4639 Commits

Author	SHA1	Message	Date
Arthur Baars	c6eaed343d	Java: add SHA3 family to list of secure crypto algorithms	2024-11-22 19:03:00 +01:00
Alexander Eyers-Taylor	c0474c4e45	Revert "Revert "Post-release preparation for codeql-cli-2.19.4""	2024-11-21 15:37:52 +00:00
Alexander Eyers-Taylor	4effe9e364	Revert "Post-release preparation for codeql-cli-2.19.4"	2024-11-21 14:43:15 +00:00
github-actions[bot]	3909df75dc	Post-release preparation for codeql-cli-2.19.4	2024-11-19 17:54:03 +00:00
github-actions[bot]	9783a11565	Release preparation for version 2.19.4	2024-11-19 16:21:37 +00:00
Rasmus Lerchedahl Petersen	cd5509a0f9	Java: locations for range analysis	2024-11-15 13:11:25 +01:00
Owen Mansel-Chan	ba239a1be0	Add change note	2024-11-14 15:02:21 +00:00
Owen Mansel-Chan	bf0fba6c49	Refactor UnreachableBasicBlock to make it clearer	2024-11-14 14:53:12 +00:00
Owen Mansel-Chan	efb34aea45	Fix bug in UnreachableBlocks	2024-11-14 14:50:25 +00:00
Anders Schack-Mulligen	d7fbf68a59	Merge pull request #17597 from aschackmull/java/chararraywriter-tostring ... Java: Add model for CharArrayWriter.toString().	2024-11-12 12:55:44 +01:00
Michael Nebel	404ca27aec	Java: Move non-experimental models out of the experimental folder.	2024-11-11 10:08:45 +01:00
Anders Schack-Mulligen	5602570e18	Kotlin: Support NotNullExpr in TypeFlow.	2024-11-07 15:25:23 +01:00
Anders Schack-Mulligen	4df4a1e6c6	Merge pull request #17863 from aschackmull/shared/universal-flow ... Shared: Add a Universal Flow library and refactor TypeFlow to use it.	2024-11-06 13:46:13 +01:00
github-actions[bot]	f107d16b4e	Post-release preparation for codeql-cli-2.19.3	2024-11-04 17:20:08 +00:00
github-actions[bot]	cc7b724123	Release preparation for version 2.19.3	2024-11-04 16:37:28 +00:00
Jami Cogswell	459d16824e	Java: weak crypto: do not report weak hash algorithms	2024-11-03 18:22:06 -05:00
Anders Schack-Mulligen	b556590ef8	Merge pull request #17663 from aschackmull/dataflow/speculative-flow ... Dataflow: Add support for speculative taint flow.	2024-10-31 08:12:43 +01:00
Anders Schack-Mulligen	9b493c1e1b	Java: Fix bug related to null inference for pattern initializer.	2024-10-30 15:05:36 +01:00
Ian Lynagh	251a8a34ed	Java: Add up/downgrade scripts	2024-10-29 11:32:22 +00:00
Ian Lynagh	6be2e98796	Java/Kotlin: Remove the erasure relation ... It's no longer used	2024-10-29 11:32:20 +00:00
Ian Lynagh	6c9739023d	Java: Remove redundant getErasure overrides ... The root definition covers these cases already	2024-10-29 11:32:16 +00:00
Anders Schack-Mulligen	fba4d09e65	TypeFlow: Simplify interface.	2024-10-28 15:09:09 +01:00
Anders Schack-Mulligen	3939eff260	TypeFlow: Rename step to uniqStep.	2024-10-28 15:00:05 +01:00
Michael Nebel	3d70f91b9f	Java: Add manual models for various mapToObj methods.	2024-10-23 09:29:15 +02:00
Michael Nebel	197642c914	Merge pull request #17547 from michaelnebel/java/jdk17update ... Java: Update Java JDK 17 models.	2024-10-23 09:07:02 +02:00
Michael Nebel	d59df1f938	Java: Re-generate JDK 17 models.	2024-10-21 15:19:45 +02:00
Michael Nebel	786d04e939	Java: Add the clone method to the model generation exclusions.	2024-10-21 15:19:43 +02:00
Michael Nebel	97f0037a7b	Java: Manually model InetSocketAddress as the model generator doesn't correctly taint the hostname.	2024-10-21 15:19:40 +02:00
Michael Nebel	0a931aa69f	Java: Add change note.	2024-10-21 15:19:38 +02:00
Michael Nebel	9a44eec04c	Java: Add manual models for FileReader (they would also have disappeared if models were re-generated without using mixed mode).	2024-10-21 15:19:37 +02:00
Michael Nebel	b356c3cd48	Java: Manually model ZipFile (due to CWE-522 compression bombs test failure).	2024-10-21 15:19:36 +02:00
Michael Nebel	f7b38a8955	Java: Add some less precise models for BasicAttributes to get the models to work with search sink and re-generate SDK models.	2024-10-21 15:19:34 +02:00
Michael Nebel	3b6f39931b	Java: Re-add generated (mixed) summaries and neutrals for the Java SDK 17.	2024-10-21 15:19:28 +02:00
Michael Nebel	f50734f0ee	Java: Delete all generated Java JDK models.	2024-10-21 15:19:27 +02:00
Chris Smowton	5ba37bd7a3	Rename change note	2024-10-21 09:36:07 +01:00
Chris Smowton	241f951db1	Add change-note for Java buildless packaging its required Maven plugin	2024-10-18 17:43:18 +01:00
Rasmus Lerchedahl Petersen	22d621c625	shared: add locations to typetracking nodes	2024-10-16 15:16:18 +02:00
Anders Schack-Mulligen	c20f12fa6c	Add qldoc.	2024-10-16 14:35:23 +02:00
Anders Schack-Mulligen	8b99154a00	Java: Add support for speculative taint flow.	2024-10-16 14:35:19 +02:00
Anders Schack-Mulligen	c80627a3d3	Dataflow: add plumbing for adding provenance to state-steps.	2024-10-16 14:35:18 +02:00
github-actions[bot]	079ab77a38	Post-release preparation for codeql-cli-2.19.2	2024-10-15 12:16:59 +00:00
github-actions[bot]	255f55cf1a	Release preparation for version 2.19.2	2024-10-15 10:29:25 +00:00
Owen Mansel-Chan	927b402a3a	Merge pull request #17668 from igfoo/igfoo/typo ... Java: Typo in a comment	2024-10-06 13:22:08 +01:00
Ian Lynagh	d24bdbb4e4	Java: Typo in a comment	2024-10-04 17:34:39 +01:00
Tom Hvitved	2832318711	Java: Account for top-level res folders in AndroidLayoutXmlFile	2024-10-04 08:35:28 +02:00
Anders Schack-Mulligen	6081ba5902	Merge pull request #17604 from aschackmull/java/neutral-overrides ... Java/C#: Add overrides to the interpretation of neutral MaD models.	2024-10-01 14:55:54 +02:00
github-actions[bot]	e97878ed63	Post-release preparation for codeql-cli-2.19.1	2024-09-30 19:49:00 +00:00
github-actions[bot]	455c8c5953	Release preparation for version 2.19.1	2024-09-30 17:59:48 +00:00
Anders Schack-Mulligen	222ae6ad2d	Java: Add a neutral for Comparable.compareTo	2024-09-30 15:51:48 +02:00
Anders Schack-Mulligen	fcb677e84d	Java: Add a neutral for Collection.remove.	2024-09-30 15:46:43 +02:00