Additional crypto libs for python (#73)

* Additional crypto libs

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

* Additional desc tags

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

* Update eclipse cdt jar

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

---------

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

Author: prabhu

build.sbt

@@ -1,6 +1,6 @@
 name                     := "chen"
 ThisBuild / organization := "io.appthreat"
-ThisBuild / version      := "2.0.10"
+ThisBuild / version      := "2.0.11"
 ThisBuild / scalaVersion := "3.4.1"
 
 val cpgVersion = "1.0.0"

codemeta.json

@@ -7,7 +7,7 @@
   "downloadUrl": "https://github.com/AppThreat/chen",
   "issueTracker": "https://github.com/AppThreat/chen/issues",
   "name": "chen",
-  "version": "2.0.10",
+  "version": "2.0.11",
   "description": "Code Hierarchy Exploration Net (chen) is an advanced exploration toolkit for your application source code and its dependency hierarchy.",
   "applicationCategory": "code-analysis",
   "keywords": [

meta.yaml

@@ -1,4 +1,4 @@
-{% set version = "2.0.10" %}
+{% set version = "2.0.11" %}
 
 package:
   name: chen

platform/frontends/c2cpg/lib/README.md

@@ -0,0 +1,3 @@
+org.eclipse.cdt jars were downloaded from
+
+https://download.eclipse.org/tools/cdt/releases/11.5/cdt-11.5.0/plugins/

platform/frontends/c2cpg/lib/org.eclipse.cdt.core_8.3.100.202309251502.jar platform/frontends/c2cpg/lib/org.eclipse.cdt.core_8.4.0.202402110645.jar

@@ -338,6 +338,14 @@ class CdxPass(atom: Cpg) extends CpgPass(atom):
                                             atom.method.fullName(bpkg).newTagNode(t).store()(
                                               dstGraph
                                             )
+                                            if language == Languages.PYTHON || language == Languages.PYTHONSRC
+                                            then
+                                                atom.call.where(
+                                                  _.methodFullName(bpkg)
+                                                ).newTagNode(t).store()(dstGraph)
+                                                atom.identifier.typeFullName(bpkg).newTagNode(
+                                                  t
+                                                ).store()(dstGraph)
                                     }
                                 end if
                             }

platform/frontends/x2cpg/src/main/scala/io/appthreat/x2cpg/passes/taggers/CdxPass.scala

@@ -155,15 +155,20 @@ class EasyTagsPass(atom: Cpg) extends CpgPass(atom):
             ).newTagNode("crypto-algorithm").store()(dstGraph)
         end if
         if language == Languages.PYTHON || language == Languages.PYTHONSRC then
-            atom.identifier.typeFullName("cryptography.*").newTagNode("crypto").store()(dstGraph)
-            atom.call.methodFullName("cryptography.*").newTagNode("crypto").store()(dstGraph)
+            val known_crypto_libs = "(cryptography|Crypto|ecdsa|nacl).*"
+            atom.identifier.typeFullName(known_crypto_libs).newTagNode(
+              "crypto"
+            ).store()(dstGraph)
+            atom.call.methodFullName(known_crypto_libs).newTagNode(
+              "crypto"
+            ).store()(dstGraph)
             atom.call.methodFullName(
-              "cryptography.*(generate|encrypt|decrypt|derive|sign|public_bytes|private_bytes|exchange).*"
+              s"${known_crypto_libs}(generate|encrypt|decrypt|derive|sign|public_bytes|private_bytes|exchange|new|update|export_key|import_key|from_string|from_pem|to_pem).*"
             ).newTagNode(
               "crypto-generate"
             ).store()(dstGraph)
             atom.call.name("[A-Z0-9]+").methodFullName(
-              "cryptography.*(primitives|serialization).*"
+              s"${known_crypto_libs}(primitives|serialization).*"
             ).argument.inCall.newTagNode(
               "crypto-algorithm"
             ).store()(dstGraph)

platform/frontends/x2cpg/src/main/scala/io/appthreat/x2cpg/passes/taggers/EasyTagsPass.scala

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "appthreat-chen"
-version = "2.0.10"
+version = "2.0.11"
 description = "Code Hierarchy Exploration Net (chen)"
 authors = ["Team AppThreat <cloud@appthreat.com>"]
 license = "Apache-2.0"