3040 Commits

Author	SHA1	Message	Date
Owen Mansel-Chan	4cca6cff59	Convert Beego orm sql-injection sinks to MaD	2024-11-19 11:13:32 +00:00
Owen Mansel-Chan	2282a8184b	Convert Bun sql-injection sinks to MaD	2024-11-19 11:13:30 +00:00
Owen Mansel-Chan	1c305aa8f3	Convert Xorm sql-injection sinks to MaD	2024-11-19 11:13:28 +00:00
Owen Mansel-Chan	1ab50fc62c	Convert Gorm sql-injection sinks to MaD	2024-11-19 11:13:26 +00:00
Owen Mansel-Chan	fb050e8b43	Convert sqlx sql-injection sinks to MaD	2024-11-19 11:13:23 +00:00
Owen Mansel-Chan	d9d3e74e8c	Convert gogf/gf sql-injection sinks to MaD	2024-11-19 11:13:17 +00:00
Owen Mansel-Chan	1315a1e9ae	Upgrade and convert gorqlite sql-injection sinks to MaD	2024-11-19 11:13:13 +00:00
Owen Mansel-Chan	924467bebe	Convert squirrel sql-injection sinks to MaD (non-existent methods removed) ... Various non-existent methods were modeled, and I couldn't find any evidence that they used to exist. They aren't in the stubs or tests. I have removed them.	2024-11-19 11:13:10 +00:00
Owen Mansel-Chan	c5bec1cc7f	Merge pull request #17966 from owen-mc/go/mad/subtypes-true ... Go: set `subtypes` column to true for models where it has a meaning	2024-11-19 00:43:55 +00:00
Owen Mansel-Chan	06b72e5782	Update models in test expectation files	2024-11-16 19:44:32 +00:00
Owen Mansel-Chan	5745969462	Set subtypes=false when it has no meaning	2024-11-16 19:34:23 +00:00
Ian Lynagh	50b9702afd	Go: Remove a redundant override	2024-11-14 21:19:29 +00:00
Kevin Stubbings	a94ba25ebe	Apply suggestions from code review ... Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>	2024-11-13 14:45:45 -08:00
Kevin Stubbings	460ed30d05	Fixed tests	2024-11-12 16:08:14 -08:00
Kevin Stubbings	eb3a76ddce	Merge branch 'github:main' into path-sanitizers	2024-11-12 16:03:00 -08:00
Kevin Stubbings	8744f158bd	New tests	2024-11-12 15:44:47 -08:00
Owen Mansel-Chan	44e865114a	Add change note	2024-11-12 11:37:07 +00:00
Owen Mansel-Chan	d31700cf92	Accept changes in models in .expected files	2024-11-12 11:34:29 +00:00
Owen Mansel-Chan	dfd8e7d397	Set subtypes column to True in models ... This is almost always what we want.	2024-11-12 11:21:52 +00:00
Owen Mansel-Chan	fd4a6d4bb8	Change note	2024-11-11 23:55:57 +00:00
Owen Mansel-Chan	13fb92ad3e	Rename getIntermediateEmbeddedType	2024-11-11 23:53:14 +00:00
Owen Mansel-Chan	d3a6452860	Add missing QLDoc	2024-11-11 23:50:09 +00:00
Owen Mansel-Chan	6af5b55d51	Refactor elementAppliesToQualifier ... This is needed for performance when there are lots of embeddings.	2024-11-11 23:50:08 +00:00
Owen Mansel-Chan	3986dffc91	Keep methods and fields separate in SourceOrSinkElement ... This improves performance.	2024-11-11 23:50:06 +00:00
Owen Mansel-Chan	b6a31b1def	Restrict to Methods	2024-11-11 23:50:04 +00:00
Owen Mansel-Chan	57192e8154	Add even more tests	2024-11-11 23:49:58 +00:00
Owen Mansel-Chan	e813fa346b	Fix case in some test-related file names	2024-11-11 23:48:34 +00:00
Owen Mansel-Chan	8abb0594c3	Combine two arms of newtype TSourceOrSinkElement	2024-11-11 23:48:32 +00:00
Owen Mansel-Chan	b2c2a94866	Accept review comment - doc clarification	2024-11-11 23:48:30 +00:00
Owen Mansel-Chan	39afb18ee4	Fix bad join order	2024-11-11 23:48:29 +00:00
Owen Mansel-Chan	80e8015e67	Inline late and remove manual magic	2024-11-11 23:48:27 +00:00
Owen Mansel-Chan	c2aee37210	getSyntacticQualifier -> getSyntacticQualifierBaseType ... This improves performance.	2024-11-11 23:48:25 +00:00
Owen Mansel-Chan	ede3b9f033	Improve join order by making a separate predicate	2024-11-11 23:48:23 +00:00
Owen Mansel-Chan	e335737f38	Minor fixes to docs	2024-11-11 23:48:21 +00:00
Owen Mansel-Chan	adc946ec2b	Revert simplification to make tests pass	2024-11-11 23:48:19 +00:00
Owen Mansel-Chan	4a1fce9168	Test non-promoted fields and methods	2024-11-11 23:46:10 +00:00
Chris Smowton	f61251cc24	Document elementAppliesToQualifier	2024-11-11 23:43:59 +00:00
Chris Smowton	7ffff43424	Improve comments	2024-11-11 23:43:57 +00:00
Chris Smowton	cd99bea9c1	Explain getSyntacticQual	2024-11-11 23:43:55 +00:00
Chris Smowton	ccc525abd3	Remove probably-unnecessary pragma	2024-11-11 23:43:53 +00:00
Chris Smowton	fd40662ad8	Rename getImplicitFieldReadInstruction	2024-11-11 23:43:51 +00:00
Chris Smowton	e290cecabd	Rename ensureCorrectTypeInfo and getSyntacticRecv	2024-11-11 23:43:49 +00:00
Chris Smowton	17a3429f1e	Correct hasTypeInfo doc comment	2024-11-11 23:43:47 +00:00
Chris Smowton	20e8d48869	Add comment noting that a Method or Field might have multiple SourceOrSinkElements	2024-11-11 23:43:45 +00:00
Chris Smowton	520acc4b1c	Further simplify interpretElement to avoid 'm' only being used on one side of a disjunction	2024-11-11 23:43:44 +00:00
Chris Smowton	d9126d384f	Simplify interpretElement	2024-11-11 23:43:42 +00:00
Chris Smowton	e90e313295	Simplify ensureCorrectTypeInfo	2024-11-11 23:43:40 +00:00
Owen Mansel-Chan	e46ec5a171	Fix MaD inheritance	2024-11-11 23:41:11 +00:00
Owen Mansel-Chan	91375d3a49	Update ExternalFlow.qll docs on subtypes column	2024-11-11 23:31:39 +00:00
Owen Mansel-Chan	a277bcbc3e	Merge pull request #17941 from owen-mc/go/fix/missing-method-qualified-names ... Go: fix missing qualified names for some promoted methods	2024-11-11 22:50:17 +00:00