calum
|
e908b090fd
|
C#: Always use PathNode in a path-problem query.
|
2018-11-16 10:32:24 +00:00 |
|
calum
|
eddc52852d
|
C#: Convert security queries to path-problem and update qltest expected output.
|
2018-11-16 10:31:20 +00:00 |
|
semmle-qlci
|
536f3f36b8
|
Merge pull request #428 from hvitved/csharp/more-guards
Approved by calumgrant
|
2018-11-15 15:07:56 +00:00 |
|
Tom Hvitved
|
185700a236
|
Merge pull request #437 from calumgrant/cs/in-parameters
C#: Correctly handle `in` arguments
|
2018-11-15 11:47:43 +01:00 |
|
Felicity Chapman
|
39ef869e21
|
Fix partial edit - thanks Tom
|
2018-11-14 16:49:30 +00:00 |
|
Felicity Chapman
|
f9612a8f21
|
Minor updates for consistency
|
2018-11-14 16:25:28 +00:00 |
|
Max Schaefer
|
96989a1fd6
|
Merge pull request #427 from adityasharad/eclipse/remove-plugin-metadata
Eclipse plugins: Remove plugin metadata.
|
2018-11-13 13:12:49 +00:00 |
|
calum
|
a5d50fc1db
|
C#: Handle in arguments, and add AssignableAccess::isInArgument() predicate.
|
2018-11-13 10:58:43 +00:00 |
|
Aditya Sharad
|
bc06831d01
|
Merge rc/1.18 into master.
|
2018-11-13 10:55:08 +00:00 |
|
Aditya Sharad
|
271628c280
|
Version: Bump to 1.18.3 dev.
|
2018-11-12 14:55:26 +00:00 |
|
Jonas Jensen
|
1500237009
|
Merge remote-tracking branch 'upstream/master' into mergeback-20181112
|
2018-11-12 13:24:27 +01:00 |
|
Tom Hvitved
|
dd6fd400aa
|
Merge pull request #335 from calumgrant/cs/cwe-937
C#: New query VulnerablePackage
|
2018-11-12 10:34:53 +01:00 |
|
Tom Hvitved
|
21887d7c6f
|
C#: Refactor SSA liveness logic
Simplify liveness analysis by avoiding the two extra copies of `liveAtRank()`
(and other auxiliary predicates) for fields/captured variables analysis.
|
2018-11-12 09:41:53 +01:00 |
|
Aditya Sharad
|
761e5efd60
|
Merge master into next.
JavaScript semantic conflicts fixed by referring to the `LegacyLanguage` enum.
C++ conflicts fixed by accepting Qltest output.
|
2018-11-09 18:49:35 +00:00 |
|
Tom Hvitved
|
29f163fd4e
|
C#: Fix guards implications logic
|
2018-11-08 20:21:34 +01:00 |
|
Tom Hvitved
|
e4aa196c37
|
C#: Teach guards library about custom null guards
|
2018-11-08 20:21:34 +01:00 |
|
Tom Hvitved
|
5921a9ea51
|
C#: Teach guards library about assertions
|
2018-11-08 20:21:34 +01:00 |
|
calumgrant
|
6fdb0aab41
|
Merge pull request #426 from hvitved/csharp/accessor-argument
C#: Improve `AccessorCall::getArgument()`
|
2018-11-08 16:03:48 +00:00 |
|
Tom Hvitved
|
06a2bcc244
|
C#: Fix XmlReaderSettingsCreation logic
|
2018-11-08 09:20:21 +01:00 |
|
Aditya Sharad
|
ed49c623f1
|
Version: Bump to 1.18.2 release.
|
2018-11-07 14:36:40 +00:00 |
|
Aditya Sharad
|
194042348a
|
Eclipse plugins: Remove plugin metadata.
This is only needed to build QL for Eclipse, and will be moved into the internal Semmle repository.
|
2018-11-07 11:01:05 +00:00 |
|
Tom Hvitved
|
5d8162cc8b
|
C#: Improve AccessorCall::getArgument()
- Handle tuple assignments.
- Handle compound `+=` assignments.
|
2018-11-07 11:30:04 +01:00 |
|
Tom Hvitved
|
67e64f21d8
|
C#: Fix whitespaces
|
2018-11-07 08:52:38 +01:00 |
|
semmle-qlci
|
33c02fe928
|
Merge pull request #355 from hvitved/csharp/guards-logic
Approved by calumgrant
|
2018-11-06 19:06:30 +00:00 |
|
Aditya Sharad
|
553c2f5d34
|
Merge master into next.
As of 2846d80f1c.
|
2018-11-06 11:52:51 +00:00 |
|
Tom Hvitved
|
2d25a04a2e
|
C#: Add test for guard implications logic
|
2018-11-05 16:47:10 +01:00 |
|
Tom Hvitved
|
f5e6b79add
|
C#: Address review comments
|
2018-11-05 16:14:15 +01:00 |
|
Tom Hvitved
|
2846d80f1c
|
Merge pull request #359 from calumgrant/cs/with-stubs
C#: Sources and sinks for ASP.NET Core
|
2018-11-05 11:46:02 +01:00 |
|
calum
|
ae96b347e2
|
C#: Address review comments.
|
2018-11-02 16:46:49 +00:00 |
|
calum
|
aff47c9f38
|
C#: Tidy up whitespace.
|
2018-11-02 16:45:48 +00:00 |
|
calum
|
62fb693924
|
C#: Tidy up code and fix performance of remote flow sources.
|
2018-11-02 16:45:48 +00:00 |
|
calum
|
8b8d2f9bef
|
C#: Add auto-generated stubs.
|
2018-11-02 16:45:47 +00:00 |
|
Denis Levin
|
ba9cb5e22d
|
cs: Adding sources and sinks for ASPNET.Core
Inintial query checkin.
Note: tests require Nuget packages with ASPNET and ASPNETCore in Packages directory, and won't compile without them.
The packages.config should include this:
<package id="Microsoft.AspNet.Mvc" version="5.2.3" targetFramework="net461" />
<package id="Microsoft.AspNet.WebPages" version="3.2.3" targetFramework="net461" />
<package id="Microsoft.AspNetCore.Antiforgery" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Authorization" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Cors" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Cryptography.Internal" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.DataProtection" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.DataProtection.Abstractions" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Diagnostics" version="1.1.2" targetFramework="net452" />
<package id="Microsoft.AspNetCore.Diagnostics.Abstractions" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Hosting" version="1.1.3" targetFramework="net452" />
<package id="Microsoft.AspNetCore.Hosting.Abstractions" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Hosting.Server.Abstractions" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Html.Abstractions" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Http" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Http.Abstractions" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Http.Extensions" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Http.Features" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.HttpOverrides" version="1.1.2" targetFramework="net452" />
<package id="Microsoft.AspNetCore.JsonPatch" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Localization" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.Abstractions" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.ApiExplorer" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.Core" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.Cors" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.DataAnnotations" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.Formatters.Json" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.Localization" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.Razor" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.Razor.Host" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.TagHelpers" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Mvc.ViewFeatures" version="1.1.3" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Razor" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Razor.Runtime" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.ResponseCaching" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.ResponseCaching.Abstractions" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.ResponseCompression" version="1.0.2" targetFramework="net452" />
<package id="Microsoft.AspNetCore.Rewrite" version="1.0.2" targetFramework="net452" />
<package id="Microsoft.AspNetCore.Routing" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Routing.Abstractions" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.AspNetCore.Server.Kestrel" version="1.1.2" targetFramework="net452" />
<package id="Microsoft.AspNetCore.Server.Kestrel.Https" version="1.1.2" targetFramework="net452" />
<package id="Microsoft.AspNetCore.Server.WebListener" version="1.1.4" targetFramework="net452" />
<package id="Microsoft.AspNetCore.StaticFiles" version="1.1.2" targetFramework="net452" />
<package id="Microsoft.AspNetCore.WebUtilities" version="1.1.2" targetFramework="net451" />
<package id="Microsoft.Extensions.DependencyInjection.Abstractions" version="1.1.1" targetFramework="net451" />
<package id="Microsoft.Extensions.Primitives" version="2.1.0" targetFramework="net451" />
<package id="Microsoft.NETCore.App" version="2.0.0" />
<package id="Microsoft.AspNetCore.Mvc" version="2.1.0" />
<package id="Microsoft.AspNetCore.Mvc.Core" version="2.1.0" />
<package id="Microsoft.AspNetCore.Mvc.Abstractions" version="2.1.0" />
<package id="Microsoft.AspNetCore.Http.Extensions" version="2.1.0" />
<package id="Microsoft.AspNetCore.Http.Abstractions" version="2.1.0" />
<package id="Microsoft.AspNetCore.Http.Features" version="2.1.0" />
|
2018-11-02 16:45:47 +00:00 |
|
Aditya Sharad
|
3483245870
|
Merge rc/1.18 into master.
As of 3291a30bf4.
|
2018-11-02 09:54:50 +00:00 |
|
Aditya Sharad
|
3291a30bf4
|
Version: Bump to 1.18.2 dev.
|
2018-11-01 18:46:56 +00:00 |
|
Aditya Sharad
|
b896899f4c
|
Merge master into next.
master as of dc3c5a684c
Version numbers resolved in favour of `next`.
C++ expected output file updated to accept test output.
|
2018-10-31 10:47:31 +00:00 |
|
Tom Hvitved
|
665173692c
|
C#: Fix whitespaces
|
2018-10-30 13:15:46 +01:00 |
|
Tom Hvitved
|
e76e448953
|
C#: Unify logic in guards library
Unify the logic for Boolean/nullness/matching guards.
|
2018-10-30 13:15:15 +01:00 |
|
Aditya Sharad
|
256b829201
|
Merge rc/1.18 into master.
|
2018-10-30 11:21:50 +00:00 |
|
Aditya Sharad
|
5e7b7818df
|
Version: Bump to 1.18.1 release.
|
2018-10-29 18:02:58 +00:00 |
|
Tom Hvitved
|
cddc519546
|
C#: Improve performance in ForwarderAssertMethod
|
2018-10-29 15:49:42 +01:00 |
|
Tom Hvitved
|
3f6fb0f573
|
Merge pull request #364 from calumgrant/cs/extractor/fix-violations
C#: Remove results from cs/local-shadows-member
|
2018-10-29 11:25:23 +01:00 |
|
calumgrant
|
ec2bf914c8
|
Merge pull request #339 from hvitved/csharp/cfg/assertions
C#: Detect constantly failing assertions in the CFG
|
2018-10-26 10:32:23 +01:00 |
|
Aditya Sharad
|
56ee5ff99a
|
Merge master into next.
`master` up to and including cfe0b8803a.
|
2018-10-25 15:32:47 +01:00 |
|
calum
|
fde3341455
|
C#: Addressed documentation review.
|
2018-10-25 14:18:30 +01:00 |
|
Tom Hvitved
|
a3d74b00e0
|
C#: Address review comments
|
2018-10-25 14:15:09 +02:00 |
|
calum
|
3041756207
|
C#: Allow constructor parameters to shadow class members.
|
2018-10-24 17:48:51 +01:00 |
|
calum
|
8c29d0eb0a
|
C#: Address review comments.
|
2018-10-19 18:13:03 +01:00 |
|
calum
|
aab30ade93
|
C#: Restrict nested locks to static variables, and report the variable itself as well as the lock sequences in order to handle large numbers of results.
|
2018-10-19 18:13:03 +01:00 |
|
calum
|
5864e57398
|
C#: Improvements to LockOrder.ql. Detect inter-procedural locks, and tidy up the tests.
|
2018-10-19 18:11:49 +01:00 |
|