Tom Hvitved
cccb11f697
Merge pull request #16091 from hvitved/csharp/system-diagnostics-modules
...
C#: Neutralize some `System.Diagnostics` generated models
2024-04-03 10:21:56 +02:00
Geoffrey White
11acb499bb
Merge pull request #16042 from geoffw0/maddoc
...
Remove [potentially] untrue claims about models-as-data
2024-04-02 16:01:31 +01:00
Tom Hvitved
368a500d93
C#: Neutralize some System.Diagnostics generated models
2024-04-02 13:58:55 +02:00
github-actions[bot]
8e61c6625b
Post-release preparation for codeql-cli-2.17.0
2024-04-01 15:27:42 +00:00
github-actions[bot]
ec97d9a304
Release preparation for version 2.17.0
2024-04-01 13:46:57 +00:00
Henry Mercer
0646744928
Merge branch 'main' into henrymercer/merge-back-rc-3.13
2024-03-26 12:59:12 +00:00
github-actions[bot]
f67b5f9158
Post-release preparation for codeql-cli-2.16.6
2024-03-25 18:17:15 +00:00
github-actions[bot]
71ab804274
Release preparation for version 2.16.6
2024-03-25 16:58:08 +00:00
Geoffrey White
4a4c77e81d
Remove claims about models-as-data that require you to select a parameter from non-Java languages. We believe this is only possible in Java.
2024-03-25 15:41:00 +00:00
Edward Minnix III
7377cbb46e
Merge pull request #15930 from egregius313/egregius313/csharp/mad/database/dapper-sources
...
C#: Sources for the `Dapper` database library
2024-03-25 11:21:51 -04:00
Michael Nebel
a07ee8e961
C#: Update the AsList model to a value flow model.
2024-03-22 14:40:25 +01:00
Ed Minnix
9ed8ca27a1
Fix test and model
2024-03-22 13:46:19 +01:00
Ed Minnix
73b4e8fe6a
Add WithElement identifier to AsList method
2024-03-22 13:46:19 +01:00
Ed Minnix
9b23bfa038
Execute methods which return objects
...
The `Execute` method returns `int` for "number of rows affected". But
some of the other `Execute*` methods return objects.
2024-03-22 13:46:19 +01:00
Ed Minnix
5885938eaf
Use wildcard signatures for Query methods
2024-03-22 13:46:19 +01:00
Ed Minnix
5ca6b40c34
Change note
2024-03-22 13:46:18 +01:00
Ed Minnix
98285b5171
Add AsList summary
2024-03-22 13:46:18 +01:00
Ed Minnix
87ad170067
Dapper source models
2024-03-22 13:46:18 +01:00
Ed Minnix
e2c2d574f8
Add FileInfo::OpenText
2024-03-21 13:06:33 -04:00
Ed Minnix
46a9bb9804
Change note
2024-03-21 13:06:31 -04:00
Ed Minnix
08611f0c9c
Fix flow summary tests
2024-03-21 13:06:30 -04:00
Ed Minnix
e14e47cd73
Fix Stream::Read(Span<byte>) model
2024-03-21 13:06:28 -04:00
Ed Minnix
d6f085373e
System.IO.Stream::ReadExactly models
2024-03-21 13:06:27 -04:00
Ed Minnix
2a73677fd2
Missing Stream::ReadAsync overload
2024-03-21 13:06:26 -04:00
Ed Minnix
a698684fec
System.IO.Stream::ReadAtLeast
2024-03-21 13:06:24 -04:00
Ed Minnix
9232fafde1
Add System.IO.Stream::Read(Span<Byte>) model
2024-03-21 13:06:20 -04:00
Ed Minnix
a8c5e4e0f2
FileInfo source models
2024-03-21 13:06:18 -04:00
Ed Minnix
bb9b0eabf2
Add BufferedStream summary models
2024-03-21 13:06:17 -04:00
Ed Minnix
a5b801b31f
Add File reading methods
2024-03-21 13:06:15 -04:00
Arthur Baars
c219b1a3c7
Merge pull request #16013 from github/rc/3.13
...
Merge rc/3.13 into main
2024-03-21 16:04:58 +01:00
Michael Nebel
6619be3137
Merge pull request #15940 from michaelnebel/csharp/sourcesinktests
...
C#: Source- and sink tests.
2024-03-21 08:12:16 +01:00
Dave Bartolomeo
311ba8ea1b
Merge from main to resolve conflicts
2024-03-19 10:41:31 -04:00
Michael Nebel
90db9b330f
C#: Add MaD source and sink test query to shared library.
2024-03-19 13:45:38 +01:00
Tom Hvitved
529e901fb1
C#: Switch to shared XML.qll implementation
2024-03-19 13:14:42 +01:00
Tom Hvitved
fc55567d90
Merge pull request #15853 from hvitved/dataflow/get-location
...
Data flow: Replace `hasLocationInfo` with `getLocation`
2024-03-18 20:21:46 +01:00
github-actions[bot]
aebe9f6992
Post-release preparation for codeql-cli-2.16.5
2024-03-18 12:16:26 +00:00
github-actions[bot]
0a6243d07b
Release preparation for version 2.16.5
2024-03-18 10:14:07 +00:00
Ed Minnix
71cf948650
Classes extending SourceNode for local and stored source models
...
Queries such as `cs/sql-injection` cast their source to a `SourceNode`
in order to describe them. For example:
```ql
import semmle.code.csharp.security.dataflow.flowsources.FlowSources
string getSourceType(DataFlow::Node source) {
result = source.(SourceNode).getSourceType()
}
```
Models as data source models are not included in `SourceNode` by
default, they must be wrapped with a class extending `SourceNode`.
This adds such classes, which wrap the
`sourceNode(DataFlow::Node,string)` predicate and assigns a
`getSourceType`.
2024-03-14 22:23:54 -04:00
Edward Minnix III
c190dd21db
Merge pull request #15877 from egregius313/egregius313/csharp/mad/sources/windows-registry
...
C#: Add source models for values from the Windows registry
2024-03-12 16:41:42 -04:00
Tom Hvitved
dddba3228b
Merge pull request #15867 from hvitved/dataflow/ap-limit
...
Data flow: Add `ConfigSig::accessPathLimit`
2024-03-12 14:57:51 +01:00
Michael Nebel
f59aaf1d75
C#: Add change note.
2024-03-12 11:12:55 +01:00
Ed Minnix
7745c2c2b7
Change note
2024-03-11 17:00:12 -04:00
Tom Hvitved
257686eb9a
C#: Implement new data flow interface
2024-03-11 20:56:38 +01:00
Ed Minnix
bc745dfd5e
Windows registry sources
2024-03-11 13:55:34 -04:00
Michael Nebel
f571ebdaf4
C#: Overall change note for C# 12 / .NET 8 support.
2024-03-11 14:43:14 +01:00
Tom Hvitved
da66281fef
Sync files
2024-03-11 13:02:04 +01:00
Tom Hvitved
7a39f077d9
Data flow: Add ConfigSig::accessPathLimit
2024-03-11 13:01:58 +01:00
Ed Minnix
d300736c7e
Remove AddLocalSource classes
2024-03-10 22:20:51 -04:00
Edward Minnix III
e7852f520f
Merge pull request #15605 from egregius313/egregius313/csharp/dataflow/sources/commandargs-and-environment
...
C#: Add more `environment` and `commandargs` sources for the C# Standard Library
2024-03-08 14:10:09 -05:00
Lindsay Simpkins
7dd175d938
change note
2024-03-07 17:16:17 -08:00
