Anders Schack-Mulligen
|
f28f42bcba
|
Merge pull request #17049 from aschackmull/dataflow/bugfix-flowfeature-sinkctx
Dataflow: Fix bug causing spurious flow for FeatureHasSinkCallContext
|
2024-08-12 13:29:42 +02:00 |
|
Chris Smowton
|
00efebe8b0
|
Add test for buildless fetching an executable war file
|
2024-08-09 12:32:43 +01:00 |
|
Chris Smowton
|
4de0d10dce
|
Merge pull request #17111 from smowton/smowton/admin/gradle-classifier-test
Java: Add test for Gradle fetching a jar with a classifier
|
2024-08-08 17:50:50 +01:00 |
|
Alexander Eyers-Taylor
|
ffd811a55d
|
Merge pull request #17182 from github/post-release-prep/codeql-cli-2.18.2
Post-release preparation for codeql-cli-2.18.2
|
2024-08-08 16:28:03 +01:00 |
|
Chris Smowton
|
84f3b7322e
|
Add test for Gradle fetching a jar with a classifier
|
2024-08-08 15:49:11 +01:00 |
|
github-actions[bot]
|
cc6d87c276
|
Post-release preparation for codeql-cli-2.18.2
|
2024-08-08 12:56:21 +00:00 |
|
Tamás Vajk
|
ef21ee53a5
|
Merge pull request #17169 from tamasvajk/buildless/db-quality-query
C#: Add diagnostic query indicating low database quality
|
2024-08-07 21:36:37 +02:00 |
|
github-actions[bot]
|
019da8c287
|
Release preparation for version 2.18.2
|
2024-08-07 14:02:38 +00:00 |
|
Tamas Vajk
|
0263cc1609
|
Improve code quality
|
2024-08-07 15:27:14 +02:00 |
|
Alexander Eyers-Taylor
|
46577b585e
|
Revert "Release preparation for version 2.18.2"
|
2024-08-07 14:24:37 +01:00 |
|
Tom Hvitved
|
d9ff4ef567
|
Merge pull request #17155 from hvitved/java/array-ref-bad-join
Java: Fix bad join
|
2024-08-07 12:39:40 +02:00 |
|
github-actions[bot]
|
d88b25c243
|
Add changed framework coverage reports
|
2024-08-07 00:18:15 +00:00 |
|
github-actions[bot]
|
c14ba0e4bd
|
Release preparation for version 2.18.2
|
2024-08-06 12:46:15 +00:00 |
|
Tom Hvitved
|
a7410e4a16
|
Java: Fix bad join
Before
```
[2024-08-06 10:37:59] Evaluated non-recursive predicate BoundingChecks::arrayReference/1#754911ba@0628dahn in 20981ms (size: 2009682526).
Evaluated relational algebra for predicate BoundingChecks::arrayReference/1#754911ba@0628dahn with tuple counts:
94480 ~0% {2} r1 = SCAN `Expr::ArrayAccess.getArray/0#dispred#b90c658a` OUTPUT In.1, In.0
32 ~0% {2} r2 = JOIN r1 WITH `Expr::MethodCall.getMethod/0#dispred#41989dc9` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
1013 ~1% {2} | JOIN WITH `Expr::MethodCall.getMethod/0#dispred#41989dc9_10#join_rhs` ON FIRST 1 OUTPUT Lhs.1, Rhs.1
92091 ~4% {2} r3 = JOIN r1 WITH variableBinding ON FIRST 1 OUTPUT Rhs.1, Lhs.1
2009681513 ~0% {2} | JOIN WITH variableBinding_10#join_rhs ON FIRST 1 OUTPUT Lhs.1, Rhs.1
2009682526 ~0% {2} r4 = r2 UNION r3
return r4
[2024-08-06 10:38:02] Evaluated non-recursive predicate BoundingChecks::lessthanLength/1#48b5e1b7@2885308n in 0ms (size: 108).
Evaluated relational algebra for predicate BoundingChecks::lessthanLength/1#48b5e1b7@2885308n with tuple counts:
1518 ~0% {2} r1 = JOIN `Expr::ComparisonExpr.isStrict/0#dispred#fd8c6ddb` WITH `Expr::ComparisonExpr.getGreaterOperand/0#dispred#e8df4b14` ON FIRST 1 OUTPUT Rhs.1, Lhs.0
455 ~2% {2} | JOIN WITH Expr::FieldAccess#2b664c37 ON FIRST 1 OUTPUT Lhs.1, Lhs.0
455 ~1% {3} | JOIN WITH `Expr::ComparisonExpr.getLesserOperand/0#dispred#d7744bc2` ON FIRST 1 OUTPUT Lhs.1, Lhs.0, Rhs.1
455 ~0% {5} | JOIN WITH `Expr::FieldAccess.getField/0#dispred#29ef4aa0` ON FIRST 1 OUTPUT Rhs.1, _, Lhs.1, Lhs.0, Lhs.2
455 ~0% {5} | REWRITE WITH Out.1 := "length"
116 ~0% {3} | JOIN WITH `Element::Element.hasName/1#dispred#8acbbbde` ON FIRST 2 OUTPUT Lhs.4, Lhs.2, Lhs.3
93 ~0% {3} | JOIN WITH variableBinding ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Rhs.1
93 ~1% {3} | JOIN WITH `Expr::VarAccess.getQualifier/0#dispred#2b0f1cd1` ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Rhs.1
484 ~2% {3} | JOIN WITH variableBinding_10#join_rhs ON FIRST 1 OUTPUT Lhs.1, Rhs.1, Lhs.2
277 ~3% {2} | JOIN WITH `BoundingChecks::conditionHolds/2#fa0354b9#bb` ON FIRST 2 OUTPUT Lhs.1, Lhs.2
166 ~5% {2} | JOIN WITH `Expr::ArrayAccess.getIndexExpr/0#dispred#345f6cf4_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
110 ~0% {1} | JOIN WITH `BoundingChecks::arrayReference/1#754911ba` ON FIRST 2 OUTPUT Lhs.0
return r1
```
After
```
[2024-08-06 13:29:50] Evaluated non-recursive predicate BoundingChecks::lengthAccess/2#54b10eff@719e68tb in 0ms (size: 309).
Evaluated relational algebra for predicate BoundingChecks::lengthAccess/2#54b10eff@719e68tb with tuple counts:
6241 ~0% {2} r1 = JOIN `BoundingChecks::getAnAccess/1#152ad44e_10#join_rhs` WITH `Expr::VarAccess.getQualifier/0#dispred#2b0f1cd1_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
6240 ~0% {4} | JOIN WITH `Expr::FieldAccess.getField/0#dispred#29ef4aa0` ON FIRST 1 OUTPUT Rhs.1, _, Lhs.1, Lhs.0
6240 ~0% {4} | REWRITE WITH Out.1 := "length"
309 ~2% {2} | JOIN WITH `Element::Element.hasName/1#dispred#8acbbbde` ON FIRST 2 OUTPUT Lhs.3, Lhs.2
return r1
[2024-08-06 13:29:50] Evaluated non-recursive predicate BoundingChecks::lessthanLength/1#48b5e1b7@0fcac509 in 1ms (size: 108).
Evaluated relational algebra for predicate BoundingChecks::lessthanLength/1#48b5e1b7@0fcac509 with tuple counts:
94480 ~0% {3} r1 = JOIN `Expr::ArrayAccess.getArray/0#dispred#b90c658a` WITH `Expr::ArrayAccess.getIndexExpr/0#dispred#345f6cf4` ON FIRST 1 OUTPUT Rhs.1, Lhs.0, Lhs.1
648 ~4% {4} | JOIN WITH variableBinding ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Lhs.0, Rhs.1
621 ~1% {4} | JOIN WITH `BoundingChecks::getAnAccess/1#152ad44e_10#join_rhs` ON FIRST 1 OUTPUT Lhs.2, Lhs.1, Lhs.3, Rhs.1
344 ~0% {4} | JOIN WITH `BoundingChecks::conditionHolds/2#fa0354b9#bb_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2, Lhs.3
341 ~0% {4} | JOIN WITH `Expr::ComparisonExpr.isStrict/0#dispred#fd8c6ddb` ON FIRST 1 OUTPUT Lhs.0, Lhs.1, Lhs.2, Lhs.3
341 ~0% {5} | JOIN WITH `Expr::ComparisonExpr.getGreaterOperand/0#dispred#e8df4b14` ON FIRST 1 OUTPUT Rhs.1, Lhs.3, Lhs.1, Lhs.2, Lhs.0
110 ~2% {3} | JOIN WITH `BoundingChecks::lengthAccess/2#54b10eff` ON FIRST 2 OUTPUT Lhs.4, Lhs.2, Lhs.3
110 ~0% {3} | JOIN WITH `Expr::ComparisonExpr.getLesserOperand/0#dispred#d7744bc2` ON FIRST 1 OUTPUT Rhs.1, Lhs.2, Lhs.1
110 ~0% {1} | JOIN WITH variableBinding ON FIRST 2 OUTPUT Lhs.2
return r1
```
|
2024-08-06 13:30:19 +02:00 |
|
Dave Bartolomeo
|
a6e2fbb241
|
Merge remote-tracking branch 'origin/main' into dbartol/provenance/qltest
|
2024-08-05 13:16:31 -04:00 |
|
Dave Bartolomeo
|
aea13b46ce
|
Merge remote-tracking branch 'origin/main' into dbartol/provenance/qltest
|
2024-08-05 10:33:31 -04:00 |
|
Chris Smowton
|
95e504a5ff
|
Merge branch 'main' into am0o0-java-PathInjection
|
2024-08-05 11:41:25 +01:00 |
|
github-actions[bot]
|
f5394c9ee9
|
Add changed framework coverage reports
|
2024-08-04 00:19:56 +00:00 |
|
am0o0
|
4169cfac9f
|
use the current slf4j stubs instead of new one
|
2024-08-03 14:12:18 +02:00 |
|
Dave Bartolomeo
|
6596705811
|
Update test expectations after extension numbering fix
|
2024-08-02 16:55:02 -04:00 |
|
Chris Smowton
|
f891423810
|
Run Maven integration tests sequentially due to conflicts over ~/.m2
|
2024-08-02 20:13:41 +01:00 |
|
Chris Smowton
|
1ee87670c6
|
Switch to measuring just diagnostics
|
2024-08-02 20:13:40 +01:00 |
|
Chris Smowton
|
ee11307751
|
Add test for ECJ compiling an enum with a constructor parameter annotation
|
2024-08-02 20:13:39 +01:00 |
|
Andrew Eisenberg
|
6a49647a28
|
Merge pull request #17132 from github/aeisenberg-patch-1
Update CHANGELOG.md
|
2024-08-02 07:55:06 -07:00 |
|
Chris Smowton
|
be945f14f6
|
Merge pull request #17135 from github/smowton/admin/build-mode-none-ga
Announce Java build-mode: none GA
|
2024-08-02 12:05:39 +01:00 |
|
Anders Schack-Mulligen
|
4d023f14a6
|
Merge pull request #17075 from RobbingDaHood/17052-second-try-do-not-expose-error-message
Java: 17052 Second try: do not expose error message
|
2024-08-02 12:44:27 +02:00 |
|
Chris Smowton
|
c299d8ddc1
|
Move change note to lib directory
|
2024-08-02 11:22:10 +01:00 |
|
Chris Smowton
|
2c85511af1
|
Announce Java build-mode: none GA
|
2024-08-02 11:05:24 +01:00 |
|
Andrew Eisenberg
|
c8994003c1
|
Update CHANGELOG.md
Drive-by fix of a typo.
|
2024-08-01 16:16:17 -07:00 |
|
am0o0
|
a645e01b4b
|
delete wrong stubs
|
2024-08-02 01:03:47 +02:00 |
|
am0o0
|
d52826879b
|
delete wrong stubs
|
2024-08-02 01:02:49 +02:00 |
|
am0o0
|
ee9f134828
|
update current springframework core stub and use this instead of creating a new stubs
|
2024-08-02 01:00:34 +02:00 |
|
am0o0
|
af43178602
|
move slf4j to a separate dir
|
2024-08-02 00:35:20 +02:00 |
|
am0o0
|
1551cf0093
|
move java/ql/test/experimental/stubs/org-springframework-6.1.4/org/reactivestreams into a separate dir
|
2024-08-02 00:06:02 +02:00 |
|
Anders Schack-Mulligen
|
377301a55a
|
Merge pull request #17108 from aschackmull/dataflow/flowthrough-provenance
Dataflow: Propagate provenance correctly for flow-through wrappers.
|
2024-08-01 09:35:56 +02:00 |
|
Jami
|
f9f57e9122
|
Merge pull request #17023 from jcogs33/jcogs33/java/add-apache-ant-path-inj-sinks
Java: add apache-ant `Property` path injection sinks
|
2024-07-31 11:04:13 -04:00 |
|
Owen Mansel-Chan
|
6280ed2a6b
|
Merge pull request #13555 from am0o0/amammad-java-bombs
Java: Decompression Bombs
|
2024-07-31 14:55:28 +01:00 |
|
Anders Schack-Mulligen
|
9724516c84
|
C#/Go/Java/Python/Ruby: Accept qltest .expected changes.
|
2024-07-31 14:45:10 +02:00 |
|
Jami
|
4fb29c4473
|
Merge branch 'main' into jcogs33/java/add-apache-ant-path-inj-sinks
|
2024-07-31 08:15:07 -04:00 |
|
Jami
|
05b0a3f41c
|
Merge pull request #17093 from jcogs33/jcogs33/java/provenance-postprocess-qltest-remaining-lib-tests
Java: Add support for post-process provenance pretty-printing in `.ql` library-tests
|
2024-07-31 08:11:15 -04:00 |
|
Owen Mansel-Chan
|
8901b1fd14
|
Merge pull request #17100 from owen-mc/java/sensitive-log/ignore-tokenizer
Java: whitelist variable names containing "tokenizer" for `java/sensitive-log`
|
2024-07-31 12:16:03 +01:00 |
|
Owen Mansel-Chan
|
59e22f6cd9
|
Merge pull request #17101 from owen-mc/java/dead-ref-types-junit-4-5
Java: Fix FPs in `java/unused-reference-type` for JUnit 4-style tests
|
2024-07-31 11:11:35 +01:00 |
|
am0o0
|
d560c1ea0f
|
fix formatting
|
2024-07-31 11:08:06 +02:00 |
|
am0o0
|
9110df6e80
|
Merge branch 'amammad-java-JWT' of https://github.com/am0o0/codeql into amammad-java-JWT
|
2024-07-31 11:04:24 +02:00 |
|
am0o0
|
c6814fcf47
|
merge duplicate module into a module file
|
2024-07-31 11:04:03 +02:00 |
|
am0o0
|
701e3d7e53
|
add same query but with local source support to comply with the CVE-2021-37580
|
2024-07-31 10:58:22 +02:00 |
|
Edward Minnix III
|
bae0ea5599
|
Merge pull request #17042 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2024-07-30 20:04:23 -04:00 |
|
Jami Cogswell
|
2db07bdbf3
|
Java: add missing models to experimental expected files
|
2024-07-30 12:13:18 -04:00 |
|
am0o0
|
40eef25133
|
use more specefic Classes instead of Call
|
2024-07-30 18:07:03 +02:00 |
|
am0o0
|
591b1b4f07
|
use $ SPURIOUS: instead of "this test gives a FP"
|
2024-07-30 17:53:23 +02:00 |
|