diff --git a/rust/ql/lib/codeql/rust/frameworks/stdlib/alloc.model.yml b/rust/ql/lib/codeql/rust/frameworks/stdlib/alloc.model.yml index 74432649bd83..78d1cbdec29e 100644 --- a/rust/ql/lib/codeql/rust/frameworks/stdlib/alloc.model.yml +++ b/rust/ql/lib/codeql/rust/frameworks/stdlib/alloc.model.yml @@ -55,4 +55,14 @@ extensions: - ["::add", "Argument[0].Reference", "ReturnValue", "taint", "manual"] # Vec - ["alloc::vec::from_elem", "Argument[0]", "ReturnValue.Element", "value", "manual"] - - ["::deref", "Argument[self].Reference.Element", "ReturnValue.Reference.Element", "value", "manual"] \ No newline at end of file + - ["::deref", "Argument[self].Reference.Element", "ReturnValue.Reference.Element", "value", "manual"] + - addsTo: + pack: codeql/rust-all + extensible: neutralModel + data: + - ["::from", "sink", "manual"] + - ["::from", "sink", "manual"] + - ["::from", "sink", "manual"] + - ["::from", "sink", "manual"] + - ["::split_off", "sink", "manual"] + - ["::split_off", "sink", "manual"] diff --git a/rust/ql/lib/codeql/rust/frameworks/stdlib/core.model.yml b/rust/ql/lib/codeql/rust/frameworks/stdlib/core.model.yml index cae28f9d7122..895ebe98bd6b 100644 --- a/rust/ql/lib/codeql/rust/frameworks/stdlib/core.model.yml +++ b/rust/ql/lib/codeql/rust/frameworks/stdlib/core.model.yml @@ -165,11 +165,7 @@ extensions: extensible: neutralModel data: - ["::map", "sink", "manual"] - - ["::from", "sink", "manual"] - - ["::from", "sink", "manual"] - ["::from", "sink", "manual"] - - ["::from", "sink", "manual"] - - ["::from", "sink", "manual"] - addsTo: pack: codeql/rust-all extensible: excludeFieldTaintStep diff --git a/rust/ql/lib/codeql/rust/security/UncontrolledAllocationSizeExtensions.qll b/rust/ql/lib/codeql/rust/security/UncontrolledAllocationSizeExtensions.qll index 0390ca779328..c6251563ea6f 100644 --- a/rust/ql/lib/codeql/rust/security/UncontrolledAllocationSizeExtensions.qll +++ b/rust/ql/lib/codeql/rust/security/UncontrolledAllocationSizeExtensions.qll @@ -63,17 +63,4 @@ module UncontrolledAllocationSize { branch = false ) } - - /** - * A barrier for uncontrolled allocation size flow into particular functions. - */ - private class ModeledBarrier extends Barrier { - ModeledBarrier() { - exists(MethodCall c | - c.getStaticTarget().getCanonicalPath() = - ["::split_off", "::split_off"] and - this.asExpr() = c.getAnArgument() - ) - } - } }