postquant 0.4.1 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -0
- package/dist/commands/scan.d.ts.map +1 -1
- package/dist/commands/scan.js +25 -3
- package/dist/commands/scan.js.map +1 -1
- package/dist/index.js +2 -2
- package/dist/index.js.map +1 -1
- package/dist/scanner/code/discovery.d.ts.map +1 -1
- package/dist/scanner/code/discovery.js +7 -0
- package/dist/scanner/code/discovery.js.map +1 -1
- package/dist/scanner/code/matcher.js +14 -4
- package/dist/scanner/code/matcher.js.map +1 -1
- package/dist/scanner/code/patterns/c.d.ts +3 -0
- package/dist/scanner/code/patterns/c.d.ts.map +1 -0
- package/dist/scanner/code/patterns/c.js +323 -0
- package/dist/scanner/code/patterns/c.js.map +1 -0
- package/dist/scanner/code/patterns/index.d.ts +3 -1
- package/dist/scanner/code/patterns/index.d.ts.map +1 -1
- package/dist/scanner/code/patterns/index.js +5 -1
- package/dist/scanner/code/patterns/index.js.map +1 -1
- package/dist/scanner/code/patterns/rust.d.ts +3 -0
- package/dist/scanner/code/patterns/rust.d.ts.map +1 -0
- package/dist/scanner/code/patterns/rust.js +212 -0
- package/dist/scanner/code/patterns/rust.js.map +1 -0
- package/dist/scanner/code/risk-assessor.d.ts.map +1 -1
- package/dist/scanner/code/risk-assessor.js +7 -0
- package/dist/scanner/code/risk-assessor.js.map +1 -1
- package/dist/scanner/openssl.d.ts.map +1 -1
- package/dist/scanner/openssl.js +4 -0
- package/dist/scanner/openssl.js.map +1 -1
- package/dist/scanner/tls.d.ts +2 -0
- package/dist/scanner/tls.d.ts.map +1 -1
- package/dist/scanner/tls.js +54 -30
- package/dist/scanner/tls.js.map +1 -1
- package/dist/types/index.d.ts +1 -1
- package/dist/types/index.d.ts.map +1 -1
- package/dist/utils/validate.d.ts +10 -0
- package/dist/utils/validate.d.ts.map +1 -0
- package/dist/utils/validate.js +40 -0
- package/dist/utils/validate.js.map +1 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -47,6 +47,8 @@ We scanned popular open-source frameworks with PostQuant v0.3.0:
|
|
|
47
47
|
|
|
48
48
|
> Scanned with PostQuant v0.3.0 on March 3, 2026. Run `npx postquant analyze <path>` to scan your own projects.
|
|
49
49
|
|
|
50
|
+
> **Note:** Detection uses pattern matching, not AST analysis. Results may miss obfuscated or indirect crypto usage.
|
|
51
|
+
|
|
50
52
|
## Package Scan Results
|
|
51
53
|
|
|
52
54
|
We scanned popular npm and PyPI packages. Context-aware risk assessment separates real threats from protocol compliance:
|
|
@@ -296,6 +298,19 @@ npm run dev -- analyze ./src # Code scan from source
|
|
|
296
298
|
|
|
297
299
|
See [docs/ROADMAP.md](docs/ROADMAP.md) for details.
|
|
298
300
|
|
|
301
|
+
## Limitations
|
|
302
|
+
|
|
303
|
+
PostQuant's code scanner uses regex-based pattern matching. This is fast and works well for common crypto usage, but has known blind spots:
|
|
304
|
+
|
|
305
|
+
- **No AST parsing** — Obfuscated, aliased, or dynamically constructed crypto calls may not be detected.
|
|
306
|
+
- **No cross-function data flow** — If a key size is defined in one function and used in another, the scanner won't correlate them.
|
|
307
|
+
- **No runtime analysis** — Crypto operations triggered by configuration files, environment variables, or runtime logic are not visible.
|
|
308
|
+
- **Key size extraction is best-effort** — Some patterns detect the algorithm but not the key size, especially for indirect parameter passing.
|
|
309
|
+
|
|
310
|
+
Context-aware risk assessment (v0.3.0+) mitigates some false positives but cannot eliminate them entirely. When in doubt, PostQuant errs on the side of flagging (false positives over false negatives).
|
|
311
|
+
|
|
312
|
+
For the TLS scanner, detection accuracy depends on the server's TLS configuration and the local OpenSSL version. Hybrid PQC detection requires OpenSSL 3.5+.
|
|
313
|
+
|
|
299
314
|
## Contributing
|
|
300
315
|
|
|
301
316
|
See [CONTRIBUTING.md](CONTRIBUTING.md).
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAgB,WAAW,EAAa,MAAM,mBAAmB,CAAC;AA4C9E,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CAkEjB"}
|
package/dist/commands/scan.js
CHANGED
|
@@ -5,19 +5,35 @@ import { classify } from '../scanner/classifier.js';
|
|
|
5
5
|
import { grade, shouldFailForGrade } from '../scanner/grader.js';
|
|
6
6
|
import { formatTerminal } from '../output/terminal.js';
|
|
7
7
|
import { formatJson } from '../output/json.js';
|
|
8
|
+
import { validateHostname, validatePort, validateFilePath } from '../utils/validate.js';
|
|
8
9
|
function parseHost(input) {
|
|
9
10
|
const lastColon = input.lastIndexOf(':');
|
|
10
11
|
if (lastColon === -1) {
|
|
12
|
+
if (!validateHostname(input))
|
|
13
|
+
return null;
|
|
11
14
|
return { host: input, port: 443 };
|
|
12
15
|
}
|
|
13
16
|
const portStr = input.slice(lastColon + 1);
|
|
14
17
|
const port = parseInt(portStr, 10);
|
|
15
|
-
|
|
18
|
+
// If what follows the last colon doesn't look like a port number at all,
|
|
19
|
+
// treat the whole input as a hostname (e.g. IPv6 without brackets)
|
|
20
|
+
if (isNaN(port) || portStr.length === 0) {
|
|
21
|
+
if (!validateHostname(input))
|
|
22
|
+
return null;
|
|
16
23
|
return { host: input, port: 443 };
|
|
17
24
|
}
|
|
18
|
-
|
|
25
|
+
// Port was parsed as a number — validate it strictly
|
|
26
|
+
if (!validatePort(port))
|
|
27
|
+
return null;
|
|
28
|
+
const host = input.slice(0, lastColon);
|
|
29
|
+
if (!validateHostname(host))
|
|
30
|
+
return null;
|
|
31
|
+
return { host, port };
|
|
19
32
|
}
|
|
20
33
|
function readHostsFile(filePath) {
|
|
34
|
+
if (!validateFilePath(filePath)) {
|
|
35
|
+
throw new Error(`Invalid file path: contains prohibited characters`);
|
|
36
|
+
}
|
|
21
37
|
const content = readFileSync(filePath, 'utf-8');
|
|
22
38
|
return content
|
|
23
39
|
.split('\n')
|
|
@@ -43,7 +59,13 @@ export async function scanCommand(hosts, options) {
|
|
|
43
59
|
const results = [];
|
|
44
60
|
let hadErrors = false;
|
|
45
61
|
for (const input of allHostInputs) {
|
|
46
|
-
const
|
|
62
|
+
const parsed = parseHost(input);
|
|
63
|
+
if (!parsed) {
|
|
64
|
+
hadErrors = true;
|
|
65
|
+
console.error(chalk.red(`\nInvalid host: ${input} — contains prohibited characters or invalid port`));
|
|
66
|
+
continue;
|
|
67
|
+
}
|
|
68
|
+
const { host, port } = parsed;
|
|
47
69
|
try {
|
|
48
70
|
const scanResult = await scanHost(host, port, options.timeout);
|
|
49
71
|
const classified = classify(scanResult);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAQxF,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAEnC,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,qDAAqD;IACrD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAe,EACf,OAAoB;IAEpB,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9C,aAAa,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CACjE,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAEhC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,mBAAmB,KAAK,mDAAmD,CAAC,CACvF,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,SAAS;QAAE,OAAO,CAAC,CAAC;IAExB,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,UAAU,IAAI,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,WAAW,GAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAEjE,SAAS,aAAa,CAAC,OAAuB;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,GAAG,GAAG,KAAK;YAAE,KAAK,GAAG,GAAG,CAAC;IAC/B,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -4,12 +4,12 @@ import { scanCommand } from './commands/scan.js';
|
|
|
4
4
|
import { analyzeCommand } from './commands/analyze.js';
|
|
5
5
|
const VALID_GRADES = ['A+', 'A', 'B', 'C', 'D', 'F'];
|
|
6
6
|
const VALID_ANALYZE_FORMATS = ['terminal', 'json', 'sarif', 'cbom'];
|
|
7
|
-
const VALID_LANGUAGES = ['python', 'javascript', 'go', 'java'];
|
|
7
|
+
const VALID_LANGUAGES = ['python', 'javascript', 'go', 'java', 'c', 'rust'];
|
|
8
8
|
const program = new Command();
|
|
9
9
|
program
|
|
10
10
|
.name('postquant')
|
|
11
11
|
.description('Scan TLS endpoints and source code for quantum-vulnerable cryptography')
|
|
12
|
-
.version('0.
|
|
12
|
+
.version('0.5.0');
|
|
13
13
|
program
|
|
14
14
|
.command('scan')
|
|
15
15
|
.description('Scan one or more TLS endpoints for quantum readiness')
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,MAAM,YAAY,GAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAClE,MAAM,qBAAqB,GAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3F,MAAM,eAAe,GAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,MAAM,YAAY,GAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAClE,MAAM,qBAAqB,GAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3F,MAAM,eAAe,GAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAExF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,wEAAwE,CAAC;KACrF,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,sDAAsD,CAAC;KACnE,QAAQ,CAAC,YAAY,EAAE,yCAAyC,CAAC;KACjE,MAAM,CAAC,uBAAuB,EAAE,gCAAgC,EAAE,UAAU,CAAC;KAC7E,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC;KAC9D,MAAM,CAAC,gBAAgB,EAAE,oCAAoC,EAAE,OAAO,CAAC;KACvE,MAAM,CAAC,WAAW,EAAE,gCAAgC,EAAE,KAAK,CAAC;KAC5D,MAAM,CACL,sBAAsB,EACtB,sCAAsC,EACtC,GAAG,CACJ;KACA,MAAM,CAAC,KAAK,EAAE,KAAe,EAAE,IAAI,EAAE,EAAE;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAsB,CAAC;IAC3C,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,6BAA6B,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAsB,CAAC;IAC9C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CACX,uBAAuB,SAAS,iBAAiB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS;QACT,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IAEH,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,sDAAsD,CAAC;KACnE,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;KAC/C,MAAM,CAAC,uBAAuB,EAAE,6CAA6C,EAAE,UAAU,CAAC;KAC1F,MAAM,CAAC,2BAA2B,EAAE,mDAAmD,CAAC;KACxF,MAAM,CAAC,sBAAsB,EAAE,sCAAsC,EAAE,GAAG,CAAC;KAC3E,MAAM,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;KAC5D,MAAM,CAAC,sBAAsB,EAAE,2BAA2B,EAAE,kBAAkB,CAAC;KAC/E,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,EAAE,OAAO,CAAC;KAC/D,MAAM,CAAC,WAAW,EAAE,uCAAuC,EAAE,KAAK,CAAC;KACnE,MAAM,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;KAC1D,MAAM,CAAC,YAAY,EAAE,wDAAwD,CAAC;KAC9E,MAAM,CAAC,cAAc,EAAE,qDAAqD,CAAC;KAC7E,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,IAAI,EAAE,EAAE;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAA6B,CAAC;IAClD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CACX,mBAAmB,MAAM,iBAAiB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAoB,CAAC,EAAE,CAAC;QAC1E,OAAO,CAAC,KAAK,CACX,qBAAqB,IAAI,CAAC,QAAQ,iBAAiB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAsB,CAAC;IAC9C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CACX,uBAAuB,SAAS,iBAAiB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE;QAC5D,MAAM;QACN,QAAQ,EAAE,IAAI,CAAC,QAAgC;QAC/C,SAAS;QACT,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,CAAC,IAAI,CAAC,SAAS;QAC5B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO;KACzB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/scanner/code/discovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/scanner/code/discovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA8CrE,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,cAAc,EAAE,CAAC,CAoC3B"}
|
|
@@ -15,6 +15,13 @@ const EXTENSION_MAP = {
|
|
|
15
15
|
'.tsx': 'javascript',
|
|
16
16
|
'.go': 'go',
|
|
17
17
|
'.java': 'java',
|
|
18
|
+
'.c': 'c',
|
|
19
|
+
'.h': 'c',
|
|
20
|
+
'.cpp': 'c',
|
|
21
|
+
'.hpp': 'c',
|
|
22
|
+
'.cc': 'c',
|
|
23
|
+
'.cxx': 'c',
|
|
24
|
+
'.rs': 'rust',
|
|
18
25
|
};
|
|
19
26
|
/** Directories and patterns always ignored regardless of config. */
|
|
20
27
|
const DEFAULT_IGNORE_DIRS = new Set([
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/scanner/code/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGpD,qEAAqE;AACrE,MAAM,aAAa,GAA6B;IAC9C,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,MAAM;
|
|
1
|
+
{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/scanner/code/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGpD,qEAAqE;AACrE,MAAM,aAAa,GAA6B;IAC9C,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,MAAM;IACf,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,GAAG;IACX,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,GAAG;IACV,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,MAAM;CACd,CAAC;AAEF,oEAAoE;AACpE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,cAAc;IACd,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,oBAAoB,GAAG;IAC3B,UAAU;IACV,aAAa;IACb,OAAO;IACP,mBAAmB;IACnB,WAAW;IACX,QAAQ;CACT,CAAC;AAaF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,UAA2B,EAAE;IAE7B,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,GAAG,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAExE,+CAA+C;IAC/C,MAAM,aAAa,GAAG,UAAU;QAC9B,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,iBAAiB,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC;IAEjF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ;YAAE,MAAM;QAEtC,MAAM,YAAY,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEvE,4CAA4C;QAC5C,IAAI,cAAc,CAAC,YAAY,CAAC;YAAE,SAAS;QAE3C,oCAAoC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,wBAAwB;QACxB,IAAI,QAAQ,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAS;QAE5C,gCAAgC;QAChC,IAAI,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC;YAAE,SAAS;QAEjE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,YAAoB;IAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,QAAgB,EAAE,QAAkB;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAe;IACzE,iCAAiC;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,mDAAmD;IACnD,OAAO,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAe,EAAE,GAAW;IAC7C,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,oCAAoC;YACpC,QAAQ,IAAI,IAAI,CAAC;YACjB,CAAC,IAAI,CAAC,CAAC;YACP,2BAA2B;YAC3B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;QAC9B,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,gCAAgC;YAChC,QAAQ,IAAI,OAAO,CAAC;YACpB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,QAAQ,IAAI,MAAM,CAAC;YACnB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACxC,QAAQ,IAAI,IAAI,GAAG,EAAE,CAAC;YACtB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,CAAC;YACN,QAAQ,IAAI,EAAE,CAAC;YACf,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IAED,QAAQ,IAAI,GAAG,CAAC;IAEhB,IAAI,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,OAAO;aACX,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
|
|
@@ -52,7 +52,7 @@ export function matchFileContent(content, language, fileName) {
|
|
|
52
52
|
continue;
|
|
53
53
|
}
|
|
54
54
|
// Detect start of block comments
|
|
55
|
-
if ((language === 'javascript' || language === 'go' || language === 'java') &&
|
|
55
|
+
if ((language === 'javascript' || language === 'go' || language === 'java' || language === 'c' || language === 'rust') &&
|
|
56
56
|
trimmed.startsWith('/*')) {
|
|
57
57
|
if (!trimmed.includes('*/')) {
|
|
58
58
|
inBlockComment = true;
|
|
@@ -79,11 +79,11 @@ export function matchFileContent(content, language, fileName) {
|
|
|
79
79
|
// Skip single-line comments
|
|
80
80
|
if (language === 'python' && trimmed.startsWith('#'))
|
|
81
81
|
continue;
|
|
82
|
-
if ((language === 'javascript' || language === 'go' || language === 'java') &&
|
|
82
|
+
if ((language === 'javascript' || language === 'go' || language === 'java' || language === 'c' || language === 'rust') &&
|
|
83
83
|
trimmed.startsWith('//'))
|
|
84
84
|
continue;
|
|
85
85
|
// Skip Java block comment single-line: /** ... */
|
|
86
|
-
if ((language === 'javascript' || language === 'go' || language === 'java') &&
|
|
86
|
+
if ((language === 'javascript' || language === 'go' || language === 'java' || language === 'c' || language === 'rust') &&
|
|
87
87
|
trimmed.startsWith('/*') &&
|
|
88
88
|
trimmed.includes('*/'))
|
|
89
89
|
continue;
|
|
@@ -146,7 +146,7 @@ function stripInlineComment(line, language) {
|
|
|
146
146
|
// Simple heuristic: find # not inside quotes
|
|
147
147
|
return stripAfterChar(line, '#');
|
|
148
148
|
}
|
|
149
|
-
if (language === 'javascript' || language === 'go' || language === 'java') {
|
|
149
|
+
if (language === 'javascript' || language === 'go' || language === 'java' || language === 'c' || language === 'rust') {
|
|
150
150
|
return stripAfterStr(line, '//');
|
|
151
151
|
}
|
|
152
152
|
return line;
|
|
@@ -204,6 +204,16 @@ function isPureStringLiteral(line, language) {
|
|
|
204
204
|
if (/^\w+\s*:?=\s*".*"\s*$/.test(line))
|
|
205
205
|
return true;
|
|
206
206
|
}
|
|
207
|
+
if (language === 'c') {
|
|
208
|
+
// Lines like: const char *msg = "RSA_generate_key_ex is deprecated";
|
|
209
|
+
if (/^(?:const\s+)?(?:char|unsigned\s+char)\s*\*?\s*\w+\s*=\s*".*"\s*;\s*$/.test(line))
|
|
210
|
+
return true;
|
|
211
|
+
}
|
|
212
|
+
if (language === 'rust') {
|
|
213
|
+
// Lines like: let msg = "Rsa::generate is deprecated";
|
|
214
|
+
if (/^let\s+(?:mut\s+)?\w+\s*(?::\s*&?str\s*)?=\s*".*"\s*;\s*$/.test(line))
|
|
215
|
+
return true;
|
|
216
|
+
}
|
|
207
217
|
return false;
|
|
208
218
|
}
|
|
209
219
|
//# sourceMappingURL=matcher.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"matcher.js","sourceRoot":"","sources":["../../../src/scanner/code/matcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAalD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,QAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACnE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAkB,EAClB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,wDAAwD;IACxD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,cAAc;gBAAE,SAAS;YACtC,IAAI,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACvD,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,iBAAiB,GAA0B,IAAI,CAAC;IAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAE/B,iCAAiC;QACjC,IAAI,cAAc,EAAE,CAAC;YACnB,IACE,iBAAiB,KAAK,GAAG;gBACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtB,CAAC;gBACD,cAAc,GAAG,KAAK,CAAC;gBACvB,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;iBAAM,IACL,iBAAiB,KAAK,QAAQ;gBAC9B,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACpD,CAAC;gBACD,cAAc,GAAG,KAAK,CAAC;gBACvB,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,SAAS;QACX,CAAC;QAED,iCAAiC;QACjC,IACE,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"matcher.js","sourceRoot":"","sources":["../../../src/scanner/code/matcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAalD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,QAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACnE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAkB,EAClB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,wDAAwD;IACxD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,cAAc;gBAAE,SAAS;YACtC,IAAI,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACvD,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,iBAAiB,GAA0B,IAAI,CAAC;IAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAE/B,iCAAiC;QACjC,IAAI,cAAc,EAAE,CAAC;YACnB,IACE,iBAAiB,KAAK,GAAG;gBACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtB,CAAC;gBACD,cAAc,GAAG,KAAK,CAAC;gBACvB,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;iBAAM,IACL,iBAAiB,KAAK,QAAQ;gBAC9B,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACpD,CAAC;gBACD,cAAc,GAAG,KAAK,CAAC;gBACvB,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,SAAS;QACX,CAAC;QAED,iCAAiC;QACjC,IACE,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,CAAC;YAClH,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EACxB,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,cAAc,GAAG,IAAI,CAAC;gBACtB,iBAAiB,GAAG,GAAG,CAAC;YAC1B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,2EAA2E;oBAC3E,SAAS;gBACX,CAAC;qBAAM,CAAC;oBACN,6BAA6B;oBAC7B,cAAc,GAAG,IAAI,CAAC;oBACtB,iBAAiB,GAAG,QAAQ,CAAC;oBAC7B,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/D,IACE,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,CAAC;YAClH,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YACxB,SAAS;QAEX,kDAAkD;QAClD,IACE,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,CAAC;YAClH,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,SAAS;QAEX,qCAAqC;QACrC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEvD,uDAAuD;QACvD,IAAI,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,SAAS;QAEtD,+BAA+B;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACzD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY;gBAEtC,uBAAuB;gBACvB,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;gBACpC,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChE,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9D,CAAC;gBAED,wCAAwC;gBACxC,IAAI,OAA2B,CAAC;gBAChC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;gBACxB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtD,IAAI,KAAK,EAAE,CAAC;wBACV,yCAAyC;wBACzC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;wBAC5D,IAAI,OAAO,EAAE,CAAC;4BACZ,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;4BAChC,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gCAC3C,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;4BACtC,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,QAAQ,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,UAAU;oBAChB,WAAW,EAAE,OAAO;oBACpB,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO;oBACP,IAAI;oBACJ,MAAM,EAAE,OAAO,CAAC,WAAW;oBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU;iBACX,CAAC,CAAC;gBAEH,iEAAiE;gBACjE,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAkB;IAC1D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,6CAA6C;QAC7C,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrH,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;aAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;aACjD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,GAAW;IAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;aAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;aACjD,IACH,CAAC,QAAQ;YACT,CAAC,QAAQ;YACT,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,EACrC,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,QAAkB;IAC3D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,6DAA6D;QAC7D,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrD,yCAAyC;QACzC,IAAI,6DAA6D,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5F,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,qDAAqD;QACrD,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACtD,CAAC;IACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,qEAAqE;QACrE,IAAI,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACtG,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,uDAAuD;QACvD,IAAI,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"c.d.ts","sourceRoot":"","sources":["../../../../src/scanner/code/patterns/c.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,eAAO,MAAM,SAAS,EAAE,aAAa,EAiUpC,CAAC"}
|
|
@@ -0,0 +1,323 @@
|
|
|
1
|
+
export const cPatterns = [
|
|
2
|
+
// === OpenSSL ===
|
|
3
|
+
{
|
|
4
|
+
id: 'c-rsa-keygen',
|
|
5
|
+
language: 'c',
|
|
6
|
+
category: 'asymmetric-encryption',
|
|
7
|
+
algorithm: 'RSA',
|
|
8
|
+
risk: 'critical',
|
|
9
|
+
confidence: 'medium',
|
|
10
|
+
importPatterns: [/openssl\/rsa\.h/, /openssl\/evp\.h/],
|
|
11
|
+
callPatterns: [
|
|
12
|
+
/RSA_generate_key_ex\s*\(/,
|
|
13
|
+
/RSA_generate_key\s*\(/,
|
|
14
|
+
/EVP_PKEY_keygen\s*\(/,
|
|
15
|
+
/EVP_PKEY_CTX_new_id\s*\(\s*EVP_PKEY_RSA/,
|
|
16
|
+
],
|
|
17
|
+
description: "RSA key generation is vulnerable to quantum attacks via Shor's algorithm",
|
|
18
|
+
migration: 'Migrate to ML-KEM (FIPS 203) for encryption or ML-DSA (FIPS 204) for signatures',
|
|
19
|
+
nistRef: 'FIPS 203/204',
|
|
20
|
+
cweId: 'CWE-327',
|
|
21
|
+
},
|
|
22
|
+
{
|
|
23
|
+
id: 'c-rsa-sign',
|
|
24
|
+
language: 'c',
|
|
25
|
+
category: 'digital-signature',
|
|
26
|
+
algorithm: 'RSA',
|
|
27
|
+
risk: 'critical',
|
|
28
|
+
confidence: 'medium',
|
|
29
|
+
callPatterns: [
|
|
30
|
+
/RSA_sign\s*\(/,
|
|
31
|
+
/RSA_verify\s*\(/,
|
|
32
|
+
/EVP_DigestSignInit\s*\(/,
|
|
33
|
+
/EVP_DigestVerifyInit\s*\(/,
|
|
34
|
+
/EVP_SignFinal\s*\(/,
|
|
35
|
+
/EVP_VerifyFinal\s*\(/,
|
|
36
|
+
],
|
|
37
|
+
description: "RSA digital signatures are vulnerable to quantum attacks via Shor's algorithm",
|
|
38
|
+
migration: 'Migrate to ML-DSA (FIPS 204) for digital signatures',
|
|
39
|
+
nistRef: 'FIPS 204',
|
|
40
|
+
cweId: 'CWE-327',
|
|
41
|
+
},
|
|
42
|
+
{
|
|
43
|
+
id: 'c-rsa-encrypt',
|
|
44
|
+
language: 'c',
|
|
45
|
+
category: 'asymmetric-encryption',
|
|
46
|
+
algorithm: 'RSA',
|
|
47
|
+
risk: 'critical',
|
|
48
|
+
confidence: 'medium',
|
|
49
|
+
callPatterns: [
|
|
50
|
+
/RSA_public_encrypt\s*\(/,
|
|
51
|
+
/RSA_private_decrypt\s*\(/,
|
|
52
|
+
/EVP_PKEY_encrypt\s*\(/,
|
|
53
|
+
/EVP_PKEY_decrypt\s*\(/,
|
|
54
|
+
],
|
|
55
|
+
description: "RSA encryption is vulnerable to quantum attacks via Shor's algorithm",
|
|
56
|
+
migration: 'Migrate to ML-KEM (FIPS 203) for key encapsulation',
|
|
57
|
+
nistRef: 'FIPS 203',
|
|
58
|
+
cweId: 'CWE-327',
|
|
59
|
+
},
|
|
60
|
+
{
|
|
61
|
+
id: 'c-ec-keygen',
|
|
62
|
+
language: 'c',
|
|
63
|
+
category: 'asymmetric-encryption',
|
|
64
|
+
algorithm: 'ECDSA',
|
|
65
|
+
risk: 'critical',
|
|
66
|
+
confidence: 'medium',
|
|
67
|
+
importPatterns: [/openssl\/ec\.h/, /openssl\/ecdsa\.h/],
|
|
68
|
+
callPatterns: [
|
|
69
|
+
/EC_KEY_generate_key\s*\(/,
|
|
70
|
+
/EC_KEY_new_by_curve_name\s*\(/,
|
|
71
|
+
/ECDSA_sign\s*\(/,
|
|
72
|
+
/ECDSA_do_sign\s*\(/,
|
|
73
|
+
/ECDH_compute_key\s*\(/,
|
|
74
|
+
/EVP_PKEY_CTX_new_id\s*\(\s*EVP_PKEY_EC/,
|
|
75
|
+
],
|
|
76
|
+
description: "EC key generation and operations are vulnerable to quantum attacks via Shor's algorithm",
|
|
77
|
+
migration: 'Migrate to ML-DSA (FIPS 204) for signatures or ML-KEM (FIPS 203) for key exchange',
|
|
78
|
+
nistRef: 'FIPS 203/204',
|
|
79
|
+
cweId: 'CWE-327',
|
|
80
|
+
},
|
|
81
|
+
{
|
|
82
|
+
id: 'c-dh-keygen',
|
|
83
|
+
language: 'c',
|
|
84
|
+
category: 'key-exchange',
|
|
85
|
+
algorithm: 'DH',
|
|
86
|
+
risk: 'critical',
|
|
87
|
+
confidence: 'medium',
|
|
88
|
+
importPatterns: [/openssl\/dh\.h/],
|
|
89
|
+
callPatterns: [
|
|
90
|
+
/DH_generate_key\s*\(/,
|
|
91
|
+
/DH_generate_parameters_ex\s*\(/,
|
|
92
|
+
/DH_compute_key\s*\(/,
|
|
93
|
+
/EVP_PKEY_CTX_new_id\s*\(\s*EVP_PKEY_DH/,
|
|
94
|
+
],
|
|
95
|
+
description: "Diffie-Hellman key exchange is vulnerable to quantum attacks via Shor's algorithm",
|
|
96
|
+
migration: 'Migrate to ML-KEM (FIPS 203) for key encapsulation',
|
|
97
|
+
nistRef: 'FIPS 203',
|
|
98
|
+
cweId: 'CWE-327',
|
|
99
|
+
},
|
|
100
|
+
{
|
|
101
|
+
id: 'c-dsa-keygen',
|
|
102
|
+
language: 'c',
|
|
103
|
+
category: 'digital-signature',
|
|
104
|
+
algorithm: 'DSA',
|
|
105
|
+
risk: 'critical',
|
|
106
|
+
confidence: 'medium',
|
|
107
|
+
importPatterns: [/openssl\/dsa\.h/],
|
|
108
|
+
callPatterns: [
|
|
109
|
+
/DSA_generate_key\s*\(/,
|
|
110
|
+
/DSA_generate_parameters_ex\s*\(/,
|
|
111
|
+
/DSA_sign\s*\(/,
|
|
112
|
+
/EVP_PKEY_CTX_new_id\s*\(\s*EVP_PKEY_DSA/,
|
|
113
|
+
],
|
|
114
|
+
description: "DSA is vulnerable to quantum attacks via Shor's algorithm",
|
|
115
|
+
migration: 'Migrate to ML-DSA (FIPS 204) for digital signatures',
|
|
116
|
+
nistRef: 'FIPS 204',
|
|
117
|
+
cweId: 'CWE-327',
|
|
118
|
+
},
|
|
119
|
+
{
|
|
120
|
+
id: 'c-md5',
|
|
121
|
+
language: 'c',
|
|
122
|
+
category: 'weak-hash',
|
|
123
|
+
algorithm: 'MD5',
|
|
124
|
+
risk: 'critical',
|
|
125
|
+
confidence: 'medium',
|
|
126
|
+
importPatterns: [/openssl\/md5\.h/],
|
|
127
|
+
callPatterns: [
|
|
128
|
+
/MD5_Init\s*\(/,
|
|
129
|
+
/MD5_Update\s*\(/,
|
|
130
|
+
/MD5_Final\s*\(/,
|
|
131
|
+
/MD5\s*\([^)]/,
|
|
132
|
+
/EVP_md5\s*\(\)/,
|
|
133
|
+
],
|
|
134
|
+
description: 'MD5 is cryptographically broken and unsuitable for any security use',
|
|
135
|
+
migration: 'Migrate to SHA-256 or SHA-3 for hashing',
|
|
136
|
+
cweId: 'CWE-328',
|
|
137
|
+
},
|
|
138
|
+
{
|
|
139
|
+
id: 'c-sha1',
|
|
140
|
+
language: 'c',
|
|
141
|
+
category: 'weak-hash',
|
|
142
|
+
algorithm: 'SHA-1',
|
|
143
|
+
risk: 'critical',
|
|
144
|
+
confidence: 'medium',
|
|
145
|
+
importPatterns: [/openssl\/sha\.h/],
|
|
146
|
+
callPatterns: [
|
|
147
|
+
/SHA1_Init\s*\(/,
|
|
148
|
+
/SHA1_Update\s*\(/,
|
|
149
|
+
/SHA1_Final\s*\(/,
|
|
150
|
+
/SHA1\s*\([^)]/,
|
|
151
|
+
/EVP_sha1\s*\(\)/,
|
|
152
|
+
],
|
|
153
|
+
description: 'SHA-1 is cryptographically broken with practical collision attacks',
|
|
154
|
+
migration: 'Migrate to SHA-256 or SHA-3 for hashing',
|
|
155
|
+
cweId: 'CWE-328',
|
|
156
|
+
},
|
|
157
|
+
{
|
|
158
|
+
id: 'c-sha256',
|
|
159
|
+
language: 'c',
|
|
160
|
+
category: 'safe-hash',
|
|
161
|
+
algorithm: 'SHA-256',
|
|
162
|
+
risk: 'safe',
|
|
163
|
+
confidence: 'medium',
|
|
164
|
+
callPatterns: [
|
|
165
|
+
/SHA256_Init\s*\(/,
|
|
166
|
+
/SHA256\s*\([^)]/,
|
|
167
|
+
/SHA384\s*\([^)]/,
|
|
168
|
+
/SHA512\s*\([^)]/,
|
|
169
|
+
/EVP_sha256\s*\(\)/,
|
|
170
|
+
/EVP_sha384\s*\(\)/,
|
|
171
|
+
/EVP_sha512\s*\(\)/,
|
|
172
|
+
],
|
|
173
|
+
description: 'SHA-256/384/512 are quantum-resistant hash functions',
|
|
174
|
+
migration: 'No migration needed — already quantum-safe',
|
|
175
|
+
},
|
|
176
|
+
{
|
|
177
|
+
id: 'c-aes',
|
|
178
|
+
language: 'c',
|
|
179
|
+
category: 'safe-symmetric',
|
|
180
|
+
algorithm: 'AES',
|
|
181
|
+
risk: 'safe',
|
|
182
|
+
confidence: 'medium',
|
|
183
|
+
callPatterns: [
|
|
184
|
+
/EVP_aes_\d+_\w+\s*\(\)/,
|
|
185
|
+
/AES_set_encrypt_key\s*\(/,
|
|
186
|
+
/AES_set_decrypt_key\s*\(/,
|
|
187
|
+
/AES_encrypt\s*\(/,
|
|
188
|
+
/AES_cbc_encrypt\s*\(/,
|
|
189
|
+
],
|
|
190
|
+
description: 'AES is a quantum-resistant symmetric encryption algorithm',
|
|
191
|
+
migration: 'No migration needed — already quantum-safe',
|
|
192
|
+
},
|
|
193
|
+
// === libsodium ===
|
|
194
|
+
{
|
|
195
|
+
id: 'c-libsodium-box',
|
|
196
|
+
language: 'c',
|
|
197
|
+
category: 'key-exchange',
|
|
198
|
+
algorithm: 'Curve25519',
|
|
199
|
+
risk: 'critical',
|
|
200
|
+
confidence: 'medium',
|
|
201
|
+
importPatterns: [/sodium\.h/],
|
|
202
|
+
callPatterns: [
|
|
203
|
+
/crypto_box_keypair\s*\(/,
|
|
204
|
+
/crypto_box_easy\s*\(/,
|
|
205
|
+
/crypto_box_open_easy\s*\(/,
|
|
206
|
+
/crypto_box_seal\s*\(/,
|
|
207
|
+
/crypto_box_seal_open\s*\(/,
|
|
208
|
+
/crypto_scalarmult\s*\(/,
|
|
209
|
+
/crypto_scalarmult_base\s*\(/,
|
|
210
|
+
/crypto_kx_keypair\s*\(/,
|
|
211
|
+
/crypto_kx_client_session_keys\s*\(/,
|
|
212
|
+
/crypto_kx_server_session_keys\s*\(/,
|
|
213
|
+
],
|
|
214
|
+
description: "libsodium box/kx uses Curve25519, vulnerable to quantum attacks via Shor's algorithm",
|
|
215
|
+
migration: 'Migrate to ML-KEM (FIPS 203) for key exchange',
|
|
216
|
+
nistRef: 'FIPS 203',
|
|
217
|
+
cweId: 'CWE-327',
|
|
218
|
+
},
|
|
219
|
+
{
|
|
220
|
+
id: 'c-libsodium-sign',
|
|
221
|
+
language: 'c',
|
|
222
|
+
category: 'digital-signature',
|
|
223
|
+
algorithm: 'Ed25519',
|
|
224
|
+
risk: 'critical',
|
|
225
|
+
confidence: 'medium',
|
|
226
|
+
importPatterns: [/sodium\.h/],
|
|
227
|
+
callPatterns: [
|
|
228
|
+
/crypto_sign_keypair\s*\(/,
|
|
229
|
+
/crypto_sign\s*\(/,
|
|
230
|
+
/crypto_sign_open\s*\(/,
|
|
231
|
+
/crypto_sign_detached\s*\(/,
|
|
232
|
+
/crypto_sign_verify_detached\s*\(/,
|
|
233
|
+
/crypto_sign_ed25519_sk_to_curve25519\s*\(/,
|
|
234
|
+
],
|
|
235
|
+
description: "libsodium sign uses Ed25519, vulnerable to quantum attacks via Shor's algorithm",
|
|
236
|
+
migration: 'Migrate to ML-DSA (FIPS 204) for digital signatures',
|
|
237
|
+
nistRef: 'FIPS 204',
|
|
238
|
+
cweId: 'CWE-327',
|
|
239
|
+
},
|
|
240
|
+
{
|
|
241
|
+
id: 'c-libsodium-aead',
|
|
242
|
+
language: 'c',
|
|
243
|
+
category: 'safe-symmetric',
|
|
244
|
+
algorithm: 'ChaCha20-Poly1305',
|
|
245
|
+
risk: 'safe',
|
|
246
|
+
confidence: 'medium',
|
|
247
|
+
importPatterns: [/sodium\.h/],
|
|
248
|
+
callPatterns: [
|
|
249
|
+
/crypto_aead_chacha20poly1305_ietf_encrypt\s*\(/,
|
|
250
|
+
/crypto_aead_xchacha20poly1305_ietf_encrypt\s*\(/,
|
|
251
|
+
/crypto_aead_chacha20poly1305_ietf_decrypt\s*\(/,
|
|
252
|
+
/crypto_aead_xchacha20poly1305_ietf_decrypt\s*\(/,
|
|
253
|
+
/crypto_secretbox_easy\s*\(/,
|
|
254
|
+
/crypto_secretbox_open_easy\s*\(/,
|
|
255
|
+
],
|
|
256
|
+
description: 'libsodium AEAD/secretbox uses quantum-resistant symmetric encryption',
|
|
257
|
+
migration: 'No migration needed — already quantum-safe',
|
|
258
|
+
},
|
|
259
|
+
// === wolfSSL ===
|
|
260
|
+
{
|
|
261
|
+
id: 'c-wolfssl-rsa',
|
|
262
|
+
language: 'c',
|
|
263
|
+
category: 'asymmetric-encryption',
|
|
264
|
+
algorithm: 'RSA',
|
|
265
|
+
risk: 'critical',
|
|
266
|
+
confidence: 'medium',
|
|
267
|
+
importPatterns: [/wolfssl\/wolfcrypt\/rsa\.h/],
|
|
268
|
+
callPatterns: [
|
|
269
|
+
/wc_RsaKeyGen\s*\(/,
|
|
270
|
+
/wc_MakeRsaKey\s*\(/,
|
|
271
|
+
/wc_RsaPublicEncrypt\s*\(/,
|
|
272
|
+
/wc_RsaPrivateDecrypt\s*\(/,
|
|
273
|
+
/wc_RsaSSL_Sign\s*\(/,
|
|
274
|
+
/wc_RsaSSL_Verify\s*\(/,
|
|
275
|
+
],
|
|
276
|
+
description: "wolfSSL RSA operations are vulnerable to quantum attacks via Shor's algorithm",
|
|
277
|
+
migration: 'Migrate to ML-KEM (FIPS 203) for encryption or ML-DSA (FIPS 204) for signatures',
|
|
278
|
+
nistRef: 'FIPS 203/204',
|
|
279
|
+
cweId: 'CWE-327',
|
|
280
|
+
},
|
|
281
|
+
// === mbedTLS ===
|
|
282
|
+
{
|
|
283
|
+
id: 'c-mbedtls-rsa',
|
|
284
|
+
language: 'c',
|
|
285
|
+
category: 'asymmetric-encryption',
|
|
286
|
+
algorithm: 'RSA',
|
|
287
|
+
risk: 'critical',
|
|
288
|
+
confidence: 'medium',
|
|
289
|
+
importPatterns: [/mbedtls\/rsa\.h/],
|
|
290
|
+
callPatterns: [
|
|
291
|
+
/mbedtls_rsa_gen_key\s*\(/,
|
|
292
|
+
/mbedtls_rsa_pkcs1_encrypt\s*\(/,
|
|
293
|
+
/mbedtls_rsa_pkcs1_decrypt\s*\(/,
|
|
294
|
+
/mbedtls_rsa_pkcs1_sign\s*\(/,
|
|
295
|
+
/mbedtls_rsa_pkcs1_verify\s*\(/,
|
|
296
|
+
],
|
|
297
|
+
description: "mbedTLS RSA operations are vulnerable to quantum attacks via Shor's algorithm",
|
|
298
|
+
migration: 'Migrate to ML-KEM (FIPS 203) for encryption or ML-DSA (FIPS 204) for signatures',
|
|
299
|
+
nistRef: 'FIPS 203/204',
|
|
300
|
+
cweId: 'CWE-327',
|
|
301
|
+
},
|
|
302
|
+
{
|
|
303
|
+
id: 'c-mbedtls-ec',
|
|
304
|
+
language: 'c',
|
|
305
|
+
category: 'digital-signature',
|
|
306
|
+
algorithm: 'ECDSA',
|
|
307
|
+
risk: 'critical',
|
|
308
|
+
confidence: 'medium',
|
|
309
|
+
importPatterns: [/mbedtls\/ecdsa\.h/, /mbedtls\/ecp\.h/],
|
|
310
|
+
callPatterns: [
|
|
311
|
+
/mbedtls_ecdsa_genkey\s*\(/,
|
|
312
|
+
/mbedtls_ecdsa_write_signature\s*\(/,
|
|
313
|
+
/mbedtls_ecdsa_read_signature\s*\(/,
|
|
314
|
+
/mbedtls_ecdh_gen_public\s*\(/,
|
|
315
|
+
/mbedtls_ecdh_compute_shared\s*\(/,
|
|
316
|
+
],
|
|
317
|
+
description: "mbedTLS EC operations are vulnerable to quantum attacks via Shor's algorithm",
|
|
318
|
+
migration: 'Migrate to ML-DSA (FIPS 204) for signatures or ML-KEM (FIPS 203) for key exchange',
|
|
319
|
+
nistRef: 'FIPS 203/204',
|
|
320
|
+
cweId: 'CWE-327',
|
|
321
|
+
},
|
|
322
|
+
];
|
|
323
|
+
//# sourceMappingURL=c.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"c.js","sourceRoot":"","sources":["../../../../src/scanner/code/patterns/c.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,SAAS,GAAoB;IACxC,kBAAkB;IAClB;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,uBAAuB;QACjC,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;QACtD,YAAY,EAAE;YACZ,0BAA0B;YAC1B,uBAAuB;YACvB,sBAAsB;YACtB,yCAAyC;SAC1C;QACD,WAAW,EAAE,0EAA0E;QACvF,SAAS,EAAE,iFAAiF;QAC5F,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE;YACZ,eAAe;YACf,iBAAiB;YACjB,yBAAyB;YACzB,2BAA2B;YAC3B,oBAAoB;YACpB,sBAAsB;SACvB;QACD,WAAW,EAAE,+EAA+E;QAC5F,SAAS,EAAE,qDAAqD;QAChE,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,uBAAuB;QACjC,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE;YACZ,yBAAyB;YACzB,0BAA0B;YAC1B,uBAAuB;YACvB,uBAAuB;SACxB;QACD,WAAW,EAAE,sEAAsE;QACnF,SAAS,EAAE,oDAAoD;QAC/D,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,uBAAuB;QACjC,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;QACvD,YAAY,EAAE;YACZ,0BAA0B;YAC1B,+BAA+B;YAC/B,iBAAiB;YACjB,oBAAoB;YACpB,uBAAuB;YACvB,wCAAwC;SACzC;QACD,WAAW,EAAE,yFAAyF;QACtG,SAAS,EAAE,mFAAmF;QAC9F,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,cAAc;QACxB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,gBAAgB,CAAC;QAClC,YAAY,EAAE;YACZ,sBAAsB;YACtB,gCAAgC;YAChC,qBAAqB;YACrB,wCAAwC;SACzC;QACD,WAAW,EAAE,mFAAmF;QAChG,SAAS,EAAE,oDAAoD;QAC/D,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,iBAAiB,CAAC;QACnC,YAAY,EAAE;YACZ,uBAAuB;YACvB,iCAAiC;YACjC,eAAe;YACf,yCAAyC;SAC1C;QACD,WAAW,EAAE,2DAA2D;QACxE,SAAS,EAAE,qDAAqD;QAChE,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,OAAO;QACX,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,iBAAiB,CAAC;QACnC,YAAY,EAAE;YACZ,eAAe;YACf,iBAAiB;YACjB,gBAAgB;YAChB,cAAc;YACd,gBAAgB;SACjB;QACD,WAAW,EAAE,qEAAqE;QAClF,SAAS,EAAE,yCAAyC;QACpD,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,iBAAiB,CAAC;QACnC,YAAY,EAAE;YACZ,gBAAgB;YAChB,kBAAkB;YAClB,iBAAiB;YACjB,eAAe;YACf,iBAAiB;SAClB;QACD,WAAW,EAAE,oEAAoE;QACjF,SAAS,EAAE,yCAAyC;QACpD,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,UAAU;QACd,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,SAAS;QACpB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE;YACZ,kBAAkB;YAClB,iBAAiB;YACjB,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;YACnB,mBAAmB;YACnB,mBAAmB;SACpB;QACD,WAAW,EAAE,sDAAsD;QACnE,SAAS,EAAE,4CAA4C;KACxD;IACD;QACE,EAAE,EAAE,OAAO;QACX,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,gBAAgB;QAC1B,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE;YACZ,wBAAwB;YACxB,0BAA0B;YAC1B,0BAA0B;YAC1B,kBAAkB;YAClB,sBAAsB;SACvB;QACD,WAAW,EAAE,2DAA2D;QACxE,SAAS,EAAE,4CAA4C;KACxD;IACD,oBAAoB;IACpB;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,cAAc;QACxB,SAAS,EAAE,YAAY;QACvB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,WAAW,CAAC;QAC7B,YAAY,EAAE;YACZ,yBAAyB;YACzB,sBAAsB;YACtB,2BAA2B;YAC3B,sBAAsB;YACtB,2BAA2B;YAC3B,wBAAwB;YACxB,6BAA6B;YAC7B,wBAAwB;YACxB,oCAAoC;YACpC,oCAAoC;SACrC;QACD,WAAW,EAAE,sFAAsF;QACnG,SAAS,EAAE,+CAA+C;QAC1D,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,SAAS;QACpB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,WAAW,CAAC;QAC7B,YAAY,EAAE;YACZ,0BAA0B;YAC1B,kBAAkB;YAClB,uBAAuB;YACvB,2BAA2B;YAC3B,kCAAkC;YAClC,2CAA2C;SAC5C;QACD,WAAW,EAAE,iFAAiF;QAC9F,SAAS,EAAE,qDAAqD;QAChE,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,gBAAgB;QAC1B,SAAS,EAAE,mBAAmB;QAC9B,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,WAAW,CAAC;QAC7B,YAAY,EAAE;YACZ,gDAAgD;YAChD,iDAAiD;YACjD,gDAAgD;YAChD,iDAAiD;YACjD,4BAA4B;YAC5B,iCAAiC;SAClC;QACD,WAAW,EAAE,sEAAsE;QACnF,SAAS,EAAE,4CAA4C;KACxD;IACD,kBAAkB;IAClB;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,uBAAuB;QACjC,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,4BAA4B,CAAC;QAC9C,YAAY,EAAE;YACZ,mBAAmB;YACnB,oBAAoB;YACpB,0BAA0B;YAC1B,2BAA2B;YAC3B,qBAAqB;YACrB,uBAAuB;SACxB;QACD,WAAW,EAAE,+EAA+E;QAC5F,SAAS,EAAE,iFAAiF;QAC5F,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,SAAS;KACjB;IACD,kBAAkB;IAClB;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,uBAAuB;QACjC,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,iBAAiB,CAAC;QACnC,YAAY,EAAE;YACZ,0BAA0B;YAC1B,gCAAgC;YAChC,gCAAgC;YAChC,6BAA6B;YAC7B,+BAA+B;SAChC;QACD,WAAW,EAAE,+EAA+E;QAC5F,SAAS,EAAE,iFAAiF;QAC5F,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,SAAS;KACjB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;QACxD,YAAY,EAAE;YACZ,2BAA2B;YAC3B,oCAAoC;YACpC,mCAAmC;YACnC,8BAA8B;YAC9B,kCAAkC;SACnC;QACD,WAAW,EAAE,8EAA8E;QAC3F,SAAS,EAAE,mFAAmF;QAC9F,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,SAAS;KACjB;CACF,CAAC"}
|
|
@@ -3,9 +3,11 @@ import { pythonPatterns } from './python.js';
|
|
|
3
3
|
import { javascriptPatterns } from './javascript.js';
|
|
4
4
|
import { goPatterns } from './go.js';
|
|
5
5
|
import { javaPatterns } from './java.js';
|
|
6
|
+
import { cPatterns } from './c.js';
|
|
7
|
+
import { rustPatterns } from './rust.js';
|
|
6
8
|
/** Get all patterns for a specific language. */
|
|
7
9
|
export declare function getPatterns(language: Language): CryptoPattern[];
|
|
8
10
|
/** Get all patterns across all languages. */
|
|
9
11
|
export declare function getAllPatterns(): CryptoPattern[];
|
|
10
|
-
export { pythonPatterns, javascriptPatterns, goPatterns, javaPatterns };
|
|
12
|
+
export { pythonPatterns, javascriptPatterns, goPatterns, javaPatterns, cPatterns, rustPatterns };
|
|
11
13
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/scanner/code/patterns/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/scanner/code/patterns/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAWzC,gDAAgD;AAChD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,aAAa,EAAE,CAE/D;AAED,6CAA6C;AAC7C,wBAAgB,cAAc,IAAI,aAAa,EAAE,CAEhD;AAED,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC"}
|