diff --git a/sonar-keyware-plugins-cxx/src/main/java/com/keyware/sonar/cxx/rules/checkers/SendMessageChecker.java b/sonar-keyware-plugins-cxx/src/main/java/com/keyware/sonar/cxx/rules/checkers/SendMessageChecker.java new file mode 100644 index 0000000..e8d1b59 --- /dev/null +++ b/sonar-keyware-plugins-cxx/src/main/java/com/keyware/sonar/cxx/rules/checkers/SendMessageChecker.java @@ -0,0 +1,74 @@ +/* + * Copyright (c) 2023 - 2024. KeyWare.Co.Ltd All rights reserved. + * 项目名称:信息安全性设计准则检查插件 + * 项目描述:用于检查源代码的安全性设计准则的Sonarqube插件 + * 版权说明:本软件属北京关键科技股份有限公司所有,在未获得北京关键科技股份有限公司正式授权情况下,任何企业和个人,不能获取、阅读、安装、传播本软件涉及的任何受知识产权保护的内容。 + */ + +package com.keyware.sonar.cxx.rules.checkers; + +import com.sonar.cxx.sslr.api.AstNode; +import com.sonar.cxx.sslr.api.Grammar; +import org.sonar.check.Priority; +import org.sonar.check.Rule; +import org.sonar.cxx.parser.CxxGrammarImpl; +import org.sonar.cxx.squidbridge.annotations.ActivatedByDefault; +import org.sonar.cxx.squidbridge.annotations.SqaleConstantRemediation; +import org.sonar.cxx.squidbridge.checks.SquidCheck; + +import javax.annotation.Nonnull; +import java.util.ArrayList; +import java.util.List; + +/** + * TODO SendMessageChecker + * + * @author RenFengJiang + * @date 2024/1/18 + */ +@Rule(key = "SendMessageChecker", name = "发送敏感信息前应对敏感信息进行加密", description = "发送敏感信息前对敏感信息进行加密或采用加密通信传输敏感信息", priority = Priority.INFO, tags = {"28suo"}) +@ActivatedByDefault +@SqaleConstantRemediation("5min") +public class SendMessageChecker extends SquidCheck { + @Override + public void init() { + // 指定当前访问器需要访问的节点类型,functionBody(函数)主体节点 + this.subscribeTo( + CxxGrammarImpl.functionBody + ); + } + + /** + * 访问AST节点 + * + * @param node 要处理的AST节点,该节点类型为通过subscribeTo方法订阅的类型 + */ + @Override + public void visitNode(@Nonnull AstNode node) { + //创建集合存入违规敏感字段 + List lists = new ArrayList(); + lists.add("weapon"); + lists.add("unit"); + lists.add("param"); + //获取到所有的表达式 + List descendants = node.getDescendants(CxxGrammarImpl.expression); + for (AstNode des:descendants) { + //判断表达式是否是send发送信息 + if("send".equals(des.getTokenValue())){ + //获取其中的参数 + AstNode firstDescendant = des.getFirstDescendant(CxxGrammarImpl.initializerList); + List children = firstDescendant.getChildren(); + AstNode astNode = children.get(2); + //判断其中的参数类型 + if("STRING".equals(astNode.getName())){ + + }else { + if(lists.contains(astNode.getTokenValue())){ + getContext().createLineViolation(this,"发送敏感信息前应对敏感信息进行加密",des); + } + } + } + } + } + +} diff --git a/sonar-keyware-plugins-cxx/src/test/java/com/keyware/sonar/cxx/rules/checkers/SendMessageCheckerTest.java b/sonar-keyware-plugins-cxx/src/test/java/com/keyware/sonar/cxx/rules/checkers/SendMessageCheckerTest.java new file mode 100644 index 0000000..992ef40 --- /dev/null +++ b/sonar-keyware-plugins-cxx/src/test/java/com/keyware/sonar/cxx/rules/checkers/SendMessageCheckerTest.java @@ -0,0 +1,34 @@ +/* + * Copyright (c) 2023 - 2024. KeyWare.Co.Ltd All rights reserved. + * 项目名称:信息安全性设计准则检查插件 + * 项目描述:用于检查源代码的安全性设计准则的Sonarqube插件 + * 版权说明:本软件属北京关键科技股份有限公司所有,在未获得北京关键科技股份有限公司正式授权情况下,任何企业和个人,不能获取、阅读、安装、传播本软件涉及的任何受知识产权保护的内容。 + */ + +package com.keyware.sonar.cxx.rules.checkers; + +import com.keyware.sonar.cxx.CxxFileTesterHelper; +import org.junit.jupiter.api.Test; +import org.sonar.cxx.CxxAstScanner; +import org.sonar.cxx.squidbridge.api.SourceFile; +import org.sonar.cxx.squidbridge.checks.CheckMessagesVerifier; + +import java.io.IOException; + +/** + * TODO SendMessageCheckerTest + * + * @author RenFengJiang + * @date 2024/1/18 + */ +public class SendMessageCheckerTest { + @Test + public void checkTest() throws IOException { + var checker = new SendMessageChecker(); + var tester = CxxFileTesterHelper.create("SendMessageChecker.cc"); + SourceFile file = CxxAstScanner.scanSingleInputFile(tester.asInputFile(), checker); + CheckMessagesVerifier.verify(file.getCheckMessages()) + .next().atLine(13).withMessage("发送敏感信息前应对敏感信息进行加密") + .noMore(); + } +} diff --git a/sonar-keyware-plugins-cxx/src/test/resources/com/keyware/sonar/cxx/rules/checkers/SendMessageChecker.cc b/sonar-keyware-plugins-cxx/src/test/resources/com/keyware/sonar/cxx/rules/checkers/SendMessageChecker.cc new file mode 100644 index 0000000..85eaa07 --- /dev/null +++ b/sonar-keyware-plugins-cxx/src/test/resources/com/keyware/sonar/cxx/rules/checkers/SendMessageChecker.cc @@ -0,0 +1,19 @@ +#include +#include +#include +#include + +int main() { + int socket_fd = socket(AF_INET, SOCK_STREAM, 0); + sockaddr_in server_address; + // 初始化服务器地址结构体... + connect(socket_fd, (struct sockaddr*)&server_address, sizeof(server_address)); + + std::string param = "Hello, Server!"; + send(socket_fd,param.c_str(), param.size()); // 发送信息 + + // ...其他处理,如关闭连接等 + close(socket_fd); + + return 0; +} \ No newline at end of file