Owen Mansel-Chan
26b52078c0
Add change note
2024-12-12 13:41:35 +00:00
Michael Nebel
96fe1449f8
Go: Update all test util paths to point to the new location.
2024-12-12 13:54:21 +01:00
Michael Nebel
f8e0c4799d
Go: Move test utilities into the query pack.
2024-12-12 13:21:35 +01:00
Owen Mansel-Chan
3f7c37e1ed
Treat container flow as taint flow in global taint flow
2024-12-12 11:41:32 +00:00
Owen Mansel-Chan
e13c4b7550
Treat container flow as taint flow in localTaintStep
2024-12-12 10:41:23 +00:00
Owen Mansel-Chan
4f8645b4dd
Merge pull request #18235 from owen-mc/go/varargs-out-param
...
Go: Improve data flow out of variadic parameter
2024-12-11 13:18:29 +00:00
Cornelius Riemenschneider
53ca5083a9
Upgrade bazel to 8.0.0.
...
Previously, we were using 8.0.0rc1.
In particular, this upgrade means we need to explicitly
import more rules, as they've been moved out of the core bazel repo.
2024-12-10 12:05:37 +01:00
Owen Mansel-Chan
7e5e634bc7
Update .expected files (no new results)
2024-12-06 15:41:28 +00:00
Owen Mansel-Chan
75331ea268
Add change note
2024-12-06 15:03:34 +00:00
Owen Mansel-Chan
67572712ea
Fix flow out of varargs param with models-as-data
...
This still doesn't allow for a variadic out parameter to be defined as
a source using MaD. This is due to the lack of an implicit store step
at sources, to match implicit read steps at sinks.
2024-12-06 15:00:40 +00:00
Owen Mansel-Chan
8cc4cd58c6
Add failing test for flow out of varargs param with models-as-data
2024-12-06 15:00:37 +00:00
Owen Mansel-Chan
96c8af8943
Test flow out of varargs param with function models
2024-12-06 15:00:34 +00:00
Owen Mansel-Chan
1612a7a9a0
Delete accidentally committed binary
2024-12-06 15:00:33 +00:00
Owen Mansel-Chan
69f087a46d
Fix pre-existing failing test in VarArgsWithFunctionModels
...
It was failing for a silly reason.
2024-12-06 15:00:31 +00:00
Owen Mansel-Chan
ec7cbf93d9
Add failing test for flow out of varargs parameter
2024-12-06 15:00:30 +00:00
Owen Mansel-Chan
1935c26b56
Trivial variable name fixes
2024-12-06 15:00:28 +00:00
dependabot[bot]
d25045c936
Bump golang.org/x/tools
...
Bumps the extractor-dependencies group in /go/extractor with 1 update: [golang.org/x/tools](https://github.com/golang/tools ).
Updates `golang.org/x/tools` from 0.27.0 to 0.28.0
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.27.0...v0.28.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: extractor-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-05 03:26:59 +00:00
Henry Mercer
ccfb32e989
Merge pull request #18211 from github/post-release-prep/codeql-cli-2.20.0
...
Post-release preparation for codeql-cli-2.20.0
2024-12-04 20:45:07 +00:00
Andrew Eisenberg
1ac6c3751b
Update action.yml to use artifacts@v4
...
v3 is getting deprecated.
2024-12-04 11:41:40 -08:00
github-actions[bot]
cf71a1525b
Post-release preparation for codeql-cli-2.20.0
2024-12-04 18:36:17 +00:00
github-actions[bot]
96564b7128
Release preparation for version 2.20.0
2024-12-04 16:01:14 +00:00
Owen Mansel-Chan
f56b2c912a
Merge pull request #18201 from owen-mc/go/mad/improve-externalflowinheritance-tests
...
Go: Fix some spurious results in ExternalFlowInheritance tests
2024-12-04 14:24:30 +00:00
Henry Mercer
963f084d87
Merge branch 'main' into henrymercer/merge-back-rc-3.16
2024-12-04 13:39:10 +00:00
Owen Mansel-Chan
ec0c0f1b35
Fix some spurious results in ExternalFlowInheritance tests
...
Several struct types were being considered as the same. The fix is to
give them unique fields.
2024-12-04 11:57:32 +00:00
Jeroen Ketema
10592bb1c4
Merge pull request #18192 from jketema/inline-rm
...
Remove deprecated `InlineExpectationsTest` class-based API
2024-12-04 11:34:39 +01:00
Anders Schack-Mulligen
03fdceb0fd
Merge pull request #18191 from aschackmull/dataflow/remove-deprecated-lib
...
Dataflow: Delete the old configuration-class based api.
2024-12-04 11:31:46 +01:00
Anders Schack-Mulligen
e846855bca
Go: Remove deprecated configuration classes referencing deleted api.
2024-12-03 20:08:44 +01:00
Anders Schack-Mulligen
cca27e4c77
Add change notes for all languages.
2024-12-03 19:42:33 +01:00
Jeroen Ketema
99cbeb7eb6
Go: Update expected test results
2024-12-03 19:18:50 +01:00
Anders Schack-Mulligen
fbff4b6e21
Go: Delete deprecated data flow api.
2024-12-03 14:42:14 +01:00
Owen Mansel-Chan
61cb03ea3f
Merge pull request #18001 from owen-mc/go/fix/missing-promoted-fields
...
Go: Fix missing promoted fields due to name clash
2024-12-02 20:15:26 +00:00
github-actions[bot]
89b2a6b726
Add changed framework coverage reports
2024-11-27 00:21:55 +00:00
Owen Mansel-Chan
0e94ee81ae
Don't getUnderlyingType before looking through pointer type
...
If `T` is the type of an embedded field, it is invalid for `T` to be a
named type defined to be a pointer type (`type T *S`). It is also
invalid for `T` to be a type parameter. So this `getUnderlyingType()` is
redundant.
2024-11-26 22:25:56 +00:00
Owen Mansel-Chan
2cba97e87d
Small stylistic improvement
2024-11-26 22:25:55 +00:00
Owen Mansel-Chan
1bc1472b0b
Add change note
2024-11-26 22:25:53 +00:00
Owen Mansel-Chan
4990f16ba5
Refactor struct field predicate to remove redundancy
2024-11-26 22:25:48 +00:00
Owen Mansel-Chan
8dc0688b6f
Fix bug
2024-11-26 22:25:47 +00:00
Owen Mansel-Chan
593896b40e
Add test showing promoted field bug
...
NCField should be promoted to EmbedsNameClash. Currently it isn't
because its embedded parent pkg2.NameClash is not a promoted field in
EmbedsNameClash (because of a name clash with pkg1.NameClash), but this
should not make a difference.
2024-11-26 22:25:41 +00:00
Owen Mansel-Chan
141259c003
Update go/ql/lib/ext/slices.model.yml
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-11-26 14:48:20 +00:00
Owen Mansel-Chan
bcc89ecb7c
Add change note
2024-11-26 12:07:32 +00:00
Owen Mansel-Chan
196634ecdb
Model slices package
...
Skipping functions that involve iterators for now.
2024-11-26 12:01:09 +00:00
Owen Mansel-Chan
47eb407be9
Update Go version in stdlib tests
2024-11-26 12:00:10 +00:00
Alexander Eyers-Taylor
c0474c4e45
Revert "Revert "Post-release preparation for codeql-cli-2.19.4""
2024-11-21 15:37:52 +00:00
Alexander Eyers-Taylor
4effe9e364
Revert "Post-release preparation for codeql-cli-2.19.4"
2024-11-21 14:43:15 +00:00
github-actions[bot]
f25c16245c
Add changed framework coverage reports
2024-11-21 00:21:44 +00:00
Owen Mansel-Chan
9aede5f433
Merge pull request #17494 from owen-mc/go/reinstate-mad-with-fixes
...
Go: reinstate models-as-data sink conversions with fixes
2024-11-20 14:50:47 +00:00
Owen Mansel-Chan
69ad69c38a
Move change note out of C# folder
2024-11-20 14:21:28 +00:00
Owen Mansel-Chan
dcf3b31f62
Move and update change note
2024-11-20 13:52:22 +00:00
Owen Mansel-Chan
d9a830e008
Add log function prefix "With" for heuristic logger
2024-11-20 13:50:59 +00:00
github-actions[bot]
d80aa6fa6a
Add changed framework coverage reports
2024-11-20 00:21:24 +00:00