Chris Smowton
|
a4401963f5
|
Use getAPattern
|
2024-03-25 16:31:39 +00:00 |
|
Chris Smowton
|
5cb5ee026c
|
Fix pretty-printing of anonymous vars and multiple patterns; add test
|
2024-03-25 16:31:38 +00:00 |
|
Chris Smowton
|
ee36e3b72b
|
autoformat
|
2024-03-25 16:31:38 +00:00 |
|
Chris Smowton
|
403e86878c
|
Don't mistake a rule case for a fall-through edge
|
2024-03-25 16:31:37 +00:00 |
|
Chris Smowton
|
c0874ab04b
|
Fix pattern-case variable pretty-printer
|
2024-03-25 16:31:37 +00:00 |
|
Chris Smowton
|
f66811048d
|
Fix next-normal-statement predicate
|
2024-03-25 16:31:37 +00:00 |
|
Chris Smowton
|
bc0724e2b3
|
Add change note
|
2024-03-25 16:31:37 +00:00 |
|
Chris Smowton
|
d5443b3f10
|
Remove dead code
|
2024-03-25 16:31:37 +00:00 |
|
Chris Smowton
|
29e93edf90
|
Dataflow: restrict pattern-case flow to unique patterns.
|
2024-03-25 16:31:37 +00:00 |
|
Chris Smowton
|
00c7dd5f92
|
Fix a stray use of getPattern
|
2024-03-25 16:31:36 +00:00 |
|
Chris Smowton
|
e59487a324
|
Don't regard cases with multiple patterns as conducting a type test
|
2024-03-25 16:31:36 +00:00 |
|
Chris Smowton
|
c7cb885e71
|
Add missing javadoc and getUniquePattern predicate
|
2024-03-25 16:31:36 +00:00 |
|
Chris Smowton
|
f44becea7f
|
Implement multiple pattern case and fall-through pattern case support
|
2024-03-25 16:31:36 +00:00 |
|
Chris Smowton
|
c283894b4b
|
Fix typo
|
2024-03-25 16:31:36 +00:00 |
|
Chris Smowton
|
33b807f3bb
|
Parameters and local variables: add isAnonymous predicate
|
2024-03-25 16:31:36 +00:00 |
|
Owen Mansel-Chan
|
f2db9ce312
|
Merge pull request #16028 from owen-mc/java/sensitive-log-whitelist-tokenimage
Java: whitelist variable name `tokenImage` for `java/sensitive-log` as it's used in code generated by JavaCC
|
2024-03-25 10:02:19 +00:00 |
|
Owen Mansel-Chan
|
ac6c4add14
|
Apply suggestions from code review
Co-authored-by: Chris Smowton <smowton@github.com>
|
2024-03-24 20:20:37 +00:00 |
|
Owen Mansel-Chan
|
4832dc51ed
|
Whitelist variable name tokenImage
|
2024-03-23 21:33:02 +00:00 |
|
Ian Lynagh
|
01475fd8ba
|
Merge pull request #16011 from igfoo/igfoo/legacy_vars
Java/Kotlin: Remove references to legacy ODASA_SNAPSHOT env var
|
2024-03-22 12:38:37 +00:00 |
|
Arthur Baars
|
c219b1a3c7
|
Merge pull request #16013 from github/rc/3.13
Merge rc/3.13 into main
|
2024-03-21 16:04:58 +01:00 |
|
Ian Lynagh
|
1b3605754f
|
Java: Add a changenote for dropping ODASA_SNAPSHOT support
|
2024-03-21 13:38:54 +00:00 |
|
Michael Nebel
|
6619be3137
|
Merge pull request #15940 from michaelnebel/csharp/sourcesinktests
C#: Source- and sink tests.
|
2024-03-21 08:12:16 +01:00 |
|
Mathias Vorreiter Pedersen
|
ebac171b2b
|
Java/Shared: Rename 'joinStep0' to 'joinStep'.
|
2024-03-20 14:40:16 +00:00 |
|
Mathias Vorreiter Pedersen
|
6a65c46b2e
|
Java/Shared: Share more 'isNull' computations.
|
2024-03-20 14:36:12 +00:00 |
|
Mathias Vorreiter Pedersen
|
90fbacc7bf
|
Java/Shared: Use getLocation instead of hasLocationInfo.
|
2024-03-20 14:29:48 +00:00 |
|
Dave Bartolomeo
|
bf46fa27d6
|
Merge remote-tracking branch 'origin/main' into dbartol/rc3.13-mergeback
|
2024-03-19 13:02:15 -04:00 |
|
Owen Mansel-Chan
|
b8608a1b1c
|
Merge pull request #15946 from owen-mc/java/more-manual-models
Java: more manual models
|
2024-03-19 15:00:27 +00:00 |
|
Dave Bartolomeo
|
311ba8ea1b
|
Merge from main to resolve conflicts
|
2024-03-19 10:41:31 -04:00 |
|
Owen Mansel-Chan
|
7371f5e508
|
Provenance should be "df-manual"
|
2024-03-19 13:33:49 +00:00 |
|
Michael Nebel
|
70c6744944
|
Java/Go/Swift: Sync changes.
|
2024-03-19 14:20:43 +01:00 |
|
Tom Hvitved
|
a6c147134a
|
Java: Switch to shared XML.qll implementation
|
2024-03-19 13:15:45 +01:00 |
|
Tom Hvitved
|
fc55567d90
|
Merge pull request #15853 from hvitved/dataflow/get-location
Data flow: Replace `hasLocationInfo` with `getLocation`
|
2024-03-18 20:21:46 +01:00 |
|
Owen Mansel-Chan
|
764e99bda7
|
Fix model for java.util.Scanner#findall(String)
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2024-03-18 16:56:20 +00:00 |
|
github-actions[bot]
|
aebe9f6992
|
Post-release preparation for codeql-cli-2.16.5
|
2024-03-18 12:16:26 +00:00 |
|
Owen Mansel-Chan
|
7fb05f4a76
|
Fix duplicate "df-" in "df-df-manual"
|
2024-03-18 11:17:55 +00:00 |
|
github-actions[bot]
|
0a6243d07b
|
Release preparation for version 2.16.5
|
2024-03-18 10:14:07 +00:00 |
|
Jami Cogswell
|
658fffeac1
|
Java: remove experimental files
|
2024-03-17 22:03:59 -04:00 |
|
Owen Mansel-Chan
|
754d4cd959
|
Fix model provenance to df-manual
|
2024-03-17 14:36:47 +00:00 |
|
Owen Mansel-Chan
|
23a58a0835
|
Add df-manual models related to existing df-manual models
|
2024-03-17 14:21:05 +00:00 |
|
Owen Mansel-Chan
|
fc367042ef
|
Fix df-manual model with wrong parameter type
|
2024-03-17 14:21:01 +00:00 |
|
Jami Cogswell
|
55f7369df0
|
Java: performance fix
|
2024-03-15 14:06:36 -04:00 |
|
Owen Mansel-Chan
|
8e52483beb
|
Add df-manual models in manually modeled classes
|
2024-03-15 10:10:23 +00:00 |
|
Owen Mansel-Chan
|
2bd08838d4
|
Add manual neutral models for java.lang.ClassLoader
|
2024-03-14 11:40:06 +00:00 |
|
Owen Mansel-Chan
|
5b734c76b6
|
Add manual neutral models for java.util.Locale and its subclasses
|
2024-03-14 11:39:59 +00:00 |
|
Tony Torralba
|
eecab9122a
|
Recognize the model generator involvement in the models' provenances
|
2024-03-14 08:56:23 +01:00 |
|
Tony Torralba
|
5b88b8a3ed
|
A few more neutrals
|
2024-03-14 08:53:58 +01:00 |
|
Tony Torralba
|
36f6a6fb10
|
Model more EnumSet methods as neutrals
|
2024-03-14 08:46:43 +01:00 |
|
Jami Cogswell
|
e285cf232c
|
Java: add resource-related methods as path-injection sinks and as summaries
|
2024-03-13 22:48:57 -04:00 |
|
Jami Cogswell
|
1b01f26d09
|
Java: adjust BarrierPrefix to handle prepended chars
|
2024-03-13 16:28:45 -04:00 |
|
Jami Cogswell
|
04d27f2d65
|
Java: adjust prefix barriers
|
2024-03-13 16:28:44 -04:00 |
|