Chris Smowton
bd77f572f1
Compile collections test for Java 11
2023-10-16 21:54:09 +01:00
Chris Smowton
8f985e0045
Java: restrict test to source classes
2023-10-13 20:30:28 +01:00
Chris Smowton
0510b0c825
Java: restrict test to source methods
...
Otherwise it finds standard library methods that depend on stdlib internals as to what happens to get extracted. In particular the extractor bump to JDK21 led to MethodHandles being in scope and a new method being found; seems better to avoid considering the standard library at all.
2023-10-13 20:30:28 +01:00
Michael Nebel
5c44f8bbad
Merge pull request #14370 from michaelnebel/java/enablethreatmodels
...
Java: Enable threat models for most Java queries.
2023-10-10 09:25:47 +02:00
Marcono1234
f3e5045259
Java: Add predicate MemberRefExpr::getReceiverExpr
2023-10-07 14:53:07 +02:00
Michael Nebel
40e63a63e2
Java: Re-factor most queries and tests to use threat models.
2023-10-04 14:01:58 +02:00
Michael Nebel
5b949b19f7
Java: Cleanup threat model taxanomy to align with the EDR.
2023-10-03 09:16:39 +02:00
Michael Nebel
5c700afa27
Java: Add some threat model dataflow tests.
2023-10-03 09:16:39 +02:00
Michael Nebel
537965c0e8
Java: Add some testfiles.
2023-10-03 09:16:39 +02:00
Michael Nebel
9a112dde66
Java: Introduce a class of dataflow nodes for the threat modeling.
2023-10-03 09:16:38 +02:00
Anders Schack-Mulligen
efb49fcd3e
Merge pull request #14336 from aschackmull/java/switch-rule-stmt-cfg
...
Java: Fix CFG for case rule statements.
2023-09-29 12:02:48 +02:00
Anders Schack-Mulligen
94556078f1
Java: Add guards logic for SwitchExpr default cases.
2023-09-28 14:21:04 +02:00
Anders Schack-Mulligen
917a15647e
Java: Fix CFG for rule statements.
2023-09-28 14:19:36 +02:00
Anders Schack-Mulligen
922a4e8ddf
Java: Add failing test
2023-09-28 14:15:56 +02:00
Asger F
6792592a15
Shared: add late checks for stateful in/out barriers
2023-09-27 14:38:28 +02:00
Asger F
6d6cdf89ce
Java: add a failing test for stateful in/out barriers
2023-09-27 14:38:21 +02:00
Anders Schack-Mulligen
13f7daf71e
Merge pull request #13982 from aschackmull/dataflow/typeflow-calledge-pruning
...
Dataflow: Add type-based call-edge pruning.
2023-09-21 13:33:08 +02:00
Chris Smowton
c5001a86f6
Fix test expectations
2023-09-14 20:45:54 +01:00
Chris Smowton
d9f7180b5c
Add missing diagnostic expectations
2023-09-14 17:42:00 +01:00
Chris Smowton
8f940c311a
Update expectations and add expected diagnostics
2023-09-14 17:42:00 +01:00
Chris Smowton
9670f20bd7
Add test for method reference whose LHS has unknown type
...
This can happen when imports or source classes are missing.
2023-09-14 17:42:00 +01:00
Chris Smowton
6ea7b195db
Add test for a module declaration made in a file named other than module-info.java
...
This triggers a weird corner case in our extractor, which used to throw a null pointer exception.
2023-09-14 17:42:00 +01:00
Chris Smowton
c47ba000d6
Add test exercising the case of a missing type used as an interface
...
This induces the TypeEnter phase to create an ErrorType with a parameter, which in turn used to cause a stack overflow in comparing the TypeWrapper objects involved.
Note the output remains somewhat broken, exposing an <any> type, but at least the overflow is resolved.
2023-09-14 17:42:00 +01:00
Chris Smowton
4b5651bde9
Add test for Java extracting ErrorType
2023-09-14 17:42:00 +01:00
Chris Smowton
c0f8973749
Add test for extracting a Java AST with an error expression
...
Also note that ErrorExpr can occur outside upgrade/downgrade scripts
2023-09-14 17:42:00 +01:00
Anders Schack-Mulligen
e677c1ffe6
Java: Add qltest
2023-09-13 15:43:46 +02:00
Kasper Svendsen
4bc6ca3d84
Java: Delete java test query which fails to compile
2023-09-01 11:21:06 +02:00
Jeroen Ketema
9d573e5544
Consolidate all InlineFlowTest libraries in the dataflow qlpack
2023-08-24 21:38:46 +02:00
Asger F
6c664e93ef
Merge pull request #14035 from asgerf/shared/variable-capture-nested
...
Variable capture: synchronize with aliases in nested scopes
2023-08-24 15:39:34 +02:00
Anders Schack-Mulligen
7af1e96943
Merge pull request #14032 from aschackmull/java/mad-nestednames
...
Java: Use nested names in MaD signatures.
2023-08-24 13:53:55 +02:00
Tony Torralba
6b58d11eeb
Merge pull request #13900 from atorralba/atorralba/java/jaxws-getaremotemethod-improv
...
Java: Improve `JaxWsEndpoint::getARemoteMethod`
2023-08-24 13:37:15 +02:00
Tony Torralba
3f9701cea7
Two fixes:
...
* Consider that the @WebService annotation (et al) can be in a supertype or interface
* getARemoteMethod should only return public methods, since protected, package-private, and private methods are not exposed
2023-08-24 11:35:52 +02:00
Anders Schack-Mulligen
ebe3f61ef6
Java: Fix models in qltest.
2023-08-24 09:44:43 +02:00
Asger F
ee1b3fd7e9
Java: update test after VariableCapture.qll change
2023-08-23 14:57:26 +02:00
Michael Nebel
a95aad51bd
Merge pull request #13546 from michaelnebel/java/withoutelement
...
Java: Support for With[out]Element for MaD.
2023-08-15 10:03:03 +02:00
Anders Schack-Mulligen
0ca3f3308b
Merge pull request #13478 from aschackmull/java/varcapture
...
Java: Add proper support for variable capture flow.
2023-08-08 16:22:56 +02:00
Michael Nebel
0ed724eb13
Java: Make a flow summary for Set.clear using WithoutElement and introduce appropriate tests.
2023-08-08 11:10:08 +02:00
Anders Schack-Mulligen
cd22bb3505
Java: Add another test case.
2023-08-08 10:00:55 +02:00
Tony Torralba
43b9199734
Java: Improved JaxWsEndpoint::getARemoteMethod
2023-08-07 10:21:58 +02:00
Michael Nebel
9c4d77a925
Java: Address review comments.
2023-08-04 13:47:30 +02:00
Anders Schack-Mulligen
0ae81eace3
Java: update fixed test
2023-08-03 10:07:00 +02:00
Anders Schack-Mulligen
c5990311ca
Java: Redesign and reimplement variable capture flow.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
70bef64e2a
Java: Fix ratpack flow.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
9a4de208ef
Java: Fix qltests.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
d1a616a70a
Java: Add proper support for variable capture flow.
2023-08-03 10:04:02 +02:00
Michael Nebel
4568cccd71
Java: Add some unit tests for sourceModelKindConfig.
2023-08-01 12:56:13 +02:00
Michael Nebel
fc66b6ef9c
Java: Update test comments to reflect the MaD syntax.
2023-08-01 12:03:44 +02:00
Michael Nebel
0604a85bb1
Java: Add WithoutElement model for List.clear and add appropriate test.
2023-08-01 12:03:44 +02:00
Tony Torralba
41f1315da9
Merge pull request #13772 from atorralba/atorralba/java/inputstream-wrapper-read-step
...
Java: Add taint steps for InputStream wrappers
2023-07-31 11:12:43 +02:00
Tony Torralba
8685242c16
Add tests
2023-07-26 14:13:43 +02:00
