Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Oct 24, 2025

• Merge pull request #20690 from bdrodes/weak_symmetric_cipher_bug

  Show description for d478752
  nicolaswill

  authored
  d478752

  Copy full SHA for d478752

• Crypto: Simplifying expression for ql-for-ql alert.

  bdrodes

  committed
  65d0ca9

  Copy full SHA for 65d0ca9

• Crypto: typo fix

  bdrodes

  committed
  0394816

  Copy full SHA for 0394816

• Crypto: removing comments

  bdrodes

  committed
  b20689f

  Copy full SHA for b20689f

• Crypto: Adding bad decrypt then mac order query. Fixes to BadMacOrderMacOnEncryptPlaintext as well.

  bdrodes

  committed
  0e624f5

  Copy full SHA for 0e624f5

• Crypto: Fixed bug in WeakSymmetricCipher.qll, forgot to not only filter if !=AES but the algorithm must still be a SymmetriCipher algorithm.

  bdrodes

  committed
  ed492c7

  Copy full SHA for ed492c7

Commits on Oct 22, 2025

• Crypto: Adjust output of bad mac order queries, update associated bad mac order expected results, fix erroneous change to ID for a slicing query, update model to specify elliptic curve type as a pr…

  Show description for dd60cf9
  bdrodes

  committed
  dd60cf9

  Copy full SHA for dd60cf9

Commits on Oct 21, 2025

• Crypto: ql-for-ql alert fixes.

  bdrodes

  committed
  c50175b

  Copy full SHA for c50175b

Commits on Oct 20, 2025

• Crypto: Adding a proof of concept bad mac ordering predicate that takes in an ArtifactNode to be used for graph generation to intercept nodes with known mac ordering issues, in order to format the …

  Show description for 22c0f9f
  bdrodes

  committed
  22c0f9f

  Copy full SHA for 22c0f9f

• Crypto: To allow for graph generation to have properties informed by assessments, altering a few queries weak/vuln/bad crypto to have qll files that can be accessed for other purposes, like graph g…

  Show description for eff94ef
  bdrodes

  committed
  eff94ef

  Copy full SHA for eff94ef

Commits on Oct 17, 2025

• Crypto: more ID renaming to include "examples", fix singleton issues with ql-for-ql, use formatted test for WeakAsymmetricKeyGenSize (add post processing in the qlref), misc expected files updated …

  Show description for c01c060
  bdrodes

  committed
  c01c060

  Copy full SHA for c01c060

• Crypto: altering all query IDs in examples to have "examples" in the ID, to make clear the query is not intended for production.

  bdrodes

  committed
  b06e053

  Copy full SHA for b06e053

• Removing WeakRSA, this is redundant with weak asymmetric key size.

  bdrodes

  committed
  1b205d8

  Copy full SHA for 1b205d8

• Crypto: Modify BadMacOrderMacOnEncryptPlaintext to be a path query that traces through any intermediate encrypt or mac to the final encrypt or mac.

  bdrodes

  committed
  628bab9

  Copy full SHA for 628bab9

• Crypto: removing precision tags on experimental queries.

  bdrodes

  committed
  ff7840d

  Copy full SHA for ff7840d

Commits on Oct 16, 2025

• Crypto: Addressing FPs in BadMacOrderMacOnEncryptPlaintext

  bdrodes

  committed
  ef6f022

  Copy full SHA for ef6f022

• Crypto: Bad Mac use tests, and fix for BadMacOrderMacOnEncryptPlaintext (barriers were blocking flow through an encrypt to a subsequent mac on the same plaintext)

  bdrodes

  committed
  700f34e

  Copy full SHA for 700f34e

• Crypto: Initial sketch for unknown hash, the model needs to recognize unknowns but where the algorithm category (e.g., hashing) is known.

  bdrodes

  committed
  79ccef3

  Copy full SHA for 79ccef3

Commits on Oct 15, 2025

• Crypto: Tweaks to bad crypto ordering queries.

  bdrodes

  committed
  15e266d

  Copy full SHA for 15e266d

• Crypto: remove precision tag

  bdrodes

  committed
  c6174fb

  Copy full SHA for c6174fb

• Crypto: Remove all precision tags from all experimental queries. Precision is largely in flux while the models are being developed.

  bdrodes

  committed
  c7be23e

  Copy full SHA for c7be23e

• Crypto: Experimental queries for mac ordering

  bdrodes

  committed
  bf9a249

  Copy full SHA for bf9a249

Commits on Oct 13, 2025

• Crypto: Make WeakAsymmetricKeyGenSize a path problem.

  bdrodes

  committed
  55bbcee

  Copy full SHA for 55bbcee

• Crypto: Update WeakAsymmetricKeyGenSize to a path problem.

  bdrodes

  committed
  7e8acd7

  Copy full SHA for 7e8acd7

• Crypto: Convert ReusedNonce.ql into a path problem.

  bdrodes

  committed
  8b5a423

  Copy full SHA for 8b5a423

• Crypto: Update KDF iteration and count to be path problems

  bdrodes

  committed
  7847e92

  Copy full SHA for 7847e92

• Crypto: Update InsecureIVorNonce to be a path problem.

  bdrodes

  committed
  76128ed

  Copy full SHA for 76128ed

• Crypto: adding initial weak hash query overhaul and tests, but no expected file yet.

  bdrodes

  committed
  4b241d7

  Copy full SHA for 4b241d7

Commits on Oct 10, 2025

• Crypto: Updating weak asymmetric key gen to include key exchange.

  bdrodes

  committed
  e76ced1

  Copy full SHA for e76ced1

• Crypto: InsecureIVorNonceSource now ignored null to avoid being too noisy.

  bdrodes

  committed
  d68f3cf

  Copy full SHA for d68f3cf

• Crypto: Weak asymmetric key gen size fixes and test.

  bdrodes

  committed
  3667365

  Copy full SHA for 3667365

• Crypto: Reused nonce query updates and test updates to address false positives.

  bdrodes

  committed
  758759a

  Copy full SHA for 758759a

Commits on Oct 9, 2025

• Crypto: Example query reorg - moving queries of this PR into 'examples' subdirectories.

  bdrodes

  committed
  fba8087

  Copy full SHA for fba8087

• Crypto: Minor fixes to WeakSymmetricCipher, change to a singular name for consistency.

  bdrodes

  committed
  deb4373

  Copy full SHA for deb4373

• Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check

  bdrodes

  committed
  3dedda4

  Copy full SHA for 3dedda4

Pagination

Previous

Next