Tony Torralba
b1cee2f35c
Merge pull request #14254 from atorralba/atorralba/arithexpr-improv
...
Java: Consider AssignOps in ArithExpr
2023-09-22 15:22:27 +02:00
Anders Schack-Mulligen
66da997b7b
Dataflow: Make use of defaults for language-specific hooks.
2023-09-22 14:54:22 +02:00
Anders Schack-Mulligen
b11194e561
Java: Add missing qldoc.
2023-09-22 13:46:08 +02:00
Anders Schack-Mulligen
8ee1f8ae69
Java: Add missing flow step for ThreadLocal.initialValue.
2023-09-22 13:33:45 +02:00
Anders Schack-Mulligen
9f905497a5
Java: Add support for additional read and store steps and additional nodes.
2023-09-21 15:05:30 +02:00
Anders Schack-Mulligen
7e04ac55b7
Merge pull request #14268 from aschackmull/java/xmlparsers-typetrack
...
Java/Dataflow: Add new light-weight data flow api and use it in XmlParsers
2023-09-21 13:33:21 +02:00
Anders Schack-Mulligen
13f7daf71e
Merge pull request #13982 from aschackmull/dataflow/typeflow-calledge-pruning
...
Dataflow: Add type-based call-edge pruning.
2023-09-21 13:33:08 +02:00
github-actions[bot]
3acf5244b0
Post-release preparation for codeql-cli-2.14.6
2023-09-20 10:25:10 +00:00
Anders Schack-Mulligen
5c40d553b4
Java: Switch XmlParsers lib to lightweight data flow.
2023-09-20 10:21:53 +02:00
github-actions[bot]
0a3670727f
Release preparation for version 2.14.6
2023-09-19 11:40:30 +00:00
Tony Torralba
1e95a5a38a
Java: Consider AssignOps in ArithExpr
2023-09-19 12:15:59 +02:00
yoff
4a37c2fc3a
Merge pull request #13778 from geoffw0/javaparsemode
...
Java: Understand multiple parse mode flags specified in a regular expression string
2023-09-18 14:22:59 +02:00
Tony Torralba
b08e410f45
Merge pull request #14029 from atorralba/atorralba/apache-cxf-models
...
Java: Add new Apache CXF models
2023-09-18 10:54:05 +02:00
Chris Smowton
e62fcf9a45
Fix formatting mistake
2023-09-15 12:37:34 +01:00
Chris Smowton
a1a7640427
Give ErrorExpr default control flow
...
This prevents a CFG dead-end because of one ErrorExpr
2023-09-14 17:42:00 +01:00
Chris Smowton
b1e128b5c1
Pretty-print a ClassInstanceExpr without a bound constructor nicely
2023-09-14 17:42:00 +01:00
Chris Smowton
c0f8973749
Add test for extracting a Java AST with an error expression
...
Also note that ErrorExpr can occur outside upgrade/downgrade scripts
2023-09-14 17:42:00 +01:00
Geoffrey White
1c81bd52e6
Java: Change note.
2023-09-13 17:51:26 +01:00
Geoffrey White
8c3e778be6
Java: Port regex mode flag character fix from Python.
2023-09-13 17:50:52 +01:00
Anders Schack-Mulligen
c8094d34a7
Dataflow: Add type-based call-edge pruning.
2023-09-13 15:43:45 +02:00
Anders Schack-Mulligen
300425540a
Java: Minor improvement to TypeFlow for super accesses.
2023-09-13 15:43:45 +02:00
Anders Schack-Mulligen
a7b677ba40
Java: Bugfix for SuperAccess.isOwnInstanceAccess().
2023-09-13 15:43:45 +02:00
Anders Schack-Mulligen
110a4c81e3
Java: Minor perf fix.
2023-09-13 15:43:45 +02:00
Koen Vlaswinkel
7db082f3fd
Java: Add VS Code model editor queries
2023-09-13 13:04:26 +02:00
Ian Lynagh
2b9a425468
Kotlin: Support 1.9.20
2023-09-12 18:28:33 +01:00
github-actions[bot]
d699880c86
Post-release preparation for codeql-cli-2.14.4
2023-09-08 21:17:52 +00:00
github-actions[bot]
abf2b12b1c
Release preparation for version 2.14.4
2023-09-05 16:56:14 +00:00
Tom Hvitved
73370e7282
Merge pull request #14100 from hvitved/dataflow/consistency-pack
...
Data flow: Add consistency checks to shared ql pack
2023-08-31 11:47:40 +02:00
Asger F
2d5c40db31
Merge pull request #14048 from asgerf/shared/variable-capture-write-source-node
...
Variable capture: allow arbitrary data-flow nodes to be the source of a write
2023-08-31 10:20:48 +02:00
Tom Hvitved
fefe64bf0c
Java: Use data flow consistency checks from shared pack
2023-08-30 15:29:41 +02:00
Anders Starcke Henriksen
361ae1747e
Merge branch 'main' into starcke/automodel-pack
2023-08-30 09:25:28 +02:00
Dave Bartolomeo
3343b78015
Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3
...
Post-release preparation for codeql-cli-2.14.3
2023-08-28 13:34:10 -04:00
github-actions[bot]
3eba77421a
Post-release preparation for codeql-cli-2.14.3
2023-08-28 15:53:49 +00:00
Asger F
d4cfa8c2b8
Java: autoformatting changes
2023-08-28 15:35:06 +02:00
Asger F
d2fe4d235a
Java: Inline VariableWrite.getSource()
2023-08-28 15:34:48 +02:00
Tony Torralba
6573b1f772
Merge pull request #14056 from atorralba/atorralba/java/jenkins-stapler-regenerate
...
Java: Re-generate Jenkins and Stapler models
2023-08-25 13:15:21 +02:00
Tony Torralba
5367fb99d9
Manually update a couple of models affected by the nested name change
2023-08-25 11:25:40 +02:00
Tony Torralba
25ac87279e
Add change note
2023-08-25 11:17:54 +02:00
Tony Torralba
2448bc8ce2
Java: Add new Apache CXF models
2023-08-25 11:17:51 +02:00
Tony Torralba
2ed01d06b4
Java: Re-generate Jenkins and Stapler models
...
Re-generated the Jenkins and Stapler models to pick up the changes from github/codeql#14032
2023-08-25 10:01:28 +02:00
Ian Lynagh
5dff1852e1
Kotlin: We now support 1.9.10
2023-08-24 17:36:45 +01:00
Asger F
f17518ace2
Java: update to reflect changes in VariableCapture.qll
2023-08-24 14:06:44 +02:00
Anders Schack-Mulligen
7af1e96943
Merge pull request #14032 from aschackmull/java/mad-nestednames
...
Java: Use nested names in MaD signatures.
2023-08-24 13:53:55 +02:00
Tony Torralba
6b58d11eeb
Merge pull request #13900 from atorralba/atorralba/java/jaxws-getaremotemethod-improv
...
Java: Improve `JaxWsEndpoint::getARemoteMethod`
2023-08-24 13:37:15 +02:00
Tony Torralba
8c32919381
Merge pull request #13903 from atorralba/atorralba/jaxrs-mad-models
...
Java: New models for JAX-RS
2023-08-24 11:43:13 +02:00
Tony Torralba
3f9701cea7
Two fixes:
...
* Consider that the @WebService annotation (et al) can be in a supertype or interface
* getARemoteMethod should only return public methods, since protected, package-private, and private methods are not exposed
2023-08-24 11:35:52 +02:00
Tony Torralba
0f3918af16
Merge pull request #13773 from atorralba/atorralba/java/mdht-xxe-sink
...
Java: Add XXE sinks for MDHT
2023-08-23 13:49:49 +02:00
Anders Schack-Mulligen
736c4beb9e
Java: Add change note.
2023-08-23 13:26:41 +02:00
Anders Schack-Mulligen
6c02e30f56
Java: Update models.
2023-08-23 13:24:55 +02:00
Anders Schack-Mulligen
4b0a1cf74b
Java: Remove old interpretation.
2023-08-23 13:19:16 +02:00
