9600 Commits

Author	SHA1	Message	Date
Mark Shannon	49307a72b4	Python: Add 3-only library tests.	2019-02-08 14:39:27 +00:00
Taus	90eccbdf76	Merge pull request #836 from markshannon/python-mutating-descriptor ... Python: Fix up mutating-descriptor query	2019-02-08 15:10:30 +01:00
Mark Shannon	465f42eb2f	Python: Add 'special operation' pseudo-expression type, for use in semantic stubs file. No use of it as yet.	2019-02-08 11:31:34 +00:00
Taus Brock-Nannestad	895b237e3c	Python: Make "Modification of parameter with default" flow-sensitive.	2019-02-04 19:05:04 +01:00
Mark Shannon	24d678b869	Python: Points-to; let values with no boolean constant value flow through pi-nodes.	2019-01-31 15:15:49 +00:00
Mark Shannon	f190f83406	Python: Give most non-self instance attributes the 'unknown' value; improves reachability analysis.	2019-01-31 15:05:13 +00:00
Felicity Chapman	54242f4009	Merge pull request #849 from jf205/locations ... Update links to QL help topics in GH repo files (SD-2999)	2019-01-30 11:06:22 +00:00
james	7cc1442ecb	Update link text	2019-01-30 09:44:07 +00:00
Mark Shannon	50a75d2b4f	Python: Fully module state of module using global variables and '$' pseudo-variable.	2019-01-30 09:34:17 +00:00
james	81137aa7b4	update links to locations in .ql files	2019-01-30 08:02:02 +00:00
james	9d1a050f35	update links to locations in .qll files	2019-01-30 08:01:49 +00:00
Taus	83e2689645	Merge pull request #844 from markshannon/python-hide-magic-variables-in-test ... Python tests: Further hiding of special ESSA variables in tests	2019-01-29 18:51:06 +01:00
Mark Shannon	4c0f123748	Python: switch from '*' to '$' pseudo variable to track module state.	2019-01-29 17:04:08 +00:00
Taus	08fcb984a8	Implement getACall suggestion.	2019-01-29 17:59:45 +01:00
Taus Brock-Nannestad	edd4468d08	Fix tests by stubbing relevant os functions.	2019-01-29 17:27:14 +01:00
Taus	6f7c96db54	Merge branch 'master' into python-unsafe-use-of-mktemp	2019-01-29 16:12:53 +01:00
Taus Brock-Nannestad	9a9d902cfb	Add support for os.tempnam and os.tmpnam.	2019-01-29 16:08:32 +01:00
Mark Shannon	9820249c71	Python tests: Further hiding of special ESSA variables in tests, to ease transition from '*' to '$' variable.	2019-01-29 15:06:47 +00:00
Mark Shannon	7fe3c3d516	Merge branch 'master' into python-mutating-descriptor	2019-01-29 14:46:33 +00:00
Taus	9adb19f3a9	Merge branch 'master' into python-incomplete-url-sanitize	2019-01-29 14:17:37 +01:00
Taus	1d28c63703	Merge pull request #810 from markshannon/python-hide-magic-variables ... Python hide magic variables	2019-01-28 23:21:31 +01:00
Taus	0f5b21e392	Merge pull request #807 from markshannon/python-insecure-file-permission ... Python: Weak file permissions query.	2019-01-28 23:21:10 +01:00
Taus	15643d1bb6	Merge pull request #814 from markshannon/python-fix-tornado-request-path ... Python: Fix tornado and twisted request attribute tracking.	2019-01-28 17:38:34 +01:00
Taus	c503ec4608	Merge pull request #806 from markshannon/python-points-to-remove-some-negation ... Python: Remove some negation from points-to, in preparation for ADT Objects.	2019-01-28 16:25:18 +01:00
Taus	f61e7b66cc	Merge pull request #835 from markshannon/python-compare-is-enum ... Python: Fix 'comparison using is' query to account for enum members.	2019-01-28 16:22:57 +01:00
Mark Shannon	39705cf733	Python: Clarify predicate a bit.	2019-01-28 14:33:39 +00:00
Mark Shannon	6d553ae2be	Python: Check os.open as well as os.chmod for weak file permissions.	2019-01-28 14:26:16 +00:00
Mark Shannon	3992346add	Python: Fix up mutating-descriptor query to only flag mutation when they occur during descriptor protocol.	2019-01-28 12:57:18 +00:00
Mark Shannon	53fbf51ee8	Python: Fix handling of enum members in python/ql/src/Expressions/IsComparisons.qll.	2019-01-28 12:20:31 +00:00
Mark Shannon	5da209f876	Python: add failing test for comparison using 'is' and enum members.	2019-01-28 12:19:54 +00:00
Mark Shannon	1bec219048	Python: Remove AST test (it will be added to the extractor tests).	2019-01-28 11:41:12 +00:00
Mark Shannon	b841ecbb7c	Python: Fix tornado and twisted request attribute tracking; 'path' attribute can be trusted, but 'uri' and 'arguments' cannot.	2019-01-28 11:26:00 +00:00
Mark Shannon	3850f87879	Make qhelp for 'Incomplete URL substring sanitization' consistent across languages.	2019-01-25 16:47:23 +00:00
Taus	fc00e0a64a	Merge pull request #796 from markshannon/python-import-used-in-doctest ... Python: Fix 'unused import' for doctests and typehints.	2019-01-25 16:14:08 +01:00
Mark Shannon	6ddbed7d95	Python: Minor tweaks to qldoc and release note.	2019-01-25 11:34:41 +00:00
Mark Shannon	88d8cb514c	Python: Two new queries for URL and hostname sanitization (CWE-020).	2019-01-24 12:57:14 +00:00
Mark Shannon	4ef3f461a4	Python: Fix typo and use infix casts.	2019-01-23 14:07:50 +00:00
Taus	ffa8b12d48	Merge pull request #782 from markshannon/python-add-more-tests ... Python: Add more tests	2019-01-23 14:04:23 +01:00
Mark Shannon	0ea2d56945	Python tests: Move helper predicate into TestUtils.qll	2019-01-23 11:20:04 +00:00
Taus	d735c363e8	Merge pull request #797 from markshannon/python-hide-check-class ... Python: Hide 'CheckClass' class	2019-01-23 12:04:01 +01:00
Mark Shannon	547b3eb973	Python: Fix 'unused import' to no longer give alerts for imported modules used in typehints.	2019-01-22 17:38:09 +00:00
Mark Shannon	19c43510a3	Python: Make test 2/3 compatible.	2019-01-22 14:01:44 +00:00
Mark Shannon	a3b5769c2c	Python: Weak file permissions query.	2019-01-22 11:33:19 +00:00
Mark Shannon	21299493c9	Python tests: Hide special ESSA variables in tests, to ease transition from '*' to '$' variable.	2019-01-22 11:02:36 +00:00
Mark Shannon	28bea69882	Python: ESSA definitions; make '*' special variable into its own class.	2019-01-22 10:51:36 +00:00
Mark Shannon	61d8319b4e	Fix compilation warning in test.	2019-01-21 14:38:12 +00:00
Mark Shannon	5e8ab92cc6	Add test for attribute points-to extension.	2019-01-21 14:38:12 +00:00
Mark Shannon	01a2add73b	Python: Internal points-to extension enhancement. Use it handle re module constants.	2019-01-21 14:38:07 +00:00
Mark Shannon	5dd0123f0d	Python tests: Remove useless duplicate test.	2019-01-21 14:31:15 +00:00
Mark Shannon	6bbbb85a73	Python: Remove some negation from points-to, in preparation for ADT Objects.	2019-01-21 11:56:39 +00:00