securitylab/CodeQL_Queries/cpp/OpenSSL-hostname-validation/OpenSSLVerify.qll at main · fengjixuchui/securitylab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
import cpp

/**
 * Common utilities for OpenSSL certificate verification.
 */

class SslSetVerifyFunctionCall extends FunctionCall {
  SslSetVerifyFunctionCall() { this.getTarget().hasName("SSL_set_verify") }
}

class SslCtxSetVerifyFunctionCall extends FunctionCall {
  SslCtxSetVerifyFunctionCall() { this.getTarget().hasName("SSL_CTX_set_verify") }
}

class SslLikeSetVerifyFunctionCall extends FunctionCall {
  SslLikeSetVerifyFunctionCall() {
    this instanceof SslCtxSetVerifyFunctionCall or
    this instanceof SslSetVerifyFunctionCall
  }
}

class SslCtxSetCertVerifyCallbackFunctionCall extends FunctionCall {
  SslCtxSetCertVerifyCallbackFunctionCall() {
    this.getTarget().hasName("SSL_CTX_set_cert_verify_callback")
  }
}