Michael Nebel
|
4622b69c5d
|
Java: Update flow summary impl and external flow to support provenance and include testing in Csv model validation.
|
2022-06-20 16:20:02 +02:00 |
|
Michael Nebel
|
649757c27f
|
Java/Ruby: Sync files.
|
2022-06-20 16:20:01 +02:00 |
|
Tony Torralba
|
2b2fa6e15b
|
Add taint step for String.valueOf(Editable)
Kotlin inlines expr.toString() as String.valueOf(expr) when expr is nullable
|
2022-06-20 12:07:31 +02:00 |
|
Anders Schack-Mulligen
|
6518a01ded
|
Dataflow: Sync.
|
2022-06-16 11:25:28 +02:00 |
|
Anders Schack-Mulligen
|
33deff9bae
|
Java: Deprecate BarrierGuard class.
|
2022-06-16 11:25:28 +02:00 |
|
Anders Schack-Mulligen
|
c4782871d4
|
Merge pull request #9294 from aschackmull/java/barrierguard-parammod
Java: Add support for BarrierGuards as parameterised modules.
|
2022-06-15 10:56:48 +02:00 |
|
Joe Farebrother
|
c71586e1f8
|
Remove checks for dynamically registered recievers
|
2022-06-14 14:56:24 +01:00 |
|
Joe Farebrother
|
320c671b73
|
Adress reveiw comments - make use of existing ql libraries
|
2022-06-14 14:56:24 +01:00 |
|
Joe Farebrother
|
9d048e78af
|
Apply suggestions from code review - fix typos/style, make things private
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2022-06-14 14:56:23 +01:00 |
|
Joe Farebrother
|
4aed1a1e23
|
Add test cases; fix handling of recievers declared through xml
|
2022-06-14 14:56:22 +01:00 |
|
Joe Farebrother
|
87f26bf033
|
Fix typos
|
2022-06-14 14:56:22 +01:00 |
|
Joe Farebrother
|
1959f49165
|
Add Improper Intent Verification query
|
2022-06-14 14:56:21 +01:00 |
|
Ian Lynagh
|
304e2926c9
|
Java: Fix RefType.getAStrictAncestor() in the presence of type hierarchy cycles
|
2022-06-14 14:08:19 +01:00 |
|
Anders Schack-Mulligen
|
4e6e595b3a
|
Java: Add qldoc.
|
2022-06-02 13:30:27 +02:00 |
|
Anders Schack-Mulligen
|
9f42ca8d14
|
Update java/ql/lib/semmle/code/java/dataflow/internal/DataFlowUtil.qll
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2022-06-02 12:00:37 +02:00 |
|
Anders Schack-Mulligen
|
002c456989
|
Update java/ql/lib/semmle/code/java/dataflow/internal/DataFlowUtil.qll
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2022-06-02 12:00:09 +02:00 |
|
Anders Schack-Mulligen
|
9abd2259d3
|
Merge pull request #9381 from aschackmull/redos/perf
ReDoS: Improve performance in ExponentialBackTracking.qll.
|
2022-06-01 10:39:28 +02:00 |
|
Anders Schack-Mulligen
|
4f3751dfea
|
Merge pull request #9316 from hvitved/dataflow/edges-get-a-successor-consistency
Data flow: Make `PathGraph::edges/2` and `PathNode::getASuccessor/1` consistent
|
2022-06-01 10:38:25 +02:00 |
|
Michael Nebel
|
9cc10e4511
|
Merge pull request #9257 from michaelnebel/java/mad-commons-io-sha
Java: Update commons-io SHA for model regeneration and update models.
|
2022-06-01 09:46:30 +02:00 |
|
Nick Rolfe
|
f417c12c5e
|
Merge pull request #9332 from github/post-release-prep/codeql-cli-2.9.3
Post-release preparation for codeql-cli-2.9.3
|
2022-05-31 16:17:50 +01:00 |
|
Anders Schack-Mulligen
|
9212886767
|
Merge pull request #9286 from aschackmull/java/perf-customnullguard
Java: Improve customNullGuard performance.
|
2022-05-31 11:36:01 +02:00 |
|
Anders Schack-Mulligen
|
e016feeb5c
|
ReDoS: Improve performance in ExponentialBackTracking.qll.
|
2022-05-31 11:04:03 +02:00 |
|
Michael Nebel
|
72dd1a6ec9
|
Java: Generate models without sources.
|
2022-05-30 13:40:14 +02:00 |
|
Michael Nebel
|
6a4a4cbbe4
|
Java: Re-generate commons-io models.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
ad4d8304ed
|
Java: Update hand written summary for writeLines as the generated one will be ignored.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
7e5dd7a065
|
Java: Manually prefix kind column with generated.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
0f33c3188c
|
Java: Re-arrange import pattern for generated models.
|
2022-05-30 08:16:58 +02:00 |
|
Tom Hvitved
|
bcdef98392
|
Data flow: Sync files
|
2022-05-25 14:39:37 +02:00 |
|
Tom Hvitved
|
42f05dadc4
|
Data flow: Sync files
|
2022-05-25 14:21:22 +02:00 |
|
Tony Torralba
|
85fab20086
|
Add Expr::getUnderlyingExpr predicate
|
2022-05-25 10:56:18 +02:00 |
|
Michael Nebel
|
daace0fe68
|
Merge pull request #9270 from michaelnebel/csharp/summarized-callable-fix
C#: Summarized callable
|
2022-05-24 16:36:44 +02:00 |
|
Anders Schack-Mulligen
|
a3177368f0
|
Java: Add support for BarrierGuards as parameterised modules.
|
2022-05-24 16:36:03 +02:00 |
|
Tom Hvitved
|
728ccafe2b
|
Merge pull request #9024 from hvitved/dataflow/content-flow-lib
Data flow: Introduce `ContentDataFlow.qll`
|
2022-05-24 15:09:16 +02:00 |
|
Anders Schack-Mulligen
|
b688aabd19
|
Java: Improve customNullGuard performance.
|
2022-05-24 13:05:41 +02:00 |
|
Ian Lynagh
|
07e450d513
|
Merge pull request #9269 from igfoo/igfoo/cfg
Kotlin: Fix CFG
|
2022-05-24 10:53:00 +01:00 |
|
Michael Nebel
|
94664f11f5
|
C#/Java/Ruby: Sync files.
|
2022-05-24 08:21:39 +02:00 |
|
Ian Lynagh
|
8e64978ffd
|
Kotlin: Autoformat
|
2022-05-23 14:51:41 +01:00 |
|
Ian Lynagh
|
42da7c6c58
|
Kotlin: Fix CFG
|
2022-05-23 11:27:22 +01:00 |
|
Michael Nebel
|
bf958ff5bb
|
Merge pull request #9255 from michaelnebel/csharp/test-clearscontent
C#: Remove default clears content.
|
2022-05-23 10:30:30 +02:00 |
|
Anders Schack-Mulligen
|
f2218944f6
|
Merge pull request #9214 from hvitved/dataflow/lambda-fp-flow
Data flow: Do not discard call context when computing reverse lambda flow through jumps
|
2022-05-23 10:02:51 +02:00 |
|
Michael Nebel
|
ddde1d4607
|
C#: Remove default clears content.
|
2022-05-22 15:16:44 +02:00 |
|
Ian Lynagh
|
9844ae703e
|
Merge pull request #9219 from igfoo/igfoo/livelits
Improve LiveLiterals
|
2022-05-20 11:42:16 +01:00 |
|
Anders Schack-Mulligen
|
8beef45599
|
Merge pull request #9195 from aschackmull/java/perf-local-flow
Java: Performance fixes for local flow relation
|
2022-05-20 12:38:02 +02:00 |
|
Michael Nebel
|
20af134ff0
|
Merge pull request #9210 from michaelnebel/dataflow/summarizedcallablerefactor
DataFlow - SummarizedCallable refactor
|
2022-05-20 09:32:30 +02:00 |
|
Tony Torralba
|
5498f41248
|
Apply code review suggestion to increase precision in getValue
|
2022-05-19 17:35:34 +01:00 |
|
Tony Torralba
|
bc84ff2031
|
Improve docs of LiveLiteral
Also remove transitive closure from calls
|
2022-05-19 17:35:27 +01:00 |
|
Tom Hvitved
|
f83deb6571
|
Data flow: Sync files
|
2022-05-19 15:20:43 +02:00 |
|
Tom Hvitved
|
2b2ac06128
|
Data flow: Sync files
|
2022-05-19 13:28:56 +02:00 |
|
Anders Schack-Mulligen
|
651d9d0a44
|
Java: Ensure cached predicates are in the same stage.
|
2022-05-19 11:39:41 +02:00 |
|
Anders Schack-Mulligen
|
0e830f6052
|
C#/Ruby/Java: Fix pragmas.
|
2022-05-19 11:26:38 +02:00 |
|