diff --git a/ql_demos/.gitignore b/CodeQL_Queries/.gitignore similarity index 100% rename from ql_demos/.gitignore rename to CodeQL_Queries/.gitignore diff --git a/ql_demos/cpp/.project b/CodeQL_Queries/cpp/.project similarity index 100% rename from ql_demos/cpp/.project rename to CodeQL_Queries/cpp/.project diff --git a/ql_demos/cpp/.qlpath b/CodeQL_Queries/cpp/.qlpath similarity index 100% rename from ql_demos/cpp/.qlpath rename to CodeQL_Queries/cpp/.qlpath diff --git a/ql_demos/cpp/ChakraCore-bad-overflow-check/BadOverflowCheck.ql b/CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/BadOverflowCheck.ql similarity index 100% rename from ql_demos/cpp/ChakraCore-bad-overflow-check/BadOverflowCheck.ql rename to CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/BadOverflowCheck.ql diff --git a/ql_demos/cpp/ChakraCore-bad-overflow-check/README.md b/CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/README.md similarity index 100% rename from ql_demos/cpp/ChakraCore-bad-overflow-check/README.md rename to CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/README.md diff --git a/ql_demos/cpp/ChakraCore-bad-overflow-check/steps/01_overflow_checks.ql b/CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/steps/01_overflow_checks.ql similarity index 100% rename from ql_demos/cpp/ChakraCore-bad-overflow-check/steps/01_overflow_checks.ql rename to CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/steps/01_overflow_checks.ql diff --git a/ql_demos/cpp/ChakraCore-bad-overflow-check/steps/02_var_size.ql b/CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/steps/02_var_size.ql similarity index 100% rename from ql_demos/cpp/ChakraCore-bad-overflow-check/steps/02_var_size.ql rename to CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/steps/02_var_size.ql diff --git a/ql_demos/cpp/ChakraCore-bad-overflow-check/steps/03_bad_overflow_check.ql b/CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/steps/03_bad_overflow_check.ql similarity index 100% rename from ql_demos/cpp/ChakraCore-bad-overflow-check/steps/03_bad_overflow_check.ql rename to CodeQL_Queries/cpp/ChakraCore-bad-overflow-check/steps/03_bad_overflow_check.ql diff --git a/ql_demos/cpp/Facebook_Fizz_CVE-2019-3560/FizzOverflow.ql b/CodeQL_Queries/cpp/Facebook_Fizz_CVE-2019-3560/FizzOverflow.ql similarity index 100% rename from ql_demos/cpp/Facebook_Fizz_CVE-2019-3560/FizzOverflow.ql rename to CodeQL_Queries/cpp/Facebook_Fizz_CVE-2019-3560/FizzOverflow.ql diff --git a/ql_demos/cpp/Facebook_Fizz_CVE-2019-3560/README.md b/CodeQL_Queries/cpp/Facebook_Fizz_CVE-2019-3560/README.md similarity index 100% rename from ql_demos/cpp/Facebook_Fizz_CVE-2019-3560/README.md rename to CodeQL_Queries/cpp/Facebook_Fizz_CVE-2019-3560/README.md diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/00_copy_from_user.ql b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/00_copy_from_user.ql similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/00_copy_from_user.ql rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/00_copy_from_user.ql diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/01_copy_from_user_annotated.ql b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/01_copy_from_user_annotated.ql similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/01_copy_from_user_annotated.ql rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/01_copy_from_user_annotated.ql diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/02_filter_with_upperbound.ql b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/02_filter_with_upperbound.ql similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/02_filter_with_upperbound.ql rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/02_filter_with_upperbound.ql diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/03_filter_with_upperbound.ql b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/03_filter_with_upperbound.ql similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/03_filter_with_upperbound.ql rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/03_filter_with_upperbound.ql diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/04_safe_malloc.ql b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/04_safe_malloc.ql similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/04_safe_malloc.ql rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/04_safe_malloc.ql diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/05_filter_with_upperbound_and_safe_malloc.ql b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/05_filter_with_upperbound_and_safe_malloc.ql similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/05_filter_with_upperbound_and_safe_malloc.ql rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/05_filter_with_upperbound_and_safe_malloc.ql diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/06_stackaddress_dataflow.ql b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/06_stackaddress_dataflow.ql similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/06_stackaddress_dataflow.ql rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/06_stackaddress_dataflow.ql diff --git a/ql_demos/cpp/Qualcomm-MSM-copy_from_user/README.md b/CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/README.md similarity index 100% rename from ql_demos/cpp/Qualcomm-MSM-copy_from_user/README.md rename to CodeQL_Queries/cpp/Qualcomm-MSM-copy_from_user/README.md diff --git a/CodeQL_Queries/cpp/README.md b/CodeQL_Queries/cpp/README.md new file mode 100644 index 0000000..3b55edc --- /dev/null +++ b/CodeQL_Queries/cpp/README.md @@ -0,0 +1,14 @@ + +## Useful CodeQL Queries + +- [Chakra Code](ChakraCore-bad-overflow-check/) +- [XNU NFS Boot vulnerability](XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/) +- [Facebook Fizz Denial of Service](Facebook_Fizz_CVE-2019-3560/) +- [XNU ICMP Denial of Service](XNU_icmp_error_CVE-2018-4407/) +- [Qualcomm MSM copy_from_user vulnerability](Qualcomm-MSM-copy_from_user/) +- [XNU packet mangler](XNU_packet-mangler_CVE-2018-4249/) +- [RSyslog](rsyslog_CVE-2018-1000140/) +- [LibJPEG Turbo Out of Bound](libjpeg-turbo-oob) +- [XNU DTrace](XNU_DTrace_CVE-2017-13782) +- [libssh2](libssh2_eating_error_codes) + diff --git a/ql_demos/cpp/XNU_DTrace_CVE-2017-13782/DTraceUnsafeIndex.ql b/CodeQL_Queries/cpp/XNU_DTrace_CVE-2017-13782/DTraceUnsafeIndex.ql similarity index 100% rename from ql_demos/cpp/XNU_DTrace_CVE-2017-13782/DTraceUnsafeIndex.ql rename to CodeQL_Queries/cpp/XNU_DTrace_CVE-2017-13782/DTraceUnsafeIndex.ql diff --git a/ql_demos/cpp/XNU_DTrace_CVE-2017-13782/README.md b/CodeQL_Queries/cpp/XNU_DTrace_CVE-2017-13782/README.md similarity index 100% rename from ql_demos/cpp/XNU_DTrace_CVE-2017-13782/README.md rename to CodeQL_Queries/cpp/XNU_DTrace_CVE-2017-13782/README.md diff --git a/ql_demos/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/BCopyNegativeSize.ql b/CodeQL_Queries/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/BCopyNegativeSize.ql similarity index 100% rename from ql_demos/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/BCopyNegativeSize.ql rename to CodeQL_Queries/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/BCopyNegativeSize.ql diff --git a/ql_demos/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/README.md b/CodeQL_Queries/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/README.md similarity index 100% rename from ql_demos/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/README.md rename to CodeQL_Queries/cpp/XNU_NFS_Boot_CVE-2018-4136_CVE-2018-4160/README.md diff --git a/ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/00_mbuf_copydata_tainted_size.ql b/CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/00_mbuf_copydata_tainted_size.ql similarity index 100% rename from ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/00_mbuf_copydata_tainted_size.ql rename to CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/00_mbuf_copydata_tainted_size.ql diff --git a/ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/01_paths_to_icmp_error.ql b/CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/01_paths_to_icmp_error.ql similarity index 100% rename from ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/01_paths_to_icmp_error.ql rename to CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/01_paths_to_icmp_error.ql diff --git a/ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/02_paths_to_icmp_error.ql b/CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/02_paths_to_icmp_error.ql similarity index 100% rename from ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/02_paths_to_icmp_error.ql rename to CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/02_paths_to_icmp_error.ql diff --git a/ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/03_paths_to_icmp_error.ql b/CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/03_paths_to_icmp_error.ql similarity index 100% rename from ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/03_paths_to_icmp_error.ql rename to CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/03_paths_to_icmp_error.ql diff --git a/ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/README.md b/CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/README.md similarity index 100% rename from ql_demos/cpp/XNU_icmp_error_CVE-2018-4407/README.md rename to CodeQL_Queries/cpp/XNU_icmp_error_CVE-2018-4407/README.md diff --git a/ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/ArrayIndexMightOverflow.ql b/CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/ArrayIndexMightOverflow.ql similarity index 100% rename from ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/ArrayIndexMightOverflow.ql rename to CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/ArrayIndexMightOverflow.ql diff --git a/ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/InfiniteLoop.ql b/CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/InfiniteLoop.ql similarity index 100% rename from ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/InfiniteLoop.ql rename to CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/InfiniteLoop.ql diff --git a/ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/README.md b/CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/README.md similarity index 100% rename from ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/README.md rename to CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/README.md diff --git a/ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/tcphdr_mbuf_copydata.ql b/CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/tcphdr_mbuf_copydata.ql similarity index 100% rename from ql_demos/cpp/XNU_packet-mangler_CVE-2018-4249/tcphdr_mbuf_copydata.ql rename to CodeQL_Queries/cpp/XNU_packet-mangler_CVE-2018-4249/tcphdr_mbuf_copydata.ql diff --git a/ql_demos/cpp/libjpeg-turbo-oob/01_find_colormap_index.ql b/CodeQL_Queries/cpp/libjpeg-turbo-oob/01_find_colormap_index.ql similarity index 100% rename from ql_demos/cpp/libjpeg-turbo-oob/01_find_colormap_index.ql rename to CodeQL_Queries/cpp/libjpeg-turbo-oob/01_find_colormap_index.ql diff --git a/ql_demos/cpp/libjpeg-turbo-oob/02a_find_guarded_colormap_index.ql b/CodeQL_Queries/cpp/libjpeg-turbo-oob/02a_find_guarded_colormap_index.ql similarity index 100% rename from ql_demos/cpp/libjpeg-turbo-oob/02a_find_guarded_colormap_index.ql rename to CodeQL_Queries/cpp/libjpeg-turbo-oob/02a_find_guarded_colormap_index.ql diff --git a/ql_demos/cpp/libjpeg-turbo-oob/02b_find_guarded_colormap_index_working.ql b/CodeQL_Queries/cpp/libjpeg-turbo-oob/02b_find_guarded_colormap_index_working.ql similarity index 100% rename from ql_demos/cpp/libjpeg-turbo-oob/02b_find_guarded_colormap_index_working.ql rename to CodeQL_Queries/cpp/libjpeg-turbo-oob/02b_find_guarded_colormap_index_working.ql diff --git a/ql_demos/cpp/libjpeg-turbo-oob/03_find_unguarded_colormap_index.ql b/CodeQL_Queries/cpp/libjpeg-turbo-oob/03_find_unguarded_colormap_index.ql similarity index 100% rename from ql_demos/cpp/libjpeg-turbo-oob/03_find_unguarded_colormap_index.ql rename to CodeQL_Queries/cpp/libjpeg-turbo-oob/03_find_unguarded_colormap_index.ql diff --git a/ql_demos/cpp/libjpeg-turbo-oob/04_find_unguarded_colormap_no_fps.ql b/CodeQL_Queries/cpp/libjpeg-turbo-oob/04_find_unguarded_colormap_no_fps.ql similarity index 100% rename from ql_demos/cpp/libjpeg-turbo-oob/04_find_unguarded_colormap_no_fps.ql rename to CodeQL_Queries/cpp/libjpeg-turbo-oob/04_find_unguarded_colormap_no_fps.ql diff --git a/ql_demos/cpp/libjpeg-turbo-oob/05_find_unguarded_colormap_generalised.ql b/CodeQL_Queries/cpp/libjpeg-turbo-oob/05_find_unguarded_colormap_generalised.ql similarity index 100% rename from ql_demos/cpp/libjpeg-turbo-oob/05_find_unguarded_colormap_generalised.ql rename to CodeQL_Queries/cpp/libjpeg-turbo-oob/05_find_unguarded_colormap_generalised.ql diff --git a/ql_demos/cpp/libjpeg-turbo-oob/README.md b/CodeQL_Queries/cpp/libjpeg-turbo-oob/README.md similarity index 100% rename from ql_demos/cpp/libjpeg-turbo-oob/README.md rename to CodeQL_Queries/cpp/libjpeg-turbo-oob/README.md diff --git a/ql_demos/cpp/libssh2_eating_error_codes/00_error_codes.ql b/CodeQL_Queries/cpp/libssh2_eating_error_codes/00_error_codes.ql similarity index 100% rename from ql_demos/cpp/libssh2_eating_error_codes/00_error_codes.ql rename to CodeQL_Queries/cpp/libssh2_eating_error_codes/00_error_codes.ql diff --git a/ql_demos/cpp/libssh2_eating_error_codes/01_error_codes_call.ql b/CodeQL_Queries/cpp/libssh2_eating_error_codes/01_error_codes_call.ql similarity index 100% rename from ql_demos/cpp/libssh2_eating_error_codes/01_error_codes_call.ql rename to CodeQL_Queries/cpp/libssh2_eating_error_codes/01_error_codes_call.ql diff --git a/ql_demos/cpp/libssh2_eating_error_codes/02_eating_error_codes.ql b/CodeQL_Queries/cpp/libssh2_eating_error_codes/02_eating_error_codes.ql similarity index 100% rename from ql_demos/cpp/libssh2_eating_error_codes/02_eating_error_codes.ql rename to CodeQL_Queries/cpp/libssh2_eating_error_codes/02_eating_error_codes.ql diff --git a/ql_demos/cpp/libssh2_eating_error_codes/03_eating_error_codes_localflow.ql b/CodeQL_Queries/cpp/libssh2_eating_error_codes/03_eating_error_codes_localflow.ql similarity index 100% rename from ql_demos/cpp/libssh2_eating_error_codes/03_eating_error_codes_localflow.ql rename to CodeQL_Queries/cpp/libssh2_eating_error_codes/03_eating_error_codes_localflow.ql diff --git a/ql_demos/cpp/libssh2_eating_error_codes/04_eating_error_codes_localflow_rangeanalysis.ql b/CodeQL_Queries/cpp/libssh2_eating_error_codes/04_eating_error_codes_localflow_rangeanalysis.ql similarity index 100% rename from ql_demos/cpp/libssh2_eating_error_codes/04_eating_error_codes_localflow_rangeanalysis.ql rename to CodeQL_Queries/cpp/libssh2_eating_error_codes/04_eating_error_codes_localflow_rangeanalysis.ql diff --git a/ql_demos/cpp/libssh2_eating_error_codes/README.md b/CodeQL_Queries/cpp/libssh2_eating_error_codes/README.md similarity index 100% rename from ql_demos/cpp/libssh2_eating_error_codes/README.md rename to CodeQL_Queries/cpp/libssh2_eating_error_codes/README.md diff --git a/ql_demos/cpp/qlpack.yml b/CodeQL_Queries/cpp/qlpack.yml similarity index 100% rename from ql_demos/cpp/qlpack.yml rename to CodeQL_Queries/cpp/qlpack.yml diff --git a/ql_demos/cpp/queries.xml b/CodeQL_Queries/cpp/queries.xml similarity index 100% rename from ql_demos/cpp/queries.xml rename to CodeQL_Queries/cpp/queries.xml diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/01_find_snprintf.ql b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/01_find_snprintf.ql similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/01_find_snprintf.ql rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/01_find_snprintf.ql diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/02_find_snprintf_with_result.ql b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/02_find_snprintf_with_result.ql similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/02_find_snprintf_with_result.ql rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/02_find_snprintf_with_result.ql diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/03_find_snprintf_with_result_and_string.ql b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/03_find_snprintf_with_result_and_string.ql similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/03_find_snprintf_with_result_and_string.ql rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/03_find_snprintf_with_result_and_string.ql diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/04_find_snprintf_with_result_and_string_and_local_taint.ql b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/04_find_snprintf_with_result_and_string_and_local_taint.ql similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/04_find_snprintf_with_result_and_string_and_local_taint.ql rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/04_find_snprintf_with_result_and_string_and_local_taint.ql diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/05_find_snprintf_with_result_and_string_and_local_taint_ub.ql b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/05_find_snprintf_with_result_and_string_and_local_taint_ub.ql similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/05_find_snprintf_with_result_and_string_and_local_taint_ub.ql rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/05_find_snprintf_with_result_and_string_and_local_taint_ub.ql diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/README.md b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/README.md similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/README.md rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/README.md diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/Video/README.md b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/Video/README.md similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/Video/README.md rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/Video/README.md diff --git a/ql_demos/cpp/rsyslog_CVE-2018-1000140/Video/rsyslog.srt b/CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/Video/rsyslog.srt similarity index 100% rename from ql_demos/cpp/rsyslog_CVE-2018-1000140/Video/rsyslog.srt rename to CodeQL_Queries/cpp/rsyslog_CVE-2018-1000140/Video/rsyslog.srt diff --git a/ql_demos/csharp/.project b/CodeQL_Queries/csharp/.project similarity index 100% rename from ql_demos/csharp/.project rename to CodeQL_Queries/csharp/.project diff --git a/ql_demos/csharp/.qlpath b/CodeQL_Queries/csharp/.qlpath similarity index 100% rename from ql_demos/csharp/.qlpath rename to CodeQL_Queries/csharp/.qlpath diff --git a/ql_demos/csharp/ZipSlip/01_Sources.ql b/CodeQL_Queries/csharp/ZipSlip/01_Sources.ql similarity index 100% rename from ql_demos/csharp/ZipSlip/01_Sources.ql rename to CodeQL_Queries/csharp/ZipSlip/01_Sources.ql diff --git a/ql_demos/csharp/ZipSlip/02_Sources.ql b/CodeQL_Queries/csharp/ZipSlip/02_Sources.ql similarity index 100% rename from ql_demos/csharp/ZipSlip/02_Sources.ql rename to CodeQL_Queries/csharp/ZipSlip/02_Sources.ql diff --git a/ql_demos/csharp/ZipSlip/03_Sinks.ql b/CodeQL_Queries/csharp/ZipSlip/03_Sinks.ql similarity index 100% rename from ql_demos/csharp/ZipSlip/03_Sinks.ql rename to CodeQL_Queries/csharp/ZipSlip/03_Sinks.ql diff --git a/ql_demos/csharp/ZipSlip/04_SinkArgument.ql b/CodeQL_Queries/csharp/ZipSlip/04_SinkArgument.ql similarity index 100% rename from ql_demos/csharp/ZipSlip/04_SinkArgument.ql rename to CodeQL_Queries/csharp/ZipSlip/04_SinkArgument.ql diff --git a/ql_demos/csharp/ZipSlip/05_LocalFlow.ql b/CodeQL_Queries/csharp/ZipSlip/05_LocalFlow.ql similarity index 100% rename from ql_demos/csharp/ZipSlip/05_LocalFlow.ql rename to CodeQL_Queries/csharp/ZipSlip/05_LocalFlow.ql diff --git a/ql_demos/csharp/ZipSlip/06_GlobalFlow.ql b/CodeQL_Queries/csharp/ZipSlip/06_GlobalFlow.ql similarity index 100% rename from ql_demos/csharp/ZipSlip/06_GlobalFlow.ql rename to CodeQL_Queries/csharp/ZipSlip/06_GlobalFlow.ql diff --git a/ql_demos/csharp/ZipSlip/README.md b/CodeQL_Queries/csharp/ZipSlip/README.md similarity index 100% rename from ql_demos/csharp/ZipSlip/README.md rename to CodeQL_Queries/csharp/ZipSlip/README.md diff --git a/ql_demos/csharp/qlpack.yml b/CodeQL_Queries/csharp/qlpack.yml similarity index 100% rename from ql_demos/csharp/qlpack.yml rename to CodeQL_Queries/csharp/qlpack.yml diff --git a/ql_demos/csharp/queries.xml b/CodeQL_Queries/csharp/queries.xml similarity index 100% rename from ql_demos/csharp/queries.xml rename to CodeQL_Queries/csharp/queries.xml diff --git a/ql_demos/java/.project b/CodeQL_Queries/java/.project similarity index 100% rename from ql_demos/java/.project rename to CodeQL_Queries/java/.project diff --git a/ql_demos/java/.qlpath b/CodeQL_Queries/java/.qlpath similarity index 100% rename from ql_demos/java/.qlpath rename to CodeQL_Queries/java/.qlpath diff --git a/ql_demos/java/Apache_Struts_CVE-2017-9805/README.md b/CodeQL_Queries/java/Apache_Struts_CVE-2017-9805/README.md similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2017-9805/README.md rename to CodeQL_Queries/java/Apache_Struts_CVE-2017-9805/README.md diff --git a/ql_demos/java/Apache_Struts_CVE-2017-9805/UnsafeDeserialization.qll b/CodeQL_Queries/java/Apache_Struts_CVE-2017-9805/UnsafeDeserialization.qll similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2017-9805/UnsafeDeserialization.qll rename to CodeQL_Queries/java/Apache_Struts_CVE-2017-9805/UnsafeDeserialization.qll diff --git a/ql_demos/java/Apache_Struts_CVE-2017-9805/UnsafeDeserializationStruts.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2017-9805/UnsafeDeserializationStruts.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2017-9805/UnsafeDeserializationStruts.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2017-9805/UnsafeDeserializationStruts.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/01_compileAndExecute.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/01_compileAndExecute.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/01_compileAndExecute.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/01_compileAndExecute.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/02_compileAndExecute.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/02_compileAndExecute.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/02_compileAndExecute.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/02_compileAndExecute.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/03_compileAndExecute.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/03_compileAndExecute.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/03_compileAndExecute.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/03_compileAndExecute.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/04_compileAndExecute.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/04_compileAndExecute.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/04_compileAndExecute.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/04_compileAndExecute.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/05_getNamespace.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/05_getNamespace.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/05_getNamespace.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/05_getNamespace.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/06_getNamespace.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/06_getNamespace.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/06_getNamespace.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/06_getNamespace.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/07_getNamespace.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/07_getNamespace.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/07_getNamespace.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/07_getNamespace.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/08_getNamespace.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/08_getNamespace.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/08_getNamespace.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/08_getNamespace.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/09_dataflow.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/09_dataflow.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/09_dataflow.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/09_dataflow.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/10_dataflow_with_barrier.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/10_dataflow_with_barrier.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/10_dataflow_with_barrier.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/10_dataflow_with_barrier.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/11_dataflow_with_additional_flow_step.ql b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/11_dataflow_with_additional_flow_step.ql similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/11_dataflow_with_additional_flow_step.ql rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/11_dataflow_with_additional_flow_step.ql diff --git a/ql_demos/java/Apache_Struts_CVE-2018-11776/README.md b/CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/README.md similarity index 100% rename from ql_demos/java/Apache_Struts_CVE-2018-11776/README.md rename to CodeQL_Queries/java/Apache_Struts_CVE-2018-11776/README.md diff --git a/ql_demos/java/qlpack.yml b/CodeQL_Queries/java/qlpack.yml similarity index 100% rename from ql_demos/java/qlpack.yml rename to CodeQL_Queries/java/qlpack.yml diff --git a/ql_demos/java/queries.xml b/CodeQL_Queries/java/queries.xml similarity index 100% rename from ql_demos/java/queries.xml rename to CodeQL_Queries/java/queries.xml diff --git a/ql_demos/javascript/.project b/CodeQL_Queries/javascript/.project similarity index 100% rename from ql_demos/javascript/.project rename to CodeQL_Queries/javascript/.project diff --git a/ql_demos/javascript/.qlpath b/CodeQL_Queries/javascript/.qlpath similarity index 100% rename from ql_demos/javascript/.qlpath rename to CodeQL_Queries/javascript/.qlpath diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/01_HTTP_handlers.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/01_HTTP_handlers.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/01_HTTP_handlers.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/01_HTTP_handlers.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/02_getASendMethodCall.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/02_getASendMethodCall.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/02_getASendMethodCall.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/02_getASendMethodCall.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/03_LikelySendArgument.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/03_LikelySendArgument.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/03_LikelySendArgument.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/03_LikelySendArgument.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/04_LikelyRequestParameter.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/04_LikelyRequestParameter.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/04_LikelyRequestParameter.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/04_LikelyRequestParameter.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/05_DataFlow.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/05_DataFlow.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/05_DataFlow.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/05_DataFlow.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/06_DataFlow_With_Sanitizer.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/06_DataFlow_With_Sanitizer.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/06_DataFlow_With_Sanitizer.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/06_DataFlow_With_Sanitizer.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/README.md b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/README.md similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/README.md rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/README.md diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/01_ReflectedXss.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/01_ReflectedXss.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/01_ReflectedXss.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/01_ReflectedXss.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/02_SwaggerRouteHandler.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/02_SwaggerRouteHandler.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/02_SwaggerRouteHandler.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/02_SwaggerRouteHandler.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/03_ResponseSendArgument.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/03_ResponseSendArgument.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/03_ResponseSendArgument.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/03_ResponseSendArgument.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/04_ResponseSendAccess.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/04_ResponseSendAccess.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/04_ResponseSendAccess.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/04_ResponseSendAccess.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/05_ResponseSendArgumentWithAliasing.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/05_ResponseSendArgumentWithAliasing.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/05_ResponseSendArgumentWithAliasing.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/05_ResponseSendArgumentWithAliasing.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/06_ReflectedXss.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/06_ReflectedXss.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/06_ReflectedXss.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/06_ReflectedXss.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/07_ReflectedXssWithSanitizer.ql b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/07_ReflectedXssWithSanitizer.ql similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/07_ReflectedXssWithSanitizer.ql rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/07_ReflectedXssWithSanitizer.ql diff --git a/ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/README.md b/CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/README.md similarity index 100% rename from ql_demos/javascript/Etherpad_CVE-2018-6835/alternative/README.md rename to CodeQL_Queries/javascript/Etherpad_CVE-2018-6835/alternative/README.md diff --git a/ql_demos/javascript/qlpack.yml b/CodeQL_Queries/javascript/qlpack.yml similarity index 100% rename from ql_demos/javascript/qlpack.yml rename to CodeQL_Queries/javascript/qlpack.yml diff --git a/ql_demos/javascript/queries.xml b/CodeQL_Queries/javascript/queries.xml similarity index 100% rename from ql_demos/javascript/queries.xml rename to CodeQL_Queries/javascript/queries.xml diff --git a/README.md b/README.md index 13df3b7..4ac2e00 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,9 @@ # GitHub Security Lab +## CodeQL Queries + [Security related Queries](CodeQL_Queries) + +## Proof of Concepts +[Check some Exploits and POC for bugs found by the Lab](SecurityExploits/) + Resources related to [GitHub Security Lab](https://securitylab.github.com). diff --git a/ql_demos/cpp/README.md b/ql_demos/cpp/README.md deleted file mode 100644 index 47dd67a..0000000 --- a/ql_demos/cpp/README.md +++ /dev/null @@ -1 +0,0 @@ -[snapshot](https://downloads.lgtm.com/snapshots/cpp/libssh2/libssh2_libssh2_C_C++_38bf7ce.zip)