Skip to content

CPP: Add query for CWE-297: Improper Validation of Certificate with Host Mismatch #9086

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 17 commits into
base: main
Choose a base branch
from
Open

CPP: Add query for CWE-297: Improper Validation of Certificate with Host Mismatch #9086

Changes from 1 commit
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
ed755bd
create new branchihsinme-patch-101 in fork
May 9, 2022
4a58910
Update ValidationCertificateHostMismatch.expected
ihsinme Jun 2, 2022
39bd9e9
Create test1.cpp
ihsinme Jun 2, 2022
49d962e
Update ValidationCertificateHostMismatch.ql
ihsinme Jun 22, 2022
cec3555
Update test.cpp
ihsinme Jun 22, 2022
52ade48
Update test1.cpp
ihsinme Jun 22, 2022
8bf704f
Create test2.cpp
ihsinme Jun 22, 2022
5bdd521
Update ValidationCertificateHostMismatch.ql
ihsinme Jun 26, 2022
6b7440f
Update test.cpp
ihsinme Jun 26, 2022
d09de26
Update test1.cpp
ihsinme Jun 26, 2022
26b87b8
Update test2.cpp
ihsinme Jun 26, 2022
6c9936c
Update test2.cpp
ihsinme Jul 3, 2022
1502506
Update ValidationCertificateHostMismatch.expected
ihsinme Aug 3, 2022
2257206
Merge branch 'main' into ihsinme-patch-101
aibaars Aug 29, 2022
03f532d
Merge branch 'main' into ihsinme-patch-101
MathiasVP Oct 4, 2022
90de155
Merge branch 'main' into ihsinme-patch-101
MathiasVP Oct 10, 2022
588b80e
Merge branch 'main' into ihsinme-patch-101
MathiasVP Oct 28, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update test2.cpp
  • Loading branch information
@ihsinme
ihsinme authored Jul 3, 2022
commit 6c9936c128f1114c6656c0da70453a6c9cd89f91
17 changes: 11 additions & 6 deletions cpp/ql/test/experimental/query-tests/Security/CWE/CWE-297/semmle/tests/test2.cpp
View file
Original file line number Diff line number Diff line change
@@ -1,7 +1,3 @@
namespace std
{
class string{};
}
namespace boost
{
namespace asio
@@ -14,13 +10,13 @@ namespace boost
{
public:
typedef bool result_type;
explicit rfc2818_verification(const std::string& host) {}
explicit rfc2818_verification(const char * host) {}
};
class host_name_verification
{
public:
typedef bool result_type;
explicit host_name_verification(const std::string& host) {}
explicit host_name_verification(const char * host) {}
};
class stream
{
@@ -33,6 +29,15 @@ namespace boost
}
}
}

void goodTest1(boost::asio::ssl::stream sock){ // GOOD
sock.set_verify_mode(boost::asio::ssl::verify_peer);
sock.set_verify_callback(boost::asio::ssl::host_name_verification("host.name"));
}
void goodTest2(boost::asio::ssl::stream sock){ // GOOD
sock.set_verify_mode(boost::asio::ssl::verify_peer);
sock.set_verify_callback(boost::asio::ssl::rfc2818_verification("host.name"));
}
void badTest1(boost::asio::ssl::stream sock){ // BAD
sock.set_verify_mode(boost::asio::ssl::verify_peer);
}