Chris Smowton
62d10f91d8
Improve join ordering
2023-02-14 17:21:24 +00:00
Chris Smowton
d5f7ef08b7
Update stats
2023-02-14 17:21:24 +00:00
Chris Smowton
82a2f4349a
Resolve a newly-introduced ambiguity
...
Also fix a simple redundancy noticed while debugging
2023-02-14 17:21:24 +00:00
Chris Smowton
f48d87ba55
Add deletions for removed tables
2023-02-14 17:21:24 +00:00
Chris Smowton
3514dd1e4d
Java: merge the @class and @interface database types and tables
...
This will allow the extractor to emit class(id, ...) when all it knows about a class is its name, due to not having it available on the classpath. Previously it would have had to guess whether it belonged to @class or @interface, possibly introducing an inconsistency.
2023-02-14 17:21:23 +00:00
Jami
029e1d47fe
Merge pull request #12081 from jcogs33/jcogs33/update-some-Files-sinks
...
Java: update `createTempDirectory` and `copy` "create-file" sinks
2023-02-14 10:53:17 -05:00
Anders Schack-Mulligen
0600a2ba96
Merge pull request #12138 from aschackmull/java/gen-file-mark-perf
...
Java: Improve performance of GeneratedFileMarker.
2023-02-14 09:57:09 +01:00
Tony Torralba
935e22d10d
Merge pull request #12139 from atorralba/atorralba/java/xxe-local-query
...
Java: Add local version of the XXE query
2023-02-14 09:54:36 +01:00
Chad Bentz
cfe169a4f9
Adding MSSQL to SensitiveAPI
2023-02-13 19:42:28 -05:00
Tony Torralba
1c57aa0456
Fix import locations
2023-02-13 17:13:01 +01:00
Jami Cogswell
1c3d4b98c8
Java: move change note
2023-02-13 09:15:31 -05:00
Anders Schack-Mulligen
e877b161d8
Merge pull request #12124 from hvitved/dataflow/stage1-dispatch
...
Data flow: Call context virtual dispatch pruning in stage 1
2023-02-13 13:13:43 +01:00
Tony Torralba
4fad01a739
Further refactoring
...
Avoid having two taint tracking configurations in the same file
2023-02-13 09:18:05 +01:00
Tony Torralba
f3e0b6e62c
PathGraph shouldn't be imported in a QLL library
2023-02-13 09:18:05 +01:00
Tony Torralba
5555b5cd19
Add local version of the XXE query
2023-02-13 09:18:05 +01:00
Tom Hvitved
f7a5a33474
Address review comment
2023-02-13 09:01:15 +01:00
Jami Cogswell
ad8849c6b8
Java: fix typo
2023-02-12 16:33:26 -05:00
Jami Cogswell
c87c3e30c7
Java: update getInvalidModelKind with 'read-file' kind
2023-02-11 17:07:25 -05:00
Anders Schack-Mulligen
770f3c24bb
Java: Improve performance of GeneratedFileMarker.
2023-02-09 15:08:32 +01:00
Ian Lynagh
844e372651
Kotlin: Add a changenote for 1.8.20 support
2023-02-08 11:35:23 +00:00
Tom Hvitved
8e8897b08b
Data flow: Sync files
2023-02-07 15:15:04 +01:00
Anders Schack-Mulligen
3c580896dc
Merge pull request #11712 from aschackmull/java/constant-guards
...
Java: Apply deadcode guard to data flow nodes.
2023-02-07 09:14:20 +01:00
Anders Schack-Mulligen
b4607d3fab
Java: Add change notes.
2023-02-06 13:55:34 +01:00
Mathias Vorreiter Pedersen
00fe448e3a
Merge pull request #12072 from aschackmull/dataflow/stage3-perf
...
Dataflow: Fix join in `fwdFlowRead` (take 2)
2023-02-06 10:43:11 +00:00
Jami Cogswell
2d7e71dfce
Java: add read-file sink kind for first arg of copy
2023-02-03 17:28:46 -05:00
Jami
b6805c6913
Merge pull request #11863 from jcogs33/jcogs33/update-paramsString
...
Java: update paramsString
2023-02-03 15:47:38 -05:00
Anders Schack-Mulligen
a1aeb995e6
Java: Apply deadcode guard to data flow nodes.
2023-02-03 16:16:39 +01:00
Anders Schack-Mulligen
e8dbd65d77
Java: Refactor compile-time constant calculation and apply to ConstantIntegerExpr.
2023-02-03 16:16:27 +01:00
github-actions[bot]
faf21f3edb
Post-release preparation for codeql-cli-2.12.2
2023-02-02 23:01:04 +00:00
Jami Cogswell
30b1a2edbc
Java: add first argument to copy sink
2023-02-02 16:20:54 -05:00
Jami Cogswell
61a8f5e425
Java: add signature to createTempDirectory sink
2023-02-02 16:19:20 -05:00
Anders Schack-Mulligen
67d4ed53b9
Dataflow: Sync.
2023-02-02 16:33:00 +01:00
Anders Schack-Mulligen
8cb233df1a
Dataflow: A proper perf fix for the stage-dependent fanout direction of the Content-to-Ap relation.
2023-02-02 16:31:07 +01:00
github-actions[bot]
a4fa984792
Release preparation for version 2.12.2
2023-02-02 14:34:55 +00:00
Joe Farebrother
97b2e852c9
Merge pull request #11713 from joefarebrother/sensitive-result-receiver
...
Java: Add query for leaking sensitive data through a ResultReceiver
2023-02-01 16:34:17 +00:00
Jami
7f6efae7dc
Merge pull request #12008 from jcogs33/jcogs33/update-queryproducer-package
...
Java: update package for `QueryProducer` sinks
2023-01-30 10:27:58 -05:00
Mathias Vorreiter Pedersen
95b15825f9
DataFlow: Sync identical files.
2023-01-27 16:24:31 +00:00
Jami Cogswell
85c228a0cd
Java: remove old sinks
2023-01-27 10:40:17 -05:00
Jami Cogswell
a3fe8c0e93
Java: add change note
2023-01-27 10:35:16 -05:00
Jami Cogswell
9bf43483db
Java: update package for QueryProducer sinks
2023-01-27 10:16:42 -05:00
Alex Ford
55550e7980
Merge pull request #11941 from alexrford/summary-component-tostring-syntheticglobal
...
Add missing toString case for synthetic globals
2023-01-23 10:00:00 +00:00
Michael Nebel
69a42d8b1f
Merge pull request #11931 from michaelnebel/csharp/refactor
...
Remove the Csv postfix of some predicate names.
2023-01-23 09:09:48 +01:00
github-actions[bot]
b62cb6ba84
Post-release preparation for codeql-cli-2.12.1
2023-01-20 19:49:56 +00:00
Alex Ford
e4df1f5a6f
Ruby: add missing toString case for synthetic globals
2023-01-20 13:31:43 +00:00
github-actions[bot]
005b3e4a47
Release preparation for version 2.12.1
2023-01-20 12:03:19 +00:00
Michael Nebel
dc223cb82e
Sync files and make corresponding changes for other languages.
2023-01-19 15:14:06 +01:00
Rasmus Wriedt Larsen
e0ccb9306a
Merge pull request #11908 from RasmusWL/dataflow-consistency-more-excludes
...
DataFlow: Add `uniqueParameterNodePositionExclude`
2023-01-18 10:44:51 +01:00
Edward Minnix III
4c018759c8
Merge pull request #11283 from egregius313/egregius313/webview-setAllowContentAccess
...
Java: Android WebView Content Access Query
2023-01-17 11:02:47 -05:00
Jami
babdee36aa
Merge pull request #11779 from jcogs33/jcogs33/model-more-top-jdk-apis
...
Java: model top JDK APIs
2023-01-17 10:20:32 -05:00
Jami Cogswell
10f0975812
Java: remove models for System.[get|set]Property
2023-01-17 08:51:48 -05:00
