circle-ir 3.141.0 → 3.144.3

package/configs/sink-semantics.json

@@ -0,0 +1,53 @@
+{
+  "$description": "Sink-semantics registry — cognium-dev #139 Tier A. Each entry maps a <ClassName>#<methodName> signature to the sink's real behavior class and the list of SinkType labels that must be dropped when that signature is emitted with that label. Consumed by SinkSemanticsPass (canonical #109). Simple-name class match; fully-qualified receiver types are reduced to the tail segment. Missing sink.class (unresolved receiver) falls through — the gate is false-negative-safe.",
+  "sinks": [
+    {
+      "signature": "Jedis#executeCommand",
+      "real_class": "db_protocol",
+      "overrides": ["command_injection", "code_injection"],
+      "note": "Redis wire-protocol serialization, not OS exec"
+    },
+    {
+      "signature": "Connection#executeCommand",
+      "real_class": "db_protocol",
+      "overrides": ["command_injection", "code_injection"],
+      "note": "Jedis abstract Connection base — same shape as Jedis.executeCommand"
+    },
+    {
+      "signature": "JedisCluster#executeCommand",
+      "real_class": "db_protocol",
+      "overrides": ["command_injection", "code_injection"],
+      "note": "Jedis cluster client — same shape as Jedis.executeCommand"
+    },
+    {
+      "signature": "Func1#exec",
+      "real_class": "functional_dispatch",
+      "overrides": ["command_injection", "code_injection"],
+      "note": "RxJava functional dispatch, not OS exec"
+    },
+    {
+      "signature": "Action0#call",
+      "real_class": "functional_dispatch",
+      "overrides": ["command_injection"],
+      "note": "RxJava Action0 dispatch"
+    },
+    {
+      "signature": "Action1#call",
+      "real_class": "functional_dispatch",
+      "overrides": ["command_injection"],
+      "note": "RxJava Action1 dispatch"
+    },
+    {
+      "signature": "Unsafe#defineAnonymousClass",
+      "real_class": "jdk_internal",
+      "overrides": ["code_injection"],
+      "note": "sun.misc.Unsafe JDK-internal reflective bridge — not attacker-controllable input"
+    },
+    {
+      "signature": "MethodHandle#invokeExact",
+      "real_class": "jdk_internal",
+      "overrides": ["code_injection"],
+      "note": "java.lang.invoke.MethodHandle — JDK-internal, not attacker-controllable"
+    }
+  ]
+}

package/dist/analysis/config-loader.d.ts

@@ -3,7 +3,7 @@
  *
  * Loads YAML configs from configs/sources/ and configs/sinks/
  */
-import type { SourceConfig, SinkConfig, TaintConfig, SourcePattern, SinkPattern, SanitizerPattern, HeaderRule } from '../types/config.js';
+import type { SourceConfig, SinkConfig, SinkSemanticsConfig, SinkSemanticsEntry, TaintConfig, SourcePattern, SinkPattern, SanitizerPattern, HeaderRule } from '../types/config.js';
 /**
  * Parse YAML/JSON configuration content.
  * Uses JSON since the config files are actually JSON despite .yaml extension.
@@ -20,10 +20,21 @@ export declare function loadSinkConfigs(configs: SinkConfig[]): {
     sinks: SinkPattern[];
     sanitizers: SanitizerPattern[];
 };
+/**
+ * Load and merge sink-semantics registry entries from one or more
+ * configs. Used by `SinkSemanticsPass` (cognium-dev #139 Tier A) to
+ * drop sinks whose emitted `SinkType` label disagrees with the
+ * registry's real-behavior classification.
+ */
+export declare function loadSinkSemanticsConfigs(configs: SinkSemanticsConfig[]): SinkSemanticsEntry[];
 /**
  * Create a combined taint configuration from raw config contents.
+ *
+ * `sinkSemanticsContents` is optional to preserve backward
+ * compatibility with existing callers; passing an empty array (or
+ * omitting the argument) disables the sink-semantics gate.
  */
-export declare function createTaintConfig(sourceContents: string[], sinkContents: string[]): TaintConfig;
+export declare function createTaintConfig(sourceContents: string[], sinkContents: string[], sinkSemanticsContents?: string[]): TaintConfig;
 /**
  * Embedded default configurations (subset for standalone use).
  * Full configs should be loaded from files when available.
@@ -31,6 +42,17 @@ export declare function createTaintConfig(sourceContents: string[], sinkContents
 export declare const DEFAULT_SOURCES: SourcePattern[];
 export declare const DEFAULT_SINKS: SinkPattern[];
 export declare const DEFAULT_SANITIZERS: SanitizerPattern[];
+/**
+ * Embedded default sink-semantics registry (cognium-dev #139 Tier A).
+ * Mirrors `configs/sink-semantics.json` so the default gate is active
+ * in browser/Node.js callers that never call `createTaintConfig`.
+ *
+ * Each entry maps a `<ClassName>#<methodName>` receiver signature to
+ * the `SinkType` labels that should be dropped when the taint-matcher
+ * emits that signature with a mismatched label. Class match is
+ * simple-name and case-sensitive against `TaintSink.class`.
+ */
+export declare const DEFAULT_SINK_SEMANTICS: SinkSemanticsEntry[];
 /**
  * Get the default taint configuration.
  */

package/dist/analysis/config-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/analysis/config-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,CAEjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAiB1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG;IACtD,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC,CAcA;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,MAAM,EAAE,EACxB,YAAY,EAAE,MAAM,EAAE,GACrB,WAAW,CAQb;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,EA2b1C,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,WAAW,EAskDtC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EA6RhD,CAAC;AAEF;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,WAAW,CAM9C;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,EA8F5C,CAAC"}
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../src/analysis/config-loader.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,CAEjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAiB1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG;IACtD,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC,CAcA;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mBAAmB,EAAE,GAC7B,kBAAkB,EAAE,CAQtB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,MAAM,EAAE,EACxB,YAAY,EAAE,MAAM,EAAE,EACtB,qBAAqB,GAAE,MAAM,EAAO,GACnC,WAAW,CAYb;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,EA2b1C,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,WAAW,EA8kDtC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EA6RhD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,kBAAkB,EAiDtD,CAAC;AAEF;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,WAAW,CAO9C;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,UAAU,EA8F5C,CAAC"}

package/dist/analysis/config-loader.js

@@ -45,15 +45,36 @@ export function loadSinkConfigs(configs) {
     }
     return { sinks, sanitizers };
 }
+/**
+ * Load and merge sink-semantics registry entries from one or more
+ * configs. Used by `SinkSemanticsPass` (cognium-dev #139 Tier A) to
+ * drop sinks whose emitted `SinkType` label disagrees with the
+ * registry's real-behavior classification.
+ */
+export function loadSinkSemanticsConfigs(configs) {
+    const entries = [];
+    for (const config of configs) {
+        if (config.sinks) {
+            entries.push(...config.sinks);
+        }
+    }
+    return entries;
+}
 /**
  * Create a combined taint configuration from raw config contents.
+ *
+ * `sinkSemanticsContents` is optional to preserve backward
+ * compatibility with existing callers; passing an empty array (or
+ * omitting the argument) disables the sink-semantics gate.
  */
-export function createTaintConfig(sourceContents, sinkContents) {
+export function createTaintConfig(sourceContents, sinkContents, sinkSemanticsContents = []) {
     const sourceConfigs = sourceContents.map((c) => parseConfig(c));
     const sinkConfigs = sinkContents.map((c) => parseConfig(c));
+    const sinkSemanticsConfigs = sinkSemanticsContents.map((c) => parseConfig(c));
     const sources = loadSourceConfigs(sourceConfigs);
     const { sinks, sanitizers } = loadSinkConfigs(sinkConfigs);
-    return { sources, sinks, sanitizers };
+    const sinkSemantics = loadSinkSemanticsConfigs(sinkSemanticsConfigs);
+    return { sources, sinks, sanitizers, sinkSemantics };
 }
 /**
  * Embedded default configurations (subset for standalone use).
@@ -776,6 +797,14 @@ export const DEFAULT_SINKS = [
     // reflection remains a downstream concern of body-writing sinks.
     { method: 'setHeader', class: 'HttpServletResponse', type: 'crlf', cwe: 'CWE-113', severity: 'medium', arg_positions: [1] },
     { method: 'addHeader', class: 'HttpServletResponse', type: 'crlf', cwe: 'CWE-113', severity: 'medium', arg_positions: [1] },
+    // Cookie constructor + addCookie — HTTP response splitting via cookie
+    // name/value (CWE-113). Reflects the #189 Sprint 92 V02SetCookie fixture
+    // where `res.addCookie(new Cookie(name, req.getParameter("v")))` allows
+    // CRLF injection into the Set-Cookie header. Both the ctor arg[1] (value)
+    // and the addCookie arg[0] (Cookie handle) are flagged so intermediate-var
+    // and inline-ctor shapes both surface.
+    { method: 'Cookie', class: 'constructor', type: 'crlf', cwe: 'CWE-113', severity: 'medium', arg_positions: [0, 1] },
+    { method: 'addCookie', class: 'HttpServletResponse', type: 'crlf', cwe: 'CWE-113', severity: 'medium', arg_positions: [0] },
     // Note: `sendRedirect` is primarily classified as `ssrf` / open-redirect
     // (CWE-601) further down — see entry near line 1195. CRLF via Location
     // header is a secondary concern; keeping the canonical SSRF entry avoids
@@ -2200,6 +2229,66 @@ export const DEFAULT_SANITIZERS = [
     { method: 'UUID', class: 'uuid', removes: ['sql_injection', 'command_injection', 'path_traversal', 'code_injection'] },
     { method: 'Decimal', class: 'decimal', removes: ['sql_injection', 'command_injection', 'path_traversal', 'code_injection'] },
 ];
+/**
+ * Embedded default sink-semantics registry (cognium-dev #139 Tier A).
+ * Mirrors `configs/sink-semantics.json` so the default gate is active
+ * in browser/Node.js callers that never call `createTaintConfig`.
+ *
+ * Each entry maps a `<ClassName>#<methodName>` receiver signature to
+ * the `SinkType` labels that should be dropped when the taint-matcher
+ * emits that signature with a mismatched label. Class match is
+ * simple-name and case-sensitive against `TaintSink.class`.
+ */
+export const DEFAULT_SINK_SEMANTICS = [
+    {
+        signature: 'Jedis#executeCommand',
+        real_class: 'db_protocol',
+        overrides: ['command_injection', 'code_injection'],
+        note: 'Redis wire-protocol serialization, not OS exec',
+    },
+    {
+        signature: 'Connection#executeCommand',
+        real_class: 'db_protocol',
+        overrides: ['command_injection', 'code_injection'],
+        note: 'Jedis abstract Connection base',
+    },
+    {
+        signature: 'JedisCluster#executeCommand',
+        real_class: 'db_protocol',
+        overrides: ['command_injection', 'code_injection'],
+        note: 'Jedis cluster client',
+    },
+    {
+        signature: 'Func1#exec',
+        real_class: 'functional_dispatch',
+        overrides: ['command_injection', 'code_injection'],
+        note: 'RxJava functional dispatch, not OS exec',
+    },
+    {
+        signature: 'Action0#call',
+        real_class: 'functional_dispatch',
+        overrides: ['command_injection'],
+        note: 'RxJava Action0 dispatch',
+    },
+    {
+        signature: 'Action1#call',
+        real_class: 'functional_dispatch',
+        overrides: ['command_injection'],
+        note: 'RxJava Action1 dispatch',
+    },
+    {
+        signature: 'Unsafe#defineAnonymousClass',
+        real_class: 'jdk_internal',
+        overrides: ['code_injection'],
+        note: 'sun.misc.Unsafe JDK-internal reflective bridge',
+    },
+    {
+        signature: 'MethodHandle#invokeExact',
+        real_class: 'jdk_internal',
+        overrides: ['code_injection'],
+        note: 'java.lang.invoke.MethodHandle — JDK-internal',
+    },
+];
 /**
  * Get the default taint configuration.
  */
@@ -2208,6 +2297,7 @@ export function getDefaultConfig() {
         sources: DEFAULT_SOURCES,
         sinks: DEFAULT_SINKS,
         sanitizers: DEFAULT_SANITIZERS,
+        sinkSemantics: DEFAULT_SINK_SEMANTICS,
     };
 }
 // ============================================================================