Simon Friis Vindum
b3601b1ac2
Merge pull request #18946 from paldepind/rust-regex-injection
...
Rust: Add regular expression injection query
2025-03-12 08:15:54 +01:00
Geoffrey White
044d0a13f0
Rust: Include WeakSensitiveDataHashing sinks as well.
2025-03-11 15:41:38 +00:00
Geoffrey White
4924a0faf3
Rust: Introduce a QuerySink class, common to all query sinks.
2025-03-11 15:41:37 +00:00
Simon Friis Vindum
1e0b78ebd3
Rust: Update regex injection description
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-03-11 12:47:12 +01:00
Geoffrey White
a0f4fa28b2
Rust: hardcoded -> hard-coded.
2025-03-11 09:40:47 +00:00
Simon Friis Vindum
b48fd99913
Rust: Applying suggestions to documentation
2025-03-10 16:30:52 +01:00
Simon Friis Vindum
5c83644360
Rust: Use CWE 20 for regex injection query
2025-03-10 14:52:25 +01:00
Simon Friis Vindum
344fea2128
Rust: Enable local threat models in tests and use active threat models for regex query
2025-03-10 13:23:20 +01:00
Geoffrey White
1ca5c593f9
Rust: Replace imports of internal.DataFlowImpl where possible.
2025-03-10 11:47:23 +00:00
Geoffrey White
e84a98bd97
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-03-10 11:15:23 +00:00
Arthur Baars
98a40967d2
Rust: ignore crate graph elements from summary stats and AST no-location checks
...
These elements depend on the version of the standard libraries and platform, and
in addition no location information is extracted for them at the moment.
f
2025-03-10 10:16:15 +01:00
Simon Friis Vindum
179ea041f4
Rust: Merge query implementation into one file
2025-03-10 09:09:13 +01:00
Geoffrey White
fe139e5bea
Rust: Rearrange the unused variable query logic so that it's clearer what the comments apply to.
2025-03-07 14:55:34 +00:00
Geoffrey White
cc902a6ad1
Rust: Fix unused value FPs due to unexpanded macro calls as well.
2025-03-07 14:48:27 +00:00
Geoffrey White
e0839a369c
Rust: Fix unused variable FPs due to unexpanded macro calls.
2025-03-07 14:40:02 +00:00
Simon Friis Vindum
494f914070
Rust: Add regular expression injection query
2025-03-07 12:37:30 +01:00
Geoffrey White
b6c9be23c1
Merge branch 'main' into constcrypto
2025-03-07 09:11:10 +00:00
Geoffrey White
42e7d1e983
Rust: Fix typo.
2025-03-06 19:09:01 +00:00
Geoffrey White
9af2d0218b
Rust: Add the new sinks to stats.
2025-03-06 18:50:11 +00:00
Geoffrey White
952e417d13
Rust: Tweak some wording.
2025-03-06 18:46:37 +00:00
Geoffrey White
e564c41043
Rust: Compute security-severity tag.
2025-03-06 18:36:55 +00:00
Geoffrey White
95be12ed80
Rust: Add qhelp and examples.
2025-03-06 17:48:47 +00:00
Geoffrey White
055baf2769
Rust: Improve results on arrays (less duplication).
2025-03-06 17:48:43 +00:00
Geoffrey White
aacbfc0fd8
Rust: Improve alert messages.
2025-03-06 17:48:41 +00:00
Geoffrey White
9fb00daeec
Rust: Implement the query (with one source, one sink model).
2025-03-06 17:48:39 +00:00
Geoffrey White
9a35febe80
Rust: Query framework and basic tests.
2025-03-06 13:24:05 +00:00
Tom Hvitved
b8dd2e551e
Merge pull request #18919 from hvitved/rust/ast-consistency-internal
...
Rust: Move `AstConsistency.qll` into `internal`
2025-03-04 15:35:34 +01:00
Simon Friis Vindum
c89e648738
Rust: Exclude function without canonical path from model generation
2025-03-04 13:56:10 +01:00
Tom Hvitved
1f13f0009f
Rust: Move AstConsistency.qll into internal
2025-03-04 13:00:09 +01:00
github-actions[bot]
58f355ae5a
Post-release preparation for codeql-cli-2.20.6
2025-03-03 18:18:15 +00:00
github-actions[bot]
fa850cccb1
Release preparation for version 2.20.6
2025-03-03 17:13:19 +00:00
Simon Friis Vindum
cd49df0ff2
Merge pull request #18784 from paldepind/rust-generate-sources-sinks
...
Rust: Generate sources and sinks
2025-02-20 15:59:58 +01:00
Simon Friis Vindum
ae7e15d82f
Merge pull request #18754 from paldepind/rust-ref-pattern
...
Rust ref pattern
2025-02-19 14:24:09 +01:00
github-actions[bot]
ad24f94a77
Post-release preparation for codeql-cli-2.20.5
2025-02-17 17:58:24 +00:00
github-actions[bot]
6f4562f3bd
Release preparation for version 2.20.5
2025-02-17 16:55:54 +00:00
Simon Friis Vindum
a253b77894
Rust: Add clarifying comment
2025-02-17 14:14:30 +01:00
Simon Friis Vindum
632e0c82bd
Rust: Generate sources and sinks
2025-02-14 12:48:05 +01:00
Simon Friis Vindum
7476aeaabf
Rust: Handle ref patterns in data flow
...
To do this we:
* Let SSA writes target the name inside identifier patterns instead of
the pattern itself
* Include relevant names in the data flow graph
* Add a store step from a identifier patterns with `ref` into the
contained name. So we have an edge `ref a` -> `a` that stores in the
reference content type.
2025-02-12 13:20:11 +01:00
Simon Friis Vindum
58d86fd2a9
Merge pull request #18714 from paldepind/rust-pointer
...
Rust: Handle writes to references and add encoding of reference content
2025-02-11 14:12:56 +01:00
Tom Hvitved
614b3cea66
Merge pull request #18697 from hvitved/rust/telemetry
...
Rust: Implement database quality telemetry query
2025-02-07 17:43:23 +01:00
Tom Hvitved
11bf4c831d
Update rust/ql/src/queries/telemetry/DatabaseQualityDiagnostics.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-02-07 13:55:11 +01:00
Simon Friis Vindum
11055760a4
Rust: Handle writes to references and add encoding of reference content
2025-02-07 13:53:17 +01:00
Tom Hvitved
aca70cd1ea
Merge pull request #18675 from hvitved/rust/struct-tuple-field
...
Rust: Implement data flow through tuple structs
2025-02-06 19:17:53 +01:00
Tom Hvitved
89502d63e5
Rust: Implement database quality telemetry query
2025-02-06 10:46:48 +01:00
Remco Vermeulen
7619f1dac9
Merge pull request #18679 from rvermeulen/rvermeulen/ccr-suites
...
Add CCR suites
2025-02-05 09:35:48 -08:00
Tom Hvitved
e4d9e29368
Rust: Implement data flow through tuple structs
2025-02-05 13:27:07 +01:00
Simon Friis Vindum
670ecb3298
Merge pull request #18673 from paldepind/rust-higher-order-function-model-generation
...
Rust: Higher order function model generation
2025-02-05 09:15:46 +01:00
Remco Vermeulen
9894e9ef9f
Add CCR suites
2025-02-05 01:58:34 +00:00
Arthur Baars
2a32e8865d
Merge pull request #18668 from github/post-release-prep/codeql-cli-2.20.4
...
Post-release preparation for codeql-cli-2.20.4
2025-02-04 14:22:53 +01:00
Simon Friis Vindum
b0a3cdc68c
Rust: Generate flow summaries for higher-order functions
2025-02-04 14:03:19 +01:00
