Tony Torralba
00e0e5a61a
Java: Add taint step for InputStream wrappers
2023-07-24 08:48:04 +02:00
Tony Torralba
3d515b18df
Merge pull request #13769 from atorralba/atorralba/java/avoid-inputstream-low-confidence-dispatch
...
Java: Avoid low-confidence dispatch to InputStream methods
2023-07-21 10:42:34 +02:00
Geoffrey White
45a9d5bc7d
Java: QLDoc.
2023-07-20 11:53:52 +01:00
Geoffrey White
369f88beda
Java: Fix for multiple parse mode flags.
2023-07-20 11:49:54 +01:00
Anders Schack-Mulligen
95d17045c9
Dataflow: Sync.
2023-07-19 11:41:15 +02:00
Anders Schack-Mulligen
fd83b6afdb
Dataflow: Add support for not skipping configuration-specific nodes in big-step.
2023-07-19 11:41:15 +02:00
Tony Torralba
2dbbcc2413
Java: Avoid low-confidence dispatch to InputStream methods
...
Also adds a neutral model for `InputStream.read`, which offers a high-confidence alternative for this method.
2023-07-19 11:30:53 +02:00
Ian Lynagh
8a0286ec34
Java: Improve the diagnostics consistency query
...
Diagnostics can be easier to read if you see them in the order in which
they were generated. By selecting the compilation and indexes, they get
sorted by the testsuite driver.
d.getCompilationInfo(c, f, i) would be a bit more natural as
d = c.getDiagnostic(f, i), but currently we don't import Diagnostic into
the default ('import java') namespace, and I don't think it's worth
changing that for this.
2023-07-17 15:37:05 +01:00
Anders Schack-Mulligen
6770d2a49b
Java: Exclude source-to-source flow in 5 queries.
2023-07-17 09:06:49 +02:00
Anders Schack-Mulligen
80a799df01
Merge pull request #13735 from aschackmull/dataflow/forcehighprecision-fix
...
Dataflow: Fix forceHighPrecision for length-2 prefixes.
2023-07-14 11:42:35 +02:00
Anders Schack-Mulligen
91de43f918
C#/Java/Ruby: Remove superfluous module members.
2023-07-13 11:38:35 +02:00
Anders Schack-Mulligen
58cd16565f
Dataflow: Fix forceHighPrecision for length-2 prefixes.
2023-07-13 10:55:39 +02:00
Anders Schack-Mulligen
d46b2a32ae
Dataflow: Improve debug printing.
2023-07-13 10:55:39 +02:00
Ed Minnix
1cd8922ab5
Java: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
2023-07-12 15:06:24 -04:00
Ed Minnix
1835b40f7b
Java: Add default impl to StateConfigSig::isBarrier/2
2023-07-12 15:06:24 -04:00
Ian Lynagh
fe24cc1900
Merge pull request #13718 from igfoo/igfoo/file_classes
...
Kotlin: Improve file class support
2023-07-12 15:42:16 +01:00
Ian Lynagh
75c835c9d2
Add missing "a" to a qldoc comment
...
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2023-07-12 11:24:42 +01:00
Tony Torralba
c54e93f005
Merge pull request #13705 from atorralba/atorralba/java/android-unsafe-fetch-apply
...
Java: Add support for Kotlin's `apply` to java/android/unsafe-android-wevbiew-fetch
2023-07-12 09:45:54 +02:00
Ian Lynagh
cfd29de677
Kotlin: Add Class.isFileClass()
2023-07-11 15:58:41 +01:00
Mathias Vorreiter Pedersen
a4c0063ab1
Merge pull request #13679 from MathiasVP/speedup-big-step
...
DataFlow: Speed up the big step relation
2023-07-11 09:44:17 +01:00
Tony Torralba
ce600367df
Java: Add support for Kotlin's apply to java/android/unsafe-android-webview-fetch
2023-07-10 17:40:16 +02:00
Tony Torralba
b70e21df4f
Merge pull request #13702 from atorralba/atorralba/kotlin/apply
...
Kotlin: Support apply
2023-07-10 17:39:57 +02:00
Tony Torralba
0f18c0227b
Kotlin: Support apply
2023-07-10 16:15:27 +02:00
Mathias Vorreiter Pedersen
83d0dec0fb
DataFlow: Sync identical files.
2023-07-06 14:00:00 +01:00
Michael Nebel
238f390738
Merge pull request #13452 from michaelnebel/refactorstackprinting
...
Re-factor printing of summary component stacks.
2023-07-04 08:29:10 +02:00
Michael Nebel
243c592447
Address review comments.
2023-07-03 17:01:08 +02:00
Michael Nebel
bddd22f522
Sync files and make language specific adjustments.
2023-07-03 14:36:07 +02:00
Michael Nebel
c18f4b1604
Sync files and make language specific rename.
2023-07-03 14:36:06 +02:00
Chuan-kai Lin
ce464a7d69
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
Tony Torralba
a7c2a25cac
Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks
...
Java: Convert all command injection sinks to MaD format
2023-06-27 14:06:45 +02:00
Tony Torralba
55280e523a
Update java/ql/lib/semmle/code/java/security/UnsafeDeserializationQuery.qll
2023-06-26 11:14:31 +02:00
Jorge
7d0b880bf7
Merge branch 'main' into jorgectf/deserialization-lookahead
2023-06-23 18:24:39 +02:00
jorgectf
b6e4ba6f9d
Add SerialKiller model
2023-06-23 18:19:43 +02:00
Jami
5259a6ecfc
Merge pull request #13324 from jcogs33/jcogs33/shared-sink-kind-validation
...
Shared: share MaD kind validation across languages
2023-06-20 11:56:12 -04:00
Owen Mansel-Chan
d7c97f8759
Merge pull request #13455 from owen-mc/dataflow/add-flowCheckNodeSpecific
...
Dataflow: add language-specific hook for breaking up big step relation
2023-06-20 13:24:26 +01:00
Jeroen Ketema
9c774ac97f
Merge pull request #13426 from jketema/inline-3
...
Update inline flow tests to use parameterized module
2023-06-19 17:39:29 +02:00
Tony Torralba
c62689022e
Merge pull request #13256 from atorralba/atorralba/java/stapler-models
...
Java: Model the Stapler framework
2023-06-19 15:27:19 +02:00
Tony Torralba
00fe8adc09
Fix name clash
2023-06-19 15:04:33 +02:00
Tony Torralba
1b39faaded
QLDoc correction
2023-06-15 16:20:39 +02:00
Owen Mansel-Chan
3ff6d033d3
Rename to neverSkipInPathGraph
2023-06-14 15:29:54 +01:00
Owen Mansel-Chan
5f72ce0935
Add stub implementations of flowCheckNodeSpecific
2023-06-14 14:46:35 +01:00
Owen Mansel-Chan
e0f7437d40
Sync dataflow library
2023-06-14 14:29:56 +01:00
Jami
35591113c2
Merge branch 'main' into jcogs33/shared-sink-kind-validation
2023-06-14 08:06:34 -04:00
Michael Nebel
afec9b05e9
Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor
...
C#: Use synthetic global in the EntityFramework code instead of jump steps.
2023-06-14 13:47:56 +02:00
Tony Torralba
5e3d9d8136
Java: Model the Stapler framework
2023-06-14 12:34:52 +02:00
Tony Torralba
182513a981
Merge pull request #13235 from atorralba/atorralba/java/hudson-models
...
Java: Add Hudson models
2023-06-14 12:33:18 +02:00
Anders Schack-Mulligen
2d616d494e
C#/Ruby: Add fields as per review comments.
2023-06-13 11:26:30 +02:00
Tony Torralba
ffe67689ec
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
2023-06-13 09:27:33 +02:00
Tony Torralba
29d4b6fadc
Re-add public classes that shouldn't be removed yet
2023-06-13 09:24:27 +02:00
Jami Cogswell
9abe3e3da4
Shared: use a module as input to 'KindValidation'
2023-06-09 14:35:37 -04:00
