Skip to content

Commit b409cbd

Browse files
MathiasVPMathiasVP
committed
PS: Add back the manual models.
1 parent 1a7908c commit b409cbd

8 files changed

+164
-0
lines changed

‎powershell/ql/lib/semmle/code/powershell/frameworks/Microsoft.PowerShell.Utility.model.yml

Lines changed: 77 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,77 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: sourceModel
5+
data:
6+
- ["microsoft.powershell.utility!", "Method[read-host].ReturnValue", "stdin"]
7+
- ["microsoft.powershell.utility!", "Method[select-xml].ReturnValue[path]", "file"]
8+
- ["microsoft.powershell.utility!", "Method[format-hex].ReturnValue[path]", "file"]
9+
10+
- addsTo:
11+
pack: microsoft/powershell-all
12+
extensible: summaryModel
13+
data:
14+
- ["microsoft.powershell.utility!", "Method[get-unique]", "Argument[-inputobject,pipeline].Element[?]", "ReturnValue.Element[?]", "value"]
15+
- ["microsoft.powershell.utility!", "Method[join-string]", "Argument[-inputobject,pipeline].Element[?]", "ReturnValue", "taint"]
16+
- ["microsoft.powershell.utility!", "Method[convertfrom-clixmlreference]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
17+
- ["microsoft.powershell.utility!", "Method[convertfrom-csv]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
18+
- ["microsoft.powershell.utility!", "Method[convertfrom-json]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
19+
- ["microsoft.powershell.utility!", "Method[convertfrom-markdown]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
20+
- ["microsoft.powershell.utility!", "Method[convertfrom-sddlstring]", "Argument[-sddl,0,pipeline]", "ReturnValue", "taint"]
21+
- ["microsoft.powershell.utility!", "Method[convertfrom-stringdata]", "Argument[-stringdata,0,pipeline]", "ReturnValue", "taint"]
22+
- ["microsoft.powershell.utility!", "Method[convertto-clixml]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
23+
- ["microsoft.powershell.utility!", "Method[convertto-csv]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
24+
- ["microsoft.powershell.utility!", "Method[convertto-html]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
25+
- ["microsoft.powershell.utility!", "Method[convertto-json]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
26+
- ["microsoft.powershell.utility!", "Method[convertto-xml]", "Argument[-inputobject,0,pipeline]", "ReturnValue", "taint"]
27+
- ["microsoft.powershell.utility!", "Method[out-string]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
28+
- ["microsoft.powershell.utility!", "Method[select-object]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
29+
- ["microsoft.powershell.utility!", "Method[select-string]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
30+
- ["microsoft.powershell.utility!", "Method[select-xml]", "Argument[-content,-path,-xml]", "ReturnValue", "taint"]
31+
- ["microsoft.powershell.utility!", "Method[sort-object]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
32+
- ["microsoft.powershell.utility!", "Method[tee-object]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
33+
- ["microsoft.powershell.utility!", "Method[write-output]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
34+
- ["microsoft.powershell.utility!", "Method[format-custom]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
35+
- ["microsoft.powershell.utility!", "Method[format-hex]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
36+
- ["microsoft.powershell.utility!", "Method[format-list]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
37+
- ["microsoft.powershell.utility!", "Method[format-table]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
38+
- ["microsoft.powershell.utility!", "Method[format-wide]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
39+
- ["microsoft.powershell.utility!", "Method[get-unique]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
40+
- ["microsoft.powershell.utility!", "Method[join-string]", "Argument[-inputobject,pipeline]", "ReturnValue", "taint"]
41+
42+
- addsTo:
43+
pack: microsoft/powershell-all
44+
extensible: typeModel
45+
data:
46+
- ["system.datetime", "microsoft.powershell.utility!", "Method[get-date].ReturnValue"]
47+
- ["system.object", "microsoft.powershell.utility!", "Method[convertfrom-clixmlreference].ReturnValue"]
48+
- ["pscustomobject", "microsoft.powershell.utility!", "Method[convertFrom-json].ReturnValue"]
49+
- ["system.management.automation.hashtable", "microsoft.powershell.utility!", "Method[convertFrom-json].ReturnValue"]
50+
- ["microsoft.powershell.markdownrender.markdownInfo", "microsoft.powershell.utility!", "Method[convertfrom-markdown].ReturnValue"]
51+
- ["pscustomobject", "microsoft.powershell.utility!", "Method[convertfrom-sddlstring].ReturnValue"]
52+
- ["system.collections.hashtable", "microsoft.powershell.utility!", "Method[convertfrom-stringdata].ReturnValue"]
53+
- ["system.string", "microsoft.powershell.utility!", "Method[convertto-clixml].ReturnValue"]
54+
- ["system.string", "microsoft.powershell.utility!", "Method[convertto-csv].ReturnValue"]
55+
- ["system.string[]", "microsoft.powershell.utility!", "Method[convertto-csv].ReturnValue"]
56+
- ["system.string", "microsoft.powershell.utility!", "Method[convertto-html].ReturnValue"]
57+
- ["system.string[]", "microsoft.powershell.utility!", "Method[convertto-html].ReturnValue"]
58+
- ["system.string", "microsoft.powershell.utility!", "Method[convertto-json].ReturnValue"]
59+
- ["system.string[]", "microsoft.powershell.utility!", "Method[convertto-json].ReturnValue"]
60+
- ["system.string", "microsoft.powershell.utility!", "Method[convertto-xml].ReturnValue"]
61+
- ["system.string[]", "microsoft.powershell.utility!", "Method[convertto-xml].ReturnValue"]
62+
- ["system.string", "microsoft.powershell.utility!", "Method[out-string].ReturnValue"]
63+
- ["pscustomobject", "microsoft.powershell.utility!", "Method[select-object].ReturnValue"]
64+
- ["microsoft.powerShell.commands.matchinfo", "microsoft.powershell.utility!", "Method[select-string].ReturnValue"]
65+
- ["system.boolean", "microsoft.powershell.utility!", "Method[select-string].ReturnValue"]
66+
- ["system.string", "microsoft.powershell.utility!", "Method[select-string].ReturnValue"]
67+
- ["microsoft.powerShell.commands.selectxmlinfo", "microsoft.powershell.utility!", "Method[select-xml].ReturnValue"]
68+
- ["pscustomobject", "microsoft.powershell.utility!", "Method[sort-object].ReturnValue"]
69+
- ["pscustomobject", "microsoft.powershell.utility!", "Method[tee-object].ReturnValue"]
70+
- ["pscustomobject", "microsoft.powershell.utility!", "Method[write-output].ReturnValue"]
71+
- ["microsoft.powershell.commands.internal.format", "microsoft.powershell.utility!", "Method[format-custom].ReturnValue"]
72+
- ["microsoft.powershell.commands.bytecollection", "microsoft.powershell.utility!", "Method[format-hex].ReturnValue"]
73+
- ["microsoft.powershell.commands.internal.format", "microsoft.powershell.utility!", "Method[format-list].ReturnValue"]
74+
- ["microsoft.powershell.commands.internal.format", "microsoft.powershell.utility!", "Method[format-table].ReturnValue"]
75+
- ["microsoft.powershell.commands.internal.format", "microsoft.powershell.utility!", "Method[format-wide].ReturnValue"]
76+
- ["pscustomobject", "microsoft.powershell.utility!", "Method[get-unique].ReturnValue"]
77+
- ["system.string", "microsoft.powershell.utility!", "Method[join-string].ReturnValue"]

‎powershell/ql/lib/semmle/code/powershell/frameworks/Microsoft.Win32.RegistryKey.model.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: sourceModel
5+
data:
6+
- ["microsoft.win32.registrykey ", "Method[GetValue].ReturnValue", "windows-registry"]
7+
- ["microsoft.win32.registrykey ", "Method[GetValueNames].ReturnValue", "windows-registry"]
8+
- ["microsoft.win32.registrykey ", "Method[GetSubKeyNames].ReturnValue", "windows-registry"]

‎powershell/ql/lib/semmle/code/powershell/frameworks/Microsoft.Win32.model.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: sourceModel
5+
data:
6+
- ["microsoft.win32.registry!", "Method[getvalue].ReturnValue", "windows-registry"]
7+
- ["microsoft.win32.registrykey", "Method[getvalue].ReturnValue", "windows-registry"]
8+
- ["microsoft.win32.registrykey", "Method[getvaluenames].ReturnValue", "windows-registry"]
9+
- ["microsoft.win32.registrykey", "Method[getsubkeynames].ReturnValue", "windows-registry"]

‎powershell/ql/lib/semmle/code/powershell/frameworks/System.IO.model.yml

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: sourceModel
5+
data:
6+
- ["system.io.file!", "Method[appendtext].ReturnValue", "file-write"]
7+
- ["system.io.file!", "Method[create].ReturnValue", "file-write"]
8+
- ["system.io.file!", "Method[createtext].ReturnValue", "file-write"]
9+
- ["system.io.file!", "Method[open].ReturnValue", "file-write"]
10+
- ["system.io.file!", "Method[open].ReturnValue", "file"]
11+
- ["system.io.file!", "Method[openread].ReturnValue", "file"]
12+
- ["system.io.file!", "Method[opentext].ReturnValue", "file"]
13+
- ["system.io.file!", "Method[openwrite].ReturnValue", "file-write"]
14+
- ["system.io.file!", "Method[readallbytes].ReturnValue", "file"]
15+
- ["system.io.file!", "Method[readallbytesasync].ReturnValue", "file"]
16+
- ["system.io.file!", "Method[readalllines].ReturnValue", "file"]
17+
- ["system.io.file!", "Method[readalllinesasync].ReturnValue", "file"]
18+
- ["system.io.file!", "Method[readalltext].ReturnValue", "file"]
19+
- ["system.io.file!", "Method[readalltextasync].ReturnValue", "file"]
20+
- ["system.io.file!", "Method[readlines].ReturnValue", "file"]
21+
- ["system.io.file!", "Method[readlinesasync].ReturnValue", "file"]
22+
- ["system.io.fileinfo", "Method[appendtext].ReturnValue", "file-write"]
23+
- ["system.io.fileinfo", "Method[create].ReturnValue", "file-write"]
24+
- ["system.io.fileinfo", "Method[createtext].ReturnValue", "file-write"]
25+
- ["system.io.fileinfo", "Method[open].ReturnValue", "file-write"]
26+
- ["system.io.fileinfo", "Method[open].ReturnValue", "file"]
27+
- ["system.io.fileinfo", "Method[openread].ReturnValue", "file"]
28+
- ["system.io.fileinfo", "Method[opentext].ReturnValue", "file"]
29+
- ["system.io.fileinfo", "Method[openwrite].ReturnValue", "file-write"]
30+
- ["system.io.filestream", "Instance", "file"]
31+
- ["system.io.filestream", "Instance", "file-write"]
32+
- ["system.io.streamwriter", "Instance", "file-write"]
33+
- ["system.io.streamwriter", "Instance", "file-write"]

‎powershell/ql/lib/semmle/code/powershell/frameworks/System.Management.Automation.Language.model.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: summaryModel
5+
data:
6+
- ["system.management.automation.language.codegeneration!", "Method[escapesinglequotedstringcontent]", "Argument[0]", "ReturnValue", "taint"]

‎powershell/ql/lib/semmle/code/powershell/frameworks/System.Management.Automation.model.yml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: sinkModel
5+
data:
6+
- ["system.management.automation.scriptblock!", "Method[create].Argument[0]", "command-injection"]
7+
- ["system.management.automation.powershell", "Method[addscript].Argument[0]", "command-injection"]
8+
- ["system.management.automation.commandinvocationintrinsics", "Method[expandstring].Argument[0]", "command-injection"]
9+
- ["System.Management.Automation.Runspaces.Runspace", "Method[CreateNestedPipeline].Argument[0]", "command-injection"]
10+
- ["System.Management.Automation.Runspaces.Runspace", "Method[CreatePipeline].Argument[0]", "command-injection"]

‎powershell/ql/lib/semmle/code/powershell/frameworks/System.Net.Sockets.model.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: sourceModel
5+
data:
6+
- ["system.net.sockets.tcpclient", "Method[getstream].ReturnValue", "remote"]
7+
- ["system.net.sockets.udpclient", "Method[endreceive].ReturnValue", "remote"]
8+
- ["system.net.sockets.udpclient", "Method[receive].ReturnValue", "remote"]
9+
- ["system.net.sockets.udpclient", "Method[receiveasync].ReturnValue", "remote"]

‎powershell/ql/lib/semmle/code/powershell/frameworks/System.model.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
extensions:
2+
- addsTo:
3+
pack: microsoft/powershell-all
4+
extensible: sourceModel
5+
data:
6+
- ["system.console!", "Method[read].ReturnValue", "stdin"]
7+
- ["system.console!", "Method[readkey].ReturnValue", "stdin"]
8+
- ["system.console!", "Method[readline].ReturnValue", "stdin"]
9+
- ["system.environment!", "Method[expandenvironmentvariables].ReturnValue", "environment"]
10+
- ["system.environment!", "Method[getcommandlineargs].ReturnValue", "command-line"]
11+
- ["system.environment!", "Method[getenvironmentvariable].ReturnValue", "environment"]
12+
- ["system.environment!", "Method[getenvironmentvariables].ReturnValue", "environment"]

0 commit comments

Comments
 (0)