2888 Commits

Author	SHA1	Message	Date
Chris Smowton	3b0bd3bc0f	Improve wording	2022-04-01 11:31:31 +01:00
Chris Smowton	99026a6071	Improve wording of isAdditionalFlow/TaintStep qldoc	2022-04-01 11:07:27 +01:00
Rasmus Wriedt Larsen	5083023aa8	Python: Move XML parsing PoC ... Since the folder where it used to live is now empty otherwise :O	2022-03-31 18:37:47 +02:00
Rasmus Wriedt Larsen	b4c0065aeb	Python: Extend FileSystemAccess for xml.sax and xml.dom.* parsing	2022-03-31 18:08:47 +02:00
Rasmus Wriedt Larsen	1d7cec60ae	Python: xml.sax.parse is not a method call ... And it's not possible to provide a parser argument either	2022-03-31 17:50:23 +02:00
Rasmus Wriedt Larsen	e11269715d	Python: Promote xml.sax and xml.dom.* modeling	2022-03-31 17:44:00 +02:00
Rasmus Wriedt Larsen	05bb0ef976	Python: Align xml.etree.ElementTree modeling ... I didn't find a good way to actually share the stuff, so we kinda just have 2 things that look very similar :|	2022-03-31 17:24:16 +02:00
Rasmus Wriedt Larsen	70b3eecdd5	Python: Merge xml.etree.ElementTree models ... I forgot about the existing ones when I promoted it	2022-03-31 17:13:11 +02:00
Tom Hvitved	46d69cf544	Regex: Further tweaks to concretise computations	2022-03-31 12:52:43 +02:00
Tom Hvitved	5181544790	Sync shared files	2022-03-31 12:52:42 +02:00
Tom Hvitved	0fb28f4bc9	Sync shared files	2022-03-31 12:52:42 +02:00
Rasmus Wriedt Larsen	543454eff2	Python: Model file access from XML parsing	2022-03-31 11:47:29 +02:00
Rasmus Wriedt Larsen	386ff53614	Python: Model lxml.iterparse	2022-03-31 11:32:22 +02:00
Rasmus Wriedt Larsen	12cbdcde28	Python: Model lxml.etree.XMLID	2022-03-31 11:21:24 +02:00
Rasmus Wriedt Larsen	6774085e7a	Python: Add note about parseid/XMLID	2022-03-31 11:19:25 +02:00
Rasmus Wriedt Larsen	a315aa84b2	Python: Add some links in QLDocs	2022-03-31 11:16:50 +02:00
Rasmus Wriedt Larsen	64aa503cc3	Python: Promote xml.etree modeling	2022-03-31 11:12:02 +02:00
Rasmus Wriedt Larsen	7f5f7679f8	Python: Promote xmltodict modeling	2022-03-31 10:28:34 +02:00
Rasmus Wriedt Larsen	80b5cde3a2	Python: Promote lxml parsing modeling	2022-03-31 10:19:08 +02:00
Rasmus Wriedt Larsen	3040adfd9b	Python: Handle XMLParser().close() for XPath	2022-03-31 10:08:26 +02:00
Rasmus Wriedt Larsen	1ea4bcc59f	Python: Make XMLParsing a Decoding subclass	2022-03-31 09:52:55 +02:00
Rasmus Wriedt Larsen	e45288e812	Python: => XMLParsingVulnerabilityKind ... Since there are other XML vulnerabilities that are not about parsing, this is more correct.	2022-03-31 09:52:55 +02:00
Rasmus Wriedt Larsen	e005a5c0ab	Python: Promote XMLParsing concept	2022-03-31 09:52:55 +02:00
Rasmus Wriedt Larsen	769f5691d0	Python: Add taint for StringIO and BytesIO	2022-03-31 09:52:54 +02:00
Erik Krogh Kristensen	1218c4f4ed	fix ql/name-casing, and drive-by QL-for-QL typo fix	2022-03-30 22:59:14 +02:00
Erik Krogh Kristensen	1847a5713b	remove TODO	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	7ca6426ea5	revert the Taint stage, as it caused an alert for ql/abstract-class-import	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	7e4ab4c60b	Revert "import all the frameworks that extend RegexString" ... This reverts commit 84bc9042de4e876685f8f5ffdd88893383d1cfdc. It caused ql/abstract-class-import alerts	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	3b9335c051	nomagic on containsInScope	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	5caff81ff9	import all the frameworks that extend RegexString	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	b959705531	revert changes in MRO.qll	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	b74852ffd6	cache a bit more (again)	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	d9ced55e2c	make private predicates private	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	040196f40d	cache more basicblock predicates	2022-03-30 22:54:01 +02:00
Erik Krogh Kristensen	79713e0ef8	a bit more caching	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	7643aac207	revert bad nomagic	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	35c7fa58a7	joiner order fixes	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	88e896992e	cache the remainder of the pointsto layer	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	79da0970cc	various join order fixes	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	3e9ee887d4	fix bad mistake	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	758a5d7a85	few join order fixes	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	6eca4ba2d3	get around identical files by adding the ref() call somewhere else	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	4089788629	revert caching of some large predicates that caused the DB size to increase too much	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	0da80f90d3	rename the SSA stages to AST	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	c9e3a62953	cached stages iteration 5	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	a8f9a91e38	cached stages iteration 4	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	f68357a063	cached stages iteration 3.5	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	37a9b41e26	cached stages iteration 3	2022-03-30 22:54:00 +02:00
Erik Krogh Kristensen	60b5af215f	cached stages iteration 2	2022-03-30 22:53:59 +02:00
Erik Krogh Kristensen	71eacea90b	add the cached stages pattern to Python	2022-03-30 22:53:59 +02:00