4874 Commits

Author	SHA1	Message	Date
Tom Hvitved	912aa461c7	Merge pull request #11654 from hvitved/ruby/stage-collapse ... Ruby: Ensure `Node::{toString,getLocation}` are computed in data flow stage	2022-12-12 13:57:47 +01:00
Michael Nebel	e0f1b38439	Merge pull request #11580 from michaelnebel/renamenegativemodels ... C#/Java: Rename Negative Summary Model to Neutral Model	2022-12-12 07:59:06 +01:00
Harry Maclean	6c8896d83f	Merge pull request #11337 from hmac/actionmailbox ... Ruby: Model ActionMailbox	2022-12-12 10:29:23 +13:00
Tom Hvitved	58549087e0	Ruby: Ensure Node::{toString,getLocation} are computed in data flow stage	2022-12-11 20:37:24 +01:00
Tom Hvitved	367aa35d8c	Ruby: Avoid SummarizedCallable::propagatesFlowExt being recursive	2022-12-11 20:37:23 +01:00
github-actions[bot]	343b7b1c8b	Post-release preparation for codeql-cli-2.11.6	2022-12-11 18:15:04 +00:00
github-actions[bot]	0b2fb4f70a	Release preparation for version 2.11.6	2022-12-10 15:49:35 +00:00
Jami Cogswell	6854845b75	Java: refactor isManuallyGenerated and isBothAutoAndManuallyGenerated	2022-12-09 18:37:50 -05:00
Michael Nebel	a14df1ca61	Ruby: Rename Negative Summary Model to Neutral Model.	2022-12-09 15:04:43 +01:00
Michael Nebel	079d48c42a	Sync files.	2022-12-09 15:04:42 +01:00
Asger F	387a673c10	Merge pull request #11567 from asgerf/js/data-extensions2 ... JS: Move MaD models to data extensions	2022-12-09 10:09:24 +01:00
Peter Stöckli	d2c8e70be1	Adjust expected file for TaintStep (due to changes to File.join)	2022-12-09 09:57:19 +01:00
Peter Stöckli	03fff2709b	Add suggestions to fix FileJoinSanitizer	2022-12-09 09:42:44 +01:00
Peter Stöckli	0d8c82009c	Merge branch 'main' into p--ruby-kernel-open-addition	2022-12-09 07:54:56 +01:00
Jami Cogswell	0b2f2a3f88	Java: remove predicates from NegativeSummarizedCallable	2022-12-08 23:46:55 -05:00
Tom Hvitved	2ab05a81d1	Merge pull request #11621 from hvitved/ruby/library-callable-get-param ... Ruby: Add `SummarizedCallable::getParameter`	2022-12-08 16:20:44 +01:00
Tom Hvitved	cbf722dad0	Ruby: Add SummarizedCallable::getParameter	2022-12-08 15:59:41 +01:00
erik-krogh	1a6e16f292	Merge branch 'main' into kernelLoad	2022-12-08 15:41:48 +01:00
erik-krogh	f09e10f61f	delete redundant cast	2022-12-08 15:34:26 +01:00
Chris Smowton	49bc524fd0	Merge remote-tracking branch 'origin/rc/3.8' into smowton/admin/merge-rc38-into-main	2022-12-08 11:12:30 +00:00
Jami Cogswell	aa7e6d7811	Java: add negative numbers	2022-12-07 17:17:35 -05:00
Tom Hvitved	35938067fe	Merge pull request #11517 from aibaars/phi-reads-in-data-flow-graph ... Ruby: Include SSA "phi reads" in DataFlow::Node	2022-12-07 18:58:44 +01:00
Arthur Baars	898a4006b0	Merge pull request #10747 from aibaars/ruby-more-flow ... Ruby: also treat included/prepended modules as subclasses	2022-12-07 15:49:00 +01:00
Arthur Baars	d862972d5e	Ruby: Add use-use stress test	2022-12-07 15:28:51 +01:00
Arthur Baars	d5f4340cf5	Ruby: address comment	2022-12-07 15:28:50 +01:00
Arthur Baars	f11f2cb1a0	Ruby: Update tests	2022-12-07 15:28:50 +01:00
Arthur Baars	2131b0f116	Ruby: Include SSA "phi reads" in DataFlow::Node	2022-12-07 15:28:48 +01:00
erik-krogh	9ef4f12261	add change-note	2022-12-07 14:12:43 +01:00
erik-krogh	8ab31bbe1c	have getMethodName return the method being called for super-calls	2022-12-07 14:09:36 +01:00
erik-krogh	ee8e0188a6	remove redundant call, the charpred ensures it always holds	2022-12-07 13:23:18 +01:00
erik-krogh	360a99f026	delete getKernelMethod and don't special-case the methodName on super-calls in the Kernel model	2022-12-07 13:14:48 +01:00
Asger F	5af1b367c7	Support data extensions	2022-12-07 11:35:05 +01:00
erik-krogh	52c0afa03f	change getMethodName to getKernelMethod in other files	2022-12-07 10:27:35 +01:00
Jami Cogswell	b82f9b1911	Java: add draft of generated vs manual MaD metrics query	2022-12-06 22:15:19 -05:00
erik-krogh	8f0c0f3c17	add support for super calls to Kernel	2022-12-06 14:25:51 +01:00
erik-krogh	0e9cd1e4b5	factor out methodName to a field in KernelMethodCall	2022-12-06 14:23:46 +01:00
erik-krogh	e24f041661	drive-by: use instanceof KernelMethodCall such that override getAnArgument cannot be mistaken for a method in CallNode	2022-12-06 14:21:48 +01:00
erik-krogh	5849b2c98a	drive-by: simplify the imports in PathInjection.ql	2022-12-06 14:09:39 +01:00
erik-krogh	66946ebf6a	add Kernel methods as sinks to path-injection	2022-12-06 14:09:15 +01:00
Tom Hvitved	b5e2e1e469	Merge pull request #11564 from hvitved/dataflow/parameter-position-consistency-checks ... Data flow: Add consistency checks for parameter positions	2022-12-06 09:33:36 +01:00
Tom Hvitved	b171dc9b7b	Merge pull request #11477 from hvitved/ruby/call-ctx-rewrite ... Ruby: Rework call-context sensitivity logic	2022-12-06 07:39:29 +01:00
Tom Hvitved	e66a3c4d83	Data flow: Add consistency checks for parameter positions	2022-12-05 12:57:11 +01:00
Tom Hvitved	faca4b5b56	Merge pull request #11461 from hvitved/ruby/unique-hash-splat-param ... Ruby: At most one hash-splat `ParameterNode` per callable	2022-12-05 11:53:28 +01:00
Arthur Baars	889eea92c2	Merge branch 'main' into ruby-more-flow	2022-12-05 11:13:46 +01:00
Arthur Baars	83423854d2	Merge pull request #11339 from aibaars/active_support_enumerable ... Ruby: Active support enumerable	2022-12-05 11:02:19 +01:00
github-actions[bot]	5e35785fd0	Post-release preparation for codeql-cli-2.11.5	2022-12-02 11:37:44 +00:00
Asger F	d2bbb61885	Ruby: update syntax for more models	2022-12-02 10:29:30 +01:00
Asger F	2d578c1a73	Merge branch 'main' into merge-package-type-columns	2022-12-02 10:00:44 +01:00
github-actions[bot]	31ab22e3a0	Release preparation for version 2.11.5	2022-12-01 20:05:14 +00:00
Harry Maclean	bd129ede42	Merge pull request #11136 from hmac/json-flow-summaries ... Ruby: JSON flow summaries	2022-12-01 14:19:47 +13:00