Anders Schack-Mulligen
5c4b4d644a
C#: Accept test changes.
2024-09-30 16:27:50 +02:00
Rasmus Lerchedahl Petersen
dacc0ab8fe
Python: docs and a simplification
2024-09-30 16:06:30 +02:00
Tom Hvitved
52894f5b6a
Merge pull request #17627 from hvitved/rust/accept-cfg-inconsistencies
2024-09-30 16:00:58 +02:00
Anders Schack-Mulligen
222ae6ad2d
Java: Add a neutral for Comparable.compareTo
2024-09-30 15:51:48 +02:00
Anders Schack-Mulligen
fcb677e84d
Java: Add a neutral for Collection.remove.
2024-09-30 15:46:43 +02:00
Anders Schack-Mulligen
38818f3cd2
Java: Adjust Set.clear model to apply to overrides.
2024-09-30 15:46:42 +02:00
Tom Hvitved
2018b6361d
Rust: Accept CFG inconsistencies
2024-09-30 15:45:15 +02:00
Rasmus Lerchedahl Petersen
438e664116
Python: add missing qldoc
...
More doc is needed, but this should turn the tests green
2024-09-30 15:43:19 +02:00
Arthur Baars
d3c50727ed
Rust: exclude Comment nodes from lines of code counts
2024-09-30 15:39:00 +02:00
Arthur Baars
45d3d381f5
Rust: test cases for comments
2024-09-30 15:38:59 +02:00
Arthur Baars
ef3f730d32
Rust: extract comment tokens
2024-09-30 15:38:58 +02:00
Arthur Baars
fd459be165
Rust: add Comment to schema
2024-09-30 15:38:54 +02:00
Tom Hvitved
3a210b77f9
Merge pull request #17626 from hvitved/rust/more-cfg-tests
2024-09-30 15:37:55 +02:00
Alvaro Muñoz
c7fde2a40d
Bump qlpack versions
2024-09-30 15:35:00 +02:00
Tom Hvitved
c3311e52a6
Merge pull request #17623 from hvitved/rust/labelled-block
2024-09-30 15:33:55 +02:00
Alvaro Muñoz
7e89c04e61
Merge pull request #96 from github/fix/repo_control_check
...
fix: Repository checks do not protect workflow_run triggered jobs
2024-09-30 15:28:07 +02:00
Alvaro Muñoz
e0a2eb93d6
fix: Repository checks do not protect workflow_run triggered jobs
2024-09-30 15:27:15 +02:00
Anders Schack-Mulligen
a8f55d93cb
C#: Add overrides to the interpretation of neutral MaD models.
2024-09-30 15:23:27 +02:00
Anders Schack-Mulligen
0459d136d3
Java: Remove neutral model for Object.toString.
2024-09-30 15:17:21 +02:00
Tom Hvitved
2e7e26b638
Rust: Add more CFG tests
2024-09-30 15:15:14 +02:00
Rasmus Wriedt Larsen
c10d5a113e
Rename help-file to match .ql file
...
Reported by running
```
codeql generate query-help --format sarifv2.1.0 --output help.sairf ql/src/codeql-suites/actions-code-scanning.qls
```
2024-09-30 15:13:32 +02:00
Anders Schack-Mulligen
1f95fa10fb
Java: Fix comment re. neutrals and WithoutElement.
...
The remove methods should not have been in this section, as they're
plain neutrals.
2024-09-30 15:08:56 +02:00
Tom Hvitved
5ae669937c
Rust: Add labelled block example
2024-09-30 14:47:13 +02:00
Rasmus Lerchedahl Petersen
a22ea6c1c8
Python: use known sanitiser
...
- also adjust test expectations in experimental
2024-09-30 14:22:17 +02:00
Tamás Vajk
752502ba76
Merge pull request #17619 from tamasvajk/text-file-archiving-warning
...
C#: reduce extraction message severity for missing text files
2024-09-30 14:07:45 +02:00
Rasmus Lerchedahl Petersen
7392d186bc
Python: use yield step also for taint
...
Using the comprehension store step meant that all comprehensions would receive taint.
This because comprehension flow now goes via a callable, meaning they share the return node.
2024-09-30 13:49:01 +02:00
Rasmus Lerchedahl Petersen
fb07a56de6
Python: adjust test expectations
2024-09-30 13:26:59 +02:00
Anders Schack-Mulligen
ec0bd4494c
Java: Add overrides to the interpretation of neutral MaD models.
2024-09-30 13:11:49 +02:00
Rasmus Lerchedahl Petersen
ded39749a7
Python: allow comp arg as argumentnode
2024-09-30 13:02:20 +02:00
Tamas Vajk
29948e4c0b
C#: reduce extraction message severity for missing text files
2024-09-30 12:31:07 +02:00
Rasmus Lerchedahl Petersen
f9f46f0f98
Python: update test expectations
...
We now have a new callable, yielding new enclosing callables
2024-09-30 12:00:38 +02:00
Rasmus Lerchedahl Petersen
3ef05a628f
Python: add location to node
2024-09-30 11:56:36 +02:00
Michael Nebel
6f74387600
Merge pull request #17521 from michaelnebel/modelgen/moreimprovements
...
C#/Java: Content based model generation improvements.
2024-09-30 11:22:30 +02:00
Tom Hvitved
4513643a0f
Merge pull request #17617 from hvitved/rust/extraction-consistency
...
Rust: Add extraction error consistency query
2024-09-30 11:06:34 +02:00
Tom Hvitved
3e77dd8b6b
Rust: Fix extraction errors
2024-09-30 10:36:56 +02:00
Rasmus Lerchedahl Petersen
310819d392
Python: fix dataflow inconsistencies
...
- adjust scope of argument, the argument is outside the called function
- add missing post-update nodes for the new arguments
2024-09-30 10:31:36 +02:00
Tom Hvitved
bafef791f7
Rust: Add extraction error consistency query
2024-09-30 10:28:24 +02:00
Anders Schack-Mulligen
a017f92b78
Merge pull request #17579 from aschackmull/java/type-sanitizers
...
Java: Add more type-based sanitizers.
2024-09-30 10:07:06 +02:00
Tom Hvitved
8a1b4501dd
Merge pull request #17602 from hvitved/rust/cfg-prune-bool-literal
...
Rust: Prune CFG for obviously impossible `true/false` edges
2024-09-30 10:05:03 +02:00
Anders Schack-Mulligen
b0ed47c277
Merge pull request #17605 from aschackmull/java/stringbuilder-neutrals
...
Java: Add a couple of neutrals
2024-09-30 10:03:41 +02:00
Michael Nebel
baae8d0bb2
Shared: Address model generator review comments.
2024-09-30 09:12:30 +02:00
Rasmus Lerchedahl Petersen
d4ea62edec
Python: flow through yield
...
- add yield as a dataflow return
- replace comprehension store step
with a store step to the yield
2024-09-30 09:01:29 +02:00
Alvaro Muñoz
4edfdb4101
Bump qlpack versions
2024-09-28 23:59:23 +02:00
Alvaro Muñoz
fce300ee92
Merge pull request #94 from github/fix/sanitizer_scalar_value
...
Fix: ControlChecks protects/dominates only work with Steps. A sink can be in a sub-step node (eg: ScalarValue)
2024-09-28 23:58:47 +02:00
Alvaro Muñoz
f2c5a14883
Fix: ControlChecks protects/dominates only work with Steps. A sink can be in a sub-step node (eg: ScalarValue)
2024-09-28 23:57:32 +02:00
Jeroen Ketema
e73d1c7b76
C++: Add more macro expansion tests
2024-09-28 22:32:36 +02:00
Owen Mansel-Chan
654d97013f
Merge pull request #17607 from owen-mc/go/add-comments-about-interface-methods-from-embedded-interfaces
...
Go: Add comments noting methods from embedded interfaces are already included
2024-09-28 13:49:50 +01:00
Alvaro Muñoz
1b3b47bb1e
Bump qlpack versions
2024-09-27 21:39:51 +02:00
Alvaro Muñoz
05d4b3c9f4
Merge pull request #93 from github/ppe_from_rfs
...
Add remote flow sources as a mutable ref source for untrusted checkouts
2024-09-27 21:39:16 +02:00
Alvaro Muñoz
4fffde2fc5
Add remote flow sources as a mutable ref source for untrusted checkouts
2024-09-27 21:38:38 +02:00
