Dave Bartolomeo
36c71a9592
Include hidden files when uploading Ruby pack
2024-09-03 11:47:02 -04:00
Jeroen Ketema
62766f68fc
Merge pull request #17138 from jketema/generic
...
C++: Support C11 `_Generic` expressions
2024-09-03 17:26:50 +02:00
Owen Mansel-Chan
f5c195d830
Remove change note from 1.15.md
...
We will include this change note when there is documentation about how to use the functionality.
2024-09-03 16:24:55 +01:00
Jeroen Ketema
52819432c0
C++: Address review comment
2024-09-03 17:18:18 +02:00
Simon Friis Vindum
d5948d2d95
C++: Add change-note note for realloc as data-flow function
2024-09-03 16:15:05 +02:00
am0o0
386e45a11e
delete bzip2 as it is not updated for more than three years so it is not in the priority
2024-09-03 15:33:14 +02:00
am0o0
81283d59ab
remove more unused imports, add tests for zstd, add flow steps for zstd
...
zstd is not finilized
2024-09-03 15:26:38 +02:00
Michael B. Gale
5e390a3b01
Merge pull request #17359 from github/mbg/bazel/dependencies/rules_go-0.50.0
...
Bazel/Go: Bump `rules_go` to 0.50.0
2024-09-03 14:00:18 +01:00
am0o0
4fc971dbcb
remove xz(lzma)
2024-09-03 14:48:52 +02:00
Anders Schack-Mulligen
a0f0854fdb
Dataflow: Fix minor typo.
2024-09-03 14:26:02 +02:00
am0o0
6c97096642
remove unused imports, add tests for libarchive
2024-09-03 14:16:25 +02:00
Felicity Chapman
68cbe35d96
Fix a bad link
2024-09-03 13:08:07 +01:00
Simon Friis Vindum
037912fd2d
C++: Add data-flow test for realloc
2024-09-03 14:02:03 +02:00
Felicity Chapman
44ca530087
Update template to match changes to landing page
2024-09-03 12:59:29 +01:00
Felicity Chapman
f44905324e
Add article on running queries
2024-09-03 12:55:56 +01:00
Felicity Chapman
5f1e62aefe
Update landing page to focus on language
2024-09-03 12:54:45 +01:00
Michael B. Gale
c05c1d5087
Bazel: Bump rules_go to 0.50.0
2024-09-03 12:42:40 +01:00
am0o0
9531701129
delete miniz support because there is no good documents and i don't have enough time as the library is not popular enough. add tests for minizip lib
2024-09-03 13:08:00 +02:00
Michael Nebel
7bf7df2f99
C#/Java: Add model generator option for making content based summaries.
2024-09-03 12:58:13 +02:00
Michael Nebel
6e8941ea9d
C#: Add a couple more testcases.
2024-09-03 12:58:09 +02:00
Michael Nebel
4123876343
C#: Add content based summary generation test.
2024-09-03 12:58:06 +02:00
Michael Nebel
486246c82d
C#: Sync changes and make C# implementation.
2024-09-03 12:58:04 +02:00
Michael Nebel
5ddcb16cd6
Java: Add content based model generation test.
2024-09-03 12:58:01 +02:00
Geoffrey White
1ff6c4c090
C++: Restore change and see effect on test.
2024-09-03 11:55:06 +01:00
Geoffrey White
5bd58f044e
C++: Add a direct test of getOverlap and a test case for it.
2024-09-03 11:52:20 +01:00
am0o0
e85ca79d77
add tests for brotli
2024-09-03 12:28:16 +02:00
Tom Hvitved
26c5e7b2d1
Merge pull request #17308 from hvitved/dataflow/flow-through-restriction
...
Data flow: Reduce non-linear recursion in `fwdFlow0`
2024-09-03 11:30:57 +02:00
Simon Friis Vindum
78068a488f
C++: Make realloc a data-flow function
2024-09-03 11:25:18 +02:00
Cornelius Riemenschneider
2dfca8ab20
Merge branch 'main' into criemen/rename-java
2024-09-03 11:04:29 +02:00
Paolo Tranquilli
59423c692f
Swift: upgrade prebuilt toolchain to 5.10.1
2024-09-03 10:38:58 +02:00
Tom Hvitved
07fcd81e7e
Address review comments
2024-09-03 10:13:09 +02:00
Michael Nebel
6365e5edff
Java: Initial implementation of content based model generation.
2024-09-03 09:45:11 +02:00
Michael Nebel
4bdf21b022
Java: Add Content Flow module.
2024-09-03 09:45:07 +02:00
am0o0
49eaaf55a5
Merge branch 'amammad-cpp-bombs' of https://github.com/am0o0/codeql into amammad-cpp-bombs
2024-09-03 09:13:08 +02:00
am0o0
8c1c537150
finilize tests for zlib
2024-09-03 09:12:54 +02:00
am0o0
89e842b147
finilize tests for zlib
2024-09-03 09:12:13 +02:00
Porcupiney Hairs
e2dd126962
Python: Pycurl SSL Disabled
2024-09-03 03:41:23 +05:30
Porcupiney Hairs
f86570f6e7
WIP: Python: CORS Bypass
...
This PR adds a query to detect a Cross Origin Resource Sharing(CORS) policy bypass due to an incorrect check.
This PR attempts to detect the vulnerability pattern found in CVE-2022-3457
```python
if request.method in ['POST', 'PUT', 'PATCH', 'DELETE']:
origin = request.headers.get('Origin', None)
if origin and not origin.startswith(request.base):
raise cherrypy.HTTPError(403, 'Unexpected Origin header')
```
In this case, a value obtained from a header is compared using `startswith` call. This comparision is easily bypassed resulting in a CORS bypass. Given that similar bugs have been found in other languages as well, I think this PR would be a great addition to the exisitng python query pack.
The databases for CVE-2022-3457 can be downloaded from
```
https://filetransfer.io/data-package/i4Mfepls#link
https://file.io/V67T4SSgmExF
```
2024-09-03 03:11:35 +05:30
Jeroen Ketema
ffab199ea8
Merge pull request #17348 from jketema/test-fix
...
C++: Update expected test results after #17347
2024-09-02 21:53:13 +02:00
Jeroen Ketema
ae7bf6c97d
C++: Update expected test results after #17347
2024-09-02 21:17:55 +02:00
Tom Hvitved
1057bb443f
Data flow: Simplify FwdFlowIn interface
2024-09-02 16:10:34 +02:00
Simon Friis Vindum
ee6c255a7c
Merge pull request #17328 from paldepind/tweak-unbounded-barrier
...
C++: Tweak the `bounded` barrier
2024-09-02 14:30:44 +02:00
Simon Friis Vindum
e294c8e68f
Merge pull request #17347 from paldepind/test-for-uninitialized-local
...
C++: Add test for cpp/uninitialized-local and va_copy
2024-09-02 14:00:34 +02:00
Geoffrey White
c082c256a2
Merge pull request #17244 from geoffw0/swiftdoc2
...
Swift: Work around some QHelp rendering issues.
2024-09-02 12:26:23 +01:00
Simon Friis Vindum
660869e834
C++: Add test for cpp/uninitialized-local and va_copy
2024-09-02 13:25:02 +02:00
Tamás Vajk
39a73303d1
Merge pull request #17333 from github/criemen/rename-csharp
...
C#: Rename integration test directories.
2024-09-02 13:04:58 +02:00
Henry Mercer
4ebfafbec2
Merge pull request #17336 from github/henrymercer/rc-3.15-mergeback
...
Merge `rc/3.15` back into `main`
2024-09-02 11:43:19 +01:00
Michael Nebel
4f4c7bfbb9
C#: Update expected test output.
2024-09-02 11:13:16 +02:00
Michael Nebel
6e81d74558
C#: Add support for synthetic fields in MaD for C#.
2024-09-02 11:13:11 +02:00
Michael Nebel
0d343c5ce1
C#: Add external flow tests for synthetic fields.
2024-09-02 11:13:06 +02:00
