Ed Minnix
ed36aaa570
Fix some minor issues
2024-08-21 00:03:36 -04:00
Ed Minnix
69679dec1d
Add defer statement
2024-08-21 00:03:32 -04:00
Ed Minnix
65a6fa7bc3
Go Environment variable (parsing) models and tests
2024-08-21 00:03:18 -04:00
Edward Minnix III
6103749188
Merge pull request #16710 from egregius313/egregius313/go/dataflow/file-sources
...
Go: Add `file` sources
2024-08-20 23:45:17 -04:00
Ed Minnix
b14c58445a
Fix formatting
2024-08-20 16:47:19 -04:00
Ed Minnix
06f73e76b8
Add additional test cases
2024-08-20 12:44:23 -04:00
Ed Minnix
0361b5c342
Fix AllocationSizeOverflow expectations
2024-08-19 22:31:29 -04:00
Ed Minnix
bb1cf4f51f
Fix tests
2024-08-19 20:14:23 -04:00
Ed Minnix
442026cc9d
Fix test results
2024-08-19 17:23:32 -04:00
Ed Minnix
a308bdb75d
Modify UnhandledCloseWritableHandle to use post processing
2024-08-19 12:59:34 -04:00
Ed Minnix
5e8185ac4f
Port test to inline expectations test
2024-08-19 12:44:30 -04:00
Ed Minnix
f89174a6f3
CI changes (provenance)
2024-08-19 12:25:52 -04:00
Ed Minnix
eb8c785c6b
Fix formatting
2024-08-19 12:25:43 -04:00
Ed Minnix
3f640a99d3
Tests for file models
2024-08-19 12:25:37 -04:00
Owen Mansel-Chan
ec9d88b364
Convert mongodb nosql-injection sinks to MaD
2024-08-16 11:19:13 +01:00
Owen Mansel-Chan
c7859ecebf
Improve SQL tests
...
Separate the tests for Squirrel and database/sql. Add tests for
database/sql/driver.
2024-08-16 11:19:04 +01:00
Owen Mansel-Chan
501bb3eb56
Convert database/sql sql-injection sinks to MaD
2024-08-16 11:19:03 +01:00
Owen Mansel-Chan
ad213579a1
Convert Beego orm sql-injection sinks to MaD
2024-08-16 11:19:01 +01:00
Owen Mansel-Chan
e1bdc7f5a7
Update Beego orm tests
2024-08-16 11:19:00 +01:00
Owen Mansel-Chan
3eb5b2669b
Convert Bun sql-injection sinks to MaD
2024-08-16 11:18:58 +01:00
Owen Mansel-Chan
ba310417a8
Convert Gorm sql-injection sinks to MaD
2024-08-16 11:18:55 +01:00
Owen Mansel-Chan
7ad63fc3e6
Convert sqlx sql-injection sinks to MaD
2024-08-16 11:18:54 +01:00
Owen Mansel-Chan
db559f75b6
Convert gogf/gf sql-injection sinks to MaD
2024-08-16 11:18:52 +01:00
Owen Mansel-Chan
ce0cb12c29
Upgrade and convert gorqlite sql-injection sinks to MaD
2024-08-16 11:18:51 +01:00
Owen Mansel-Chan
06f86dd22f
Convert squirrel sql-injection sinks to MaD (non-existent methods removed)
...
Various non-existent methods were modeled, and I couldn't find any
evidence that they used to exist. They aren't in the stubs or tests. I
have removed them.
2024-08-16 11:18:49 +01:00
Tom Hvitved
aeabee3e34
Merge pull request #17179 from hvitved/shared/pretty-print-models
...
Go/Java: Share more `PrettyPrintModels.ql` logic
2024-08-13 14:15:40 +02:00
Tom Hvitved
f83df76928
Shared: Apply ShowProvenance in InlineFlowTest.qll
2024-08-13 13:34:43 +02:00
Tom Hvitved
d5a0df3f87
Go/Java: Share more PrettyPrintModels.ql logic
2024-08-13 12:48:22 +02:00
Owen Mansel-Chan
0dfdee775b
Merge pull request #17177 from owen-mc/go/mad/convert-sink-3
...
Go: convert regex-use, url-redirection sinks to use models-as-data
2024-08-12 16:21:48 +01:00
Owen Mansel-Chan
6b6e773ce1
Merge pull request #17196 from owen-mc/go/tidy-up-test-go-mod-2
...
Go: Remove unneeded dependency from test go.mod
2024-08-12 15:48:05 +01:00
Owen Mansel-Chan
600c84505f
Remove unneeded dependency from test go.mod
2024-08-12 10:15:36 +01:00
Owen Mansel-Chan
30dc2289a3
Remove unneeded dependencies from test go.mod
2024-08-12 10:14:09 +01:00
Owen Mansel-Chan
49f3959405
Convert url-redirection sinks to MaD
2024-08-11 00:29:53 +01:00
Owen Mansel-Chan
3a285f500e
Convert regex-use sinks to use MaD
2024-08-11 00:21:31 +01:00
Owen Mansel-Chan
a5a999f7d6
Merge pull request #17162 from owen-mc/go/mad/convert-sink-2
...
Go: Convert log-injection, path-injection and command-injection sinks to use models-as-data
2024-08-11 00:20:42 +01:00
Michael B. Gale
267ee3dce9
Merge pull request #17168 from github/dependabot/go_modules/go/extractor/extractor-dependencies-d889f6e8ba
2024-08-08 17:16:23 +01:00
Owen Mansel-Chan
32958e9625
Pretty print models in stored command test
2024-08-08 17:06:06 +01:00
Owen Mansel-Chan
d066faf212
Update test expectatations
2024-08-08 17:06:01 +01:00
Owen Mansel-Chan
8536e7eb02
Convert path-injection sinks to use MaD
2024-08-08 17:03:53 +01:00
Michael B. Gale
2109bba928
Go: Bump Go version in ExternalValueFlow test
2024-08-08 15:34:47 +01:00
Owen Mansel-Chan
f0d1740ff8
Update text expectations
2024-08-06 13:48:45 +01:00
Dave Bartolomeo
7e82986e7c
Update Go test expectations
2024-08-05 13:20:12 -04:00
Owen Mansel-Chan
4d75832c9a
Update go/ql/test/query-tests/Security/CWE-643/XPathInjection.expected
2024-08-02 07:41:26 +01:00
Owen Mansel-Chan
b95189d132
Merge branch 'main' into go/gokogiri/update-import-paths
2024-08-01 16:30:52 +01:00
Owen Mansel-Chan
9167057dfd
Update test expectations
2024-08-01 15:22:08 +01:00
Owen Mansel-Chan
3ccdce291a
Update test expectations
2024-08-01 15:12:08 +01:00
Owen Mansel-Chan
8325c4c69c
Updated .expected files
2024-08-01 13:12:21 +01:00
Owen Mansel-Chan
cbe54717f6
Revert "Revert post-processing for 6 queries pending bug fix"
...
This reverts commit a8236e1545
2024-08-01 13:10:06 +01:00
Anders Schack-Mulligen
377301a55a
Merge pull request #17108 from aschackmull/dataflow/flowthrough-provenance
...
Dataflow: Propagate provenance correctly for flow-through wrappers.
2024-08-01 09:35:56 +02:00
Anders Schack-Mulligen
9724516c84
C#/Go/Java/Python/Ruby: Accept qltest .expected changes.
2024-07-31 14:45:10 +02:00
