Michael Nebel
7535a15fda
C#: Add tests and update expected test output.
2024-02-28 11:22:12 +01:00
Michael Nebel
95dc2f71d3
C#: Add ExperimentalAttribute class.
2024-02-28 11:20:43 +01:00
Alvaro Muñoz
8e7e5d03a5
fix(test): Add expected files
2024-02-28 11:15:38 +01:00
Mathias Vorreiter Pedersen
7be76405f5
Merge pull request #15741 from MathiasVP/fix-ir-inconsistencies-from-returning-routine-types
...
C++: Fix IR inconsistencies from routine types
2024-02-28 09:13:53 +00:00
Erik Krogh Kristensen
0358e81117
Merge pull request #15746 from github/dependabot/cargo/ql/rayon-1.9.0
...
Bump rayon from 1.8.1 to 1.9.0 in /ql
2024-02-28 10:11:50 +01:00
dependabot[bot]
cc178ab58f
Bump rayon from 1.8.1 to 1.9.0 in /ql
...
Bumps [rayon](https://github.com/rayon-rs/rayon ) from 1.8.1 to 1.9.0.
- [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md )
- [Commits](https://github.com/rayon-rs/rayon/compare/rayon-core-v1.8.1...rayon-core-v1.9.0 )
---
updated-dependencies:
- dependency-name: rayon
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-28 03:24:58 +00:00
Mathew Payne
409d35ba1f
Merge pull request #23 from GitHubSecurityLab/IAC_queries
...
feat(queries): Migrate queries from AdvancedSecurity repo
2024-02-27 20:11:12 +00:00
Edward Minnix III
a743683d4f
Merge pull request #15563 from egregius313/egregius313/csharp/docs/mad-docs
...
C#: Models as Data Documentation
2024-02-27 13:45:09 -05:00
Mathias Vorreiter Pedersen
b8c141f292
C++: Accept test changes.
2024-02-27 17:58:52 +00:00
Mathias Vorreiter Pedersen
ddd5113c02
C++: Ensure that we can construct an 'IRType' from a 'RoutineType'.
2024-02-27 17:58:52 +00:00
Mathias Vorreiter Pedersen
892f97cd7a
C++: Add testcase with invalid IR from constructing a 'RoutineType'.
2024-02-27 17:58:52 +00:00
Mathias Vorreiter Pedersen
0335a4f4ce
Merge pull request #15735 from MathiasVP/ir-for-vacuous-destructor-calls
...
C++: IR construction for `VacuousDestructorCall`s
2024-02-27 17:58:30 +00:00
Geoffrey White
0df10bda0c
C++: Post-merge fixup.
2024-02-27 17:32:59 +00:00
Geoffrey White
1da611cc02
Merge branch 'main' into mad
2024-02-27 17:29:45 +00:00
Geoffrey White
bc42e2bc35
C++: Workaround to get the tests passing again.
2024-02-27 17:28:38 +00:00
Felicity Chapman
f9c2b4d23c
MVP changes for C# library expansion support
2024-02-27 16:47:13 +00:00
Chris Smowton
7c7c10ea11
Merge pull request #15739 from github/smowton-patch-1
...
Add change note for https://github.com/github/codeql/pull/15646
2024-02-27 16:07:29 +00:00
Max Schaefer
f2935caa5c
Merge pull request #15732 from github/max-schaefer/more-sink-types
...
Automodel: Add four more sink types.
2024-02-27 15:52:45 +00:00
Mathias Vorreiter Pedersen
bba152da13
Merge branch 'main' into ir-for-vacuous-destructor-calls
2024-02-27 15:42:46 +00:00
Chris Smowton
9f84653283
Merge pull request #15613 from smowton/smowton/fix/golang-map-range-read-dataflow
...
Golang: fix flow from a map value via a range statement
2024-02-27 15:42:43 +00:00
Chris Smowton
aedd3badf7
Add change note for https://github.com/github/codeql/pull/15646
2024-02-27 15:41:43 +00:00
Chris Smowton
5ea30e95a5
Merge pull request #15646 from smowton/smowton/fix/notice-self-sufficient-mvnw
...
Java: Add tests for Maven wrapper
2024-02-27 15:29:50 +00:00
Mathias Vorreiter Pedersen
f7b2de800b
Merge pull request #15506 from rdmarsh2/rdmarsh2/cpp/ir-synthetic-destructors
...
C++: Add implicit destructors for named variables to the IR
2024-02-27 15:12:46 +00:00
Tom Hvitved
914a605a87
Ruby: Rework hidden synthetic data-flow nodes
2024-02-27 15:33:58 +01:00
Tom Hvitved
994d990f37
Ruby: Add another data flow test
2024-02-27 15:33:58 +01:00
Mathias Vorreiter Pedersen
dc3b78dd7c
C++: Accept more test changes.
2024-02-27 14:30:19 +00:00
Alvaro Muñoz
fe976faf6a
feat(queries): Migrate queries from AdvancedSecurity repo
2024-02-27 15:20:35 +01:00
Chris Smowton
a6480a4ca1
Autoformat again / tabify
2024-02-27 13:55:26 +00:00
Mathias Vorreiter Pedersen
4a501e5b3c
C++: Accept test changes.
2024-02-27 13:53:43 +00:00
Mathias Vorreiter Pedersen
9eaa4e19ad
C++: Add IR construction for vacuous destructor calls.
2024-02-27 13:53:42 +00:00
Chris Smowton
74448c092a
Autoformat / uglify
2024-02-27 13:49:12 +00:00
Chris Smowton
e62a0805db
Add test for map literal
2024-02-27 13:44:52 +00:00
Mathias Vorreiter Pedersen
fbb0ffcadd
C++: Add testcase with invalid IR from vacuous destructor call.
2024-02-27 12:53:46 +00:00
Joe Farebrother
3ab6f222d0
Merge pull request #15718 from joefarebrother/ruby-arel-sqlliteral
...
Ruby: Model Arel::Nodes::SqlLiteral.new
2024-02-27 12:43:47 +00:00
Anders Schack-Mulligen
df5e753ee0
Merge pull request #15570 from aschackmull/java/cache-interpretelement
...
Java: Cache interpretElement.
2024-02-27 13:39:56 +01:00
Geoffrey White
540c20e143
Merge pull request #15700 from geoffw0/extensions
...
Swift: Workaround for TypeDecl.getFullName issue.
2024-02-27 11:14:33 +00:00
Harry Maclean
d0e7fbc871
Ruby: Add changenote
2024-02-27 09:47:51 +00:00
Anders Schack-Mulligen
699dddcfbe
Merge pull request #15725 from aschackmull/dataflow/summary-join-fix
...
Dataflow: Prevent bad join in FlowSummaryImpl::Private::Steps::summaryLocalStep.
2024-02-27 10:32:38 +01:00
erik-krogh
b4b5ae2a2c
add some request-forgery sanitizers, inspired from C#
2024-02-27 10:05:26 +01:00
Tom Hvitved
bbeee8f38d
Merge pull request #15717 from hvitved/csharp/view-cfg
...
Shared `View CFG` implementation
2024-02-27 09:13:18 +01:00
am0o0
b20b733172
better structure for pandas DataFrame, it is now much better readable and also we can find much more DataFrame objects
2024-02-27 09:38:43 +04:00
Chris Smowton
f7cdcd4981
Force Maven wrapper tests to run sequentially
2024-02-26 22:28:55 +00:00
Chris Smowton
03f01a0121
Add tests for Maven wrapper
2024-02-26 22:28:55 +00:00
Robert Marsh
a513598a4d
C++: Change note for IR named destructors.
2024-02-26 19:41:56 +00:00
Geoffrey White
408a550467
Merge pull request #15727 from geoffw0/qldoc4
...
C++: Mark internal files in the old dataflow library as deprecated
2024-02-26 17:45:05 +00:00
Mathias Vorreiter Pedersen
690fdc076d
Shared: Add change note.
2024-02-26 17:13:32 +00:00
Mathias Vorreiter Pedersen
1d4c889ab8
Java: Use the shared type-flow library.
2024-02-26 17:13:32 +00:00
Mathias Vorreiter Pedersen
9ec17e6338
Shared: Pull out the shared parts of Java's type flow library into a shared module.
2024-02-26 17:13:27 +00:00
Geoffrey White
2e66392353
C++: Update deprecated note to respect identical files.
2024-02-26 16:38:27 +00:00
Rasmus Lerchedahl Petersen
3eb9491cb4
python: rewrite HardcodedCredentials away from PointsTo
...
- `ModuleValue.attr` and `ClassValue.lookup` are approximated by `Function.getName`
- `ClassValue.getName` is apprximated by `Class.getName`
- `Module::named` is approximated by `Module.getName`
- `Value::named` is approximated by `Builtins::likelyBuiltin`
- `FunctionValue.getNamedArgumentForCall` is approximated by `ArgumentNode.argumentOf`
2024-02-26 17:18:40 +01:00
