Michael Nebel
7f6c84dda8
C#: Fix bad join order.
2024-03-07 09:40:34 +01:00
Michael Nebel
35b93063f9
C#: Deprecate dotnet and cil.
2024-03-07 09:40:34 +01:00
Michael Nebel
58a1353ddc
C#: Clean up implementation and remove CIL dataflow implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
1638183d18
C#: Copy dotnet.Variable implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
6178acc070
C#: Copy dotnet.Type implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
81ce8dc02d
C#: Copy dotnet.Parameterizable implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
92447dc743
C#: Copy dotnet.Namespace implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
7ba25b23a5
C#: Copy dotnet.Generics implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
eb5cb2a7bf
C#: Copy dotnet.Expr implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
215808d7e9
C#: Copy dotnet.Declaration implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
cdf3d47031
C#: Copy dotnet.Element implementation.
2024-03-07 09:40:32 +01:00
Michael Nebel
c606ab09a5
C#: Copy dotnet.Callable implementation.
2024-03-07 09:40:32 +01:00
Tom Hvitved
a92e394a7c
C#: Variable capture follow-up
2024-03-04 19:36:30 +01:00
Ed Minnix
86ceeebd89
Change handling of LocalSource in queries
...
1. Change `LocalSource` to extend `DataFlow::Node`, thus removed from
the definiton of `Source`
2. Add a private class `AddLocalSource` which extends `Source`. This
allows us to currently preserve the inclusion of local sources, while
making it easier to remove it in the future.
2024-02-29 12:03:17 -05:00
Ed Minnix
3563c7ef03
Modify deprecated RemoteSource classes to extend DataFlow::Node directly.
...
Since `ThreatModelFlowSource` contains `RemoteFlowSource` by default, we
can safely remove the `RemoteSource` from the default of the queries.
2024-02-29 12:03:16 -05:00
Ed Minnix
af749e221b
Remove commented out code
2024-02-29 12:03:13 -05:00
Ed Minnix
f237d2aeda
Refactor to use ThreatModelFlowSource
2024-02-29 12:03:12 -05:00
Ed Minnix
434fa20646
Refactor to using ThreatModelFlowSource
2024-02-29 12:03:05 -05:00
Ed Minnix
1086abca63
Refactor to using ThreatModelFlowSource
2024-02-29 12:03:04 -05:00
Ed Minnix
31d4d0ca57
Move getSourceType to SourceNode
2024-02-29 12:03:00 -05:00
Ed Minnix
f388a0f10c
Deprecate direct uses of RemoteFlowSource and replace with ThreatModelFlowSource
2024-02-29 12:02:57 -05:00
Ed Minnix
bd0137a721
Deprecated direct use of RemoteFlowSource and use ThreatModelFlowSource instead
2024-02-29 12:02:55 -05:00
Michael Nebel
14d046ef18
Merge pull request #15710 from michaelnebel/csharp/refreadonlyparameters
...
C# 12: Ref readonly parameters.
2024-02-29 09:59:12 +01:00
Tom Hvitved
297a17975d
Merge pull request #15665 from hvitved/csharp/variable-capture
...
C#: Adopt shared variable capture library
2024-02-28 15:13:03 +01:00
Michael Nebel
692d7036a0
C#: Add extractor and QL library support for ref readonly parameters.
2024-02-28 13:44:28 +01:00
Michael Nebel
4bbaf687ad
Merge pull request #15723 from michaelnebel/csharp/experimentalattribute
...
C# 12: Experimental attribute.
2024-02-28 13:06:09 +01:00
Michael Nebel
95dc2f71d3
C#: Add ExperimentalAttribute class.
2024-02-28 11:20:43 +01:00
Michael Nebel
e6f4263eff
C#: Do not print compiler generated statements.
2024-02-26 13:51:06 +01:00
Michael Nebel
bf4e3a7d1c
C#: Merge expr_compiler_generated and compiler_generated and add compiler generated statements.
2024-02-26 13:51:06 +01:00
Tom Hvitved
606a8fed0c
Merge pull request #15406 from hvitved/csharp/no-stats-experiment
...
C#: Remove all DB stats
2024-02-26 13:40:37 +01:00
Tom Hvitved
5f5bcf686d
Update csharp/ql/lib/semmle/code/csharp/AnnotatedType.qll
...
Co-authored-by: Michael Nebel <michaelnebel@github.com >
2024-02-26 11:35:28 +01:00
Tom Hvitved
acd52192d1
C#: Adopt shared variable capture library
2024-02-26 09:53:30 +01:00
Michael Nebel
1a155b3a30
Merge pull request #15667 from michaelnebel/csharp/syntheticconstructorbody
...
C#: Add synthetic bodies and inititializers for default constuctors.
2024-02-23 11:14:00 +01:00
Tom Hvitved
ea7d9c97fd
C#: Use separate newtype branch for AssignableDefinitionNode
2024-02-22 21:04:55 +01:00
Michael Nebel
cf9c3d5dd1
C#: Remove un-needed code as we extract synthetic default constructors.
2024-02-22 13:33:29 +01:00
Michael Nebel
f2c849c737
C#: Simplify.
2024-02-22 11:19:34 +01:00
Michael Nebel
2afcc611ce
C#: Fix formatting.
2024-02-22 11:18:00 +01:00
Michael Nebel
21aa025db2
Update csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
...
Co-authored-by: Tom Hvitved <hvitved@github.com >
2024-02-22 10:40:54 +01:00
Michael Nebel
b76a27bba2
C#: Make a store step from explicit parameter nodes on primary constructors to the property of the same name for record types.
2024-02-21 10:57:22 +01:00
Michael Nebel
132b8baa57
C#: Delete summarized callable implementation for record flow and update expected output.
2024-02-21 10:33:19 +01:00
Michael Nebel
e4d41194b4
C#: Include store steps into readonly properties.
2024-02-20 15:55:19 +01:00
Michael Nebel
d83687125c
C#: Add postupdate nodes for all instance parameter accesses - otherwise we get missing post update nodes to to reverseRead in the data flow consistency queries.
2024-02-19 13:04:13 +01:00
Michael Nebel
28d5c11b6f
C#: Synthesize an empty body for primary constructors.
2024-02-19 13:04:13 +01:00
Erik Krogh Kristensen
7c0557269a
Merge pull request #15596 from erik-krogh/url-san
...
C#: Add a few more sanitizers to `cs/web/unvalidated-url-redirection`
2024-02-15 12:09:06 +01:00
erik-krogh
a2bd45d0cb
apply suggestions from code review
2024-02-14 13:50:27 +01:00
Tom Hvitved
7c59c7b28c
C#: Update QLdoc
2024-02-13 14:00:26 +01:00
Tom Hvitved
7bdc2c57f0
C#: Simplify primaryConstructorParameterStore
2024-02-13 13:59:14 +01:00
Tom Hvitved
3f43f45437
C#: Assume captured variables are live at exit in SSA construction
2024-02-13 13:59:08 +01:00
Michael Nebel
91bbbe262d
C#: Address more review comments.
2024-02-13 13:15:17 +01:00
erik-krogh
d31bfc06c2
add type requirement to the new Uri sanitizers
2024-02-13 13:13:43 +01:00
