Michael Nebel
81ce8dc02d
C#: Copy dotnet.Parameterizable implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
92447dc743
C#: Copy dotnet.Namespace implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
7ba25b23a5
C#: Copy dotnet.Generics implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
eb5cb2a7bf
C#: Copy dotnet.Expr implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
215808d7e9
C#: Copy dotnet.Declaration implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
cdf3d47031
C#: Copy dotnet.Element implementation.
2024-03-07 09:40:32 +01:00
Michael Nebel
c606ab09a5
C#: Copy dotnet.Callable implementation.
2024-03-07 09:40:32 +01:00
Michael Nebel
d7dc73e18b
C#: Remove the CIL related parts of the Disposal tests.
2024-03-07 09:40:32 +01:00
github-actions[bot]
dc9092c9ec
Post-release preparation for codeql-cli-2.16.4
2024-03-06 22:19:33 +00:00
github-actions[bot]
2f058ffb4d
Release preparation for version 2.16.4
2024-03-06 20:56:51 +00:00
Angela P Wen
ce31f8641a
Revert "Release preparation for version 2.16.4"
2024-03-06 12:07:33 -08:00
Ed Minnix
a87df5459f
Fix flow summary tests
2024-03-06 10:39:32 -05:00
Ed Minnix
527041348e
Add comment about Memory<T>
2024-03-06 10:39:31 -05:00
Ed Minnix
e065390185
Add .Element modifier to Memory<T> arguments in MaD models
2024-03-06 10:39:30 -05:00
Ed Minnix
27ba51cf9d
Change note
2024-03-06 10:39:28 -05:00
Ed Minnix
94a941115f
Fix FlowSummaries test results
2024-03-06 10:39:27 -05:00
Ed Minnix
ca55b92281
Change System.IO.TextReader models to transfer taint to out parameter instead of return value
...
Some of the `System.IO.TextReader` models transfered taint to
`ReturnValue`, when there is a more relevant out-parameter/array.
2024-03-06 10:39:25 -05:00
Tamas Vajk
c4f2bbda2a
Simplify task counter incrementing
2024-03-06 16:12:14 +01:00
Tamas Vajk
34308eee8d
C#: Improve buildless progress reporting
2024-03-06 16:11:19 +01:00
Anders Schack-Mulligen
0dbe8c3d8a
Merge pull request #15140 from hvitved/dataflow/pruned-ctx-sensitivity
...
Data flow: prune context-sensitivity relations
2024-03-06 10:04:48 +01:00
github-actions[bot]
661e68dab5
Release preparation for version 2.16.4
2024-03-05 18:13:58 +00:00
Angela P Wen
967963a653
Revert "Release preparation for version 2.16.4"
2024-03-05 08:53:33 -08:00
Tamás Vajk
b4fdd4e222
Merge pull request #15808 from tamasvajk/buildless/package-source-telemetry
...
C#: Add package source error count to DB
2024-03-05 17:20:38 +01:00
Tamas Vajk
2b99b83857
C#: Add package source error count to DB
2024-03-05 15:32:08 +01:00
Tom Hvitved
bd7b2c4cc6
Update expected output
2024-03-05 10:44:13 +01:00
Tom Hvitved
a92e394a7c
C#: Variable capture follow-up
2024-03-04 19:36:30 +01:00
github-actions[bot]
a67218a027
Release preparation for version 2.16.4
2024-03-04 17:42:08 +00:00
Tom Hvitved
357638baa8
C#: Update variable capture test
2024-03-04 14:39:48 +01:00
Michael Nebel
11142df4d0
Merge pull request #15764 from michaelnebel/csharp/csharptracerrunapp
...
C#: Don't inject compiler flags when dotnet is used to execute an application.
2024-03-04 08:13:11 +01:00
Ed Minnix
59b14f6a69
Fix test expectations (merge conflict)
2024-03-01 12:52:03 -05:00
Ed Minnix
45e1be875c
Fix test expectations
2024-03-01 12:52:00 -05:00
Ed Minnix
4dc605354c
Second-order SQL injection
2024-03-01 12:51:59 -05:00
Ed Minnix
1ba3efb111
Change note updates
2024-03-01 12:51:58 -05:00
Ed Minnix
e84a509976
Modify test cases
2024-03-01 12:51:56 -05:00
Ed Minnix
c3671c7625
Fix change note
2024-03-01 12:51:55 -05:00
Ed Minnix
be3c1ed0be
Change note
2024-03-01 12:51:53 -05:00
Ed Minnix
c95abd47ce
Remove stored variants of queries
2024-03-01 12:51:51 -05:00
Michael Nebel
a97510a2fc
Merge pull request #15419 from github/egregius313/csharp/dataflow/threat-modeling/refactor-to-threatmodelflowsource
...
C#: Refactor C# queries to use `ThreatModelFlowSource` instead of `RemoteFlowSource`
2024-03-01 14:40:40 +01:00
Tom Hvitved
6d9f3d4a3e
C#: Add build_modes: none to codeql-extractor.yml
2024-03-01 13:54:57 +01:00
Michael Nebel
ac4ad0cbc0
C#: Add test where build should not be interpreted as a SDK sub command.
2024-03-01 13:24:04 +01:00
Michael Nebel
24572848f3
C#: Move helper function to other repo to allow sharing.
2024-03-01 13:24:04 +01:00
Michael Nebel
07fc84de8c
C#: Don't inject compiler flags when dotnet is used to execute an application.
2024-03-01 13:24:04 +01:00
Tom Hvitved
cb128da5aa
Merge pull request #15762 from hvitved/csharp/fetch-dotnet-dependency-fetching
...
C#: Fetch .NET in dependency manager instead of autobuilder
2024-03-01 13:19:20 +01:00
Tom Hvitved
20ff7def73
Address review comment
2024-03-01 12:54:47 +01:00
Tom Hvitved
a8468a6178
C#: Better handle multiple global.json files
2024-02-29 20:27:52 +01:00
Ed Minnix
f488f23a48
Add LocalFlowSource back to UncontrolledFormatString
2024-02-29 12:06:59 -05:00
Edward Minnix III
89bdb7f437
Remove discussion of local flow in change note
...
Co-authored-by: Michael Nebel <michaelnebel@github.com >
2024-02-29 12:03:19 -05:00
Ed Minnix
86ceeebd89
Change handling of LocalSource in queries
...
1. Change `LocalSource` to extend `DataFlow::Node`, thus removed from
the definiton of `Source`
2. Add a private class `AddLocalSource` which extends `Source`. This
allows us to currently preserve the inclusion of local sources, while
making it easier to remove it in the future.
2024-02-29 12:03:17 -05:00
Ed Minnix
3563c7ef03
Modify deprecated RemoteSource classes to extend DataFlow::Node directly.
...
Since `ThreatModelFlowSource` contains `RemoteFlowSource` by default, we
can safely remove the `RemoteSource` from the default of the queries.
2024-02-29 12:03:16 -05:00
Ed Minnix
e64826db1b
Add threat-model configuration for UncontrolledFormatString test
2024-02-29 12:03:14 -05:00
