1443 Commits

Author	SHA1	Message	Date
Tamás Vajk	b2c22dacc2	Merge pull request #9769 from tamasvajk/fix/ctor-field-flow ... C#: Fix dataflow for default constructors	2022-08-10 15:06:25 +02:00
Anders Schack-Mulligen	abad133ab5	Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow.	2022-08-10 15:02:56 +02:00
Michael Nebel	36a713510c	C#: Add summary models for the FileStream constructor.	2022-08-10 14:49:20 +02:00
Michael Nebel	5659db73d3	C#: Update alle manually written summaries for constructors to use Argument[Qualifier] instead of ReturnValue.	2022-08-10 14:17:16 +02:00
Michael Nebel	f1cc7bb60c	C#: Consider FileStreams StoredFlowSources and propagate taint via StreamReader.	2022-08-10 11:08:27 +02:00
Michael Nebel	fd67c34ee4	C#: Add sinks and summaries for adapters with tainted commands.	2022-08-10 11:08:27 +02:00
Michael Nebel	aa13ab31e1	C#: Add SQLiteDataAdapter sinks.	2022-08-10 11:08:27 +02:00
Michael Nebel	6f9f771f58	C#: Add SQLiteCommand sinks.	2022-08-10 11:08:27 +02:00
Erik Krogh Kristensen	559ec7ba56	Merge branch 'main' into repeatedWord	2022-08-09 21:22:47 +02:00
Michael Nebel	b90a404658	Merge pull request #9636 from michaelnebel/csharp/sinkmodelcsv ... C#: Convert Sinks to CSV format for SymmetricAlgorithm.	2022-08-09 09:05:12 +02:00
Tom Hvitved	dd465e739b	Code review suggestion	2022-08-09 07:46:27 +02:00
Tamas Vajk	36c913061c	C#: Fix dataflow for default constructors	2022-08-09 07:46:27 +02:00
Anders Schack-Mulligen	aa3655678e	Merge pull request #9823 from aschackmull/dataflow/stage-module ... Dataflow: Replace stage duplication with parameterised modules.	2022-08-08 10:56:32 +02:00
Anders Schack-Mulligen	3d47875b60	Dataflow: Generate shorter RA/DIL names.	2022-08-05 11:00:56 +02:00
Anders Schack-Mulligen	d3dcc3ce3a	Dataflow: Sync.	2022-08-05 11:00:56 +02:00
Michael Nebel	64e8660904	C#: Simplification of AspNetCoreRemoteFlowSourceMember.	2022-08-04 14:18:25 +02:00
Michael Nebel	02165e8ee1	Merge pull request #9327 from michaelnebel/csharp/dotnetruntimerefresh ... C#: Re-create summary models and include source and sink models as well.	2022-08-01 16:15:54 +02:00
Paolo Tranquilli	9b26921cb6	Control flow: add order disambuigation customization	2022-07-28 09:11:42 +02:00
Paolo Tranquilli	ebf650c0c0	Control Flow: add more ordering for edges	2022-07-27 15:01:17 +02:00
Michael Nebel	6603024488	C#: Allow encryption- prefix for sinks in CsvValidation.	2022-07-18 14:32:31 +02:00
Michael Nebel	57ba0c4e5d	C#: Move sinks into System.Security.Cryptography framework code.	2022-07-18 14:28:49 +02:00
Michael Nebel	c91d49a0fe	C#: Add provenance column to CSV format for SymmetricAlgorithm.	2022-07-18 14:28:49 +02:00
Michael Nebel	a5b7e2a2e1	C#: Convert set Key of SymmetricAlgorithm to Csv sink.	2022-07-18 14:28:49 +02:00
Michael Nebel	032448041d	C#: Convert CreateSymmetricKey to CSV sink.	2022-07-18 14:28:49 +02:00
Michael Nebel	1d405dba14	C#: Collapse Sink classes.	2022-07-18 14:28:49 +02:00
Michael Nebel	383ad51682	C#: Use CSV format for CreateEncryptor and CreateDecryptor sinks.	2022-07-18 14:28:49 +02:00
Erik Krogh Kristensen	85a652f3d1	remove a bunch of repeated words	2022-07-14 12:42:48 +02:00
Anders Schack-Mulligen	dc517a758e	Autoformat	2022-06-23 14:44:40 +02:00
Anders Schack-Mulligen	4a317a25d3	Dataflow: Sync.	2022-06-23 14:34:52 +02:00
Michael Nebel	0ef97b41c8	C#: Update .NET Runtime models and add sources and sinks.	2022-06-22 13:03:10 +02:00
Anders Schack-Mulligen	df6d68b215	Merge pull request #9618 from aschackmull/dataflow/deprecate-barrierguard-class ... Dataflow: Deprecate BarrierGuard class	2022-06-22 10:44:08 +02:00
Michael Nebel	b4457de58c	C#/Java: Fix typo in the QL doc comment.	2022-06-20 16:26:07 +02:00
Michael Nebel	38c6bf55b9	C#: Make CSV model validation of the provenance column.	2022-06-20 16:20:01 +02:00
Michael Nebel	5e3bb8297a	C#: Make the model predicates emmit the provenance directly to enable testing.	2022-06-20 16:20:01 +02:00
Michael Nebel	da0b9db57f	C#: Update flow summary printing in test cases to reflect provenance.	2022-06-20 16:20:01 +02:00
Michael Nebel	2975e51652	C#: Update existing production models with provenance information.	2022-06-20 16:20:01 +02:00
Michael Nebel	d6fa7db9f2	C#: Update CSV validation to the new format and improve test failure printing.	2022-06-20 16:20:01 +02:00
Michael Nebel	e3a5f7b8a3	C#: Introduce provenance column in CSV format for Models as data summaries, sources and sinks.	2022-06-20 16:20:01 +02:00
Anders Schack-Mulligen	1b374e262f	C#: Replace deprecated barrier guards.	2022-06-16 11:25:29 +02:00
Anders Schack-Mulligen	456f02fd82	C#: Add BarrierGuard parameterised module.	2022-06-16 11:25:29 +02:00
Anders Schack-Mulligen	6518a01ded	Dataflow: Sync.	2022-06-16 11:25:28 +02:00
Michael Nebel	e1c7003cde	C#: Only consider directly public auto implemented properties with public getters and setters as being tainted.	2022-06-16 08:43:06 +02:00
Michael Nebel	9639dca33f	C#: Consider all properties of ASP.NET Core like objects to also be sources of tainted data.	2022-06-15 15:13:37 +02:00
Anders Schack-Mulligen	4f3751dfea	Merge pull request #9316 from hvitved/dataflow/edges-get-a-successor-consistency ... Data flow: Make `PathGraph::edges/2` and `PathNode::getASuccessor/1` consistent	2022-06-01 10:38:25 +02:00
Nick Rolfe	f417c12c5e	Merge pull request #9332 from github/post-release-prep/codeql-cli-2.9.3 ... Post-release preparation for codeql-cli-2.9.3	2022-05-31 16:17:50 +01:00
Tom Hvitved	bcdef98392	Data flow: Sync files	2022-05-25 14:39:37 +02:00
Tom Hvitved	a4023b8a1d	Data flow: Make PathGraph::edges/2 and PathNode::getASuccessor/1 consistent	2022-05-25 14:39:37 +02:00
Tom Hvitved	42f05dadc4	Data flow: Sync files	2022-05-25 14:21:22 +02:00
Michael Nebel	268230ef19	C#: Add QlDoc to the Generated file.	2022-05-25 08:28:14 +02:00
Michael Nebel	f8e729025f	C#: Add generated Dotnet Runtime summary models that allows to up two reads and two stores and update flow summaries test.	2022-05-25 08:28:14 +02:00