circle-ir 3.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (194) hide show
  1. package/LICENSE +15 -0
  2. package/README.md +200 -0
  3. package/configs/sinks/code_injection.yaml +672 -0
  4. package/configs/sinks/command.yaml +917 -0
  5. package/configs/sinks/deserialization.yaml +105 -0
  6. package/configs/sinks/ldap.yaml +136 -0
  7. package/configs/sinks/nodejs.json +629 -0
  8. package/configs/sinks/path.yaml +715 -0
  9. package/configs/sinks/python.json +501 -0
  10. package/configs/sinks/rust.json +339 -0
  11. package/configs/sinks/sql.yaml +233 -0
  12. package/configs/sinks/ssrf.yaml +160 -0
  13. package/configs/sinks/xpath.yaml +121 -0
  14. package/configs/sinks/xss.yaml +727 -0
  15. package/configs/sources/db_sources.yaml +90 -0
  16. package/configs/sources/env_sources.yaml +94 -0
  17. package/configs/sources/express.json +197 -0
  18. package/configs/sources/file_sources.yaml +164 -0
  19. package/configs/sources/http_sources.yaml +379 -0
  20. package/configs/sources/io_sources.yaml +519 -0
  21. package/configs/sources/network_sources.yaml +99 -0
  22. package/configs/sources/python.json +230 -0
  23. package/configs/sources/rust.json +286 -0
  24. package/configs/sources/spring.yaml +70 -0
  25. package/dist/analysis/advisory-db.d.ts +86 -0
  26. package/dist/analysis/advisory-db.js +104 -0
  27. package/dist/analysis/advisory-db.js.map +1 -0
  28. package/dist/analysis/cargo-parser.d.ts +42 -0
  29. package/dist/analysis/cargo-parser.js +102 -0
  30. package/dist/analysis/cargo-parser.js.map +1 -0
  31. package/dist/analysis/config-loader.d.ts +37 -0
  32. package/dist/analysis/config-loader.js +1561 -0
  33. package/dist/analysis/config-loader.js.map +1 -0
  34. package/dist/analysis/constant-propagation/ast-utils.d.ts +25 -0
  35. package/dist/analysis/constant-propagation/ast-utils.js +34 -0
  36. package/dist/analysis/constant-propagation/ast-utils.js.map +1 -0
  37. package/dist/analysis/constant-propagation/evaluator.d.ts +32 -0
  38. package/dist/analysis/constant-propagation/evaluator.js +296 -0
  39. package/dist/analysis/constant-propagation/evaluator.js.map +1 -0
  40. package/dist/analysis/constant-propagation/index.d.ts +62 -0
  41. package/dist/analysis/constant-propagation/index.js +152 -0
  42. package/dist/analysis/constant-propagation/index.js.map +1 -0
  43. package/dist/analysis/constant-propagation/patterns.d.ts +8 -0
  44. package/dist/analysis/constant-propagation/patterns.js +126 -0
  45. package/dist/analysis/constant-propagation/patterns.js.map +1 -0
  46. package/dist/analysis/constant-propagation/propagator.d.ts +180 -0
  47. package/dist/analysis/constant-propagation/propagator.js +1985 -0
  48. package/dist/analysis/constant-propagation/propagator.js.map +1 -0
  49. package/dist/analysis/constant-propagation/types.d.ts +63 -0
  50. package/dist/analysis/constant-propagation/types.js +5 -0
  51. package/dist/analysis/constant-propagation/types.js.map +1 -0
  52. package/dist/analysis/constant-propagation.d.ts +9 -0
  53. package/dist/analysis/constant-propagation.js +18 -0
  54. package/dist/analysis/constant-propagation.js.map +1 -0
  55. package/dist/analysis/dependency-scanner.d.ts +79 -0
  56. package/dist/analysis/dependency-scanner.js +122 -0
  57. package/dist/analysis/dependency-scanner.js.map +1 -0
  58. package/dist/analysis/dfg-verifier.d.ts +116 -0
  59. package/dist/analysis/dfg-verifier.js +399 -0
  60. package/dist/analysis/dfg-verifier.js.map +1 -0
  61. package/dist/analysis/findings.d.ts +11 -0
  62. package/dist/analysis/findings.js +228 -0
  63. package/dist/analysis/findings.js.map +1 -0
  64. package/dist/analysis/index.d.ts +16 -0
  65. package/dist/analysis/index.js +18 -0
  66. package/dist/analysis/index.js.map +1 -0
  67. package/dist/analysis/interprocedural.d.ts +99 -0
  68. package/dist/analysis/interprocedural.js +526 -0
  69. package/dist/analysis/interprocedural.js.map +1 -0
  70. package/dist/analysis/path-finder.d.ts +133 -0
  71. package/dist/analysis/path-finder.js +354 -0
  72. package/dist/analysis/path-finder.js.map +1 -0
  73. package/dist/analysis/rules.d.ts +75 -0
  74. package/dist/analysis/rules.js +332 -0
  75. package/dist/analysis/rules.js.map +1 -0
  76. package/dist/analysis/semver.d.ts +27 -0
  77. package/dist/analysis/semver.js +127 -0
  78. package/dist/analysis/semver.js.map +1 -0
  79. package/dist/analysis/taint-matcher.d.ts +15 -0
  80. package/dist/analysis/taint-matcher.js +634 -0
  81. package/dist/analysis/taint-matcher.js.map +1 -0
  82. package/dist/analysis/taint-propagation.d.ts +67 -0
  83. package/dist/analysis/taint-propagation.js +298 -0
  84. package/dist/analysis/taint-propagation.js.map +1 -0
  85. package/dist/analysis/unresolved.d.ts +14 -0
  86. package/dist/analysis/unresolved.js +202 -0
  87. package/dist/analysis/unresolved.js.map +1 -0
  88. package/dist/analyzer.d.ts +43 -0
  89. package/dist/analyzer.js +1010 -0
  90. package/dist/analyzer.js.map +1 -0
  91. package/dist/browser/circle-ir.js +16576 -0
  92. package/dist/browser.d.ts +38 -0
  93. package/dist/browser.js +38 -0
  94. package/dist/browser.js.map +1 -0
  95. package/dist/core/circle-ir-core.cjs +13626 -0
  96. package/dist/core/circle-ir-core.d.ts +59 -0
  97. package/dist/core/circle-ir-core.js +13591 -0
  98. package/dist/core/extractors/calls.d.ts +13 -0
  99. package/dist/core/extractors/calls.js +1429 -0
  100. package/dist/core/extractors/calls.js.map +1 -0
  101. package/dist/core/extractors/cfg.d.ts +9 -0
  102. package/dist/core/extractors/cfg.js +519 -0
  103. package/dist/core/extractors/cfg.js.map +1 -0
  104. package/dist/core/extractors/dfg.d.ts +12 -0
  105. package/dist/core/extractors/dfg.js +1081 -0
  106. package/dist/core/extractors/dfg.js.map +1 -0
  107. package/dist/core/extractors/exports.d.ts +14 -0
  108. package/dist/core/extractors/exports.js +80 -0
  109. package/dist/core/extractors/exports.js.map +1 -0
  110. package/dist/core/extractors/imports.d.ts +9 -0
  111. package/dist/core/extractors/imports.js +739 -0
  112. package/dist/core/extractors/imports.js.map +1 -0
  113. package/dist/core/extractors/index.d.ts +10 -0
  114. package/dist/core/extractors/index.js +11 -0
  115. package/dist/core/extractors/index.js.map +1 -0
  116. package/dist/core/extractors/meta.d.ts +10 -0
  117. package/dist/core/extractors/meta.js +109 -0
  118. package/dist/core/extractors/meta.js.map +1 -0
  119. package/dist/core/extractors/types.d.ts +10 -0
  120. package/dist/core/extractors/types.js +1479 -0
  121. package/dist/core/extractors/types.js.map +1 -0
  122. package/dist/core/index.d.ts +5 -0
  123. package/dist/core/index.js +8 -0
  124. package/dist/core/index.js.map +1 -0
  125. package/dist/core/parser.d.ts +84 -0
  126. package/dist/core/parser.js +250 -0
  127. package/dist/core/parser.js.map +1 -0
  128. package/dist/core-lib.d.ts +59 -0
  129. package/dist/core-lib.js +62 -0
  130. package/dist/core-lib.js.map +1 -0
  131. package/dist/index.d.ts +15 -0
  132. package/dist/index.js +20 -0
  133. package/dist/index.js.map +1 -0
  134. package/dist/languages/index.d.ts +11 -0
  135. package/dist/languages/index.js +14 -0
  136. package/dist/languages/index.js.map +1 -0
  137. package/dist/languages/plugins/base.d.ts +44 -0
  138. package/dist/languages/plugins/base.js +82 -0
  139. package/dist/languages/plugins/base.js.map +1 -0
  140. package/dist/languages/plugins/index.d.ts +14 -0
  141. package/dist/languages/plugins/index.js +25 -0
  142. package/dist/languages/plugins/index.js.map +1 -0
  143. package/dist/languages/plugins/java.d.ts +49 -0
  144. package/dist/languages/plugins/java.js +402 -0
  145. package/dist/languages/plugins/java.js.map +1 -0
  146. package/dist/languages/plugins/javascript.d.ts +48 -0
  147. package/dist/languages/plugins/javascript.js +445 -0
  148. package/dist/languages/plugins/javascript.js.map +1 -0
  149. package/dist/languages/plugins/python.d.ts +47 -0
  150. package/dist/languages/plugins/python.js +480 -0
  151. package/dist/languages/plugins/python.js.map +1 -0
  152. package/dist/languages/plugins/rust.d.ts +47 -0
  153. package/dist/languages/plugins/rust.js +405 -0
  154. package/dist/languages/plugins/rust.js.map +1 -0
  155. package/dist/languages/registry.d.ts +30 -0
  156. package/dist/languages/registry.js +80 -0
  157. package/dist/languages/registry.js.map +1 -0
  158. package/dist/languages/types.d.ts +184 -0
  159. package/dist/languages/types.js +8 -0
  160. package/dist/languages/types.js.map +1 -0
  161. package/dist/resolution/cross-file.d.ts +146 -0
  162. package/dist/resolution/cross-file.js +439 -0
  163. package/dist/resolution/cross-file.js.map +1 -0
  164. package/dist/resolution/index.d.ts +12 -0
  165. package/dist/resolution/index.js +10 -0
  166. package/dist/resolution/index.js.map +1 -0
  167. package/dist/resolution/symbol-table.d.ts +136 -0
  168. package/dist/resolution/symbol-table.js +336 -0
  169. package/dist/resolution/symbol-table.js.map +1 -0
  170. package/dist/resolution/type-hierarchy.d.ts +124 -0
  171. package/dist/resolution/type-hierarchy.js +515 -0
  172. package/dist/resolution/type-hierarchy.js.map +1 -0
  173. package/dist/types/config.d.ts +45 -0
  174. package/dist/types/config.js +5 -0
  175. package/dist/types/config.js.map +1 -0
  176. package/dist/types/index.d.ts +392 -0
  177. package/dist/types/index.js +7 -0
  178. package/dist/types/index.js.map +1 -0
  179. package/dist/utils/logger.d.ts +85 -0
  180. package/dist/utils/logger.js +198 -0
  181. package/dist/utils/logger.js.map +1 -0
  182. package/dist/wasm/tree-sitter-java.wasm +0 -0
  183. package/dist/wasm/tree-sitter-javascript.wasm +0 -0
  184. package/dist/wasm/tree-sitter-python.wasm +0 -0
  185. package/dist/wasm/tree-sitter-rust.wasm +0 -0
  186. package/dist/wasm/web-tree-sitter.wasm +0 -0
  187. package/docs/SPEC.md +1021 -0
  188. package/examples/browser-example.html +610 -0
  189. package/examples/node-example.ts +215 -0
  190. package/package.json +107 -0
  191. package/wasm/tree-sitter-java.wasm +0 -0
  192. package/wasm/tree-sitter-javascript.wasm +0 -0
  193. package/wasm/tree-sitter-python.wasm +0 -0
  194. package/wasm/tree-sitter-rust.wasm +0 -0
package/configs/sinks/deserialization.yaml ADDED
@@ -0,0 +1,105 @@
1
+ {
2
+ "sinks": [
3
+ {
4
+ "method": "readObject",
5
+ "type": "insecure_deserialization",
6
+ "cwe": "CWE-502",
7
+ "severity": "critical",
8
+ "arg_positions": [],
9
+ "note": "Java deserialization RCE - can trigger gadget chains"
10
+ },
11
+ {
12
+ "method": "readUnshared",
13
+ "type": "insecure_deserialization",
14
+ "cwe": "CWE-502",
15
+ "severity": "critical",
16
+ "arg_positions": [],
17
+ "note": "Java deserialization RCE - unshared objects"
18
+ },
19
+ {
20
+ "method": "ObjectInputStream",
21
+ "type": "insecure_deserialization",
22
+ "cwe": "CWE-502",
23
+ "severity": "critical",
24
+ "arg_positions": [
25
+ 0
26
+ ],
27
+ "note": "Creating ObjectInputStream with untrusted data"
28
+ },
29
+ {
30
+ "method": "readObject",
31
+ "class": "XMLDecoder",
32
+ "type": "insecure_deserialization",
33
+ "cwe": "CWE-502",
34
+ "severity": "critical",
35
+ "arg_positions": []
36
+ },
37
+ {
38
+ "method": "XMLDecoder",
39
+ "type": "insecure_deserialization",
40
+ "cwe": "CWE-502",
41
+ "severity": "critical",
42
+ "arg_positions": [
43
+ 0
44
+ ]
45
+ },
46
+ {
47
+ "method": "fromXML",
48
+ "class": "XStream",
49
+ "type": "insecure_deserialization",
50
+ "cwe": "CWE-502",
51
+ "severity": "critical",
52
+ "arg_positions": [
53
+ 0
54
+ ]
55
+ },
56
+ {
57
+ "method": "unmarshal",
58
+ "class": "XStream",
59
+ "type": "insecure_deserialization",
60
+ "cwe": "CWE-502",
61
+ "severity": "critical",
62
+ "arg_positions": [
63
+ 0
64
+ ]
65
+ },
66
+ {
67
+ "method": "load",
68
+ "class": "Yaml",
69
+ "type": "insecure_deserialization",
70
+ "cwe": "CWE-502",
71
+ "severity": "critical",
72
+ "arg_positions": [
73
+ 0
74
+ ],
75
+ "note": "SnakeYAML unsafe deserialization"
76
+ },
77
+ {
78
+ "method": "loadAll",
79
+ "class": "Yaml",
80
+ "type": "insecure_deserialization",
81
+ "cwe": "CWE-502",
82
+ "severity": "critical",
83
+ "arg_positions": [
84
+ 0
85
+ ]
86
+ }
87
+ ],
88
+ "sanitizers": [
89
+ {
90
+ "method": "resolveClass",
91
+ "removes": [
92
+ "insecure_deserialization"
93
+ ],
94
+ "note": "Custom ObjectInputStream with class whitelist"
95
+ },
96
+ {
97
+ "method": "readValue",
98
+ "class": "ObjectMapper",
99
+ "removes": [
100
+ "insecure_deserialization"
101
+ ],
102
+ "note": "JSON deserialization (safe if default typing disabled)"
103
+ }
104
+ ]
105
+ }
package/configs/sinks/ldap.yaml ADDED
@@ -0,0 +1,136 @@
1
+ {
2
+ "sinks": [
3
+ {
4
+ "method": "search",
5
+ "class": "DirContext",
6
+ "type": "ldap_injection",
7
+ "cwe": "CWE-90",
8
+ "severity": "critical",
9
+ "arg_positions": [
10
+ 0,
11
+ 1
12
+ ],
13
+ "note": "LDAP filter injection if user input in filter"
14
+ },
15
+ {
16
+ "method": "search",
17
+ "class": "InitialDirContext",
18
+ "type": "ldap_injection",
19
+ "cwe": "CWE-90",
20
+ "severity": "critical",
21
+ "arg_positions": [
22
+ 0,
23
+ 1
24
+ ]
25
+ },
26
+ {
27
+ "method": "search",
28
+ "class": "LdapContext",
29
+ "type": "ldap_injection",
30
+ "cwe": "CWE-90",
31
+ "severity": "critical",
32
+ "arg_positions": [
33
+ 0,
34
+ 1
35
+ ]
36
+ },
37
+ {
38
+ "method": "search",
39
+ "class": "InitialContext",
40
+ "type": "ldap_injection",
41
+ "cwe": "CWE-90",
42
+ "severity": "critical",
43
+ "arg_positions": [
44
+ 0,
45
+ 1
46
+ ]
47
+ },
48
+ {
49
+ "method": "lookup",
50
+ "class": "DirContext",
51
+ "type": "ldap_injection",
52
+ "cwe": "CWE-90",
53
+ "severity": "high",
54
+ "arg_positions": [
55
+ 0
56
+ ]
57
+ },
58
+ {
59
+ "method": "lookup",
60
+ "class": "InitialDirContext",
61
+ "type": "ldap_injection",
62
+ "cwe": "CWE-90",
63
+ "severity": "high",
64
+ "arg_positions": [
65
+ 0
66
+ ]
67
+ },
68
+ {
69
+ "method": "lookup",
70
+ "class": "InitialContext",
71
+ "type": "ldap_injection",
72
+ "cwe": "CWE-90",
73
+ "severity": "high",
74
+ "arg_positions": [
75
+ 0
76
+ ]
77
+ },
78
+ {
79
+ "method": "search",
80
+ "class": "LdapTemplate",
81
+ "type": "ldap_injection",
82
+ "cwe": "CWE-90",
83
+ "severity": "critical",
84
+ "arg_positions": [
85
+ 0,
86
+ 1
87
+ ]
88
+ },
89
+ {
90
+ "method": "lookup",
91
+ "class": "LdapTemplate",
92
+ "type": "ldap_injection",
93
+ "cwe": "CWE-90",
94
+ "severity": "high",
95
+ "arg_positions": [
96
+ 0
97
+ ]
98
+ },
99
+ {
100
+ "method": "find",
101
+ "class": "LdapTemplate",
102
+ "type": "ldap_injection",
103
+ "cwe": "CWE-90",
104
+ "severity": "critical",
105
+ "arg_positions": [
106
+ 0
107
+ ]
108
+ },
109
+ {
110
+ "method": "findOne",
111
+ "class": "LdapTemplate",
112
+ "type": "ldap_injection",
113
+ "cwe": "CWE-90",
114
+ "severity": "critical",
115
+ "arg_positions": [
116
+ 0
117
+ ]
118
+ }
119
+ ],
120
+ "sanitizers": [
121
+ {
122
+ "method": "encodeForLDAP",
123
+ "class": "Encoder",
124
+ "removes": [
125
+ "ldap_injection"
126
+ ]
127
+ },
128
+ {
129
+ "method": "escapeLDAPSearchFilter",
130
+ "removes": [
131
+ "ldap_injection"
132
+ ],
133
+ "note": "Apache Commons escape method"
134
+ }
135
+ ]
136
+ }