Skip to content

Commit 983752a

Browse files
GeekMasherGeekMasher
committed
feat(py): Add generated and manual models
1 parent e606fe3 commit 983752a

9 files changed

+1331
-0
lines changed

‎python/ext/generated/flask.model.yml

Lines changed: 166 additions & 0 deletions
Large diffs are not rendered by default.

‎python/ext/generated/ghastoolkit.model.yml

Lines changed: 182 additions & 0 deletions
Large diffs are not rendered by default.

‎python/ext/generated/itsdangerous.model.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/python-all
4+
extensible: summaryModel
5+
data:
6+
- ["itsdangerous", "Member[encoding].Member[base64_decode]", "Argument[0,string:]", "ReturnValue", "taint"]
7+
- ["itsdangerous", "Member[encoding].Member[base64_encode]", "Argument[0,string:]", "ReturnValue", "taint"]
8+
- ["itsdangerous", "Member[encoding].Member[want_bytes]", "Argument[0,s:]", "ReturnValue", "taint"]
9+
- ["itsdangerous", "Member[signer].Member[Signer].Instance.Member[derive_key]", "Argument[1,secret_key:]", "ReturnValue", "taint"]
10+
- ["itsdangerous", "Member[signer].Member[Signer].Instance.Member[derive_key]", "Argument[self]", "ReturnValue", "taint"]
11+
- ["itsdangerous", "Member[signer].Member[Signer].Instance.Member[sign]", "Argument[1,value:]", "ReturnValue", "taint"]
12+
- ["itsdangerous", "Member[signer].Member[Signer].Instance.Member[sign]", "Argument[self]", "ReturnValue", "taint"]
13+
- ["itsdangerous", "Member[signer].Member[Signer].Instance.Member[unsign]", "Argument[1,signed_value:]", "ReturnValue", "taint"]
14+
- ["itsdangerous", "Member[timed].Member[TimestampSigner].Instance.Member[sign]", "Argument[1,value:]", "ReturnValue", "taint"]
15+
- ["itsdangerous", "Member[timed].Member[TimestampSigner].Instance.Member[sign]", "Argument[self]", "ReturnValue", "taint"]
16+
- ["itsdangerous", "Member[timed].Member[TimestampSigner].Instance.Member[unsign]", "Argument[1,signed_value:]", "ReturnValue", "taint"]

‎python/ext/generated/openai.model.yml

Lines changed: 428 additions & 0 deletions
Large diffs are not rendered by default.

‎python/ext/generated/pymysql.model.yml

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/python-all
4+
extensible: sinkModel
5+
data:
6+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[connect]", "Argument[1,sock:]", "path-injection"]
7+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[connect]", "Argument[1,sock:]", "sql-injection"]
8+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[executemany]", "Argument[1,query:]", "sql-injection"]
9+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[executemany]", "Argument[2,args:]", "sql-injection"]
10+
- addsTo:
11+
pack: codeql/python-all
12+
extensible: summaryModel
13+
data:
14+
- ["pymysql", "Member[Binary]", "Argument[0,x:]", "ReturnValue", "taint"]
15+
- ["pymysql", "Member[_auth].Member[caching_sha2_password_auth]", "Argument[1,pkt:]", "Argument[0,conn:]", "taint"]
16+
- ["pymysql", "Member[_auth].Member[sha256_password_auth]", "Argument[1,pkt:]", "Argument[0,conn:]", "taint"]
17+
- ["pymysql", "Member[charset].Member[Charsets].Instance.Member[by_id]", "Argument[self]", "ReturnValue", "taint"]
18+
- ["pymysql", "Member[charset].Member[Charsets].Instance.Member[by_name]", "Argument[self]", "ReturnValue", "taint"]
19+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[affected_rows]", "Argument[self]", "ReturnValue", "taint"]
20+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[character_set_name]", "Argument[self]", "ReturnValue", "taint"]
21+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[cursor]", "Argument[self]", "ReturnValue", "taint"]
22+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[escape]", "Argument[1,obj:]", "ReturnValue", "taint"]
23+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[escape_string]", "Argument[1,s:]", "ReturnValue", "taint"]
24+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[get_host_info]", "Argument[self]", "ReturnValue", "taint"]
25+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[get_proto_info]", "Argument[self]", "ReturnValue", "taint"]
26+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[get_server_info]", "Argument[self]", "ReturnValue", "taint"]
27+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[insert_id]", "Argument[self]", "ReturnValue", "taint"]
28+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[literal]", "Argument[1,obj:]", "ReturnValue", "taint"]
29+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[next_result]", "Argument[self]", "ReturnValue", "taint"]
30+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[query]", "Argument[self]", "ReturnValue", "taint"]
31+
- ["pymysql", "Member[connections].Member[Connection].Instance.Member[thread_id]", "Argument[self]", "ReturnValue", "taint"]
32+
- ["pymysql", "Member[converters].Member[convert_date]", "Argument[0,obj:]", "ReturnValue", "taint"]
33+
- ["pymysql", "Member[converters].Member[convert_datetime]", "Argument[0,obj:]", "ReturnValue", "taint"]
34+
- ["pymysql", "Member[converters].Member[convert_time]", "Argument[0,obj:]", "ReturnValue", "taint"]
35+
- ["pymysql", "Member[converters].Member[convert_timedelta]", "Argument[0,obj:]", "ReturnValue", "taint"]
36+
- ["pymysql", "Member[converters].Member[escape_date]", "Argument[0,obj:]", "ReturnValue", "taint"]
37+
- ["pymysql", "Member[converters].Member[escape_datetime]", "Argument[0,obj:]", "ReturnValue", "taint"]
38+
- ["pymysql", "Member[converters].Member[escape_int]", "Argument[0,value:]", "ReturnValue", "taint"]
39+
- ["pymysql", "Member[converters].Member[escape_set]", "Argument[1,charset:]", "ReturnValue", "taint"]
40+
- ["pymysql", "Member[converters].Member[escape_set]", "Argument[2,mapping:]", "ReturnValue", "taint"]
41+
- ["pymysql", "Member[converters].Member[escape_time]", "Argument[0,obj:]", "ReturnValue", "taint"]
42+
- ["pymysql", "Member[converters].Member[escape_timedelta]", "Argument[0,obj:]", "ReturnValue", "taint"]
43+
- ["pymysql", "Member[converters].Member[through]", "Argument[0,x:]", "ReturnValue", "taint"]
44+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[callproc]", "Argument[2,args:]", "ReturnValue", "taint"]
45+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[execute]", "Argument[self]", "ReturnValue", "taint"]
46+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[executemany]", "Argument[self]", "ReturnValue", "taint"]
47+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[fetchall]", "Argument[self]", "ReturnValue", "taint"]
48+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[fetchmany]", "Argument[self]", "ReturnValue", "taint"]
49+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[fetchone]", "Argument[self]", "ReturnValue", "taint"]
50+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[mogrify]", "Argument[1,query:]", "ReturnValue", "taint"]
51+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[mogrify]", "Argument[2,args:]", "ReturnValue", "taint"]
52+
- ["pymysql", "Member[cursors].Member[Cursor].Instance.Member[mogrify]", "Argument[self]", "ReturnValue", "taint"]
53+
- ["pymysql", "Member[cursors].Member[SSCursor].Instance.Member[fetchall]", "Argument[self]", "ReturnValue", "taint"]
54+
- ["pymysql", "Member[cursors].Member[SSCursor].Instance.Member[fetchall_unbuffered]", "Argument[self]", "ReturnValue", "taint"]
55+
- ["pymysql", "Member[optionfile].Member[Parser].Instance.Member[get]", "Argument[1,section:]", "ReturnValue", "taint"]
56+
- ["pymysql", "Member[optionfile].Member[Parser].Instance.Member[optionxform]", "Argument[1,key:]", "ReturnValue", "taint"]
57+
- ["pymysql", "Member[protocol].Member[FieldDescriptorPacket].Instance.Member[description]", "Argument[self]", "ReturnValue", "taint"]
58+
- ["pymysql", "Member[protocol].Member[FieldDescriptorPacket].Instance.Member[get_column_length]", "Argument[self]", "ReturnValue", "taint"]
59+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[get_all_data]", "Argument[self]", "ReturnValue", "taint"]
60+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[get_bytes]", "Argument[self]", "ReturnValue", "taint"]
61+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[read]", "Argument[self]", "ReturnValue", "taint"]
62+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[read_all]", "Argument[self]", "ReturnValue", "taint"]
63+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[read_length_coded_string]", "Argument[self]", "ReturnValue", "taint"]
64+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[read_length_encoded_integer]", "Argument[self]", "ReturnValue", "taint"]
65+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[read_string]", "Argument[self]", "ReturnValue", "taint"]
66+
- ["pymysql", "Member[protocol].Member[MysqlPacket].Instance.Member[read_uint8]", "Argument[self]", "ReturnValue", "taint"]

0 commit comments

Comments
 (0)