1165 Commits

Author	SHA1	Message	Date
Tom Hvitved	75137a0f4c	Java: Adopt shared SSA library	2025-02-11 10:06:43 +01:00
Owen Mansel-Chan	b4c8390991	Merge pull request #18137 from owen-mc/java/jax-rs-annotation-inheritance ... Java: Update JAX-RS annotation inheritance	2025-01-21 15:26:47 +00:00
Owen Mansel-Chan	19df33fb43	Remove another erroneous comment ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2025-01-21 09:25:37 +00:00
Owen Mansel-Chan	6fa18be0cc	Fix QLDocs	2025-01-20 22:07:01 +00:00
Owen Mansel-Chan	883301938b	Merge pull request #18161 from owen-mc/java/weak-crypto-algo-more-informative ... Java: Make `java/weak-cryptographic-algorithm` give a reason why the algo is insecure	2025-01-13 23:43:04 +00:00
Owen Mansel-Chan	0728b3bd60	Update test expectation	2025-01-10 10:37:05 +00:00
Owen Mansel-Chan	9cc614ac2d	Allow jax-rs path annotation inheritance	2025-01-07 16:44:12 +00:00
Owen Mansel-Chan	de1b374e0e	Test JAX-RS class/interface annotation inheritance	2025-01-07 15:28:41 +00:00
Asger F	be939dca29	Merge pull request #14350 from asgerf/shared/deduplicate-path-graph ... Shared: Add DataFlow::DeduplicatePathGraph	2024-12-18 14:04:29 +01:00
Asger F	8340841d54	Shared: Fix propagation of call bit	2024-12-17 11:16:04 +01:00
Asger F	950ae44d03	Shared: Show test failures	2024-12-17 11:15:57 +01:00
Asger F	f2968f4e14	Shared: Ensure subpath-induced edges are handled properly ... Argument-passing and flow-through edges are present in 'edges' in addition to 'subpaths', but the implementation didn't take this into account.	2024-12-16 13:21:43 +01:00
Michael Nebel	0a1d2d0bbb	Java: Update all test util paths to point to the new location.	2024-12-12 13:21:25 +01:00
Anders Schack-Mulligen	066cfa31d2	Merge pull request #18258 from aschackmull/dataflow/simplify-apapprox3 ... Dataflow: Simplify references to access paths from prior stage.	2024-12-11 14:23:31 +01:00
Asger F	889100a243	Java: update test output with provenance	2024-12-11 13:19:47 +01:00
Asger F	afdbf2c3c6	Java: update test to account for key,val	2024-12-11 13:19:36 +01:00
Asger F	736388809d	Java: MethodAccess -> MethodCall	2024-12-11 13:19:25 +01:00
Asger F	5aa1242117	Shared: use a call bit when tracking reachability to/from a discriminator	2024-12-11 11:29:14 +01:00
Asger F	0eb543e0a9	Java: add test for spurious flow from path graph deduplication	2024-12-11 11:29:13 +01:00
Owen Mansel-Chan	0f3dd6d8f1	Java: IPA the CFG	2024-12-10 15:26:11 +00:00
Anders Schack-Mulligen	da179705c3	Java: Accept expected file changes.	2024-12-10 14:52:06 +01:00
Anders Schack-Mulligen	4bf63fedc9	Merge pull request #18179 from aschackmull/dataflow/accesspath-notypes ... Dataflow: Remove tracked types from Access Paths, track tainted object type, and tweak type pruning.	2024-12-05 09:58:36 +01:00
Jeroen Ketema	89d20fd086	Java: Update expected test results	2024-12-03 19:18:59 +01:00
Anders Schack-Mulligen	9734cff15b	Java/C#: Update expected files.	2024-12-03 12:57:44 +01:00
Owen Mansel-Chan	e6409e159f	Give reason why crypto algorithm is insecure	2024-11-29 11:54:27 +00:00
Anders Schack-Mulligen	df2e2e503a	Merge pull request #17901 from aschackmull/java/allowlist-sanitizer ... Java: Add a default taint sanitizer for contains-checks on lists of constants	2024-11-27 11:09:05 +01:00
yoff	6d6f269e6c	Merge pull request #17997 from yoff/java/inline-range-tests	2024-11-26 14:48:07 +01:00
Anders Schack-Mulligen	0d45f0efb2	Java: Accept consistency check result.	2024-11-26 13:25:43 +01:00
Anders Schack-Mulligen	2b1caa8a35	Java: Add test.	2024-11-26 13:25:42 +01:00
Rasmus Lerchedahl Petersen	f508f8eb83	Java: address review comments	2024-11-26 11:44:16 +01:00
Rasmus Lerchedahl Petersen	25664d0e53	Java: Add support for non-integer bounds in inline expectations	2024-11-25 14:48:17 +01:00
Rasmus Lerchedahl Petersen	37935eea3b	java: separate bounds onto different lines	2024-11-25 12:32:11 +01:00
Tom Hvitved	5f9b8c05bd	Java: Update expected test output	2024-11-20 12:58:00 +01:00
yoff	6ed895064f	Apply suggestions from code review ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2024-11-19 13:37:53 +01:00
Rasmus Lerchedahl Petersen	15953bf569	java: inline range test	2024-11-15 12:31:18 +01:00
Owen Mansel-Chan	efb34aea45	Fix bug in UnreachableBlocks	2024-11-14 14:50:25 +00:00
Tom Hvitved	95e9d013cc	Update expected test output	2024-11-04 12:07:06 +01:00
Tom Hvitved	7c4d5981dd	Shared: Add missing spaces in inline test expectation output	2024-10-25 13:23:03 +02:00
Michael Nebel	e2ada2536b	Java: Update java.net expected output.	2024-10-21 15:19:41 +02:00
Michael Nebel	e94cacd449	Java: Update test expected output where the query results are not affected.	2024-10-21 15:19:33 +02:00
Ian Lynagh	323b7cb96f	Java: Follow change of implicit parameter names	2024-10-01 15:06:45 +01:00
Ian Lynagh	901f756c69	Java: Add a test for parameter names	2024-10-01 15:06:42 +01:00
Anders Schack-Mulligen	38818f3cd2	Java: Adjust Set.clear model to apply to overrides.	2024-09-30 15:46:42 +02:00
Michael Nebel	6f74387600	Merge pull request #17521 from michaelnebel/modelgen/moreimprovements ... C#/Java: Content based model generation improvements.	2024-09-30 11:22:30 +02:00
Rasmus Wriedt Larsen	381ea93ec3	Merge pull request #17424 from RasmusWL/active-threat-model-source ... Go/Java/C#: Rename `ThreatModelFlowSource` to `ActiveThreatModelSource`	2024-09-26 13:08:17 +02:00
Michael Nebel	a128383760	C#/Java: Add some dfc-generated test cases.	2024-09-26 13:01:01 +02:00
Tom Hvitved	f287216060	Update expected test output	2024-09-24 14:21:38 +02:00
Rasmus Wriedt Larsen	63c3a71d95	Merge branch 'main' into active-threat-model-source	2024-09-23 11:18:14 +02:00
Chris Smowton	fe1081e880	Merge pull request #17510 from mbaluda/patch-1 ... Model summary for `org.springframework.core.io.getInputStream` methods	2024-09-19 15:47:31 +01:00
Mauro Baluda	cab35a25a5	Remove duplicate summary for MultipartFile.getInputStream and update .expected file	2024-09-18 20:43:04 +02:00