Anders Schack-Mulligen
97b2bdaa9f
Java: Fix types of summary parameter nodes.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
254d60c826
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen
59636c43ca
Dataflow: Rename two private predicates.
2023-06-09 15:27:17 +02:00
Stephan Brandauer
b38bc52019
Java: fix bug in ExcludedFromModeling Characteristic
2023-06-09 14:57:56 +02:00
Stephan Brandauer
1ae2fee309
Java: Update java/ql/lib/ext/okhttp3.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-06-09 13:48:16 +02:00
Stephan Brandauer
44785b72ce
Java: Update java/ql/lib/ext/okhttp3.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-06-09 13:46:09 +02:00
Anders Schack-Mulligen
1b7bbf6320
Merge pull request #13083 from aschackmull/dataflow/typestrengthen
...
Dataflow: Strengthen tracked types.
2023-06-09 13:23:30 +02:00
Jeroen Ketema
49993b023e
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
Tony Torralba
0cef5651e2
Merge pull request #13417 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-06-09 09:27:03 +02:00
Anders Schack-Mulligen
44b09507ab
Merge pull request #13408 from aschackmull/java/loginjection-perf
...
Java: Add more negation context to reduce string ops and improve perf.
2023-06-09 08:44:27 +02:00
Anders Schack-Mulligen
68f1e40370
Java/C#: Add change notes.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
85d6b44d92
Java: Fix test output.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
d230509905
Dataflow: Address review comments.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
95afd551ff
Java: Fix qltest
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
4399138c82
Dataflow: Fix QL4QL alert.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
8a584b78ac
Dataflow: Enable type strengthening in partial flow.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
441ccef6c4
Dataflow: Bugfix, use arg type rather than strengthened param type.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
a0a9d30286
Java: Fix qltests.
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
4633abe19e
Java: Autoformat
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
ad461a87b4
Dataflow: Strengthen tracked types.
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
1d87f0793b
Dataflow: Minor refactor.
2023-06-09 08:37:35 +02:00
github-actions[bot]
81b08b4399
Add changed framework coverage reports
2023-06-09 00:18:12 +00:00
Jami Cogswell
da58b2afc8
Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'
2023-06-08 20:05:27 -04:00
Jeroen Ketema
bff11c3d23
Apply suggestions from code review
2023-06-08 22:33:50 +02:00
github-actions[bot]
e4be303a23
Release preparation for version 2.13.4
2023-06-08 19:57:37 +00:00
Tony Torralba
abb775c616
Merge pull request #13409 from atorralba/atorralba/java/fix-gson-models
...
Java: Fix more problems in the Gson models
2023-06-08 17:36:40 +02:00
Ian Lynagh
22fe055e53
Kotlin: Tweak our JSON escaping
...
We were escaping '/', but I don't think there is any need to do so. It
just happens to have a nice escape in the spec. Escaping it might
filenames annoying to work with.
I've also added escaping for the other control characters that we're
meant to escape.
2023-06-08 15:20:30 +01:00
Tony Torralba
0e242cba7e
Update java/ql/lib/ext/retrofit2.model.yml
2023-06-08 14:59:10 +02:00
Tony Torralba
4608481d7b
Java: Fix more problems in the Gson models
...
Found during type strengthening work by @aschackmull
2023-06-08 14:53:09 +02:00
Anders Schack-Mulligen
5a2ac1b5ca
Java: Add more negation context to reduce string ops and improve perf.
2023-06-08 14:04:57 +02:00
Anders Schack-Mulligen
dabb4dd643
Java: Improve join-order for FunctionalInterface.
2023-06-08 13:02:54 +02:00
Stephan Brandauer
8f697ac1ee
Java: fix broken MaD export format
2023-06-08 12:02:50 +02:00
Stephan Brandauer
c6f10519fa
Merge branch 'main' into java/update-mad-decls-after-triage-2023-06-08T08-51-47
2023-06-08 12:00:07 +02:00
Anders Schack-Mulligen
cc45db7c76
Merge pull request #13394 from atorralba/atorralba/java/fix-gson-jsonarray-models
...
Java: Fix Gson's JsonArray.add models
2023-06-08 11:05:40 +02:00
Stephan Brandauer
bda938c544
Update MaD Declarations after Triage
2023-06-08 10:51:48 +02:00
github-actions[bot]
cbbd885e22
Add changed framework coverage reports
2023-06-08 00:17:14 +00:00
Ian Lynagh
1b83aeb25d
Merge pull request #13393 from igfoo/igfoo/remove_explorer
...
Kotlin: Remove kotlin-explorer
2023-06-07 16:32:00 +01:00
Ian Lynagh
c4e829f1d4
Merge pull request #13385 from igfoo/igfoo/kotlin_version_relax
...
Kotlin: Relax version requirements
2023-06-07 16:31:49 +01:00
Tony Torralba
c0135673fa
Fix JsonArray.addAll model
...
Properly test JsonArray.add(String) and JsonArray.addAll(JsonArray) as well
2023-06-07 16:18:32 +02:00
Stephan Brandauer
2921df41da
Java: fix import
2023-06-07 15:22:59 +02:00
Stephan Brandauer
ec3a7e39ad
Java: qldoc style
2023-06-07 14:57:38 +02:00
Stephan Brandauer
715b1351f3
Java: share considerSubtypes predicate between Java modes
2023-06-07 14:55:00 +02:00
Stephan Brandauer
7e77e2ea82
Java: comment why we're using erased types in MaD
2023-06-07 14:42:20 +02:00
Stephan Brandauer
a8799fe981
Java: share getCallable interface between automodel extraction modes
2023-06-07 14:38:52 +02:00
Tony Torralba
6d7234f8ed
Merge pull request #13225 from atorralba/atorralba/java/path-injection-mad-sinks-2
...
Java: Migrate path injection sinks to models-as-data (simplified)
2023-06-07 14:27:36 +02:00
Tony Torralba
35b4c438ff
Fix Gson's JsonArray.add models
...
When the type of the argument isn't JsonElement, the summary must be taint flow instead of value flow
2023-06-07 14:12:20 +02:00
yoff
911835c30e
Merge pull request #13392 from yoff/java/test-type-tracking-through-flow-summaries
...
java: test type tracking through flow summaries
2023-06-07 14:10:23 +02:00
Stephan Brandauer
92ad02a752
Java: update getRelatedLocation qldoc
2023-06-07 14:09:07 +02:00
Stephan Brandauer
be6b1d8aaf
Java: remove SkipFrameworkModeling characteristic in favour of later evaluation
2023-06-07 13:58:56 +02:00
Stephan Brandauer
2e16b71215
Java: update qldoc of ClassQualifierCharacteristic
2023-06-07 13:52:57 +02:00
