Jami Cogswell
bd76b1fcc0
clean-up and update configurations to have specs as sink
2022-10-11 16:56:10 -04:00
Jami Cogswell
0c2cff253f
updates from discussing with Tony
2022-10-11 16:56:10 -04:00
Jami Cogswell
3cc7f143b2
clean up code somewhat
2022-10-11 16:56:10 -04:00
Jami Cogswell
f5a2fef7a3
update tests for non-path version
2022-10-11 16:56:10 -04:00
Jami Cogswell
b0af9f936c
added kg taintracking config to all
2022-10-11 16:56:10 -04:00
Jami Cogswell
b7123c17f8
draft of adding kpg tracking into dataflow config
2022-10-11 16:56:10 -04:00
Jami Cogswell
cdac0e2b52
add local algo name tracking, still need to add ability to track algo name when KeyGen obj is param to other method
2022-10-11 16:56:10 -04:00
Jami Cogswell
c414ee0e25
add ECC dataflow config; passes all test cases; still don't have algo name tracking
2022-10-11 16:56:10 -04:00
Jami Cogswell
5e2ef66014
refactoring to use both dataflow configs; commit before deleting unused code
2022-10-11 16:56:10 -04:00
Jami Cogswell
ac707198d5
commit before adding taint flow back (since no taint flow doesn't capture all cases)
2022-10-11 16:56:10 -04:00
Jami Cogswell
8ffd2522e7
add draft code to find algo type to replace tainttracking configs
2022-10-11 16:56:10 -04:00
Jami Cogswell
d3b1a04c13
handle FN case with simple VarAccess; add draft of dataflow config to handle complex VarAccess
2022-10-11 16:56:10 -04:00
Jami Cogswell
7de9c05c9d
use CompileTimeConstantExpr for FN with VarAccess, and remove KeyGeneratorInitConfiguration
2022-10-11 16:56:10 -04:00
Jami Cogswell
75794ec7a7
false negative testing - before rewrite for variable dataflow
2022-10-11 16:56:10 -04:00
Jami Cogswell
9eb45c3787
refactor tests and code, update help file
2022-10-11 16:56:10 -04:00
Jami Cogswell
657e1e62ca
start refactoring query logic into lib file
2022-10-11 16:56:10 -04:00
Tamas Vajk
9eea6d4193
Kotlin: Extract type parameter modifiers (reified, in, out)
2022-10-11 16:40:07 +02:00
Tamás Vajk
8523d21f8c
Merge pull request #10696 from tamasvajk/kotlin-lateinit
...
Kotlin: Extract `lateinit` modifier
2022-10-11 15:03:10 +02:00
Tom Hvitved
d6df69d481
Merge pull request #10754 from hvitved/dataflow/non-hidden-succ-fast-tc
...
Data flow: Improve `fastTC` bound in `PathNodeImpl::getANonHiddenSuccessor`
2022-10-11 11:12:58 +02:00
Tamás Vajk
70b8224a8b
Merge pull request #10723 from tamasvajk/kotlin-generated-files
...
Kotlin: Recognize generated files
2022-10-10 16:24:42 +02:00
Tom Hvitved
ffb2b1c15e
Data flow: Sync files
2022-10-10 15:39:13 +02:00
Tamas Vajk
544e2e4107
Remove path based generated file classification
2022-10-10 14:42:15 +02:00
Tom Hvitved
296ec94a2a
Data flow: Sync files
2022-10-09 19:48:45 +02:00
Jami
bb0f2f7d36
Merge pull request #10368 from jcogs33/android-deeplink-analysis
...
Java: Android deeplink analysis
2022-10-07 14:32:05 -04:00
Tamas Vajk
f51c13f0c1
Kotlin: Recognize generated files
2022-10-07 09:32:00 +02:00
Tony Torralba
ceae5eef28
Revert "Decouple from #10177 "
...
This reverts commit 7b34b10cee
2022-10-06 16:30:23 +02:00
Tony Torralba
21a0c446b4
Update java/ql/lib/semmle/code/java/security/UnsafeContentUriResolution.qll
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2022-10-06 16:28:17 +02:00
Tony Torralba
7b34b10cee
Decouple from #10177
2022-10-06 16:28:17 +02:00
Tony Torralba
4a18892da9
Second query version
...
Remove sinks flowing to write operations requirement
2022-10-06 16:28:17 +02:00
Chris Smowton
34a0a0d080
Implement $default method synthesis
...
This adds methods that fill in default parameters whenever a constructor or method uses default parameter values. I use as similar an approach to the real Kotlin compiler as possible both because this produces the desirable dataflow, and because it should merge cleanly with the same class file seen by the Java extractor, which will see and
extract the signatures of the default methods.
2022-10-06 12:38:55 +01:00
Anders Schack-Mulligen
5b67ba2939
Merge pull request #10177 from atorralba/atorralba/path-sanitizer
...
Java: Promote `PathSanitizer.qll` from experimental
2022-10-06 10:29:33 +02:00
Anders Schack-Mulligen
cbeff4efc8
Merge pull request #10693 from atorralba/atorralba/fix-guard-bad-magic
...
Java: Fixes bad magic in `Guard::guardControls_v3`
2022-10-06 10:14:48 +02:00
Tom Hvitved
0beea9fd1a
Fix typos
2022-10-05 15:54:52 +02:00
Tamas Vajk
082544e88c
Kotlin: Extract lateinit modifier
2022-10-05 15:25:49 +02:00
Tom Hvitved
6f518c1996
Data flow: Sync files
2022-10-05 12:58:29 +02:00
Tony Torralba
527425b397
Fixes bad magic in Guard::guardControls_v3
2022-10-05 12:35:33 +02:00
Anders Schack-Mulligen
6db0db431f
Java: Add pruning for local taint flow.
2022-10-05 12:02:05 +02:00
Tamás Vajk
d0ea7ea2e3
Merge pull request #10677 from tamasvajk/kotlin-param-modifiers
...
Kotlin: Extract parameter modifiers (`noinline`, `crossinline`)
2022-10-04 21:53:48 +02:00
Tamas Vajk
81fffce79b
Kotlin: Extract parameter modifiers (noinline, crossinline)
2022-10-04 14:02:06 +02:00
Jami Cogswell
25cb3236a2
apply review suggestions
2022-10-04 12:33:24 +02:00
Jami Cogswell
91db1be399
update Intent file
2022-10-04 12:33:24 +02:00
Tony Torralba
1857a5d311
Refactor Intent flow steps
2022-10-04 12:33:24 +02:00
Jami Cogswell
9a7cf7db65
simplify hasName usage
2022-10-04 12:33:23 +02:00
Jami Cogswell
012cfebd7a
resolve merge conflict
2022-10-04 12:33:23 +02:00
Jami Cogswell
66b3c4687d
resolve merge conflict
2022-10-04 12:33:23 +02:00
Jami Cogswell
0f64361065
remove simple query
2022-10-04 12:33:23 +02:00
Jami Cogswell
af812cf407
fix code scanning bot warnings
2022-10-04 12:33:23 +02:00
Jami Cogswell
47fcbdd4b4
resolve merge conflict
2022-10-04 12:33:23 +02:00
Jami Cogswell
d07babe3c5
add initial framework for service and receiver test cases
2022-10-04 12:33:23 +02:00
Jami Cogswell
6cf3898101
add experimental global flow config, and clean-up some code
2022-10-04 12:33:23 +02:00
