
`119`	`119`	`[`
`120`	`120`	`// shared`
`121`	`121`	`"local", "remote", "file", "commandargs", "database", "environment", "reverse-dns",`
	`122`	`+ "stdin",`
`122`	`123`	`// Java`
`123`	`124`	`"android-external-storage-dir", "contentprovider",`
`124`	`125`	`// C#`