2962 Commits

Author	SHA1	Message	Date
Tony Torralba	c54e93f005	Merge pull request #13705 from atorralba/atorralba/java/android-unsafe-fetch-apply ... Java: Add support for Kotlin's `apply` to java/android/unsafe-android-wevbiew-fetch	2023-07-12 09:45:54 +02:00
Ian Lynagh	cfd29de677	Kotlin: Add Class.isFileClass()	2023-07-11 15:58:41 +01:00
Mathias Vorreiter Pedersen	a4c0063ab1	Merge pull request #13679 from MathiasVP/speedup-big-step ... DataFlow: Speed up the big step relation	2023-07-11 09:44:17 +01:00
Tony Torralba	ce600367df	Java: Add support for Kotlin's apply to java/android/unsafe-android-webview-fetch	2023-07-10 17:40:16 +02:00
Tony Torralba	b70e21df4f	Merge pull request #13702 from atorralba/atorralba/kotlin/apply ... Kotlin: Support apply	2023-07-10 17:39:57 +02:00
Tony Torralba	0f18c0227b	Kotlin: Support apply	2023-07-10 16:15:27 +02:00
Mathias Vorreiter Pedersen	83d0dec0fb	DataFlow: Sync identical files.	2023-07-06 14:00:00 +01:00
Michael Nebel	238f390738	Merge pull request #13452 from michaelnebel/refactorstackprinting ... Re-factor printing of summary component stacks.	2023-07-04 08:29:10 +02:00
Michael Nebel	243c592447	Address review comments.	2023-07-03 17:01:08 +02:00
Michael Nebel	bddd22f522	Sync files and make language specific adjustments.	2023-07-03 14:36:07 +02:00
Michael Nebel	c18f4b1604	Sync files and make language specific rename.	2023-07-03 14:36:06 +02:00
Chuan-kai Lin	ce464a7d69	Remove pragma[assume_small_delta]	2023-06-30 11:09:29 -07:00
Tony Torralba	a7c2a25cac	Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks ... Java: Convert all command injection sinks to MaD format	2023-06-27 14:06:45 +02:00
Tony Torralba	55280e523a	Update java/ql/lib/semmle/code/java/security/UnsafeDeserializationQuery.qll	2023-06-26 11:14:31 +02:00
Jorge	7d0b880bf7	Merge branch 'main' into jorgectf/deserialization-lookahead	2023-06-23 18:24:39 +02:00
jorgectf	b6e4ba6f9d	Add SerialKiller model	2023-06-23 18:19:43 +02:00
Jami	5259a6ecfc	Merge pull request #13324 from jcogs33/jcogs33/shared-sink-kind-validation ... Shared: share MaD kind validation across languages	2023-06-20 11:56:12 -04:00
Owen Mansel-Chan	d7c97f8759	Merge pull request #13455 from owen-mc/dataflow/add-flowCheckNodeSpecific ... Dataflow: add language-specific hook for breaking up big step relation	2023-06-20 13:24:26 +01:00
Jeroen Ketema	9c774ac97f	Merge pull request #13426 from jketema/inline-3 ... Update inline flow tests to use parameterized module	2023-06-19 17:39:29 +02:00
Tony Torralba	c62689022e	Merge pull request #13256 from atorralba/atorralba/java/stapler-models ... Java: Model the Stapler framework	2023-06-19 15:27:19 +02:00
Tony Torralba	00fe8adc09	Fix name clash	2023-06-19 15:04:33 +02:00
Tony Torralba	1b39faaded	QLDoc correction	2023-06-15 16:20:39 +02:00
Owen Mansel-Chan	3ff6d033d3	Rename to neverSkipInPathGraph	2023-06-14 15:29:54 +01:00
Owen Mansel-Chan	5f72ce0935	Add stub implementations of flowCheckNodeSpecific	2023-06-14 14:46:35 +01:00
Owen Mansel-Chan	e0f7437d40	Sync dataflow library	2023-06-14 14:29:56 +01:00
Jami	35591113c2	Merge branch 'main' into jcogs33/shared-sink-kind-validation	2023-06-14 08:06:34 -04:00
Michael Nebel	afec9b05e9	Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor ... C#: Use synthetic global in the EntityFramework code instead of jump steps.	2023-06-14 13:47:56 +02:00
Tony Torralba	5e3d9d8136	Java: Model the Stapler framework	2023-06-14 12:34:52 +02:00
Tony Torralba	182513a981	Merge pull request #13235 from atorralba/atorralba/java/hudson-models ... Java: Add Hudson models	2023-06-14 12:33:18 +02:00
Anders Schack-Mulligen	2d616d494e	C#/Ruby: Add fields as per review comments.	2023-06-13 11:26:30 +02:00
Tony Torralba	ffe67689ec	Merge branch 'main' into atorralba/java/command-injection-mad-sinks	2023-06-13 09:27:33 +02:00
Tony Torralba	29d4b6fadc	Re-add public classes that shouldn't be removed yet	2023-06-13 09:24:27 +02:00
Jami Cogswell	9abe3e3da4	Shared: use a module as input to 'KindValidation'	2023-06-09 14:35:37 -04:00
Anders Schack-Mulligen	97b2bdaa9f	Java: Fix types of summary parameter nodes.	2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen	254d60c826	Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.	2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen	59636c43ca	Dataflow: Rename two private predicates.	2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen	1b7bbf6320	Merge pull request #13083 from aschackmull/dataflow/typestrengthen ... Dataflow: Strengthen tracked types.	2023-06-09 13:23:30 +02:00
Anders Schack-Mulligen	44b09507ab	Merge pull request #13408 from aschackmull/java/loginjection-perf ... Java: Add more negation context to reduce string ops and improve perf.	2023-06-09 08:44:27 +02:00
Anders Schack-Mulligen	d230509905	Dataflow: Address review comments.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	4399138c82	Dataflow: Fix QL4QL alert.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	8a584b78ac	Dataflow: Enable type strengthening in partial flow.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	441ccef6c4	Dataflow: Bugfix, use arg type rather than strengthened param type.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	4633abe19e	Java: Autoformat	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	ad461a87b4	Dataflow: Strengthen tracked types.	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	1d87f0793b	Dataflow: Minor refactor.	2023-06-09 08:37:35 +02:00
Jami Cogswell	da58b2afc8	Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'	2023-06-08 20:05:27 -04:00
Anders Schack-Mulligen	5a2ac1b5ca	Java: Add more negation context to reduce string ops and improve perf.	2023-06-08 14:04:57 +02:00
Anders Schack-Mulligen	dabb4dd643	Java: Improve join-order for FunctionalInterface.	2023-06-08 13:02:54 +02:00
Tony Torralba	6d7234f8ed	Merge pull request #13225 from atorralba/atorralba/java/path-injection-mad-sinks-2 ... Java: Migrate path injection sinks to models-as-data (simplified)	2023-06-07 14:27:36 +02:00
Erik Krogh Kristensen	6ba7f9a238	Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp ... delete old deprecations	2023-06-07 13:00:57 +02:00