Malayke
|
7072ab9364
|
Update go/ql/src/experimental/CWE-770/DenialOfServiceGood.go
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
|
2024-03-03 18:09:33 +08:00 |
|
Owen Mansel-Chan
|
114c17ad57
|
Add more methods of java.util.Comparator
|
2024-03-02 20:55:30 +00:00 |
|
Chris Smowton
|
040395485e
|
Update ExtractorInformation.expected
|
2024-03-02 10:20:45 +00:00 |
|
Owen Mansel-Chan
|
bf22c6dae0
|
Merge pull request #15766 from owen-mc/java/add-neutral-models
Java: add neutral models
|
2024-03-02 06:00:33 +00:00 |
|
Asger F
|
f5d014baa5
|
JS: Remove allocation site restriction in CG
|
2024-03-01 23:20:35 +01:00 |
|
Ed Minnix
|
59b14f6a69
|
Fix test expectations (merge conflict)
|
2024-03-01 12:52:03 -05:00 |
|
Ed Minnix
|
45e1be875c
|
Fix test expectations
|
2024-03-01 12:52:00 -05:00 |
|
Ed Minnix
|
4dc605354c
|
Second-order SQL injection
|
2024-03-01 12:51:59 -05:00 |
|
Ed Minnix
|
1ba3efb111
|
Change note updates
|
2024-03-01 12:51:58 -05:00 |
|
Ed Minnix
|
e84a509976
|
Modify test cases
|
2024-03-01 12:51:56 -05:00 |
|
Ed Minnix
|
c3671c7625
|
Fix change note
|
2024-03-01 12:51:55 -05:00 |
|
Ed Minnix
|
be3c1ed0be
|
Change note
|
2024-03-01 12:51:53 -05:00 |
|
Ed Minnix
|
c95abd47ce
|
Remove stored variants of queries
|
2024-03-01 12:51:51 -05:00 |
|
Geoffrey White
|
cb1c68260e
|
Shared: QLDoc for ContentApprox and getContentApprox.
|
2024-03-01 17:36:53 +00:00 |
|
Geoffrey White
|
c663809cc7
|
Update shared/rangeanalysis/codeql/rangeanalysis/RangeAnalysis.qll
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2024-03-01 17:06:48 +00:00 |
|
Geoffrey White
|
0e24ed14da
|
Apply suggestions from code review
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2024-03-01 17:04:34 +00:00 |
|
Chris Smowton
|
0bb6a64e81
|
Java: extractor information: tolerate fractional percentages
|
2024-03-01 16:49:29 +00:00 |
|
Owen Mansel-Chan
|
0a8dfbafe4
|
Accept suggestion to put models under the right heading
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2024-03-01 16:05:28 +00:00 |
|
Geoffrey White
|
d1a2048134
|
C++: Add SummaryPostUpdateNode class.
|
2024-03-01 16:03:37 +00:00 |
|
Geoffrey White
|
340a17dd74
|
C++: Attempt to QLDoc OutNode better.
|
2024-03-01 16:03:37 +00:00 |
|
Geoffrey White
|
dbf0b98791
|
C++: Add some test cases involving function pointers.
|
2024-03-01 15:56:44 +00:00 |
|
Geoffrey White
|
f649939d78
|
C++: Allow flow through (previously missing) summary taint steps.
|
2024-03-01 15:56:44 +00:00 |
|
Ian Lynagh
|
fd82a06b93
|
Merge pull request #15777 from igfoo/igfoo/label-kot
CI: Kotlin: Label Kotlin test changes as "Kotlin"
|
2024-03-01 15:38:01 +00:00 |
|
Joe Farebrother
|
5a1c0f60e6
|
Fix qldoc typo
|
2024-03-01 15:12:16 +00:00 |
|
Alvaro Muñoz
|
1c2f19f4e1
|
Merge Actions.qll and Ast.qll
|
2024-03-01 16:06:06 +01:00 |
|
Peter Stöckli
|
4adc373dfe
|
Ruby: more test cases for code injection via method
|
2024-03-01 16:01:07 +01:00 |
|
Joe Farebrother
|
4b1626c83a
|
Add change note
|
2024-03-01 14:59:24 +00:00 |
|
Peter Stöckli
|
3418ec8a81
|
Ruby: Update method code injection sinks change note
Co-authored-by: Harry Maclean <hmac@github.com>
|
2024-03-01 15:54:58 +01:00 |
|
Michael B. Gale
|
bda8a804ec
|
Go: Add go.work file
|
2024-03-01 14:50:00 +00:00 |
|
Joe Farebrother
|
65b30c1dff
|
Add tests and qldoc
|
2024-03-01 14:46:55 +00:00 |
|
Rasmus Wriedt Larsen
|
d99a763ef7
|
Python: add change-note
|
2024-03-01 15:24:33 +01:00 |
|
Joe Farebrother
|
a08b292099
|
Add models for Typhoeus::Request
|
2024-03-01 14:23:24 +00:00 |
|
Owen Mansel-Chan
|
5399d88d15
|
Accept test change: slight change in gen vs man modelgen stats
|
2024-03-01 14:22:00 +00:00 |
|
Rasmus Wriedt Larsen
|
eeda4355f1
|
Python: Fix missing DictionaryElementContent
|
2024-03-01 15:21:13 +01:00 |
|
Peter Stöckli
|
e43c368222
|
Ruby: change note for methode code injection sinks
|
2024-03-01 15:20:32 +01:00 |
|
Rasmus Wriedt Larsen
|
30b7fadbb8
|
Python: Add test
|
2024-03-01 15:19:56 +01:00 |
|
Owen Mansel-Chan
|
6e63df9e32
|
Accept test change: toString method no longer generated
|
2024-03-01 14:16:14 +00:00 |
|
Owen Mansel-Chan
|
0e1c45e84b
|
Accept test change: some more APIs have manual models now
|
2024-03-01 14:08:42 +00:00 |
|
Owen Mansel-Chan
|
df64e0bc5f
|
Add neutral summary models for java.security.MessageDigest#digest
|
2024-03-01 14:08:31 +00:00 |
|
Owen Mansel-Chan
|
f89fedcbaf
|
Add some neutral models for java.util
|
2024-03-01 14:07:45 +00:00 |
|
Peter Stöckli
|
a693c6d9b4
|
Ruby: sinks for code injection via calls to method
|
2024-03-01 14:42:22 +01:00 |
|
Michael Nebel
|
a97510a2fc
|
Merge pull request #15419 from github/egregius313/csharp/dataflow/threat-modeling/refactor-to-threatmodelflowsource
C#: Refactor C# queries to use `ThreatModelFlowSource` instead of `RemoteFlowSource`
|
2024-03-01 14:40:40 +01:00 |
|
Tom Hvitved
|
15d1105d8d
|
Merge pull request #15779 from hvitved/csharp/build-mode-none
C#: Add `build_modes: none` to `codeql-extractor.yml`
|
2024-03-01 14:34:08 +01:00 |
|
Rasmus Wriedt Larsen
|
7c60562132
|
Python: Ignore IterableSequenceNode inconsistencies
|
2024-03-01 14:22:18 +01:00 |
|
Rasmus Wriedt Larsen
|
7e3e5db3db
|
Python: Add example of consistency failure
|
2024-03-01 14:21:16 +01:00 |
|
Rasmus Wriedt Larsen
|
bcd5c08ebd
|
Python: Ignore match-related inconsistencies
|
2024-03-01 14:15:32 +01:00 |
|
Rasmus Wriedt Larsen
|
5d212514c6
|
Python: Add example of consistency failure
|
2024-03-01 14:07:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
9133a13fc7
|
Merge pull request #15628 from microsoft/cpp-non-constant-format-as-path-query
Cpp non constant format as path query
|
2024-03-01 13:05:44 +00:00 |
|
Rasmus Wriedt Larsen
|
1658a1cb80
|
Python: Ignore SynthDictSplatArgumentNode failures
|
2024-03-01 14:00:06 +01:00 |
|
Rasmus Wriedt Larsen
|
bff95c4c1b
|
Python: Add example of consistency failure
|
2024-03-01 13:58:33 +01:00 |
|