libxml2-audit-parser-cpp

ESS-ENN · ESS-ENN · commit 30f9ae338357 · 2024-09-07T19:08:40.000+05:30
diff --git a/rules/cpp/security/libxml2-audit-parser-cpp.yml b/rules/cpp/security/libxml2-audit-parser-cpp.yml
@@ -0,0 +1,25 @@
+id: libxml2-audit-parser-cpp
+language: Cpp
+severity: info
+message: >-
+  The libxml2 library is used to parse XML. When auditing such code, make
+  sure that either the document being parsed is trusted or that the parsing
+  options are safe to consume untrusted documents. In such case make sure
+  DTD or XInclude documents cannot be loaded and there is no network access.
+note: >-
+  [CWE-611] Improper Restriction of XML External Entity Reference.
+  [REFERENCES]
+      - https://owasp.org/Top10/A05_2021-Security_Misconfiguration
+rule:
+  any:
+    - pattern: xmlParseInNodeContext($CUR, $SRC, $DATALEN, $XML_OPTIONS, $LST)
+    - pattern: xmlReadDoc($CUR, $SRC, $ENC, $XML_OPTIONS)
+    - pattern: xmlReadFd($FD, $SRC, $ENC, $XML_OPTIONS)
+    - pattern: xmlReadFile($SRC, $ENC, $XML_OPTIONS)
+    - pattern: xmlReadIO($IO_READ, $IO_CLOSE, $IO_CTX, $SRC, $ENC, $XML_OPTIONS)
+    - pattern: xmlReadMemory($SRC, $SIZE, $URL, $ENC, $XML_OPTIONS)
+    - pattern: xmlCtxtReadDoc($CTX, $CUR, $SRC, $ENC, $XML_OPTIONS)
+    - pattern: xmlCtxtReadFd($CTX, $FD, $SRC, $ENC, $XML_OPTIONS)
+    - pattern: xmlCtxtReadFile($CTX, $SRC, $ENC, $XML_OPTIONS)
+    - pattern: xmlCtxtReadIO($CTX, $IO_READ, $IO_CLOSE, $IO_CTX, $SRC, $ENC,$XML_OPTIONS)
+    - pattern: xmlCtxtReadMemory($CTX, $SRC, $SIZE, $URL, $ENC, $XML_OPTIONS)
diff --git a/tests/__snapshots__/libxml2-audit-parser-cpp-snapshot.yml b/tests/__snapshots__/libxml2-audit-parser-cpp-snapshot.yml
@@ -0,0 +1,12 @@
+id: libxml2-audit-parser-cpp
+snapshots:
+  ? |
+    xmlParseInNodeContext(cur_node->parent, xml_filtered.c_str(),
+    (int)xml_filtered.length(), 0, &pNewNode);
+  : labels:
+    - source: |-
+        xmlParseInNodeContext(cur_node->parent, xml_filtered.c_str(),
+        (int)xml_filtered.length(), 0, &pNewNode)
+      style: primary
+      start: 0
+      end: 103
diff --git a/tests/cpp/libxml2-audit-parser-cpp-test.yml b/tests/cpp/libxml2-audit-parser-cpp-test.yml
@@ -0,0 +1,8 @@
+id: libxml2-audit-parser-cpp
+valid:
+  - |
+    xmlCtxtReadMemory();
+invalid:
+  - |
+    xmlParseInNodeContext(cur_node->parent, xml_filtered.c_str(),
+    (int)xml_filtered.length(), 0, &pNewNode);
