Anders Schack-Mulligen
a650499a9c
Java: Accept qltest .expected file changes (interesting).
2024-05-22 15:42:12 +02:00
Anders Schack-Mulligen
de5c69d0a1
Merge pull request #16551 from aschackmull/java/model-fixes
...
Java: Revise some jdk time-related models
2024-05-22 14:05:23 +02:00
Anders Schack-Mulligen
a74cf6501a
Java: update qltest expected files.
2024-05-22 11:13:06 +02:00
Michael Nebel
84e412fe36
Merge pull request #16477 from michaelnebel/csharp/madinlinetest
...
C#: Inline expectation for model generator test.
2024-05-22 11:05:23 +02:00
Rasmus Wriedt Larsen
2451a6d3f6
Accept .expected changes
2024-05-21 14:47:42 +02:00
Michael Nebel
78b8a9259a
Share the Models as Data inline expect predicates.
2024-05-17 09:44:57 +02:00
Michael Nebel
b1329fd806
Merge pull request #16362 from michaelnebel/java/removelocalqueries
...
Java: Remove local query variants.
2024-05-16 14:34:04 +02:00
Max Schaefer
d406646414
Java: Add tests for comparison-with-wider-type.
2024-05-15 12:45:19 +01:00
am0o0
02b0b402d6
remove useless predicate
...
add missed FlowState
2024-05-12 19:29:37 +02:00
am0o0
484923e706
update test files
2024-05-12 18:21:17 +02:00
Am
9946e07f36
Merge branch 'github:main' into amammad-java-bombs
2024-05-12 13:17:02 +02:00
Michael Nebel
5e2e224c9c
Java: Updated expected test output.
2024-05-08 14:42:53 +02:00
Michael Nebel
2a40a2a57f
Java: Add some inheritance test cases for the model generator and updated expected test output.
2024-05-08 13:01:41 +02:00
Michael Nebel
5fe3ab7890
Java: Prepare for inline test sharing with C#.
2024-05-07 10:38:24 +02:00
Michael Nebel
b53fa0f7f3
Java: Ensure that it is the callable for the model origin that carries the comment containing the model.
2024-05-06 16:41:58 +02:00
Michael Nebel
a8549d2e23
Java: Convert remaining tests to inline flow tests.
2024-05-06 15:54:01 +02:00
Michael Nebel
95ddd6ec74
Java: Generalize the inline mad test to allow further re-use.
2024-05-06 13:57:18 +02:00
Michael Nebel
51e7f3be1a
Java: Rename MaD to summary.
2024-05-06 13:03:38 +02:00
Michael Nebel
a33393d452
Java: Delete old summary models expected output.
2024-05-06 11:02:04 +02:00
Michael Nebel
7cb8a6c52f
Java: Inline models as data expected output as comments in the java files and add a test.
2024-05-06 11:01:23 +02:00
Michael Nebel
6815bcaa80
Java: Move param module into TestUtilities.
2024-05-06 10:19:39 +02:00
Michael Nebel
105984f7de
Java: Make param module for MaD inline test.
2024-05-06 10:01:34 +02:00
Michael Nebel
5b89bd23c7
Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
d05c5e3d94
Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
301a6cc191
Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.
2024-05-01 13:07:21 +02:00
Michael Nebel
acd0fa4b7b
Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
85a4dd0325
Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.
2024-05-01 13:07:20 +02:00
Michael Nebel
072f19008a
Java: Deprecate the content of ArithmeticTaintedLocalQuery and remove the arithmetic tainted local query variant.
2024-05-01 08:59:51 +02:00
Michael Nebel
b754706e44
Java: Update SupportedExternalApi expected test output.
2024-04-26 12:39:46 +02:00
Michael Nebel
06f987ad58
Java: Add test example of a supported sink defined in QL.
2024-04-26 12:39:46 +02:00
Anders Schack-Mulligen
b87b8329a0
Dataflow: Use default fieldFlowBranchLimit in qltests.
2024-04-15 15:13:03 +02:00
Anders Schack-Mulligen
f85ff9defc
Java: Update expected output (interesting).
2024-04-12 09:20:28 +02:00
Anders Schack-Mulligen
c2f5731e8d
Java: Update expected output (uninteresting).
2024-04-12 09:20:26 +02:00
Anders Schack-Mulligen
2925e45434
Java/Dataflow: Propagate MaD-id/model-id to PathGraph.
2024-04-12 09:19:51 +02:00
Dave Bartolomeo
996f535f0b
Merge pull request #16103 from github/dbartol/javadoc-record
...
Allow `@param` tags to apply to record parameters
2024-04-09 14:21:45 -04:00
Dave Bartolomeo
b9cfeaf614
Add test case
2024-04-09 12:41:32 -04:00
erik-krogh
8cb6598f50
fixing that I put a type on the wrong thing in the alert-message
2024-04-08 20:51:19 +02:00
erik-krogh
ca4f667053
add fallback if I can't easily determine the variable
2024-04-08 07:14:48 +02:00
erik-krogh
8b220cc1b3
also get the variable for array accesses
2024-04-08 07:14:48 +02:00
erik-krogh
795b767b6e
add link to the source variable in the alert-message for java/implicit-cast-in-compound-assignment
2024-04-08 07:14:48 +02:00
Owen Mansel-Chan
e10333bf2b
Merge pull request #14919 from github/java/jdk-model-autogeneration
...
Java: add dataflow-generated models for JDK17
2024-04-04 21:12:55 +01:00
Dave Bartolomeo
2336e14627
Remove expectation of spurious diagnostic
2024-04-04 10:31:05 -04:00
Dave Bartolomeo
ce98353d22
Allow @param tags to apply to record parameters
2024-04-02 15:15:11 -04:00
Owen Mansel-Chan
fa614df3f4
Tests fixed by model for CharBuffer.wrap(char[])
2024-04-01 14:03:42 +01:00
Owen Mansel-Chan
2d24fe011b
Accept that lots of sinks are now summaries as well
2024-04-01 14:03:36 +01:00
Owen Mansel-Chan
9067a337b0
Test fixed by model for BasicAttributes(String, Object)
2024-04-01 14:03:30 +01:00
Owen Mansel-Chan
776c9d9eb2
Accept changes to top jdk apis test
2024-04-01 14:03:23 +01:00
Owen Mansel-Chan
52e6ea30e7
Accept more capture summary models
...
This line is added because `FileOutputStream`'s constructor is now modeled as propagating taint, not just as a sink.
| p;PrivateFlowViaPublicInterface$SPI;true;openStream;();;Argument[this];ReturnValue;taint;df-generated |
2024-04-01 14:03:00 +01:00
Jami
d889e3cf98
Merge pull request #14854 from jcogs33/jcogs33/unsafe-url-forward-promotion
...
Java: Promote Unsafe URL Forward query from experimental
2024-03-29 16:34:06 -04:00
Ian Lynagh
5dcd635403
Merge pull request #15961 from igfoo/igfoo/MissingEnumInSwitch
...
Java: Limit the amount of results that MissingEnumInSwitch produces per switch
2024-03-28 11:13:45 +00:00
