FilesExpand file tree

codeql-cli/v2.27.2

/

Postgres.model.yml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

16 lines (16 loc) · 1.04 KB

codeql-cli/v2.27.2

/

Postgres.model.yml

Copy path

Top

File metadata and controls

• Code
• Blame

16 lines (16 loc) · 1.04 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

# partial model of the PostgreSQL libpq C API

extensions:

- addsTo:

pack: codeql/cpp-all

extensible: sinkModel

data: # namespace, type, subtypes, name, signature, ext, input, kind, provenance

# The `*Params`/`*Prepare` functions interpret their command/query text as SQL,

# so injection into that text is a sink even though the parameter values are

# passed separately. The `*Prepared` functions take a prepared-statement name

# rather than SQL text and are therefore not modeled here.

- ["", "", False, "PQexec", "", "", "Argument[*1]", "sql-injection", "manual"]

- ["", "", False, "PQexecParams", "", "", "Argument[*1]", "sql-injection", "manual"]

- ["", "", False, "PQprepare", "", "", "Argument[*2]", "sql-injection", "manual"]

- ["", "", False, "PQsendQuery", "", "", "Argument[*1]", "sql-injection", "manual"]

- ["", "", False, "PQsendQueryParams", "", "", "Argument[*1]", "sql-injection", "manual"]

- ["", "", False, "PQsendPrepare", "", "", "Argument[*2]", "sql-injection", "manual"]