Owen Mansel-Chan
76a3fa856f
Use any() to stub getSyntheticGlobalType
...
This is used in all other languages not currently using dataflow type
pruning.
2022-12-15 12:24:23 +00:00
Owen Mansel-Chan
1a1b6a1b93
Use any() to stub getCallbackParameter/ReturnType
...
This is used in all other languages not currently using dataflow type
pruning.
2022-12-15 12:24:23 +00:00
Owen Mansel-Chan
0af530061d
Merge pull request #11697 from owen-mc/go/make-dataflowtype-singleton
...
Make DataFlowType a singleton
2022-12-15 12:07:57 +00:00
Owen Mansel-Chan
039d582060
Fix date in unrelated change note
2022-12-15 11:04:48 +00:00
Owen Mansel-Chan
06038d575e
Improve comments about Fields
2022-12-15 11:04:48 +00:00
Owen Mansel-Chan
e01e40c532
Fix FuncTypeExpr.getNumParameter
...
It actually counts the number of parameter declarations. We correct it
to do what it says and introduce `FuncTypeExpr.getNumParameterDecls`,
which we then use in `FuncTypeExpr.getUniquelyNumberedChild`.
2022-12-15 11:04:48 +00:00
Jami Cogswell
46b8fbc4c9
Java: update remaining models, resolve merge conflict
2022-12-15 00:33:06 -05:00
Jami
359e49044f
Merge branch 'main' into jcogs33/mad-metrics-query
2022-12-14 15:33:29 -05:00
turbo
4ec401a3f6
Tag all security queries in supported languages' experimental directories with an experimental tag
2022-12-14 17:15:50 +01:00
Owen Mansel-Chan
6ef677b606
Fix test to use hasQualifiedName/2
2022-12-14 15:20:02 +00:00
Owen Mansel-Chan
d18179c243
Add QLDoc for toString on DataFlowType
2022-12-14 14:56:54 +00:00
Owen Mansel-Chan
50414cc748
Make DataFlowType a singleton
2022-12-14 14:40:15 +00:00
Chris Smowton
5799287a2b
go: fix bug in zip-slip example fix
2022-12-14 13:51:32 +00:00
Owen Mansel-Chan
0b849a319b
Merge pull request #11587 from owen-mc/go/remove-error-expr-from-dbscheme
...
Go: Remove @errorexpr from the dbscheme (use @badexpr)
2022-12-14 13:15:04 +00:00
Owen Mansel-Chan
3c6f466e78
Include downgrade scripts in extractor pack
2022-12-14 10:46:20 +00:00
Owen Mansel-Chan
14e6f9fee2
Remove @errorexpr from the dbscheme (use @badexpr)
2022-12-14 10:46:19 +00:00
Henry Mercer
a3933fbf4f
Bump minor versions of packs we regularly release
2022-12-13 18:59:24 +00:00
Henry Mercer
7167f078be
Merge branch 'main' into henrymercer/mergeback-3.8
2022-12-13 18:40:53 +00:00
Jami Cogswell
a33436a39b
Java: update hasProvenance
2022-12-13 11:26:23 -05:00
Tom Hvitved
4d2436dd82
Go: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
0c2eee2a72
Data flow: Sync files
2022-12-13 09:52:55 +01:00
Jami
93d8a03e73
Merge branch 'main' into jcogs33/mad-metrics-query
2022-12-12 20:31:53 -05:00
Jami Cogswell
623068c4b9
Java: add hasProvenance predicate, remove isManuallyGenerated and isBothAutoAndManuallyGenerated
2022-12-12 11:23:46 -05:00
erik-krogh
873d3553cd
Merge branch 'main' into static-useInstanceOf
2022-12-12 15:36:54 +01:00
github-actions[bot]
343b7b1c8b
Post-release preparation for codeql-cli-2.11.6
2022-12-11 18:15:04 +00:00
erik-krogh
8262fbbfb5
Java/C#/GO: Use instanceof in more places
2022-12-11 18:32:19 +01:00
github-actions[bot]
0b2fb4f70a
Release preparation for version 2.11.6
2022-12-10 15:49:35 +00:00
Jami Cogswell
6854845b75
Java: refactor isManuallyGenerated and isBothAutoAndManuallyGenerated
2022-12-09 18:37:50 -05:00
Michael Nebel
ac2d55880c
Go: Rename Negative Summary Model to Neutral Model.
2022-12-09 15:04:43 +01:00
Michael Nebel
079d48c42a
Sync files.
2022-12-09 15:04:42 +01:00
Jami Cogswell
0b2f2a3f88
Java: remove predicates from NegativeSummarizedCallable
2022-12-08 23:46:55 -05:00
Chris Smowton
49bc524fd0
Merge remote-tracking branch 'origin/rc/3.8' into smowton/admin/merge-rc38-into-main
2022-12-08 11:12:30 +00:00
Jami Cogswell
aa7e6d7811
Java: add negative numbers
2022-12-07 17:17:35 -05:00
Alvaro Muñoz
49eedde58a
Merge branch 'main' into new_sudo_like_argument
2022-12-07 09:31:17 +01:00
Jami Cogswell
b82f9b1911
Java: add draft of generated vs manual MaD metrics query
2022-12-06 22:15:19 -05:00
Owen Mansel-Chan
4789431d6e
Add change note
2022-12-06 16:25:50 +00:00
Owen Mansel-Chan
d588ee375b
Fix mayHaveSideEffects for ReturnStmt
...
The previous code only worked when the return statement
only has one returned expression.
2022-12-06 15:07:45 +00:00
Chris Smowton
7883bff99e
Merge branch 'main' into goSqlInjection
2022-12-05 11:43:14 +00:00
Tom Hvitved
faca4b5b56
Merge pull request #11461 from hvitved/ruby/unique-hash-splat-param
...
Ruby: At most one hash-splat `ParameterNode` per callable
2022-12-05 11:53:28 +01:00
Porcupiney Hairs
15c58dee5f
Golang : Add SQL sinks for gorqlite and GoFrame frameworks
2022-12-03 03:34:07 +05:30
Owen Mansel-Chan
d3e06ee290
Merge pull request #11431 from owen-mc/go/update-qldoc
...
Make qldoc clearer about behaviour of override
2022-12-02 12:19:16 +00:00
github-actions[bot]
5e35785fd0
Post-release preparation for codeql-cli-2.11.5
2022-12-02 11:37:44 +00:00
Chris Smowton
fae5a9a033
Merge pull request #11268 from grddev/accelerate-go-list-option
...
Enable accelerated go-extractor opt-in using 'go list -deps'
2022-12-02 09:17:23 +00:00
github-actions[bot]
31ab22e3a0
Release preparation for version 2.11.5
2022-12-01 20:05:14 +00:00
Gustav Munkby
b4382855fa
Fallback to package dir for discovering go.mod
...
This reverts to the old behavior of reusing the package directory when looking for go.mod. It seems unlikely that this is the right thing to do since we failed to find the module directory, but this behavior should be consistent with what we had before.
2022-12-01 15:43:51 +01:00
Tom Hvitved
b33f5925bb
Data flow: Sync files
2022-11-30 13:39:25 +01:00
Owen Mansel-Chan
55c4643b20
Dataflow: Sync.
2022-11-30 11:00:07 +00:00
Chris Smowton
b471926030
Autoformat
2022-11-29 17:17:39 +00:00
Owen Mansel-Chan
1731d39119
Remove sync-dataflow-libraries from go makefile
2022-11-29 16:15:01 +00:00
Owen Mansel-Chan
818f02826c
Update shared library files for go to f3dca95
2022-11-29 16:15:01 +00:00
