coretrace-python-analyzer 0.10.0__py3-none-any.whl → 0.11.0__py3-none-any.whl

coretrace_python/__init__.py

@@ -1,4 +1,4 @@
 """CoreTrace's Python static analysis frontend."""
 
-__version__ = "0.10.0"
+__version__ = "0.11.0"
 

coretrace_python/bundled/models/python_stdlib/python_stdlib.py

@@ -57,8 +57,9 @@ class PythonStdlibModels(ModelPlugin):
         Sink(_sym("subprocess.check_call"), TaintKind.COMMAND),
         Sink(_sym("subprocess.check_output"), TaintKind.COMMAND),
         Sink(_sym("subprocess.Popen"), TaintKind.COMMAND),
-        Sink(_sym("builtins.eval"), TaintKind.CODE),
-        Sink(_sym("builtins.exec"), TaintKind.CODE),
+        # The code is the first argument; the globals and locals it runs with are data.
+        Sink(_sym("builtins.eval"), TaintKind.CODE, ((TaintKind.CODE, (0,)),)),
+        Sink(_sym("builtins.exec"), TaintKind.CODE, ((TaintKind.CODE, (0,)),)),
         Sink(_sym("builtins.open"), TaintKind.PATH),
         Sink(_sym("os.remove"), TaintKind.PATH),
         Sink(_sym("os.unlink"), TaintKind.PATH),

coretrace_python/bundled/security/code_injection/code_injection.py

@@ -0,0 +1,19 @@
+"""Code injection: attacker-controlled input reaching a CODE sink, such as the code
+``eval`` or ``exec`` runs. ``dangerous-eval`` reports every such call; this rule reports
+the ones attacker input reaches."""
+
+from __future__ import annotations
+
+from typing import ClassVar
+
+from coretrace_python.findings import Severity
+from coretrace_python.plugins import TaintDetector
+from coretrace_python.taint import TaintKind
+
+
+class CodeInjectionPlugin(TaintDetector):
+    name: ClassVar[str] = "code-injection"
+    rule_id: ClassVar[str] = "code-injection"
+    kind: ClassVar[TaintKind] = TaintKind.CODE
+    severity: ClassVar[Severity] = Severity.HIGH
+    title: ClassVar[str] = "Code injection"

coretrace_python/bundled/security/code_injection/plugin.toml

@@ -0,0 +1,9 @@
+name = "code-injection"
+version = "1.0.0"
+plugin_api = ">=1,<2"
+requires = ["taint.flows", "findings.refutation"]
+provides = ["vulnerability.code-injection"]
+
+[entrypoint]
+module = "code_injection"
+class = "CodeInjectionPlugin"

{coretrace_python_analyzer-0.10.0.dist-info → coretrace_python_analyzer-0.11.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: coretrace-python-analyzer
-Version: 0.10.0
+Version: 0.11.0
 Summary: Static security analysis infrastructure for Python code
 Project-URL: Homepage, https://github.com/CoreTrace/coretrace-python-analyzer
 Project-URL: Repository, https://github.com/CoreTrace/coretrace-python-analyzer

{coretrace_python_analyzer-0.10.0.dist-info → coretrace_python_analyzer-0.11.0.dist-info}/RECORD

@@ -1,4 +1,4 @@
-coretrace_python/__init__.py,sha256=dpPkJxTU8YFTQytkIzuK1AwDQYRpHrAJPKFeSC3Beps,76
+coretrace_python/__init__.py,sha256=lwZwSBKMQK9wIdXsR7HCxeMNGo0vXmvI-7UK0Q66xu4,76
 coretrace_python/__main__.py,sha256=V8DnYtRboISK2VCKm7DGHLREKvqLbqApyWlKBOs26wU,65
 coretrace_python/cache.py,sha256=-pZv-ELm4jMCTXQWSZIobHaT9UHIjFu7IlMkOM0i4LI,13607
 coretrace_python/cli.py,sha256=G5jhb6g6RgSRSjjS7DBgziIjUM1vTFwalJGvFHVKxrg,11225
@@ -38,7 +38,7 @@ coretrace_python/bundled/models/flask/plugin.toml,sha256=kI53Xwf5aZKd2n3fEQEbBzN
 coretrace_python/bundled/models/http_clients/http_client_models.py,sha256=9XhHWZKq3XWcD0WexucuedAiwxp3fhXxGmo9R6DNtSQ,1954
 coretrace_python/bundled/models/http_clients/plugin.toml,sha256=vq9tWHgy8-m8LiU1StGhm9Lsy7vnj3w90P4AKDaKfc0,216
 coretrace_python/bundled/models/python_stdlib/plugin.toml,sha256=DWqjG68rx91HCJi_VEp6tUs4ujkzlR7Lq7saMvtK2HM,187
-coretrace_python/bundled/models/python_stdlib/python_stdlib.py,sha256=3LmjcFx3rUhM3Mpw86q8bS5Xj6gRJs_p6M-8yBGiK2k,4632
+coretrace_python/bundled/models/python_stdlib/python_stdlib.py,sha256=7S2OEcdY41hQiHm_FX8WIc2DEzl4NQUdZer7yyoRz1Y,4774
 coretrace_python/bundled/models/sqlalchemy/plugin.toml,sha256=2gRbglnMK5U2QWnzs2U2pDvmTeWmrlW7XpJ_8dRmIoY,182
 coretrace_python/bundled/models/sqlalchemy/sqlalchemy_models.py,sha256=Gm2qjyXUrjzALy-MigUhPQyyDxYdfWlQKDZLp1C6Jqk,1697
 coretrace_python/bundled/models/tornado/plugin.toml,sha256=u_XjJK2uKBR11zg4yGxsCDHcx2pKEQ1MBvvB6Mm0siA,222
@@ -47,6 +47,8 @@ coretrace_python/bundled/secrets/config_secrets/config_secrets.py,sha256=JfhWSyV
 coretrace_python/bundled/secrets/config_secrets/plugin.toml,sha256=dRkA3zQ9wtT2EJyqZ5zGqJ5KYdyIQtQcSvesqrb4M0Q,177
 coretrace_python/bundled/secrets/hardcoded_secrets/hardcoded_secrets.py,sha256=7TD-Nf5S4yfoRBRmJ6Ab6v4Q2zIC2n79FRfNS3I4xos,544
 coretrace_python/bundled/secrets/hardcoded_secrets/plugin.toml,sha256=bkhRJFUrTFP2LiggDP3PkQpC0REtTq8aWrqlkYzxVHc,231
+coretrace_python/bundled/security/code_injection/code_injection.py,sha256=vNbVzswClwB7ZDN7Rl1QDPb6SsDswj5GE_7Kscgwp-U,691
+coretrace_python/bundled/security/code_injection/plugin.toml,sha256=T2I7SIr3umx9JqRqIIG7cJCj9d33YFW9c8JpYahERZg,228
 coretrace_python/bundled/security/command_injection/command_injection.py,sha256=d8CgmU0tWyhuLk_GTaUQHQaWlKIxC5TDY-K370tdyhE,573
 coretrace_python/bundled/security/command_injection/plugin.toml,sha256=x9NUpwdVZsTQpaPNX3HoYcrZWk4sOGN-aSp9Bc8jvCA,240
 coretrace_python/bundled/security/insecure_deserialization/insecure_deserialization.py,sha256=-4KIQDaYo-09gSceuNEs3eutmBn2OBuYBTqiUEYOatk,637
@@ -143,9 +145,9 @@ coretrace_python/taint/engine.py,sha256=_uVUc2m29aljN_YR2iCQtEdvZFc-LJ5CDWiZF1Tz
 coretrace_python/taint/models.py,sha256=B84caPxmQvTdB9H_80nZOqcFlpNd9ofpKI2YL5Uc0UA,15269
 coretrace_python/taint/routes.py,sha256=UAJKXcw_sM9shf58FfDroxVO9bNSm4qrQdZknwUB0lo,6110
 coretrace_python/taint/templates.py,sha256=8Ojb43VXuWxOVifeXRpi3_2mjZfnvIC7GQ-AW80GUYk,11148
-coretrace_python_analyzer-0.10.0.dist-info/METADATA,sha256=g7Y7gs7Dsb2oZY33Iz2_aG6SQNI6KLkWuwtpcfij1i4,3217
-coretrace_python_analyzer-0.10.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-coretrace_python_analyzer-0.10.0.dist-info/entry_points.txt,sha256=wdozemiraOkbt65g_Y_zgspuZpoLxJdaCVMJt1Ft3c0,72
-coretrace_python_analyzer-0.10.0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
-coretrace_python_analyzer-0.10.0.dist-info/licenses/NOTICE,sha256=s3VHj5ngV0ozjW_kZJpg_35ne6JwoBK0ysOjbqVtA0w,113
-coretrace_python_analyzer-0.10.0.dist-info/RECORD,,
+coretrace_python_analyzer-0.11.0.dist-info/METADATA,sha256=s9XGnFo_DdCtjSWnMC3WL6Dj1KiPskmmE-xqE7H9M6Q,3217
+coretrace_python_analyzer-0.11.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+coretrace_python_analyzer-0.11.0.dist-info/entry_points.txt,sha256=wdozemiraOkbt65g_Y_zgspuZpoLxJdaCVMJt1Ft3c0,72
+coretrace_python_analyzer-0.11.0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+coretrace_python_analyzer-0.11.0.dist-info/licenses/NOTICE,sha256=s3VHj5ngV0ozjW_kZJpg_35ne6JwoBK0ysOjbqVtA0w,113
+coretrace_python_analyzer-0.11.0.dist-info/RECORD,,