Skip to content

Commit de7a8c1

Browse files
committed
Model github.com/masterminds/squirrel
1 parent 9b43696 commit de7a8c1

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

go/ql/lib/ext/github.com.mastermind.squirrel.model.yml

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,3 +49,20 @@ extensions:
4949
- ["group:squirrel", "UpdateBuilder", True, "Suffix", "", "", "Argument[0]", "sql-injection", "manual"]
5050
- ["group:squirrel", "UpdateBuilder", True, "Table", "", "", "Argument[0]", "sql-injection", "manual"]
5151
# UpdateBuilder.Where has to be modeled in QL to avoid FPs when a non-string argument is used
52+
- addsTo:
53+
pack: codeql/go-all
54+
extensible: sourceModel
55+
data:
56+
- ["group:squirrel", "QueryRower", True, "QueryRow", "", "", "ReturnValue[0]", "database", "manual"]
57+
- ["group:squirrel", "QueryRowerContext", True, "QueryRowContext", "", "", "ReturnValue[0]", "database", "manual"]
58+
- ["group:squirrel", "Queryer", True, "Query", "", "", "ReturnValue[0]", "database", "manual"]
59+
- ["group:squirrel", "QueryerContext", True, "QueryContext", "", "", "ReturnValue[0]", "database", "manual"]
60+
- ["group:squirrel", "StdSql", True, "Query", "", "", "ReturnValue[0]", "database", "manual"]
61+
- ["group:squirrel", "StdSql", True, "QueryRow", "", "", "ReturnValue", "database", "manual"]
62+
- ["group:squirrel", "StdSqlCtx", True, "QueryContext", "", "", "ReturnValue[0]", "database", "manual"]
63+
- ["group:squirrel", "StdSqlCtx", True, "QueryRowContext", "", "", "ReturnValue", "database", "manual"]
64+
- addsTo:
65+
pack: codeql/go-all
66+
extensible: summaryModel
67+
data:
68+
- ["group:squirrel", "RowScanner", True, "Scan", "", "", "Argument[receiver]", "Argument[0]", "taint", "manual"]

0 commit comments

Comments
 (0)