1156 Commits

Author	SHA1	Message	Date
Asger F	be939dca29	Merge pull request #14350 from asgerf/shared/deduplicate-path-graph ... Shared: Add DataFlow::DeduplicatePathGraph	2024-12-18 14:04:29 +01:00
Asger F	8340841d54	Shared: Fix propagation of call bit	2024-12-17 11:16:04 +01:00
Asger F	950ae44d03	Shared: Show test failures	2024-12-17 11:15:57 +01:00
Asger F	f2968f4e14	Shared: Ensure subpath-induced edges are handled properly ... Argument-passing and flow-through edges are present in 'edges' in addition to 'subpaths', but the implementation didn't take this into account.	2024-12-16 13:21:43 +01:00
Michael Nebel	0a1d2d0bbb	Java: Update all test util paths to point to the new location.	2024-12-12 13:21:25 +01:00
Anders Schack-Mulligen	066cfa31d2	Merge pull request #18258 from aschackmull/dataflow/simplify-apapprox3 ... Dataflow: Simplify references to access paths from prior stage.	2024-12-11 14:23:31 +01:00
Asger F	889100a243	Java: update test output with provenance	2024-12-11 13:19:47 +01:00
Asger F	afdbf2c3c6	Java: update test to account for key,val	2024-12-11 13:19:36 +01:00
Asger F	736388809d	Java: MethodAccess -> MethodCall	2024-12-11 13:19:25 +01:00
Asger F	5aa1242117	Shared: use a call bit when tracking reachability to/from a discriminator	2024-12-11 11:29:14 +01:00
Asger F	0eb543e0a9	Java: add test for spurious flow from path graph deduplication	2024-12-11 11:29:13 +01:00
Owen Mansel-Chan	0f3dd6d8f1	Java: IPA the CFG	2024-12-10 15:26:11 +00:00
Anders Schack-Mulligen	da179705c3	Java: Accept expected file changes.	2024-12-10 14:52:06 +01:00
Anders Schack-Mulligen	4bf63fedc9	Merge pull request #18179 from aschackmull/dataflow/accesspath-notypes ... Dataflow: Remove tracked types from Access Paths, track tainted object type, and tweak type pruning.	2024-12-05 09:58:36 +01:00
Jeroen Ketema	89d20fd086	Java: Update expected test results	2024-12-03 19:18:59 +01:00
Anders Schack-Mulligen	9734cff15b	Java/C#: Update expected files.	2024-12-03 12:57:44 +01:00
Anders Schack-Mulligen	df2e2e503a	Merge pull request #17901 from aschackmull/java/allowlist-sanitizer ... Java: Add a default taint sanitizer for contains-checks on lists of constants	2024-11-27 11:09:05 +01:00
yoff	6d6f269e6c	Merge pull request #17997 from yoff/java/inline-range-tests	2024-11-26 14:48:07 +01:00
Anders Schack-Mulligen	0d45f0efb2	Java: Accept consistency check result.	2024-11-26 13:25:43 +01:00
Anders Schack-Mulligen	2b1caa8a35	Java: Add test.	2024-11-26 13:25:42 +01:00
Rasmus Lerchedahl Petersen	f508f8eb83	Java: address review comments	2024-11-26 11:44:16 +01:00
Rasmus Lerchedahl Petersen	25664d0e53	Java: Add support for non-integer bounds in inline expectations	2024-11-25 14:48:17 +01:00
Rasmus Lerchedahl Petersen	37935eea3b	java: separate bounds onto different lines	2024-11-25 12:32:11 +01:00
Tom Hvitved	5f9b8c05bd	Java: Update expected test output	2024-11-20 12:58:00 +01:00
yoff	6ed895064f	Apply suggestions from code review ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2024-11-19 13:37:53 +01:00
Rasmus Lerchedahl Petersen	15953bf569	java: inline range test	2024-11-15 12:31:18 +01:00
Owen Mansel-Chan	efb34aea45	Fix bug in UnreachableBlocks	2024-11-14 14:50:25 +00:00
Tom Hvitved	95e9d013cc	Update expected test output	2024-11-04 12:07:06 +01:00
Tom Hvitved	7c4d5981dd	Shared: Add missing spaces in inline test expectation output	2024-10-25 13:23:03 +02:00
Michael Nebel	e2ada2536b	Java: Update java.net expected output.	2024-10-21 15:19:41 +02:00
Michael Nebel	e94cacd449	Java: Update test expected output where the query results are not affected.	2024-10-21 15:19:33 +02:00
Ian Lynagh	323b7cb96f	Java: Follow change of implicit parameter names	2024-10-01 15:06:45 +01:00
Ian Lynagh	901f756c69	Java: Add a test for parameter names	2024-10-01 15:06:42 +01:00
Anders Schack-Mulligen	38818f3cd2	Java: Adjust Set.clear model to apply to overrides.	2024-09-30 15:46:42 +02:00
Michael Nebel	6f74387600	Merge pull request #17521 from michaelnebel/modelgen/moreimprovements ... C#/Java: Content based model generation improvements.	2024-09-30 11:22:30 +02:00
Rasmus Wriedt Larsen	381ea93ec3	Merge pull request #17424 from RasmusWL/active-threat-model-source ... Go/Java/C#: Rename `ThreatModelFlowSource` to `ActiveThreatModelSource`	2024-09-26 13:08:17 +02:00
Michael Nebel	a128383760	C#/Java: Add some dfc-generated test cases.	2024-09-26 13:01:01 +02:00
Tom Hvitved	f287216060	Update expected test output	2024-09-24 14:21:38 +02:00
Rasmus Wriedt Larsen	63c3a71d95	Merge branch 'main' into active-threat-model-source	2024-09-23 11:18:14 +02:00
Chris Smowton	fe1081e880	Merge pull request #17510 from mbaluda/patch-1 ... Model summary for `org.springframework.core.io.getInputStream` methods	2024-09-19 15:47:31 +01:00
Mauro Baluda	cab35a25a5	Remove duplicate summary for MultipartFile.getInputStream and update .expected file	2024-09-18 20:43:04 +02:00
Tom Hvitved	ed9008a064	Update expected test output	2024-09-18 13:51:02 +02:00
Anders Schack-Mulligen	2837d2551a	Merge pull request #17490 from aschackmull/java/capture-in-obinit ... Java: Fix support for variable capture inside object initializers.	2024-09-18 09:29:01 +02:00
Anders Schack-Mulligen	a1a885efeb	Java: Expand test.	2024-09-17 11:38:53 +02:00
Anders Schack-Mulligen	20661a3c56	Java: Fix support for variable capture inside object initializers.	2024-09-17 10:42:21 +02:00
Ian Lynagh	41ed6e6695	Java: Deprecate RefType.nestedName(), and add RefType.getNestedName()	2024-09-16 17:16:25 +01:00
Rasmus Wriedt Larsen	8c10155eb7	mass rename to ActiveThreatModelSource	2024-09-12 10:16:55 +02:00
erik-krogh	e76dcf9df9	delete a test for a deleted file	2024-09-03 20:31:01 +02:00
Michael Nebel	53b2471c9d	Java: Update expected test output.	2024-08-29 09:03:46 +02:00
Michael Nebel	fa5d6f12be	Java: Update logging test expected output.	2024-08-28 16:16:16 +02:00