Add PR_11_csharp for csharp

PR_11_csharp/compiled-codeql-dataset/.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+    "dotnet.defaultSolution": "codeql-dataset.sln"
+}

PR_11_csharp/compiled-codeql-dataset/codeql-dataset.csproj

@@ -0,0 +1,11 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net7.0</TargetFramework>
+    <RootNamespace>codeql_dataset</RootNamespace>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+</Project>

PR_11_csharp/compiled-codeql-dataset/codeql-dataset.sln

@@ -0,0 +1,25 @@
+
+Microsoft Visual Studio Solution File, Format Version 12.00
+# Visual Studio Version 17
+VisualStudioVersion = 17.5.001.0
+MinimumVisualStudioVersion = 10.0.40219.1
+Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "codeql-dataset", "codeql-dataset.csproj", "{2725E48B-1276-4645-958B-DE0F4D278A5E}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{2725E48B-1276-4645-958B-DE0F4D278A5E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{2725E48B-1276-4645-958B-DE0F4D278A5E}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{2725E48B-1276-4645-958B-DE0F4D278A5E}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{2725E48B-1276-4645-958B-DE0F4D278A5E}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+	GlobalSection(ExtensibilityGlobals) = postSolution
+		SolutionGuid = {51B6C554-6C47-47F4-B13B-C4F0C937CA70}
+	EndGlobalSection
+EndGlobal

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/AssemblyPathInjectionBad.cs

@@ -0,0 +1,28 @@
+using System;
+using System.Web;
+using System.Reflection;
+
+public class AssemblyPathInjectionHandler : HttpHandler {
+  public void ProcessRequest(HttpContext ctx) {
+    string assemblyPath = (string)ctx.Request;
+
+    //{fact rule=assembly-path-injection@v1.0 defects=1}
+    // BAD: Load assembly based on user input
+    var badAssembly = Assembly.LoadFile(assemblyPath);
+
+    // Method called on loaded assembly. If the user can control the loaded assembly, then this
+    // could result in a remote code execution vulnerability
+    MethodInfo m = badAssembly.GetType("Config").GetMethod("GetCustomPath");
+    Object customPath = m.Invoke(null, null);
+    // ...
+  }
+    //{/fact}
+}
+
+public class HttpContext
+{
+    public static object? Current { get; internal set; }
+    public object? Request { get; internal set; }
+    public object? Response { get; internal set; }
+    public object? Session { get; internal set; }
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/AssemblyPathInjectionGood.cs

@@ -0,0 +1,25 @@
+using System;
+using System.Web;
+using System.Reflection;
+
+public class AssemblyPathInjectionHandler1 : IHttpHandler {
+  public void ProcessRequest(HttpContext ctx) {
+    string configType = (string)ctx.Request;
+
+    if (configType.Equals("configType1") || configType.Equals("configType2")) {
+      //{fact rule=assembly-path-injection@v1.0 defects=0}
+      // GOOD: Loaded assembly is one of the two known safe options
+      var safeAssembly = Assembly.LoadFile(@"C:\SafeLibraries\" + configType + ".dll");
+
+      // Code execution is limited to one of two known and vetted assemblies
+      MethodInfo m = safeAssembly.GetType("Config").GetMethod("GetCustomPath");
+      Object customPath = m.Invoke(null, null);
+      // ...
+    }
+    //{/fact}
+  }
+}
+
+public interface IHttpHandler
+{
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/CommandInjection.cs

@@ -0,0 +1,14 @@
+using System;
+using System.Web;
+using System.Diagnostics;
+
+public class CommandInjectionHandler : IHttpHandler
+{
+    public void ProcessRequest(HttpContext ctx)
+    {
+        //{fact rule=os-command-injection@v1.0 defects=1}
+        string param = (string)ctx.Request;
+        Process.Start("process.exe", "/c " + param);
+         //{/fact}
+    }
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/CookieWithOverlyBroadDomain.cs

@@ -0,0 +1,15 @@
+using System.Web;
+
+class CookieWithOverlyBroadDomain
+{
+    static public void AddCookie()
+    {
+        //{fact rule=incorrect-authentication-exploitation@v1.0 defects=1}
+        System.Web.HttpCookie cookie1 = new HttpCookie("sessionID");
+        cookie1.Domain = "online-bank.com";
+
+        HttpCookie cookie2 = new HttpCookie("sessionID");
+        cookie2.Domain = ".ebanking.online-bank.com";
+        //{/fact}
+    }
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/CookieWithOverlyBroadDomainFix.cs

@@ -0,0 +1,14 @@
+using System.Web;
+
+class CookieWithOverlyBroadDomainFix
+{
+    //{fact rule=incorrect-authentication-exploitation@v1.0 defects=0}
+    static public void AddCookie()
+    {
+        HttpCookie cookie = new HttpCookie("sessionID")
+        {
+            Domain = "ebanking.online-bank.com"
+        };
+    }
+    //{/fact}
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/CookieWithOverlyBroadPath.cs

@@ -0,0 +1,15 @@
+using System.Web;
+
+class CookieWithOverlyBroadPath
+{
+    static public void AddCookie()
+    {
+        //{fact rule=incorrect-authentication-exploitation@v1.0 defects=1}
+        HttpCookie cookie = new HttpCookie("sessionID")
+        {
+            Path = "/"
+        };
+
+        //{/fact}
+    }
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/CookieWithOverlyBroadPathFix.cs

@@ -0,0 +1,12 @@
+using System.Web;
+
+class CookieWithOverlyBroadPathFix
+{
+    //{fact rule=incorrect-authentication-exploitation@v1.0 defects=0}
+    static public void AddCookie()
+    {
+        HttpCookie cookie = new HttpCookie("sessionID");
+        cookie.Path = "/ebanking";
+    }
+    //{/fact}
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/ExposureOfPrivateInformation.cs

@@ -0,0 +1,23 @@
+using System.Text;
+using System.Web;
+
+
+public class PrivateInformationHandler : IHttpHandler
+{
+
+    public void ProcessRequest(HttpContext ctx)
+    {
+        //{fact rule=sensitive-information-leak@v1.0 defects=0}
+        string address = (string)ctx.Request;
+        logger.Info("User has address: " + address);
+        //{/fact}
+    }
+}
+
+internal class logger
+{
+    internal static void Info(string v)
+    {
+        throw new NotImplementedException();
+    }
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/HardcodedEncryptionKeyBad.cs

@@ -0,0 +1,13 @@
+using System.Security.Cryptography;
+class D{
+public void method_D()
+{
+var b = new AesCryptoServiceProvider()
+{
+    //{fact rule=sensitive-information-leak@v1.0 defects=1}
+    // BAD: explicit key assignment, hard-coded value
+    Key = new byte[] { 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00 }
+    //{/fact}
+};
+}
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/InadequateRSAPadding.cs

@@ -0,0 +1,45 @@
+using System;
+using System.Security.Cryptography;
+
+namespace InadequateRSAPadding
+{
+    class Main
+    {
+
+        static public byte[]? EncryptWithRSAAndNoPadding(byte[] plaintext, RSAParameters key)
+        {
+             //{fact rule=insecure-cryptography@v1.0 defects=1}
+            try
+            {
+                RSACryptoServiceProvider rsa = new RSACryptoServiceProvider();
+                rsa.ImportParameters(key);
+                return rsa.Encrypt(plaintext, false); // BAD
+            }
+            catch (CryptographicException e)
+            {
+                Console.WriteLine(e.Message);
+                return null;
+            }
+             //{/fact}
+        }
+
+        static public byte[]? EncryptWithRSAAndPadding(byte[] plaintext, RSAParameters key)
+        {
+             //{fact rule=insecure-cryptography@v1.0 defects=0}
+            try
+            {
+                RSACryptoServiceProvider rsa = new RSACryptoServiceProvider();
+                rsa.ImportParameters(key);
+                return rsa.Encrypt(plaintext, true); // GOOD
+            }
+            catch (CryptographicException e)
+            {
+                Console.WriteLine(e.Message);
+                return null;
+            }
+             //{/fact}
+        }
+
+    }
+
+}

PR_11_csharp/compiled-codeql-dataset/codeql_csharp/InsecureRandomness.cs

@@ -0,0 +1,35 @@
+using System.Security.Cryptography;
+
+string GeneratePassword()
+{
+    //{fact rule=weak-random-number-generation@v1.0 defects=1}
+    // BAD: Password is generated using a cryptographically insecure RNG
+    Random gen = new Random();
+    string password = "mypassword" + gen.Next();
+    //{/fact}
+
+    //{fact rule=weak-random-number-generation@v1.0 defects=0}
+    // GOOD: Password is generated using a cryptographically secure RNG
+    using (RNGCryptoServiceProvider crypto = new RNGCryptoServiceProvider())
+    {
+        byte[] randomBytes = new byte[sizeof(int)];
+        crypto.GetBytes(randomBytes);
+        password = "mypassword" + BitConverter.ToInt32(randomBytes);
+    }
+    //{/fact}
+
+    //{fact rule=weak-random-number-generation@v1.0 defects=1}
+    // BAD: Membership.GeneratePassword generates a password with a bias
+    password = Membership.GeneratePassword(12, 3);
+
+    return password;
+    //{/fact}
+}
+
+internal class Membership
+{
+    internal static string GeneratePassword(int v1, int v2)
+    {
+        throw new NotImplementedException();
+    }
+}