Rust: convert data extensions to JSON

rust/ql/lib/codeql/rust/dataflow/internal/empty.model.json

@@ -0,0 +1,41 @@
+{
+  "extensions": [
+    // Make sure that the extensible model predicates have at least one definition
+    // to avoid errors about undefined extensionals.
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sourceModel"
+      },
+      "data": []
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sinkModel"
+      },
+      "data": []
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "summaryModel"
+      },
+      "data": []
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "barrierModel"
+      },
+      "data": []
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "barrierGuardModel"
+      },
+      "data": []
+    }
+  ]
+}

rust/ql/lib/codeql/rust/frameworks/actix-web.model.json

@@ -0,0 +1,48 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sourceModel"
+      },
+      "data": [
+        ["<actix_web::route::Route>::to", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        // Actix attributes such as `get` expand to this `to` call on the handler.
+        ["<actix_web::resource::Resource>::to", "Argument[0].Parameter[0..7]", "remote", "manual"]
+      ]
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sinkModel"
+      },
+      "data": [
+        ["<actix_web::types::html::Html>::new", "Argument[0]", "html-injection", "manual"]
+      ]
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "summaryModel"
+      },
+      "data": [
+        ["<actix_web::types::path::Path>::into_inner", "Argument[self]", "ReturnValue", "taint", "manual"]
+      ]
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "neutralModel"
+      },
+      "data": [
+        ["<actix_web::info::ConnectionInfo as actix_web::extract::FromRequest>::from_request", "sink", "manual"],
+        ["<actix_web::request::HttpRequest>::connection_info", "sink", "manual"],
+        ["<actix_web::request::HttpRequest>::full_url", "sink", "manual"],
+        ["<actix_web::request::HttpRequest>::url_for", "sink", "manual"],
+        ["<actix_web::request::HttpRequest>::url_for_static", "sink", "manual"],
+        ["<actix_web::rmap::ResourceMap>::url_for", "sink", "manual"],
+        ["<actix_web::service::ServiceRequest>::connection_info", "sink", "manual"]
+      ]
+    }
+  ]
+}

rust/ql/lib/codeql/rust/frameworks/asyncstd/fs.model.json

@@ -0,0 +1,57 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sourceModel"
+      },
+      "data": [
+        ["async_std::fs::read::read", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "file", "manual"],
+        ["async_std::fs::read_to_string::read_to_string", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "file", "manual"],
+        ["async_std::fs::read_link::read_link", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "file", "manual"],
+        ["<async_std::fs::dir_entry::DirEntry>::path", "ReturnValue", "file", "manual"],
+        ["<async_std::fs::dir_entry::DirEntry>::file_name", "ReturnValue", "file", "manual"],
+        ["<async_std::fs::file::File>::open", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "file", "manual"],
+        ["<async_std::fs::open_options::OpenOptions>::open", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "file", "manual"]
+      ]
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sinkModel"
+      },
+      "data": [
+        ["async_std::fs::copy::copy", "Argument[0,1]", "path-injection", "manual"],
+        ["async_std::fs::create_dir::create_dir", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::create_dir_all::create_dir_all", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::hard_link::hard_link", "Argument[0,1]", "path-injection", "manual"],
+        ["async_std::fs::metadata::metadata", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::read::read", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::read_dir::read_dir", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::read_link::read_link", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::read_to_string::read_to_string", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::remove_dir::remove_dir", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::remove_dir_all::remove_dir_all", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::remove_file::remove_file", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::rename::rename", "Argument[0,1]", "path-injection", "manual"],
+        ["async_std::fs::set_permissions::set_permissions", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::symlink_metadata::symlink_metadata", "Argument[0]", "path-injection", "manual"],
+        ["async_std::fs::write::write", "Argument[0]", "path-injection", "manual"],
+        ["<async_std::fs::dir_builder::DirBuilder>::create", "Argument[0]", "path-injection", "manual"],
+        ["<async_std::fs::file::File>::create", "Argument[0]", "path-injection", "manual"],
+        ["<async_std::fs::file::File>::open", "Argument[0]", "path-injection", "manual"],
+        ["<async_std::fs::open_options::OpenOptions>::open", "Argument[0]", "path-injection", "manual"]
+      ]
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "summaryModel"
+      },
+      "data": [
+        ["async_std::fs::canonicalize::canonicalize", "Argument[0].OptionalStep[normalize-path]", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "taint", "manual"],
+        ["async_std::fs::canonicalize::canonicalize", "Argument[0].OptionalBarrier[normalize-path]", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "taint", "manual"]
+      ]
+    }
+  ]
+}

rust/ql/lib/codeql/rust/frameworks/asyncstd/io.model.json

@@ -0,0 +1,14 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "summaryModel"
+      },
+      "data": [
+        ["<async_std::io::read::ReadExt>::read", "Argument[self]", "Argument[0].Reference", "taint", "manual"],
+        ["<async_std::io::read::ReadExt>::read", "Argument[self].Reference", "Argument[0].Reference", "taint", "manual"]
+      ]
+    }
+  ]
+}

rust/ql/lib/codeql/rust/frameworks/asyncstd/net.model.json

@@ -0,0 +1,13 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sourceModel"
+      },
+      "data": [
+        ["<async_std::net::tcp::stream::TcpStream>::connect", "ReturnValue.Future.Field[core::result::Result::Ok(0)]", "remote", "manual"]
+      ]
+    }
+  ]
+}

rust/ql/lib/codeql/rust/frameworks/axum.model.json

@@ -0,0 +1,39 @@
+{
+  "extensions": [
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "sourceModel"
+      },
+      "data": [
+        // Get
+        ["axum::routing::method_routing::get", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        ["<axum::routing::method_routing::MethodRouter>::get", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        // Post
+        ["axum::routing::method_routing::post", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        ["<axum::routing::method_routing::MethodRouter>::post", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        // Put
+        ["axum::routing::method_routing::put", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        ["<axum::routing::method_routing::MethodRouter>::put", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        // Delete
+        ["axum::routing::method_routing::delete", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        ["<axum::routing::method_routing::MethodRouter>::delete", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        // Patch
+        ["axum::routing::method_routing::patch", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        ["<axum::routing::method_routing::MethodRouter>::patch", "Argument[0].Parameter[0..7]", "remote", "manual"],
+        // on
+        ["axum::routing::method_routing::on", "Argument[1].Parameter[0..7]", "remote", "manual"],
+        ["<axum::routing::method_routing::MethodRouter>::on", "Argument[1].Parameter[0..7]", "remote", "manual"]
+      ]
+    },
+    {
+      "addsTo": {
+        "pack": "codeql/rust-all",
+        "extensible": "excludeFieldTaintStep"
+      },
+      "data": [
+        ["axum::extract::state::State(0)"]
+      ]
+    }
+  ]
+}