am0o0
02b0b402d6
remove useless predicate
...
add missed FlowState
2024-05-12 19:29:37 +02:00
am0o0
484923e706
update test files
2024-05-12 18:21:17 +02:00
Am
9946e07f36
Merge branch 'github:main' into amammad-java-bombs
2024-05-12 13:17:02 +02:00
Michael Nebel
5e2e224c9c
Java: Updated expected test output.
2024-05-08 14:42:53 +02:00
Michael Nebel
2a40a2a57f
Java: Add some inheritance test cases for the model generator and updated expected test output.
2024-05-08 13:01:41 +02:00
Michael Nebel
5fe3ab7890
Java: Prepare for inline test sharing with C#.
2024-05-07 10:38:24 +02:00
Michael Nebel
b53fa0f7f3
Java: Ensure that it is the callable for the model origin that carries the comment containing the model.
2024-05-06 16:41:58 +02:00
Michael Nebel
a8549d2e23
Java: Convert remaining tests to inline flow tests.
2024-05-06 15:54:01 +02:00
Michael Nebel
95ddd6ec74
Java: Generalize the inline mad test to allow further re-use.
2024-05-06 13:57:18 +02:00
Michael Nebel
51e7f3be1a
Java: Rename MaD to summary.
2024-05-06 13:03:38 +02:00
Michael Nebel
a33393d452
Java: Delete old summary models expected output.
2024-05-06 11:02:04 +02:00
Michael Nebel
7cb8a6c52f
Java: Inline models as data expected output as comments in the java files and add a test.
2024-05-06 11:01:23 +02:00
Michael Nebel
6815bcaa80
Java: Move param module into TestUtilities.
2024-05-06 10:19:39 +02:00
Michael Nebel
105984f7de
Java: Make param module for MaD inline test.
2024-05-06 10:01:34 +02:00
Michael Nebel
5b89bd23c7
Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
d05c5e3d94
Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
301a6cc191
Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.
2024-05-01 13:07:21 +02:00
Michael Nebel
acd0fa4b7b
Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
85a4dd0325
Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.
2024-05-01 13:07:20 +02:00
Michael Nebel
072f19008a
Java: Deprecate the content of ArithmeticTaintedLocalQuery and remove the arithmetic tainted local query variant.
2024-05-01 08:59:51 +02:00
Michael Nebel
b754706e44
Java: Update SupportedExternalApi expected test output.
2024-04-26 12:39:46 +02:00
Michael Nebel
06f987ad58
Java: Add test example of a supported sink defined in QL.
2024-04-26 12:39:46 +02:00
Anders Schack-Mulligen
b87b8329a0
Dataflow: Use default fieldFlowBranchLimit in qltests.
2024-04-15 15:13:03 +02:00
Anders Schack-Mulligen
f85ff9defc
Java: Update expected output (interesting).
2024-04-12 09:20:28 +02:00
Anders Schack-Mulligen
c2f5731e8d
Java: Update expected output (uninteresting).
2024-04-12 09:20:26 +02:00
Anders Schack-Mulligen
2925e45434
Java/Dataflow: Propagate MaD-id/model-id to PathGraph.
2024-04-12 09:19:51 +02:00
Dave Bartolomeo
996f535f0b
Merge pull request #16103 from github/dbartol/javadoc-record
...
Allow `@param` tags to apply to record parameters
2024-04-09 14:21:45 -04:00
Dave Bartolomeo
b9cfeaf614
Add test case
2024-04-09 12:41:32 -04:00
erik-krogh
8cb6598f50
fixing that I put a type on the wrong thing in the alert-message
2024-04-08 20:51:19 +02:00
erik-krogh
ca4f667053
add fallback if I can't easily determine the variable
2024-04-08 07:14:48 +02:00
erik-krogh
8b220cc1b3
also get the variable for array accesses
2024-04-08 07:14:48 +02:00
erik-krogh
795b767b6e
add link to the source variable in the alert-message for java/implicit-cast-in-compound-assignment
2024-04-08 07:14:48 +02:00
Owen Mansel-Chan
e10333bf2b
Merge pull request #14919 from github/java/jdk-model-autogeneration
...
Java: add dataflow-generated models for JDK17
2024-04-04 21:12:55 +01:00
Dave Bartolomeo
2336e14627
Remove expectation of spurious diagnostic
2024-04-04 10:31:05 -04:00
Dave Bartolomeo
ce98353d22
Allow @param tags to apply to record parameters
2024-04-02 15:15:11 -04:00
Owen Mansel-Chan
fa614df3f4
Tests fixed by model for CharBuffer.wrap(char[])
2024-04-01 14:03:42 +01:00
Owen Mansel-Chan
2d24fe011b
Accept that lots of sinks are now summaries as well
2024-04-01 14:03:36 +01:00
Owen Mansel-Chan
9067a337b0
Test fixed by model for BasicAttributes(String, Object)
2024-04-01 14:03:30 +01:00
Owen Mansel-Chan
776c9d9eb2
Accept changes to top jdk apis test
2024-04-01 14:03:23 +01:00
Owen Mansel-Chan
52e6ea30e7
Accept more capture summary models
...
This line is added because `FileOutputStream`'s constructor is now modeled as propagating taint, not just as a sink.
| p;PrivateFlowViaPublicInterface$SPI;true;openStream;();;Argument[this];ReturnValue;taint;df-generated |
2024-04-01 14:03:00 +01:00
Jami
d889e3cf98
Merge pull request #14854 from jcogs33/jcogs33/unsafe-url-forward-promotion
...
Java: Promote Unsafe URL Forward query from experimental
2024-03-29 16:34:06 -04:00
Ian Lynagh
5dcd635403
Merge pull request #15961 from igfoo/igfoo/MissingEnumInSwitch
...
Java: Limit the amount of results that MissingEnumInSwitch produces per switch
2024-03-28 11:13:45 +00:00
Ian Lynagh
b6a1266ade
Java: Accept test changes for MissingEnumInSwitch Oxford commas
2024-03-27 18:48:22 +00:00
Jami Cogswell
2391fe7d89
Java: use InlineFlowTest instead of InlineExpectationsTest
2024-03-27 08:44:17 -04:00
Dave Bartolomeo
c11b8f9d51
Remove unused data extension in test
2024-03-25 19:14:54 -04:00
Chris Smowton
568bddc4a9
Add test cases for cases falling directly out of switch blocks
2024-03-25 16:31:40 +00:00
Chris Smowton
9fa2f19990
Add test for guards in the presence of fall-through between pattern and constant cases
2024-03-25 16:31:39 +00:00
Chris Smowton
c48e64e536
Add tests for the combination of anonymous labels and a guard
2024-03-25 16:31:39 +00:00
Chris Smowton
1e0766dffa
Add tests for case statement type test dominance against anonymous labels and fall-through
2024-03-25 16:31:39 +00:00
Chris Smowton
f2ff6c476a
Add printast tests for anonymous variables
2024-03-25 16:31:38 +00:00
