Dave Bartolomeo
33f10d8d19
Better handling of all threat model without too many binding sets
2023-10-24 13:59:15 -04:00
Cornelius Riemenschneider
790615fbc2
Merge pull request #14552 from github/criemen/bazel-js
...
Javascript extractor: Bazel-based build
2023-10-24 19:36:39 +02:00
Dave Bartolomeo
5fd56ce866
Alternate threat model implementation
2023-10-24 13:12:37 -04:00
Jami Cogswell
121fd0896b
Java: exclude internal packages in general from models
2023-10-24 12:49:49 -04:00
Geoffrey White
42a2ec9891
Merge branch 'main' into substring
2023-10-24 17:03:00 +01:00
Tony Torralba
9f7a8aa18c
Update MaD Declarations after Triage
2023-10-24 17:42:03 +02:00
Geoffrey White
06b1cd939c
Merge pull request #14502 from geoffw0/xmlquery
...
Swift: Model RawRepresentable
2023-10-24 16:25:15 +01:00
Geoffrey White
d2d70cc782
Swift: Change note.
2023-10-24 16:17:21 +01:00
Geoffrey White
79f675cdb7
Swift: Fix a model.
2023-10-24 16:17:21 +01:00
Geoffrey White
a5206028b0
Swift: Expand a test to explore why it fails (lack of pointer models and closure capture flow).
2023-10-24 16:17:21 +01:00
Chris Smowton
30610c9a3f
Temporarily de-deprecate SuperMethodAccess to accommodate private tests
2023-10-24 16:05:52 +01:00
Geoffrey White
3bcee63980
Update README.md
...
Change the Warning to a Note and rephrase.
2023-10-24 15:46:32 +01:00
Mathias Vorreiter Pedersen
862de152a1
Swift: Add required qldoc.
2023-10-24 15:45:17 +01:00
Mathias Vorreiter Pedersen
6f37d7c374
Swift: Accept changes in paths.
2023-10-24 15:39:19 +01:00
Mathias Vorreiter Pedersen
9652679c6f
Merge pull request #14568 from alexet/alexet/add-fn-tests
...
CPP: Add test demonstrating use-after-free false negatives.
2023-10-24 15:38:01 +01:00
Stephan Brandauer
e97456f5fc
Java: automodel extraction docs: note on packaging and backwards compatibility
2023-10-24 16:30:59 +02:00
Mathias Vorreiter Pedersen
56b49a4de3
Swift: Add a closure flow step from the right-hand side of variable declarations to the underlying pattern.
2023-10-24 15:28:28 +01:00
Mathias Vorreiter Pedersen
3d5098aaeb
Swift: Add failing test.
2023-10-24 15:28:25 +01:00
Mathias Vorreiter Pedersen
1c298e6001
Swift: Fix 'parameter' -> 'argument' flow into closures.
2023-10-24 15:28:01 +01:00
Mathias Vorreiter Pedersen
310ebe47b3
Swift: Clean up test file.
2023-10-24 15:27:59 +01:00
Cornelius Riemenschneider
42c343e820
Address review
2023-10-24 16:03:35 +02:00
Chris Smowton
92d3d9d83f
Update integration test expectations
2023-10-24 14:47:19 +01:00
Chris Smowton
4205f1bd03
Temporarily un-deprecate MethodAccess to decouple from private tests
2023-10-24 14:03:26 +01:00
Chris Smowton
b849a66c97
Update test expectations
2023-10-24 14:02:30 +01:00
Nora Dimitrijević
9dbf7e818d
Swift: align definition of InputSig slightly closer to Java version
...
Though there is a regression in the tests, so more work is needed.
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
9de3cc703a
Swift: add CapturePostUpdateNode
...
However, this doesn't change any of the test results.
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
5418d39a0d
Swift: add and accept a few new simple test cases
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
af49a3aa64
Swift: accept new results in old tests
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
8115774a7a
Swift: Add the capture flow step as part of the normal data flow relation
...
TODO: see if we need to exclude duplicate SSA steps
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
4e1b44a059
Swift: port simpleAstFlowStep/hasAliasedAccess
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
21a369de13
Swift: Add closure content read-write steps
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
c04654d8f9
Swift: getImmediateBasicBlockDominator/2 should use immediatelyDominates/0.
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
95a7d6559c
Swift: initial version of a swift port of most of the java code
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
3253c0425c
Swift: s/getName/getShortName/ in InlineFlowTest.qll
2023-10-24 13:56:31 +01:00
Nora Dimitrijević
050b8e682f
Swift: add failing inline expectation test based on closure AST tests.
2023-10-24 13:56:31 +01:00
Jeroen Ketema
ba67217b44
Merge pull request #14571 from MathiasVP/fix-indirect-taint
...
C++: Fix indirect taint
2023-10-24 14:47:43 +02:00
Chris Smowton
06238dd5f6
Improve reflective class names
2023-10-24 13:29:32 +01:00
Chris Smowton
011666b48c
Fix description and improve predicate name of VarWrite.
2023-10-24 12:59:57 +01:00
Geoffrey White
d3063e849e
Swift: Model string closure methods.
2023-10-24 12:58:38 +01:00
Chris Smowton
ede17585a6
Amend NewClassExpr description
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2023-10-24 12:51:42 +01:00
Chris Smowton
e3edea2a5f
Apply simple suggestions from code review
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2023-10-24 12:51:03 +01:00
Stephan Brandauer
eb97ce3294
Java: automodel extraction query docs, candidate examples
2023-10-24 13:49:38 +02:00
Chris Smowton
efb63aada3
Add change note
2023-10-24 11:45:41 +01:00
Chris Smowton
3627eb2bcf
Add missing qldoc
2023-10-24 11:15:08 +01:00
Chris Smowton
e8c9708282
Autoformat
2023-10-24 11:06:19 +01:00
Chris Smowton
09e83d1173
Fix isEnclosingMethodAccess wrapper
2023-10-24 11:03:57 +01:00
Chris Smowton
ac38d4c9c6
Mass rename L/RValue -> VarWrite/Read
2023-10-24 10:58:29 +01:00
Chris Smowton
59a49eef0b
Add aliases for public, importable renamed classes and predicates.
...
Also rename and aliases a couple of uses of Access noted along the way.
2023-10-24 10:54:35 +01:00
Chris Smowton
f552a15aae
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
Geoffrey White
f597f0272a
Update README.md
...
Turned the warning at the top into a warning box.
Made the section headers consistent.
I was going to add a section, but I realized it belongs somewhere else. :)
2023-10-24 10:12:20 +01:00
