Ed Minnix
d28e03cda5
Change note
2025-01-07 07:34:27 -05:00
Ed Minnix
20d1ae1396
Fix Association model
2025-01-07 07:34:22 -05:00
Ed Minnix
796a81a0ba
gorm models
2025-01-07 07:34:20 -05:00
Ed Minnix
0f06ddcff0
Change note
2025-01-07 06:41:37 -05:00
Ed Minnix
80ad349a48
database/sql summary models for Row types
2025-01-07 06:41:31 -05:00
Ed Minnix
8093d57781
database/sql and database/sql/driver source models
2025-01-07 06:41:30 -05:00
github-actions[bot]
a121c5a5d0
Release preparation for version 2.20.1
2025-01-06 18:20:22 +00:00
Tom Hvitved
1b31c90d26
Implement FlowSummaryImpl stubs
2025-01-06 13:26:51 +01:00
Kevin Stubbings
4b95ea0987
Merge branch 'main' into go-rs-cors
2024-12-17 17:35:29 -08:00
Michael Nebel
aaf0cd5dee
Merge pull request #17968 from michaelnebel/java/movetestutils
...
Move test utilities to the query pack.
2024-12-16 13:41:30 +01:00
Owen Mansel-Chan
7ab06fca2f
Merge pull request #18275 from owen-mc/go/mad/variadic-params-sources
...
Go: Make models-as-data source models for variadic parameters work
2024-12-15 13:22:21 +00:00
Ed Minnix
88256e269a
Convert model from QL to MaD
2024-12-13 14:59:32 -05:00
Ed Minnix
f8cfa39492
Change note
2024-12-13 12:42:02 -05:00
Ed Minnix
63a3054aeb
os.Args variable read
2024-12-13 12:41:59 -05:00
Owen Mansel-Chan
e9dcd69cc0
Add readStep back to local taint flow
2024-12-13 13:30:18 +00:00
Owen Mansel-Chan
3a3e053f12
Only add taint steps for implicit varargs slice post-update nodes
2024-12-13 13:17:44 +00:00
Owen Mansel-Chan
b58e6ebade
Address review comments for localTaintStep
2024-12-12 22:07:15 +00:00
Michael Nebel
0bfc1b6ea8
Also move the postprocessing queries to the library pack.
2024-12-12 15:03:03 +01:00
Michael Nebel
941b0abbf6
Move modules to the library packs.
2024-12-12 15:03:01 +01:00
Owen Mansel-Chan
26b52078c0
Add change note
2024-12-12 13:41:35 +00:00
Owen Mansel-Chan
3f7c37e1ed
Treat container flow as taint flow in global taint flow
2024-12-12 11:41:32 +00:00
Owen Mansel-Chan
e13c4b7550
Treat container flow as taint flow in localTaintStep
2024-12-12 10:41:23 +00:00
Owen Mansel-Chan
75331ea268
Add change note
2024-12-06 15:03:34 +00:00
Owen Mansel-Chan
67572712ea
Fix flow out of varargs param with models-as-data
...
This still doesn't allow for a variadic out parameter to be defined as
a source using MaD. This is due to the lack of an implicit store step
at sources, to match implicit read steps at sinks.
2024-12-06 15:00:40 +00:00
github-actions[bot]
cf71a1525b
Post-release preparation for codeql-cli-2.20.0
2024-12-04 18:36:17 +00:00
github-actions[bot]
96564b7128
Release preparation for version 2.20.0
2024-12-04 16:01:14 +00:00
Henry Mercer
963f084d87
Merge branch 'main' into henrymercer/merge-back-rc-3.16
2024-12-04 13:39:10 +00:00
Anders Schack-Mulligen
03fdceb0fd
Merge pull request #18191 from aschackmull/dataflow/remove-deprecated-lib
...
Dataflow: Delete the old configuration-class based api.
2024-12-04 11:31:46 +01:00
Anders Schack-Mulligen
e846855bca
Go: Remove deprecated configuration classes referencing deleted api.
2024-12-03 20:08:44 +01:00
Anders Schack-Mulligen
cca27e4c77
Add change notes for all languages.
2024-12-03 19:42:33 +01:00
Anders Schack-Mulligen
fbff4b6e21
Go: Delete deprecated data flow api.
2024-12-03 14:42:14 +01:00
Owen Mansel-Chan
0e94ee81ae
Don't getUnderlyingType before looking through pointer type
...
If `T` is the type of an embedded field, it is invalid for `T` to be a
named type defined to be a pointer type (`type T *S`). It is also
invalid for `T` to be a type parameter. So this `getUnderlyingType()` is
redundant.
2024-11-26 22:25:56 +00:00
Owen Mansel-Chan
2cba97e87d
Small stylistic improvement
2024-11-26 22:25:55 +00:00
Owen Mansel-Chan
1bc1472b0b
Add change note
2024-11-26 22:25:53 +00:00
Owen Mansel-Chan
4990f16ba5
Refactor struct field predicate to remove redundancy
2024-11-26 22:25:48 +00:00
Owen Mansel-Chan
8dc0688b6f
Fix bug
2024-11-26 22:25:47 +00:00
Owen Mansel-Chan
141259c003
Update go/ql/lib/ext/slices.model.yml
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-11-26 14:48:20 +00:00
Owen Mansel-Chan
196634ecdb
Model slices package
...
Skipping functions that involve iterators for now.
2024-11-26 12:01:09 +00:00
Alexander Eyers-Taylor
c0474c4e45
Revert "Revert "Post-release preparation for codeql-cli-2.19.4""
2024-11-21 15:37:52 +00:00
Alexander Eyers-Taylor
4effe9e364
Revert "Post-release preparation for codeql-cli-2.19.4"
2024-11-21 14:43:15 +00:00
Owen Mansel-Chan
9aede5f433
Merge pull request #17494 from owen-mc/go/reinstate-mad-with-fixes
...
Go: reinstate models-as-data sink conversions with fixes
2024-11-20 14:50:47 +00:00
Owen Mansel-Chan
69ad69c38a
Move change note out of C# folder
2024-11-20 14:21:28 +00:00
Owen Mansel-Chan
d9a830e008
Add log function prefix "With" for heuristic logger
2024-11-20 13:50:59 +00:00
github-actions[bot]
3909df75dc
Post-release preparation for codeql-cli-2.19.4
2024-11-19 17:54:03 +00:00
Owen Mansel-Chan
dd87b1a9de
Convert os.stdin model to MaD
2024-11-19 16:59:47 +00:00
Owen Mansel-Chan
bf824cac0a
Allow package-level variables in MaD
2024-11-19 16:59:42 +00:00
github-actions[bot]
9783a11565
Release preparation for version 2.19.4
2024-11-19 16:21:37 +00:00
Owen Mansel-Chan
e57d8983f5
Add heuristic logger calls
2024-11-19 11:41:51 +00:00
Owen Mansel-Chan
9fc0dc5690
Fix typo in unrelated QLDoc
2024-11-19 11:41:40 +00:00
Owen Mansel-Chan
81907bc743
Set Subtypes column correctly
...
We set it to False when it has no meaning and True otherwise.
2024-11-19 11:22:36 +00:00