Anders Schack-Mulligen
e73fc94354
Dataflow: Add change note.
2024-08-20 10:12:01 +02:00
Anders Schack-Mulligen
4afdb0927e
Dataflow: Remove src/sink grouping feature.
2024-08-20 10:07:36 +02:00
Rasmus Wriedt Larsen
766dcc4dd6
ThreatModels: Expose knownThreatModel
...
Without, it's impossible to write test showing what threat-models are
active by default... unless I provide a hardcoded list in the test
itself, which is not any fun.
2024-08-19 10:54:47 +02:00
Rasmus Wriedt Larsen
c3d8efc43d
Merge branch 'main' into stdin3
2024-08-16 09:54:45 +02:00
Anders Schack-Mulligen
86708c9ff8
Dataflow: Fix missing subpaths due to type strengthening.
2024-08-15 18:57:10 +02:00
Rasmus Wriedt Larsen
157d0b7f37
ThreatModels: Add stdin kind
...
None of the current local subgroups precisely captures stdin, so
although it's much like both commandargs and file, a separate kind seems
better.
2024-08-15 15:36:28 +02:00
Anders Schack-Mulligen
7d61d9282c
Merge pull request #17233 from aschackmull/dataflow/match-summarylabel
...
Dataflow: Fix missing join on summaryLabel.
2024-08-15 14:55:38 +02:00
Anders Schack-Mulligen
2c591f5420
Dataflow: Fix missing join on summaryLabel.
2024-08-15 11:05:08 +02:00
Michael Nebel
f0817dc07c
C#/Java: Use a parameterized module for making the source and sink callable classes.
2024-08-14 09:50:38 +02:00
Anders Schack-Mulligen
a782952969
Merge pull request #17202 from aschackmull/dataflow/stagepathgraph-strengthen
...
Dataflow: bugfix add missing typeStrengthen in StagePathGraph throughflow.
2024-08-13 14:59:47 +02:00
Tom Hvitved
aeabee3e34
Merge pull request #17179 from hvitved/shared/pretty-print-models
...
Go/Java: Share more `PrettyPrintModels.ql` logic
2024-08-13 14:15:40 +02:00
Tom Hvitved
51077ce2e7
Merge pull request #17173 from hvitved/shared/inline-flow-provenance
...
Shared: Apply `ShowProvenance` in `InlineFlowTest.qll`
2024-08-13 14:15:08 +02:00
Tom Hvitved
f83df76928
Shared: Apply ShowProvenance in InlineFlowTest.qll
2024-08-13 13:34:43 +02:00
Tom Hvitved
d5a0df3f87
Go/Java: Share more PrettyPrintModels.ql logic
2024-08-13 12:48:22 +02:00
Tom Hvitved
fbcb4498fe
Merge pull request #16817 from hvitved/csharp/multi-body-dataflow-dispatch
...
C#: Restrict multi-body dataflow dispatch based on file-system distance
2024-08-13 12:15:22 +02:00
Owen Mansel-Chan
0dfdee775b
Merge pull request #17177 from owen-mc/go/mad/convert-sink-3
...
Go: convert regex-use, url-redirection sinks to use models-as-data
2024-08-12 16:21:48 +01:00
Anders Schack-Mulligen
757fdf567d
Dataflow: bugfix add missing typeStrengthen in StagePathGraph throughflow.
2024-08-12 15:53:58 +02:00
Anders Schack-Mulligen
3d5d270dfb
Dataflow: Reduce duplication, define PathGraphSig only once.
2024-08-12 15:22:17 +02:00
Michael Nebel
4a5c9f0ec4
Merge pull request #17007 from michaelnebel/shared/neutralimplementation
...
C#/Java/Go: Neutrals are split into separate classes.
2024-08-12 13:58:12 +02:00
Anders Schack-Mulligen
3c6459e65a
Merge pull request #17029 from aschackmull/dataflow/stagepathgraph-provenance
...
Dataflow: Add provenance to StagePathGraph.
2024-08-12 13:30:03 +02:00
Anders Schack-Mulligen
f28f42bcba
Merge pull request #17049 from aschackmull/dataflow/bugfix-flowfeature-sinkctx
...
Dataflow: Fix bug causing spurious flow for FeatureHasSinkCallContext
2024-08-12 13:29:42 +02:00
Owen Mansel-Chan
2fe74a8554
Update model validation
2024-08-11 00:29:58 +01:00
github-actions[bot]
cc6d87c276
Post-release preparation for codeql-cli-2.18.2
2024-08-08 12:56:21 +00:00
github-actions[bot]
019da8c287
Release preparation for version 2.18.2
2024-08-07 14:02:38 +00:00
Alexander Eyers-Taylor
46577b585e
Revert "Release preparation for version 2.18.2"
2024-08-07 14:24:37 +01:00
github-actions[bot]
c14ba0e4bd
Release preparation for version 2.18.2
2024-08-06 12:46:15 +00:00
Anders Schack-Mulligen
90272ddbfa
Dataflow: Allow printing multiple models for one MaDId.
2024-08-01 13:04:24 +02:00
Anders Schack-Mulligen
af06763c42
Dataflow: Propagate provenance correctly for flow-through wrappers.
2024-07-31 14:37:13 +02:00
Owen Mansel-Chan
9cb01d4573
Merge branch 'main' into go/mad/convert-sinks
2024-07-30 08:03:18 +01:00
Owen Mansel-Chan
c051d33cc7
Merge branch 'main' into dataflow/provenance-postprocess-qltest
2024-07-26 08:04:05 +01:00
Owen Mansel-Chan
f7d681516a
Allow MaD sinks for go/request-forgery
...
Request forgery sinks which have `getRequest` different from the sink
itself cannot be modeled using models-as-data.
2024-07-25 12:53:14 +01:00
Anders Schack-Mulligen
7a48fe1102
Dataflow: Replace ppReprType with DataFlowType.toString.
2024-07-25 13:08:47 +02:00
Chuan-kai Lin
67dac96e80
Merge pull request #17041 from github/post-release-prep/codeql-cli-2.18.1
...
Post-release preparation for codeql-cli-2.18.1
2024-07-23 06:48:30 -07:00
Anders Schack-Mulligen
86c63dbedf
Dataflow: Fix bug causing spurious flow for FeatureHasSinkCallContext.
2024-07-23 14:59:24 +02:00
Owen Mansel-Chan
ff8bb2b1f8
Merge pull request #16760 from owen-mc/java/reverse-dns-separate-threat-model-kind
...
Java: make a separate threat model kind for reverse DNS sources
2024-07-23 10:08:52 +01:00
github-actions[bot]
49cc8f8ff8
Post-release preparation for codeql-cli-2.18.1
2024-07-22 22:00:48 +00:00
github-actions[bot]
368bcb684a
Release preparation for version 2.18.1
2024-07-22 21:30:50 +00:00
Chuan-kai Lin
23320b6e5e
Revert "Release preparation for version 2.18.1"
2024-07-22 13:22:49 -07:00
github-actions[bot]
55935fc123
Release preparation for version 2.18.1
2024-07-22 14:56:15 +00:00
Anders Schack-Mulligen
272e523323
Dataflow: Add provenance to StagePathGraph.
2024-07-22 15:02:13 +02:00
Michael Nebel
ca4bd0c606
C#/Java/Go: Neutrals are split into seperate classes.
2024-07-18 16:29:38 +02:00
Anders Schack-Mulligen
94078e851c
Shared: Add support for provenance pretty-printing as a qltest postprocess step.
2024-07-18 15:34:30 +02:00
Anders Schack-Mulligen
da5abc8321
Dataflow: Replace MakeSets with QlBuiltins::InternSets.
2024-07-15 13:35:57 +02:00
Tom Hvitved
04f173d14e
SSA: Reduce caching in data-flow integration layer
2024-07-12 11:04:03 +02:00
Tom Hvitved
0459422a6c
C#: Restrict multi-body dataflow dispatch based on file-system distance
2024-07-11 16:52:20 +02:00
Tom Hvitved
16b142d332
SSA: Make barrier guards a parameterized module
2024-07-11 11:34:56 +02:00
Tom Hvitved
f18338259f
Merge pull request #16884 from hvitved/ssa/dataflow-integration
...
SSA: Add data flow integration layer
2024-07-10 12:47:37 +02:00
Tom Hvitved
8979bac4d8
Update shared/ssa/codeql/ssa/Ssa.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2024-07-10 10:55:13 +02:00
Tom Hvitved
7928d751d1
Address review comment
2024-07-10 09:52:09 +02:00
Tom Hvitved
d41eae6fc3
SSA: Add data-flow integration layer
2024-07-09 12:49:22 +02:00
