Michael Nebel
2055d5492c
Java: Let RemoteFlowSource and LocalUserInput extends SourceNode and fine grain the LocalUserInput threat models.
2023-10-03 09:16:38 +02:00
Michael Nebel
9a112dde66
Java: Introduce a class of dataflow nodes for the threat modeling.
2023-10-03 09:16:38 +02:00
Ian Lynagh
513a39f0b4
Kotlin: Specify language versino when compiling for old compilers
...
Otherwise builds with Kotlin 2 won't work with older compilers.
2023-10-02 18:14:01 +01:00
Ian Lynagh
f3c5c01ec5
Kotlin: Drop support for 1.4.32
...
We never claimed to support anything < 1.5.0, and compiling with
-language-version 1.4 fails as it's not meant to support sealed classes.
If we build 1.4.32 with -language-version 1.5 using a 2.0 compiler,
then the resulting plugin also fails.
2023-10-02 17:29:10 +01:00
amammad
863fa364e2
remove CLI sources Library file & unused file system sinks
2023-09-30 20:11:14 +10:00
amammad
bb8063c0f4
remove CLI sources & unused imports
2023-09-30 06:07:44 +10:00
amammad
2ab10262fc
V3: better sinks, replace sinks arguments to sinks method accesses
2023-09-30 06:06:34 +10:00
amammad
83cffea1a1
v3
2023-09-30 05:56:39 +10:00
amammad
3e9c3e6987
remove inputStream and its subclasses module which has no impact on query now!
2023-09-30 04:28:37 +10:00
amammad
c1b9310ec2
add comments for modules & remote local sources
2023-09-30 04:28:02 +10:00
Anders Schack-Mulligen
efb49fcd3e
Merge pull request #14336 from aschackmull/java/switch-rule-stmt-cfg
...
Java: Fix CFG for case rule statements.
2023-09-29 12:02:48 +02:00
Stephan Brandauer
d7beda79ab
Merge pull request #14197 from github/kaeluka/framework-mode-source-candidates
...
Java: Framework mode source candidates
2023-09-28 21:09:54 +02:00
Ian Lynagh
30d7f0cf0a
Merge pull request #14334 from igfoo/igfoo/ext-frag
...
Kotlin: Handle IrExternalPackageFragment properly for more external entities
2023-09-28 20:01:52 +01:00
Ian Lynagh
7f5f25c362
Merge pull request #14338 from igfoo/igfoo/dedupe
...
Kotlin: Differentiate 2 error messages
2023-09-28 17:56:53 +01:00
Stephan Brandauer
fdbc553029
Java: Automodel Framework mode: no longer skip non-public methods
2023-09-28 16:17:44 +02:00
Ian Lynagh
e9482fb096
Kotlin: Differentiate 2 error messages
2023-09-28 14:59:21 +01:00
Ian Lynagh
5db283e86a
Kotlin: Fix comment
2023-09-28 14:26:02 +01:00
Anders Schack-Mulligen
15e1098791
Java: Add change note.
2023-09-28 14:28:24 +02:00
Anders Schack-Mulligen
94556078f1
Java: Add guards logic for SwitchExpr default cases.
2023-09-28 14:21:04 +02:00
Anders Schack-Mulligen
917a15647e
Java: Fix CFG for rule statements.
2023-09-28 14:19:36 +02:00
Anders Schack-Mulligen
922a4e8ddf
Java: Add failing test
2023-09-28 14:15:56 +02:00
Ian Lynagh
261ae4ea4d
Kotlin: Handle IrExternalPackageFragment properly for more external entities
2023-09-28 12:12:18 +01:00
Asger F
0d96ed8aee
Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers
...
Shared: add in/out barriers with flow state
2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen
5feb2f7622
Merge pull request #14321 from aschackmull/shared/filesystem
...
All languages: Use shared FileSystem library and minor regex performance improvement.
2023-09-28 10:51:05 +02:00
Koen Vlaswinkel
10231e99ce
Merge pull request #14199 from github/koesie10/add-java-model-editor-queries
...
Java: Add VS Code model editor queries
2023-09-28 10:13:13 +02:00
Anders Schack-Mulligen
653844cc46
Java: Use shared FileSystem library.
2023-09-28 08:58:55 +02:00
Asger F
6792592a15
Shared: add late checks for stateful in/out barriers
2023-09-27 14:38:28 +02:00
Asger F
6d6cdf89ce
Java: add a failing test for stateful in/out barriers
2023-09-27 14:38:21 +02:00
Ian Lynagh
497d48bd63
Kotlin: Claim to support Kotlin 2
...
We don't fully support it yet, but if we don't claim to support it then
Kotlin fails early.
2023-09-26 17:24:11 +01:00
Chris Smowton
a123f62a38
Add Java buildless diagnostic expectations
2023-09-26 15:25:58 +01:00
Anders Schack-Mulligen
e6d832c7e5
Merge pull request #14297 from aschackmull/java/additional-steps-and-nodes
...
Java: Add support for additional nodes, read steps, and store steps for QL models and model ThreadLocal.initialValue
2023-09-26 14:50:37 +02:00
Stephan Brandauer
26267b72d4
driveby: bug fix in automodel alert sink util
2023-09-26 10:46:56 +02:00
Stephan Brandauer
53b3755e50
remove now-unused getIndex predicate
...
Co-authored-by: @tausbn <tausbn@github.com >
2023-09-26 10:46:42 +02:00
Stephan Brandauer
9f7f2ab70e
remove redundant fromSource calls
...
Co-authored-by: @tausbn <tausbn@github.com >
2023-09-26 10:45:54 +02:00
Stephan Brandauer
32502d5e2c
Java: Automodel, remove erroneousEndpoints predicate from production queries
2023-09-26 10:45:54 +02:00
Stephan Brandauer
5d608acd0b
Java: Automodel framework mode, fix query string
2023-09-26 10:45:54 +02:00
Stephan Brandauer
e71563e540
Java: Automodel fr mode: remove superfluous module
2023-09-26 10:45:54 +02:00
Stephan Brandauer
2be5b1955f
Java: Automodel fr mode: add support for qualifier source candidates
2023-09-26 10:45:53 +02:00
Stephan Brandauer
dee387622e
Java: Automodel: rename overloadable -> overridable
2023-09-26 10:45:53 +02:00
Stephan Brandauer
6121faf671
Java: Automodel: fr mode: connect new endpoints with MaD models
2023-09-26 10:45:53 +02:00
Stephan Brandauer
7f084c90c5
Java: automodel fr mode: add overloadable parameter candidates
2023-09-26 10:45:53 +02:00
Stephan Brandauer
8ea8123bd5
Java: Automodel ql-for-ql
2023-09-26 10:45:53 +02:00
Stephan Brandauer
86e50699dc
Java: Automodel format
2023-09-26 10:45:53 +02:00
Stephan Brandauer
9e6eebb926
Java: Automodel: drive-by: remove unused message logic for candidate extraction
2023-09-26 10:45:53 +02:00
Stephan Brandauer
0d53600b12
Java: automodel fr mode: update test expectations
2023-09-26 10:45:53 +02:00
Stephan Brandauer
32a538b64c
Java: automodel fr mode: add mad output to extraction metadata
2023-09-26 10:45:53 +02:00
Stephan Brandauer
b2578f0e30
Java: Automodel Fr Mode: add return value endpoint type
2023-09-26 10:45:52 +02:00
Stephan Brandauer
8cc6466c68
Java: Automodel: add extensibleType metadata to framework mode
2023-09-26 10:45:52 +02:00
Anders Starcke Henriksen
464add4e16
Merge pull request #14246 from github/starcke/release-automodel-0.0.3
...
Release automodel queries version 0.0.3
2023-09-26 09:41:33 +02:00
Ian Lynagh
56a5c7876c
Merge pull request #14220 from igfoo/igfoo/light_comments
...
Kotlin: Extract LighterAST comments as well as PSI comments
2023-09-25 11:50:55 +01:00
