351 Commits

Author	SHA1	Message	Date
Paolo Tranquilli	e99a040884	implement review suggestions	2021-11-23 15:28:16 +00:00
Paolo Tranquilli	30805d964c	add ThisArgumentOperand special case	2021-11-23 15:28:15 +00:00
Paolo Tranquilli	0ff9520575	...and syncing files again	2021-11-23 15:28:15 +00:00
Paolo Tranquilli	5202f963dd	C++: sync Operand source	2021-11-23 15:28:15 +00:00
Geoffrey White	d9e02e83fe	Merge pull request #6825 from MathiasVP/use-shared-ssa-in-ir-dataflow ... C++: Redesign IR dataflow using the shared SSA library	2021-11-09 10:19:50 +00:00
Mathias Vorreiter Pedersen	dfbfbe4953	Merge branch 'main' into use-shared-ssa-in-ir-dataflow	2021-11-03 10:39:22 +00:00
Tom Hvitved	51f4f57617	C#: Use cs/ prefix in all query IDs	2021-11-03 10:25:21 +01:00
CodeQL CI	5d62aa5b29	Merge pull request #6994 from erik-krogh/redundant-cast ... Approved by RasmusWL, aschackmull, esbena, geoffw0, hvitved, nickrolfe	2021-11-02 03:45:48 -07:00
Tamás Vajk	18b08060ae	Merge pull request #5110 from porcupineyhairs/ssrfCsharp ... C# : Add query to detect SSRF	2021-11-02 09:50:28 +01:00
Erik Krogh Kristensen	d36c66cfca	remove redundant inline casts in arguments where the type is inferred by the call target	2021-10-29 14:37:56 +02:00
Erik Krogh Kristensen	e75448ebb0	remove redundant inline casts	2021-10-28 16:35:53 +02:00
Mathias Vorreiter Pedersen	8135dcefdd	Merge branch 'main' into use-shared-ssa-in-ir-dataflow	2021-10-28 12:36:25 +01:00
Mathias Vorreiter Pedersen	13ce2569d7	C++/C#: Sync identical IR files·	2021-10-28 10:52:00 +01:00
Porcuiney Hairs	9fe822f41c	Include suggestions from review	2021-10-22 00:55:01 +05:30
Erik Krogh Kristensen	a358a192c4	add explicit this to all calls to class predicates	2021-10-14 10:11:55 +02:00
Mathias Vorreiter Pedersen	a2371370ff	Merge pull request #6865 from MathiasVP/fix-if-none ... C++/C#/JS/Python: Replace 'if p() then q() else none()' with a conjunction	2021-10-13 19:47:55 +01:00
Mathias Vorreiter Pedersen	7690625114	C#: Replace 'if p() then q() else none()' with a conjunction.	2021-10-13 12:11:50 +01:00
Mathias Vorreiter Pedersen	b089e6d84e	C++/C#: Fix QLDoc of 'CopyInstruction'.	2021-10-05 09:14:20 +01:00
Porcuiney Hairs	b9c08167f3	C# : Add query to detect SSRF	2021-09-29 04:14:22 +05:30
Mathias Vorreiter Pedersen	24214002a1	C#/C++: Sync identical files.	2021-09-24 13:13:09 +01:00
Mathias Vorreiter Pedersen	35baff8bac	C#/C++: Sync identical files.	2021-09-22 13:32:29 +01:00
Erik Krogh Kristensen	dd59f79947	use min() instead of rank[1]()	2021-08-18 11:09:03 +02:00
edvraa	e790ee7c2e	Fix formatting	2021-08-04 14:06:27 +03:00
edvraa	40e8a900de	Apply changes from code review	2021-07-12 02:08:23 +03:00
edvraa	6393dca22f	Apply changes from code review	2021-07-12 01:13:41 +03:00
edvraa	3de7b280e4	AuthCookie.qll moved to experimental	2021-07-12 01:13:40 +03:00
edvraa	3723f7f132	comments	2021-07-12 01:13:40 +03:00
edvraa	2c9d6827ad	comments	2021-07-12 01:13:40 +03:00
edvraa	65fb46af3d	fix help files	2021-07-12 01:13:40 +03:00
edvraa	d0e9a01edc	Rename files	2021-07-12 01:13:40 +03:00
edvraa	5c9a3d5ce7	Single Secure query	2021-07-12 01:13:39 +03:00
edvraa	07327984b0	Single HttpOnly query	2021-07-12 01:13:39 +03:00
edvraa	dea4d67ebd	Extract to predicate isCookieWithSensitiveName	2021-07-12 01:13:39 +03:00
edvraa	7e723e90f1	Remove redundant iResponse.getAppendMethod() = mc.getTarget(), it is already covered by higher level exists	2021-07-12 01:13:39 +03:00
edvraa	98261a63c5	typo accessibe -> accessible	2021-07-12 01:13:39 +03:00
edvraa	89c4102462	HttpOnly and Secure cookie queries	2021-07-12 01:13:39 +03:00
luchua-bc	6a2c7d54cd	Enhance the query to check more scenarios	2021-06-14 03:24:16 +00:00
Mathias Vorreiter Pedersen	879bfbbd4e	C++: Match the join order from before #5522.	2021-06-09 15:02:31 +02:00
Jonas Jensen	7282ad90d0	Merge pull request #5854 from dbartol/dbartol/smart-pointers/side-effects ... C++: Generate side effect instructions for smart pointer indirections	2021-06-01 16:57:05 +02:00
Dave Bartolomeo	da14647e5a	Merge pull request #5522 from github/rdmarsh2/cpp/ssa-reuse ... C++: reuse unaliased SSA results when computing aliased SSA	2021-06-01 10:17:54 -04:00
Erik Krogh Kristensen	b947334eea	CPP: make some parameter names consistent with the names used in the super class	2021-05-28 16:48:47 +02:00
Robert Marsh	e590a7bc33	C++: Handle alias models for this/qualifiers	2021-05-18 13:15:38 -07:00
Tamas Vajk	6853f6affa	C#: Fix type of temp foreach variable in IR	2021-05-17 15:53:57 +02:00
Dave Bartolomeo	773e5f2e2e	Merge remote-tracking branch 'upstream/main' into side-effects	2021-05-07 16:50:48 -04:00
Dave Bartolomeo	653ef9d257	C++: Improve consistency failure message for multiple MemoryLocations on a memory access.	2021-05-07 16:04:01 -04:00
Dave Bartolomeo	54b9f2175d	C++: Allow annotating IR dumps with Alias Analysis info ... This commit adds a `PrintAliasAnalysis.qll` module, which can be imported alongside `PrintIR.qll` to annotate those dumps with alias analysis results.	2021-05-07 16:03:11 -04:00
Robert Marsh	b3e598c1a7	C++/C#: fix another join order in SSA construction	2021-05-06 08:14:49 -07:00
Robert Marsh	5318aa8ead	C++: autoformat	2021-05-06 08:14:48 -07:00
Robert Marsh	35594eac22	C++: fix bad join order in phi node sharing	2021-05-06 08:14:47 -07:00
Robert Marsh	5406783e9c	C++: autoformat	2021-05-06 08:14:46 -07:00