Chris Smowton
54d08e11ca
Autoformat Go
2023-04-12 14:19:03 +01:00
Chris Smowton
6b9b4c8da0
Remove binary file
2023-04-12 14:19:03 +01:00
Chris Smowton
8fb75f412a
Consider MaD models ref whether a package should be considered an unknown external.
2023-04-12 14:19:03 +01:00
Chris Smowton
9447dfd636
Combine net/http models
2023-04-12 14:19:03 +01:00
Chris Smowton
0d306e6189
Restore versioning to one more protobuf model
2023-04-12 14:19:03 +01:00
Chris Smowton
2658a47f21
Remove another protobuf instance now handled in Protobuf.qll
2023-04-12 14:19:03 +01:00
Chris Smowton
a16d56258f
Clean up protobuf models
2023-04-12 14:19:03 +01:00
Chris Smowton
95a9fcae47
Remove spurious model
...
This referenced a test-specific package; these protobuf models are more than MaD can specify, so they have already moved back into Protobuf.qll.
2023-04-12 14:19:03 +01:00
Chris Smowton
0d66b68a56
Restore more package / subpackage boundaries and alternate package names
...
Note none of these alternate names are apparently tested, either before or afterwards.
2023-04-12 14:19:03 +01:00
Chris Smowton
5e121fb4fd
Restore Couchbase alternate package names
2023-04-12 14:19:03 +01:00
Chris Smowton
fd16c03fcf
Add Beego v2 models
2023-04-12 14:19:02 +01:00
Chris Smowton
172ff082d3
Default to tolerating multiple package versions
...
Subpackages still need to use the $ANYVERSION trick
2023-04-12 14:19:02 +01:00
Chris Smowton
12f35bc6ac
Add missing tests for RevelHeader mutators
2023-04-12 14:19:02 +01:00
Chris Smowton
2024747827
Add missing tests for html.Node taint propagators
...
The TaintTracking::FunctionModels for these appeared broken, so I suspect they had never worked.
2023-04-12 14:19:02 +01:00
Chris Smowton
8f4567349d
Add missing NewTokenizerFragment model and test
2023-04-12 14:19:02 +01:00
Chris Smowton
e6718322bb
Restore query-specific FunctionModels
...
MaD can't be used to introduce query-specific sumamries at the moment.
2023-04-12 14:19:02 +01:00
Chris Smowton
ed7f351be7
Add missing tests for mime/multipart.Part
2023-04-12 14:19:02 +01:00
Chris Smowton
405a56326c
Add missing tests for CertStorage
2023-04-12 14:19:02 +01:00
Chris Smowton
803b9d38cc
Add missing tests and models for json-patch
2023-04-12 14:19:02 +01:00
Chris Smowton
5e74930881
Add missing tests and models for go-pg/pg/orm.Formatter
2023-04-12 14:19:02 +01:00
Chris Smowton
3c8182b521
Format and reorder
2023-04-12 14:19:02 +01:00
Chris Smowton
9e38e8d675
Restore model of builtin copy function.
...
This is another with no real signature type.
2023-04-12 14:19:01 +01:00
Chris Smowton
0249669299
Accept test changes
2023-04-12 14:19:01 +01:00
Chris Smowton
c752777022
Accept test changes
2023-04-12 14:19:01 +01:00
Chris Smowton
c011e013e1
fixup restoration of variadic models
2023-04-12 14:19:01 +01:00
Chris Smowton
7c8db6eace
Restore QL modelling for the built-in append function.
2023-04-12 14:19:01 +01:00
Chris Smowton
a796ddb95b
Accept paths-only test changes
2023-04-12 14:19:01 +01:00
Chris Smowton
77b8103cc1
Adapt tests not to depend on TaintTracking::FunctionModel
2023-04-12 14:19:01 +01:00
Chris Smowton
2e70fada8d
Bump Go version on test referencing go 1.20 methods
...
This turned out not to matter for the extractor, but it means we can check the build using `go build`.
2023-04-12 14:19:01 +01:00
Chris Smowton
a673610e18
Adapt query not to depend on TaintTracking::FunctionModel
2023-04-12 14:19:01 +01:00
Chris Smowton
c8407ba323
Revert variadic functions to use non-MaD models
2023-04-12 14:19:01 +01:00
Chris Smowton
16e3acf592
Restore old-style taint models for the unsafe package
...
These functions don't have proper signature types, so are not suited to MaD models
2023-04-12 14:19:00 +01:00
Chris Smowton
2c65e68c5f
Adapt HTTP response body association to MaD models
2023-04-12 14:19:00 +01:00
Chris Smowton
2677a945f3
Autoformat
2023-04-12 14:19:00 +01:00
Chris Smowton
53723479c8
Enable model inheritence by subinterfaces
...
Previously only a concrete (non-interface) method could inherit such a model
2023-04-12 14:19:00 +01:00
Chris Smowton
9c45192a4e
Remove spurious duplicate models
2023-04-12 14:19:00 +01:00
Chris Smowton
c242c28af9
Use $ANYVERSION to allow applying a model to all versions of a given package
2023-04-12 14:19:00 +01:00
Chris Smowton
f36a2143f5
Accept more test changes; add some missing models
2023-04-12 14:19:00 +01:00
Chris Smowton
bfc8db90af
Accept test changes
...
This is 1x path changes without result changes, and 1x expected change since the Encode function is no longer modelled using TaintTracking::FunctionModel
2023-04-12 14:19:00 +01:00
Chris Smowton
d49840ee8e
Restore mistakenly-deleted models
2023-04-12 14:19:00 +01:00
Chris Smowton
11b457d5bf
Allow - character in Go package names
2023-04-12 14:19:00 +01:00
Chris Smowton
e98c70c482
Restore mistakenly deleted model
2023-04-12 14:19:00 +01:00
Chris Smowton
1b7f529949
Restore reverse-flow models
2023-04-12 14:19:00 +01:00
Chris Smowton
de0caf2445
Go: mass-convert taint-flow models to models-as-data format
2023-04-12 14:18:44 +01:00
Chris Smowton
51ebc0bef2
Amend test now that DataFlowCallable != Callable
2023-04-12 14:15:54 +01:00
Chris Smowton
a5e5a5780d
Use FlowSummaryImpl::Private::summaryParameterNodeRange
2023-04-12 14:15:54 +01:00
Chris Smowton
4ea4e0dcca
Go: seperate real and synthetic callables
...
This means that when a function has a real body and a summary (usually because it has a real definition in source, and implements an interface that has a model), two callables are created and dispatch considers both possible paths.
This specifically overcomes the difficulty with ParameterNodes when the real callable, if any, may or may not define an SsaNode, either because the real parameter is unused or because it is anonymous. Now the synthetic callable will always have parameter nodes, while the real one may or may not depending on whether a definition is present and
whether or not it names or uses its parameter.
2023-04-12 14:15:54 +01:00
Chris Smowton
939a025e11
Go: hide summary nodes from path explanations
...
This mirrors behaviours in other languages with MaD summaries
2023-04-06 16:41:44 +01:00
github-actions[bot]
ac426b1302
Post-release preparation for codeql-cli-2.12.6
2023-04-04 16:49:26 +00:00
Owen Mansel-Chan
00fd23d7b9
Merge pull request #12396 from porcupineyhairs/GoJwtSignImprovements
...
Go: Add more JWT sinks
2023-04-04 13:28:38 +01:00
