Anders Schack-Mulligen
|
a806a4f086
|
Merge pull request #4312 from JLLeitschuh/feat/JLL/java/jhipster_CVE-2019-16303
Java: QL Query Detector for JHipster Generated CVE-2019-16303
|
2020-10-16 15:47:09 +02:00 |
|
Joe Farebrother
|
8834a8fed6
|
Java: Make tests less noisy
|
2020-10-16 10:22:41 +01:00 |
|
Joe
|
28647b20e2
|
Java: Add tests
|
2020-10-16 10:22:41 +01:00 |
|
Joe Farebrother
|
388f60f818
|
Merge pull request #4430 from joefarebrother/tainttrackingutils-refactor
Java: Refactor part of TaintTrackingUtil.qll
|
2020-10-15 16:05:38 +01:00 |
|
luchua-bc
|
b359802dd4
|
Replace non-ASCII apostrophe in Java stub classes
|
2020-10-15 14:53:32 +01:00 |
|
luchua-bc
|
6f6ec9d51a
|
Change the source class type and simplify the data-flow step
|
2020-10-15 14:53:32 +01:00 |
|
luchua-bc
|
c7750fd8c2
|
Fine tune the query
|
2020-10-15 14:53:32 +01:00 |
|
luchua-bc
|
5338332648
|
Enhance the query and add more test cases
|
2020-10-15 14:53:31 +01:00 |
|
luchua-bc
|
bd0c577ffd
|
Unsafe resource loading in Android webview
|
2020-10-15 14:53:30 +01:00 |
|
Tom Hvitved
|
2af7e1c213
|
C#: Use CFG nodes instead of AST nodes in sign/modulus analysis
|
2020-10-14 13:39:44 +02:00 |
|
Jonathan Leitschuh
|
fc71ca747d
|
Java: Track taint through java.io.File::toPath & java.nio.file.Path::toFile
|
2020-10-13 21:15:09 -04:00 |
|
Joe Farebrother
|
aa8bacb724
|
Java: Update test output
|
2020-10-12 15:50:47 +01:00 |
|
Joe Farebrother
|
eafde05a55
|
Java: Expand flow step refactoring to Callables
Also add some missing flow steps for StringBuilder
|
2020-10-12 15:50:47 +01:00 |
|
Joe Farebrother
|
91ce02aad4
|
Java: Fix bug involving varadic parameters
|
2020-10-12 15:50:46 +01:00 |
|
Joe Farebrother
|
ca60f2cc18
|
Java: Fix failing tests
|
2020-10-12 15:48:43 +01:00 |
|
Daniel Beck
|
0c70be145f
|
Track taint through java.io.File constructor and #toURI; URI#toURL
|
2020-10-10 20:54:55 +02:00 |
|
Anders Schack-Mulligen
|
cb00f8bcc4
|
Merge pull request #4362 from tamasvajk/feature/sign-analysis-cleanup
Sign analysis cleanup
|
2020-10-08 09:10:04 +02:00 |
|
Tamás Vajk
|
06f1c898dc
|
Merge pull request #4349 from tamasvajk/feature/modulus-analysis
ModulusAnalysis shared between C# and Java
|
2020-10-07 21:21:20 +02:00 |
|
Tamas Vajk
|
40a7f5aa1f
|
Java: Minor fix to modulus analysis to handle constant expressions and not only compile time constants
|
2020-10-07 11:42:42 +02:00 |
|
Tamas Vajk
|
5688210249
|
Java: add test for modulus analysis
|
2020-10-07 11:41:55 +02:00 |
|
Arthur Baars
|
89710928c8
|
Merge branch 'main' into android-database
|
2020-10-06 10:48:22 +02:00 |
|
Anders Schack-Mulligen
|
30f29e0ba7
|
Merge pull request #4320 from aibaars/multipart-request
Java: add Spring::MultipartRequest as taint source
|
2020-10-05 13:45:06 +02:00 |
|
Anders Schack-Mulligen
|
e660ac54da
|
Merge pull request #4358 from joefarebrother/format-taint
Java: Add taint steps through string formatting methods
|
2020-10-05 13:25:54 +02:00 |
|
Tamas Vajk
|
1cf3196b61
|
Fix additional PR review findings
|
2020-10-02 09:12:13 +02:00 |
|
Tamas Vajk
|
21ff1a0445
|
Address some of the PR review findings
|
2020-10-02 09:12:13 +02:00 |
|
Jonathan Leitschuh
|
ab3772eaeb
|
Update JHipster CodeQL query from code review
|
2020-10-01 15:38:56 -04:00 |
|
Arthur Baars
|
cf6036f9b4
|
Java: fix some android database sinks
|
2020-09-30 14:42:19 +02:00 |
|
Arthur Baars
|
061c2a754f
|
Java: tests for android database flow steps
|
2020-09-30 12:42:19 +02:00 |
|
Arthur Baars
|
a13e845127
|
Java: tests for android database sinks
|
2020-09-30 12:42:19 +02:00 |
|
Arthur Baars
|
39f5284dcc
|
Java: add stubs for some android database classes
|
2020-09-30 12:33:33 +02:00 |
|
Joe
|
be07d27a4c
|
Java: Improve tests
|
2020-09-29 16:36:34 +01:00 |
|
Joe
|
bea38fcd07
|
Java: Add taint modelling for string format methods
|
2020-09-28 16:25:45 +01:00 |
|
Tamas Vajk
|
2bbaa4e173
|
Handle unsigned types in sign analysis (C# and Java)
|
2020-09-28 14:46:32 +02:00 |
|
Joe
|
5256c0ba39
|
Java: Improve PrintAst tests and rename things
Add tests for `EnhcancedForStmt`s and `InstanceOfExpr`s.
Rename LocalVarDeclParent to SingleLocalVarDeclParent
|
2020-09-25 11:31:56 +01:00 |
|
Joe
|
9c8a468237
|
Java: PrintAst: Add synthetic nodes for other declarations
|
2020-09-24 14:31:24 +01:00 |
|
Joe
|
1f99607624
|
Java: PrintAst: Improve test
|
2020-09-24 14:31:24 +01:00 |
|
Arthur Baars
|
252f8aa89d
|
Java: add Spring::MultipartRequest as taint source
|
2020-09-22 19:01:10 +02:00 |
|
Tamás Vajk
|
54c35748f0
|
Merge pull request #4193 from tamasvajk/feature/sign-analysis
C#: Sign analysis
|
2020-09-22 15:33:33 +02:00 |
|
Anders Schack-Mulligen
|
47506a859e
|
Merge pull request #4287 from joefarebrother/exectainted-array
Java: Improve the ExecTainted query
|
2020-09-22 13:16:05 +02:00 |
|
Jonathan Leitschuh
|
ab618dcf2f
|
Java: QL Query Detector for JHipster Generated CVE-2019-16303
|
2020-09-21 18:46:13 -04:00 |
|
Tamas Vajk
|
8bf4a4209c
|
C#: Sign analysis
Synced between Java and C# through `identical-files.json`.
|
2020-09-21 16:15:12 +02:00 |
|
Tamas Vajk
|
441fbe3215
|
Add Java test file for sign analysis
|
2020-09-21 15:07:09 +02:00 |
|
Joe
|
6d0df7cb3a
|
Java: Add a container node for Imports in the PrintAst view
|
2020-09-17 17:29:36 +01:00 |
|
Joe
|
fcfc836720
|
Java: Add tests for ExecTainted
|
2020-09-17 16:47:55 +01:00 |
|
Tamás Vajk
|
5079deb92a
|
Merge pull request #4268 from tamasvajk/feature/java-range-analysis-fn
Java: Fix range analysis false negative
|
2020-09-16 11:08:33 +02:00 |
|
Joe
|
28338eb32e
|
Java: PrintAst: Various minor fixes of typos
Fix references to C#
Fix getAPrimaryQlClass for JavadocTag
Fix typo for Import
Update test outputs
|
2020-09-15 15:02:56 +01:00 |
|
Joe
|
53ab8dac06
|
Java: PrintAst: Fix failing tests
|
2020-09-15 14:45:48 +01:00 |
|
Joe
|
e38b583ec4
|
Java: PrintAst: Add tests
|
2020-09-15 14:45:48 +01:00 |
|
Tamas Vajk
|
23a9d0764e
|
Java: Fix range analysis false negative
|
2020-09-15 12:09:05 +02:00 |
|
Tamas Vajk
|
c66473cb8a
|
Java: Add test for range analysis
|
2020-09-15 12:07:30 +02:00 |
|