Jami Cogswell
bd76b1fcc0
clean-up and update configurations to have specs as sink
2022-10-11 16:56:10 -04:00
Jami Cogswell
3cc7f143b2
clean up code somewhat
2022-10-11 16:56:10 -04:00
Jami Cogswell
f5a2fef7a3
update tests for non-path version
2022-10-11 16:56:10 -04:00
Jami Cogswell
b7123c17f8
draft of adding kpg tracking into dataflow config
2022-10-11 16:56:10 -04:00
Jami Cogswell
cdac0e2b52
add local algo name tracking, still need to add ability to track algo name when KeyGen obj is param to other method
2022-10-11 16:56:10 -04:00
Jami Cogswell
c414ee0e25
add ECC dataflow config; passes all test cases; still don't have algo name tracking
2022-10-11 16:56:10 -04:00
Jami Cogswell
5e2ef66014
refactoring to use both dataflow configs; commit before deleting unused code
2022-10-11 16:56:10 -04:00
Jami Cogswell
ac707198d5
commit before adding taint flow back (since no taint flow doesn't capture all cases)
2022-10-11 16:56:10 -04:00
Jami Cogswell
8ffd2522e7
add draft code to find algo type to replace tainttracking configs
2022-10-11 16:56:10 -04:00
Jami Cogswell
d3b1a04c13
handle FN case with simple VarAccess; add draft of dataflow config to handle complex VarAccess
2022-10-11 16:56:10 -04:00
Jami Cogswell
7de9c05c9d
use CompileTimeConstantExpr for FN with VarAccess, and remove KeyGeneratorInitConfiguration
2022-10-11 16:56:10 -04:00
Jami Cogswell
75794ec7a7
false negative testing - before rewrite for variable dataflow
2022-10-11 16:56:10 -04:00
Jami Cogswell
9eb45c3787
refactor tests and code, update help file
2022-10-11 16:56:10 -04:00
Jami Cogswell
657e1e62ca
start refactoring query logic into lib file
2022-10-11 16:56:10 -04:00
Jami Cogswell
9b7df354e6
move files
2022-10-11 16:56:10 -04:00
Tamas Vajk
9eea6d4193
Kotlin: Extract type parameter modifiers (reified, in, out)
2022-10-11 16:40:07 +02:00
Tamás Vajk
8523d21f8c
Merge pull request #10696 from tamasvajk/kotlin-lateinit
...
Kotlin: Extract `lateinit` modifier
2022-10-11 15:03:10 +02:00
Tamas Vajk
43f9331052
Kotlin: adjust extracted property reference base class
2022-10-11 12:52:26 +02:00
Tamas Vajk
92b425b1c2
Kotlin: Add test to show imperfections in property reference extraction
2022-10-11 12:51:06 +02:00
Josh Soref
21caa4b03f
spelling: across
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-11 00:23:35 -04:00
Ian Lynagh
591844f680
Kotlin: Add a numlines test
2022-10-10 19:04:11 +01:00
Chris Smowton
5756a33604
Merge pull request #10737 from smowton/smowton/fix/type-instance-within-default-value-erasure
...
Kotlin: fix type variable erasure inside default function values
2022-10-10 16:31:07 +01:00
Tamás Vajk
70b8224a8b
Merge pull request #10723 from tamasvajk/kotlin-generated-files
...
Kotlin: Recognize generated files
2022-10-10 16:24:42 +02:00
Chris Smowton
dfdfd39bcc
Merge pull request #10732 from smowton/smowton/fix/kotlin-enum-corresponding-classes
...
Koltin: Extract the corresponding classes of enum entries
2022-10-10 15:04:02 +01:00
Tamas Vajk
544e2e4107
Remove path based generated file classification
2022-10-10 14:42:15 +02:00
Tamás Vajk
1cf2db1a0b
Merge pull request #10718 from tamasvajk/kotlin-internal-repr
...
Kotlin: ignore properties in `java/internal-representation-exposure` check
2022-10-10 13:58:55 +02:00
Tamás Vajk
87b971c78f
Merge pull request #10728 from tamasvajk/kotlin-missing-override-sam
...
Kotlin: Extract `override` modifier on SAM methods
2022-10-10 13:58:28 +02:00
Tamás Vajk
cd8ac1a835
Merge pull request #10720 from tamasvajk/kotlin-equals-fix
...
Kotlin: Consider `::class` type check in `java/unchecked-cast-in-equals`
2022-10-10 13:58:15 +02:00
Jami
bb0f2f7d36
Merge pull request #10368 from jcogs33/android-deeplink-analysis
...
Java: Android deeplink analysis
2022-10-07 14:32:05 -04:00
Chris Smowton
bef4011947
Kotlin: fix type variable erasure inside default function values
...
Previously because extractClassInstance didn't use the declaration stack, we wouldn't notice that it was legal to refer to its type variable in the context of extracting a specialised method <-> method source-decl edge. This led to erasing the types of the source-decl, so that e.g. Map.put(...) would have signature (Object, Object) not (K, V)
as it should.
2022-10-07 17:31:38 +01:00
Chris Smowton
2df1d63d1c
Extract the corresponding classes of enum entries, where they exist.
2022-10-07 12:23:08 +01:00
Tamas Vajk
26c4216fef
Kotlin: Extract override modifier on SAM methods
2022-10-07 11:23:14 +02:00
Tamas Vajk
9f6240b38c
Kotlin: Add test for missing override modifier on SAM methods
2022-10-07 11:22:15 +02:00
Tamas Vajk
f51c13f0c1
Kotlin: Recognize generated files
2022-10-07 09:32:00 +02:00
Tamas Vajk
51f9314a50
Kotlin: Consider ::class type check in equals
2022-10-07 09:23:01 +02:00
Tamas Vajk
f7f12076df
Kotlin: Add test case for ::class type check in equals
2022-10-07 09:22:10 +02:00
Tamas Vajk
cd64faf635
Kotlin: ignore properties in java/internal-representation-exposure check
2022-10-07 09:13:14 +02:00
Tamas Vajk
e9a304bad0
Kotlin: Add test for exposed internal representation
2022-10-07 09:12:36 +02:00
Tony Torralba
ceae5eef28
Revert "Decouple from #10177 "
...
This reverts commit 7b34b10cee
2022-10-06 16:30:23 +02:00
Tony Torralba
7b34b10cee
Decouple from #10177
2022-10-06 16:28:17 +02:00
Tony Torralba
1bf1349167
Test all sinks
2022-10-06 16:28:17 +02:00
Tony Torralba
4a18892da9
Second query version
...
Remove sinks flowing to write operations requirement
2022-10-06 16:28:17 +02:00
Chris Smowton
86e5e4c4bc
Accept test changes
2022-10-06 12:40:04 +01:00
Chris Smowton
020f29a1ab
Add visibility tests
2022-10-06 12:40:03 +01:00
Chris Smowton
bec948682d
Fix calls to static methods defined in association with local functions
...
These are a bit weird since they involve static calls to unnamed synthetic class members, but while unwriteable as Java they ought to work as a database description.
2022-10-06 12:40:03 +01:00
Chris Smowton
3452dcbced
Fix class type parameter erasure within $default methods
2022-10-06 12:40:02 +01:00
Chris Smowton
03c895853b
Clarify test and accept test changes
2022-10-06 12:40:02 +01:00
Chris Smowton
34a0a0d080
Implement $default method synthesis
...
This adds methods that fill in default parameters whenever a constructor or method uses default parameter values. I use as similar an approach to the real Kotlin compiler as possible both because this produces the desirable dataflow, and because it should merge cleanly with the same class file seen by the Java extractor, which will see and
extract the signatures of the default methods.
2022-10-06 12:38:55 +01:00
Anders Schack-Mulligen
5b67ba2939
Merge pull request #10177 from atorralba/atorralba/path-sanitizer
...
Java: Promote `PathSanitizer.qll` from experimental
2022-10-06 10:29:33 +02:00
Tamas Vajk
0bbc7adca0
Accept test changes
2022-10-06 08:45:57 +02:00
