2783 Commits

Author	SHA1	Message	Date
Michael Nebel	8899bf7f05	C#: Update tests.	2022-06-22 13:03:23 +02:00
Michael Nebel	24ba5cc06e	Merge pull request #9025 from michaelnebel/csharp/generatedrefactor ... C#: Provenance column in Models as Data CSV format.	2022-06-22 10:34:31 +02:00
Mathias Vorreiter Pedersen	35c8ca15f5	Merge pull request #8912 from rdmarsh2/rdmarsh2/fix-ir-globals ... C++: Fix IR variable reuse for global var inits	2022-06-20 16:45:39 +01:00
Michael Nebel	cf3cb292b7	C#: Update the model generator to use provenance column printing.	2022-06-20 16:20:01 +02:00
Michael Nebel	e0a96e16c3	C#: Update entity framework flow summaries test.	2022-06-20 16:20:01 +02:00
Michael Nebel	da0b9db57f	C#: Update flow summary printing in test cases to reflect provenance.	2022-06-20 16:20:01 +02:00
Michael Nebel	32b69d3e0c	C#: Update external models tests.	2022-06-20 16:20:01 +02:00
Michael Nebel	e3a5f7b8a3	C#: Introduce provenance column in CSV format for Models as data summaries, sources and sinks.	2022-06-20 16:20:01 +02:00
Tamás Vajk	f737804035	Merge pull request #9610 from tamasvajk/fix/global-statements ... C#: Fix global statement extraction	2022-06-20 12:54:36 +02:00
Michael Nebel	70203633a1	Merge pull request #9393 from michaelnebel/csharp/asptaintedmember ... C#: ASP.NET Core like members are tainted	2022-06-20 12:11:16 +02:00
Tamas Vajk	51f0a928dc	C#: Fix global statement extraction by extracting statements inside the implicit main method context	2022-06-20 10:09:11 +02:00
Tamas Vajk	c460e5757b	C#: Add extractor error test for global statement extraction	2022-06-20 09:42:18 +02:00
Rasmus Wriedt Larsen	b65a10d1ef	Inline Expectation Tests: sync	2022-06-17 17:38:19 +02:00
Michael Nebel	1f2f2fff7f	C#: Update testcases with examples.	2022-06-16 08:43:06 +02:00
Michael Nebel	ef0a3d0a79	C#: Add testcase for controller parameter types tainted members.	2022-06-16 08:38:31 +02:00
Michael Nebel	93007f89c8	C#: Move ASP Net Core stubs into stubs folder.	2022-06-16 08:38:31 +02:00
Robert Marsh	5f77552c37	Merge branch 'main' into rdmarsh2/fix-ir-globals	2022-06-13 12:43:08 -04:00
Rasmus Wriedt Larsen	50196d099b	Inline Expectation Tests: sync	2022-06-03 11:39:57 +02:00
Michael Nebel	9cab92b16f	C#: Update flow summaries test after rebase. The rebase included a fix to the isAutoGenerated predicate, which means that a summary is only considered autogenerated, if no hand-written version exist. This affects the printing as well.	2022-05-25 08:28:15 +02:00
Michael Nebel	5b405bb4cf	C#: Update FlowSummaries test with generated printing (needed due to rebase).	2022-05-25 08:28:15 +02:00
Michael Nebel	ba7238d6e2	C#: Update XML Injectiont test output after rebase (query has been turned into a path-problem and the output is now affected by the added summaries for NameValueCollection).	2022-05-25 08:28:15 +02:00
Michael Nebel	75532432af	C#: Update flow summaries test (note that the test doesn't correctly print the generated flag at the moment).	2022-05-25 08:28:15 +02:00
Michael Nebel	c8ede58704	C#: Flow summaries has now been added for Exception stack trace, but not for ToString. The latter will be encoded as an extra taintstep in the analysis. To reduce noise for all uses of an exception itself an isSanitizerIn is introduced.	2022-05-25 08:28:15 +02:00
Michael Nebel	4d6d1c8376	C#: Since NameValueCollection now has a flow summary for the string indexer it is no longer consider an unsafe external api, which is why it has disappared from the result.	2022-05-25 08:28:14 +02:00
Michael Nebel	ee027f845c	C#: Since NameValueCollection now has a flow summary for the indexer it is considered a SafeExternalApiCallable and will thus not be included in the result of the test.	2022-05-25 08:28:14 +02:00
Michael Nebel	e2d6cd20c7	C#: Update tests due to new summaries for ProcessStartInfo.	2022-05-25 08:28:14 +02:00
Michael Nebel	9b8636aa23	C#: Update test because we now have a flow summary the string indexer for NameValueCollection.	2022-05-25 08:28:14 +02:00
Michael Nebel	d9c7ba471d	C#: Update taint steps test as the generated models now include a model for the getters for KeyValuePair (we only had manual summaries for the constructor).	2022-05-25 08:28:14 +02:00
Michael Nebel	f8e729025f	C#: Add generated Dotnet Runtime summary models that allows to up two reads and two stores and update flow summaries test.	2022-05-25 08:28:14 +02:00
Michael Nebel	daace0fe68	Merge pull request #9270 from michaelnebel/csharp/summarized-callable-fix ... C#: Summarized callable	2022-05-24 16:36:44 +02:00
Tom Hvitved	728ccafe2b	Merge pull request #9024 from hvitved/dataflow/content-flow-lib ... Data flow: Introduce `ContentDataFlow.qll`	2022-05-24 15:09:16 +02:00
Tom Hvitved	6345816acf	Rework ContentDataFlow implementation	2022-05-24 10:34:06 +02:00
Michael Nebel	eed02a2a9f	C#: Fix issue with isAutoGenerated predicate and make sure that data flow only use relevant summaries.	2022-05-24 08:21:38 +02:00
Tom Hvitved	9cc9991c74	C#: Update ContentDataFlow test ... Illustrates missing flow when the sink is inside a method that is also part of a `subpath`.	2022-05-23 13:05:28 +02:00
Michael Nebel	bf958ff5bb	Merge pull request #9255 from michaelnebel/csharp/test-clearscontent ... C#: Remove default clears content.	2022-05-23 10:30:30 +02:00
Michael Nebel	217c414b6e	C#: Now that SummarizedCallableDefaultClears content has been removed, we need to explicitly say that fields are cleared.	2022-05-23 08:58:09 +02:00
Michael Nebel	f141336f64	C#: Fake location of methods as we want to use the defined summaries for testing purposes.	2022-05-22 15:14:58 +02:00
Robert Marsh	6d267be1a1	C++: merge main and accept test changes	2022-05-20 14:37:09 -04:00
Anders Schack-Mulligen	8beef45599	Merge pull request #9195 from aschackmull/java/perf-local-flow ... Java: Performance fixes for local flow relation	2022-05-20 12:38:02 +02:00
Tom Hvitved	3ebd4af24e	C#: Fix another test	2022-05-19 16:23:31 +02:00
Michael Nebel	575b8376f3	C#: Update Flow summaries QL test code based on refactor.	2022-05-19 14:41:24 +02:00
Tom Hvitved	0a52420581	C#: Add ContentDataFlow test	2022-05-19 13:28:56 +02:00
Anders Schack-Mulligen	48ab5b2403	C#/Ruby/Java: Fix references.	2022-05-18 09:27:54 +02:00
Tom Hvitved	23ee033a57	C#: Review fixes	2022-05-18 07:48:21 +02:00
Michael Nebel	6f7af11517	C#: Needs to be updated as SummaryParameterNodes are printed slightly different.	2022-05-18 07:48:21 +02:00
Michael Nebel	b41bb3fe08	C#: System.Web.HttpResponse.Write is now considered safe (known) and will this not show up as untrusted external API.	2022-05-18 07:48:21 +02:00
Michael Nebel	97c6d7884d	C#: Source and Sink models are now also considered summarized callables and thus considered safe as they are known external APIs.	2022-05-18 07:48:21 +02:00
Michael Nebel	0e3fc464a3	C#: Use SummarizedCallable external instead of the internal.	2022-05-18 07:48:20 +02:00
Michael Nebel	b578fcb069	C#: Use the external SummarizedCallable implementation.	2022-05-18 07:48:20 +02:00
Michael Nebel	68055bc022	C#: Update flow summaries test code.	2022-05-18 07:48:20 +02:00