9591 Commits

Author	SHA1	Message	Date
Mark Shannon	c7ec5690a5	Python taint-tracking: make sure all features of legacy extensions are supported.	2019-08-29 10:31:50 +01:00
Mark Shannon	64c160b75c	Python taint-tracking: Fix ambiguous flow through class instantiation. Tweak the path query to ensure edge to sink is always present.	2019-08-29 10:31:50 +01:00
Mark Shannon	d31e55f88e	Python taint-tracking: Avoid ambiguous flows through calls. Fix up tests.	2019-08-29 10:31:50 +01:00
Mark Shannon	78ce19678a	Python taint-tracking: Fix up SQL injection query.	2019-08-29 10:31:50 +01:00
Mark Shannon	3f8066878a	Python taint-tracking: Fix up handling of contexts for __init__ and for context-free taints.	2019-08-29 10:31:50 +01:00
Mark Shannon	fe9c9d479d	Python taint-tracking. Fix bug in legacy API.	2019-08-29 10:31:50 +01:00
Mark Shannon	7c4a18eee3	Python taint-tracking: Fix up handling of legacy (config-less) taint-tracking	2019-08-29 10:31:50 +01:00
Mark Shannon	2d9d292ee4	Python: Fix up pi-node handling in taint-tracking.	2019-08-29 10:31:50 +01:00
Mark Shannon	955e54b360	Python: Update unitialized local to use new taint-tracking config.	2019-08-29 10:31:50 +01:00
Mark Shannon	24b4a4102c	Python taint-tracking: Further enhancements to new implementation for better debugging and backwards compatibility.	2019-08-29 10:31:50 +01:00
Mark Shannon	1addfaac1a	Python taint-tracking: update test results.	2019-08-29 10:31:50 +01:00
Mark Shannon	a7845ae0e1	Python taint-tracking: Remove old implementation.	2019-08-29 10:31:50 +01:00
Mark Shannon	133909d7fe	Python taint-tracking: Lengthen steps to better conform to old edge relation.	2019-08-29 10:31:50 +01:00
Mark Shannon	da6a66975c	Python taint-tracking. Further improvements to new taint-tracking.	2019-08-29 10:31:50 +01:00
Mark Shannon	74f1dd3ec0	Python taint-tracking. Add some tests and fix up various parts of the implementation.	2019-08-29 10:31:50 +01:00
Mark Shannon	eed2090168	Python taint-tracking. Fill in most of new configuration-base taint-tracking implementation.	2019-08-29 10:31:47 +01:00
Mark Shannon	e8bd9e7341	Python: Add new API for taint-tracking configuration. As yet, unsupported.	2019-08-29 10:27:08 +01:00
Rebecca Valentine	36f99c19bc	Merge pull request #1840 from markshannon/python-better-hasattribute-handling ... Python: Add 'hasAttribute' predicate to ObjectInternal and Value.	2019-08-28 10:45:44 -07:00
Rebecca Valentine	cac775880f	Merge pull request #1839 from markshannon/python-rationalize-library ... Python: rationalize library a bit.	2019-08-28 10:15:36 -07:00
Rebecca Valentine	602b99e01f	Merge pull request #1834 from markshannon/python-verify-unreachable-code ... Python: Add test to verify fix.	2019-08-28 10:15:26 -07:00
Rebecca Valentine	ac78d10277	Merge pull request #1821 from markshannon/python-speedup-binary-points-to ... Python points-to: Speed up binaryPointsTo predicate.	2019-08-28 10:14:40 -07:00
Mark Shannon	5892ce2a2b	Python: Implement 'hasAttribute()' on ObjectInternal and use it to implement the same predicate on Value, ModuleObject and ClassObject.	2019-08-28 17:18:25 +01:00
Mark Shannon	f64f6e6d2e	Python: Move classes for lists of AST nodes into AstExtended.qll	2019-08-28 15:43:02 +01:00
Mark Shannon	97f9920a69	Python: Move NameNode class in Flow.qll with other CFG classes.	2019-08-28 14:39:27 +01:00
Mark Shannon	68da13cdc2	Python remove a couple of small AST related modules, moving contents to more appropriate modules.	2019-08-28 14:28:04 +01:00
Mark Shannon	1c8ce418d9	Python: Add test to confirm #1212 is fixed.	2019-08-28 12:01:04 +01:00
Pavel Avgustinov	b3081154fa	Merge pull request #1823 from markshannon/python-dont-prune-in-ql ... Python: removing pruning in QL.	2019-08-27 11:32:23 +01:00
Mark Shannon	ca75a393b4	Python: Remove pruning in QL; rely on the extractor to do it.	2019-08-25 17:03:22 +01:00
Mark Shannon	f11d0638cf	Python: Remove tests for pruning in QL.	2019-08-25 17:00:08 +01:00
Mark Shannon	9b1fbac929	Python points-to: Speed up binaryPointsTo predicate.	2019-08-25 15:14:42 +01:00
Nick Rolfe	ead003e440	Merge pull request #1813 from pavgust/attribute ... Improve attribution on some stub files	2019-08-24 11:40:32 +01:00
Pavel Avgustinov	da29d99560	Merge branch 'master' of github.com:Semmle/ql into attribute	2019-08-23 21:47:31 +01:00
Mark Shannon	8909c3d6ab	Python: Fix tags and message for CWE-312 queries.	2019-08-23 15:20:19 +01:00
Mark Shannon	20fc64c673	Python: Prevent bad magic in one predicate.	2019-08-23 15:08:19 +01:00
Pavel Avgustinov	cc854dd937	Merge branch 'master' of github.com:Semmle/ql into attribute	2019-08-23 09:55:35 +01:00
Taus Brock-Nannestad	92f48191c2	Update test results for UndefinedGlobal.ql.	2019-08-22 17:53:36 +02:00
Taus Brock-Nannestad	b82ebf2a37	Add tests.	2019-08-22 16:30:14 +02:00
Mark Shannon	4759044ee4	Python tests: Fix up tests for CWE-312 to not use external locations.	2019-08-22 15:27:49 +01:00
Mark Shannon	9df205b288	Python tests: Fix up CWE-327 tests to use new sensitive-data library.	2019-08-22 15:27:48 +01:00
Mark Shannon	6cd0087d9d	Python: Use Value API for sensitive data analysis.	2019-08-22 15:27:48 +01:00
Mark Shannon	81c65cd37c	Add missing html tag	2019-08-22 15:27:48 +01:00
Mark Shannon	816938369e	Python: Add tests for clear-text storage and logging.	2019-08-22 15:27:48 +01:00
Mark Shannon	15bb8b5f70	Python add new queries for clear-text logging and storage.	2019-08-22 15:27:48 +01:00
Mark Shannon	79ebd5652a	Python: Add library support for cookies. Update and extend sensitive data library.	2019-08-22 15:27:48 +01:00
Taus Brock-Nannestad	b9ef8a0526	Python: Extend hasAttribute to unknown-but-defined module variables.	2019-08-22 16:22:53 +02:00
Taus Brock-Nannestad	f9c002e441	Python: Support short mode flags (e.g. re.M) in regexes.	2019-08-22 14:53:58 +02:00
Taus	ae2a68b988	Merge pull request #1791 from markshannon/python-revert-tests ... Python: Revert and update tests removed in #1767	2019-08-22 11:20:24 +02:00
Taus	c595d0f27b	Merge pull request #1784 from markshannon/python-move-essa-together ... Python: Move all ESSA related code into one folder.	2019-08-21 17:51:45 +02:00
Mark Shannon	e77ae09a86	Python tests: Update test results to account for better handling of branches in finally blocks.	2019-08-21 14:47:57 +01:00
Mark Shannon	714fecbf5e	Python: Revert tests removed in #1767.	2019-08-21 14:39:53 +01:00