Erik Krogh Kristensen
10aab81f42
Merge pull request #10799 from jsoref/spelling-nfautils
...
ReDoS: Spelling nfautils
2022-10-12 23:09:06 +02:00
Jami Cogswell
bcb506b637
add placeholder qldocs
2022-10-12 17:04:51 -04:00
Jami Cogswell
bfbb6db436
clean up code
2022-10-12 16:58:34 -04:00
Jami Cogswell
37d85587e0
refactor code into InsufficientKeySize.qll
2022-10-12 15:39:57 -04:00
Josh Soref
09c8a98761
spelling: representation
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:20:26 -04:00
Josh Soref
bb1ce8973a
spelling: repeatable
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:20:24 -04:00
Josh Soref
adb8860b9b
spelling: pattern
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:20:24 -04:00
Josh Soref
370da943dc
spelling: abcdefghijklmnopqrstuvwxyz
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-12 15:02:00 -04:00
Edward Minnix III
ce740b47ae
Merge pull request #10637 from egregius313/egregius313/android-misconfigured-contentprovider
...
Android ContentProvider Incomplete Permissions
2022-10-12 09:41:03 -04:00
Jami Cogswell
0fc4a33d43
remove commented-out code
2022-10-12 08:54:06 -04:00
Jami Cogswell
01c2a8cbba
add symm to the single config; still seems to work
2022-10-12 08:51:22 -04:00
Tamas Vajk
0d6da9ca7f
Exclude serialization constructors from useless parameters check
2022-10-12 12:58:28 +02:00
Tamas Vajk
955336fb22
Kotlin: exclude generated code from useless parameter check
2022-10-12 12:42:56 +02:00
Chris Smowton
3b49594c20
Kotlin: Add Callable.getKotlinParameterDefaultsProxy
2022-10-12 11:29:55 +01:00
Jami Cogswell
29de0c6748
make one config for asymm with flow states; seems to work...
2022-10-11 22:29:48 -04:00
Jami Cogswell
3e8748e639
add path-graph back to query alerts
2022-10-11 16:56:11 -04:00
Jami Cogswell
26f4abf12b
remove globalflow for key(pair)gen
2022-10-11 16:56:11 -04:00
Jami Cogswell
e64825ff7a
fix code-scanning bot problems
2022-10-11 16:56:11 -04:00
Jami Cogswell
b6a8c27d48
delete experimental files
2022-10-11 16:56:11 -04:00
Jami Cogswell
bd76b1fcc0
clean-up and update configurations to have specs as sink
2022-10-11 16:56:10 -04:00
Jami Cogswell
0c2cff253f
updates from discussing with Tony
2022-10-11 16:56:10 -04:00
Jami Cogswell
3cc7f143b2
clean up code somewhat
2022-10-11 16:56:10 -04:00
Jami Cogswell
f5a2fef7a3
update tests for non-path version
2022-10-11 16:56:10 -04:00
Jami Cogswell
b0af9f936c
added kg taintracking config to all
2022-10-11 16:56:10 -04:00
Jami Cogswell
b7123c17f8
draft of adding kpg tracking into dataflow config
2022-10-11 16:56:10 -04:00
Jami Cogswell
cdac0e2b52
add local algo name tracking, still need to add ability to track algo name when KeyGen obj is param to other method
2022-10-11 16:56:10 -04:00
Jami Cogswell
c414ee0e25
add ECC dataflow config; passes all test cases; still don't have algo name tracking
2022-10-11 16:56:10 -04:00
Jami Cogswell
5e2ef66014
refactoring to use both dataflow configs; commit before deleting unused code
2022-10-11 16:56:10 -04:00
Jami Cogswell
ac707198d5
commit before adding taint flow back (since no taint flow doesn't capture all cases)
2022-10-11 16:56:10 -04:00
Jami Cogswell
8ffd2522e7
add draft code to find algo type to replace tainttracking configs
2022-10-11 16:56:10 -04:00
Jami Cogswell
d3b1a04c13
handle FN case with simple VarAccess; add draft of dataflow config to handle complex VarAccess
2022-10-11 16:56:10 -04:00
Jami Cogswell
7de9c05c9d
use CompileTimeConstantExpr for FN with VarAccess, and remove KeyGeneratorInitConfiguration
2022-10-11 16:56:10 -04:00
Jami Cogswell
75794ec7a7
false negative testing - before rewrite for variable dataflow
2022-10-11 16:56:10 -04:00
Jami Cogswell
9eb45c3787
refactor tests and code, update help file
2022-10-11 16:56:10 -04:00
Jami Cogswell
657e1e62ca
start refactoring query logic into lib file
2022-10-11 16:56:10 -04:00
Tamas Vajk
9eea6d4193
Kotlin: Extract type parameter modifiers (reified, in, out)
2022-10-11 16:40:07 +02:00
Tamás Vajk
8523d21f8c
Merge pull request #10696 from tamasvajk/kotlin-lateinit
...
Kotlin: Extract `lateinit` modifier
2022-10-11 15:03:10 +02:00
Tom Hvitved
d6df69d481
Merge pull request #10754 from hvitved/dataflow/non-hidden-succ-fast-tc
...
Data flow: Improve `fastTC` bound in `PathNodeImpl::getANonHiddenSuccessor`
2022-10-11 11:12:58 +02:00
Tamás Vajk
70b8224a8b
Merge pull request #10723 from tamasvajk/kotlin-generated-files
...
Kotlin: Recognize generated files
2022-10-10 16:24:42 +02:00
Tom Hvitved
ffb2b1c15e
Data flow: Sync files
2022-10-10 15:39:13 +02:00
Tamas Vajk
544e2e4107
Remove path based generated file classification
2022-10-10 14:42:15 +02:00
Tom Hvitved
296ec94a2a
Data flow: Sync files
2022-10-09 19:48:45 +02:00
Jami
bb0f2f7d36
Merge pull request #10368 from jcogs33/android-deeplink-analysis
...
Java: Android deeplink analysis
2022-10-07 14:32:05 -04:00
Tamas Vajk
f51c13f0c1
Kotlin: Recognize generated files
2022-10-07 09:32:00 +02:00
Tony Torralba
ceae5eef28
Revert "Decouple from #10177 "
...
This reverts commit 7b34b10cee
2022-10-06 16:30:23 +02:00
Tony Torralba
21a0c446b4
Update java/ql/lib/semmle/code/java/security/UnsafeContentUriResolution.qll
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2022-10-06 16:28:17 +02:00
Tony Torralba
7b34b10cee
Decouple from #10177
2022-10-06 16:28:17 +02:00
Tony Torralba
4a18892da9
Second query version
...
Remove sinks flowing to write operations requirement
2022-10-06 16:28:17 +02:00
Chris Smowton
34a0a0d080
Implement $default method synthesis
...
This adds methods that fill in default parameters whenever a constructor or method uses default parameter values. I use as similar an approach to the real Kotlin compiler as possible both because this produces the desirable dataflow, and because it should merge cleanly with the same class file seen by the Java extractor, which will see and
extract the signatures of the default methods.
2022-10-06 12:38:55 +01:00
Anders Schack-Mulligen
5b67ba2939
Merge pull request #10177 from atorralba/atorralba/path-sanitizer
...
Java: Promote `PathSanitizer.qll` from experimental
2022-10-06 10:29:33 +02:00
