Michael Nebel
80497f551e
Shared: Only make unlifted models in case the API itself is relevant.
2024-09-27 09:22:25 +02:00
Michael Nebel
8310faa2e9
C#/Java: Add a query that uses both content based and non-content based model generation.
2024-09-27 09:22:11 +02:00
Tom Hvitved
7c473c38c0
Merge pull request #17585 from hvitved/shared/cfg-scope-no-first-consistency
...
Shared: Add CFG consistency check for scopes with missing entry points
2024-09-26 14:05:08 +02:00
Michael Nebel
2a5dc204fb
Shared: Add dfc as a valid model origin.
2024-09-26 13:00:57 +02:00
Michael Nebel
e70297a7bc
Shared: Content based models is now printed with dfc-generated provenance.
2024-09-26 13:00:39 +02:00
Michael Nebel
53c20ccaeb
Shared: Some model generator re-factoring.
2024-09-26 12:55:01 +02:00
Michael Nebel
b041829569
Shared: steps in synthetic path chains should just mention the same synthetic fields.
2024-09-26 12:49:07 +02:00
Michael Nebel
6cd548f410
Shared: Only exclude API and parameter combinations where we could get more than three summaries.
2024-09-26 12:00:04 +02:00
Rasmus Wriedt Larsen
431a1af628
Merge branch 'main' into threat-models
2024-09-26 11:44:24 +02:00
Michael Nebel
dd993c3900
Merge pull request #17509 from michaelnebel/modelgen/parammodule
...
C#/Java: Re-factor the model generator to be a parameterized module.
2024-09-26 10:57:16 +02:00
Tom Hvitved
ce2d959b7e
Shared: Add CFG consistency check for scopes with missing entry points
2024-09-25 16:43:00 +02:00
Tom Hvitved
90869ec96a
Merge pull request #17558 from hvitved/rust/cfg-consistency-queries
...
Rust: Enable CFG consistency checks
2024-09-25 15:14:44 +02:00
Anders Schack-Mulligen
cc63abf0af
Merge pull request #17578 from aschackmull/cpp/fix-inline-sink2
...
Cpp: Replace sink inlining with a forward scan from source.
2024-09-25 13:54:48 +02:00
Tom Hvitved
d299380a5a
Rust: Enable CFG consistency checks
2024-09-25 10:56:44 +02:00
Tom Hvitved
1fb9835f23
Merge pull request #17557 from hvitved/rust/cfg-improvements
...
Rust: CFG improvements
2024-09-25 10:54:49 +02:00
Anders Schack-Mulligen
3a1b618a74
Cpp: Replace sink inlining with a forward scan from source.
2024-09-25 10:28:23 +02:00
Michael Nebel
e6085759ae
Shared: Put the content of CaptureSummaryFlowQuery into the shared library code.
2024-09-24 15:46:44 +02:00
Michael Nebel
fd45d2dcbb
Shared: Move the model generator implementation to an internal folder.
2024-09-24 15:27:29 +02:00
Michael Nebel
22c2522aac
Shared: Make a ContentSensitive module with predicates and classes related to content flow.
2024-09-24 15:16:16 +02:00
Tom Hvitved
6a11120e50
Address review comments
2024-09-24 14:21:40 +02:00
Tom Hvitved
16925355a8
Data flow: Cache TNodeEx
2024-09-24 14:21:39 +02:00
Tom Hvitved
37490de4a2
Data flow: Remove Boolean column from TNodeImplicitRead
2024-09-24 14:21:37 +02:00
Tom Hvitved
6ae03e67e6
Rust: Add case for ParenExpr in CFG
2024-09-24 11:20:57 +02:00
Chuan-kai Lin
1cd8af54f2
Merge pull request #17190 from github/cklin/diff-informed-java-queries
...
Java: add support for alert location restrictions
2024-09-23 08:39:24 -07:00
Rasmus Wriedt Larsen
4a21a85e73
Merge branch 'main' into threat-models
2024-09-23 11:19:58 +02:00
Anders Schack-Mulligen
3a1e50dcf9
Dataflow: Simplify diff-informed implementation and tweak flag name.
2024-09-20 07:07:10 -07:00
Tom Hvitved
16813240ae
Shared: Do not use @kind graph for CFG test output
2024-09-19 18:13:31 +02:00
Michael Nebel
f142af50b7
Shared: QL doc improvement.
2024-09-19 12:20:59 +02:00
Michael Nebel
3b9f3c2c29
Shared: Add a model generator parameterised module.
2024-09-19 12:20:42 +02:00
Michael Nebel
4a9e3ee3aa
Merge pull request #17363 from michaelnebel/modelgen/fieldbasedimprovements
...
C#/Java: Content based model generation improvements.
2024-09-19 10:49:11 +02:00
Tom Hvitved
2972a4eace
Data flow: Remove spurious space in Sink:x provenance
2024-09-18 13:10:24 +02:00
Anders Schack-Mulligen
2837d2551a
Merge pull request #17490 from aschackmull/java/capture-in-obinit
...
Java: Fix support for variable capture inside object initializers.
2024-09-18 09:29:01 +02:00
Anders Schack-Mulligen
20661a3c56
Java: Fix support for variable capture inside object initializers.
2024-09-17 10:42:21 +02:00
Chris Smowton
30be6803c3
Merge pull request #17480 from github/post-release-prep/codeql-cli-2.19.0
...
Post-release preparation for codeql-cli-2.19.0
2024-09-16 16:06:58 +01:00
github-actions[bot]
79be301984
Post-release preparation for codeql-cli-2.19.0
2024-09-16 14:09:32 +00:00
Paolo Tranquilli
e280e1ebee
Merge pull request #17441 from github/redsun82/rust-cli-flags
...
Rust: make the cli flags override automatic
2024-09-16 14:37:43 +02:00
github-actions[bot]
acdafd9646
Release preparation for version 2.19.0
2024-09-16 10:56:10 +00:00
Paolo Tranquilli
cb53911224
Merge branch 'main' into redsun82/rust-cli-flags
2024-09-16 09:36:06 +02:00
Dave Bartolomeo
485fc04029
Initial merge from main
2024-09-15 08:55:31 -04:00
Paolo Tranquilli
b4b680775c
Rust: integrate into standard files+location library
2024-09-12 13:17:10 +02:00
Paolo Tranquilli
0a8c0f5ab4
Rust: fix bazel build
2024-09-12 08:46:50 +02:00
Chuan-kai Lin
ff78bebf19
Shared support for alert filtering
2024-09-11 13:18:26 -07:00
Paolo Tranquilli
f8c9d96882
Bazel: remove non-working fake tree-sitter-extractor workaround
...
The `.cargo/config.toml` override based workaround wasn't really
working, as while `cargo build|check` was reading that, `cargo metadata`
wasn't, ending up in a completely broken IDE experience.
For the moment, we just use a unified workspace `Cargo.toml` for all
extractors using the shared tree-sitter code, which has the downside of
making bazel pull in dependencies for all of them, and not being able to
do sparse checkouts for them. We should investigate and rivist this in
the future.
2024-09-11 08:17:11 +02:00
Michael Nebel
d2c98c86dc
Java: Improve content based model generation.
2024-09-10 15:23:20 +02:00
Michael Nebel
7c0101ad06
Shared: Add some helper predicates to the AccessPath class in content flow.
2024-09-10 15:23:08 +02:00
github-actions[bot]
97edff3f70
Post-release preparation for codeql-cli-2.18.4
2024-09-09 18:45:46 +00:00
github-actions[bot]
91537cdf9a
Release preparation for version 2.18.4
2024-09-09 16:08:48 +00:00
Paolo Tranquilli
6f36ea9188
Merge branch 'main' into rust-experiment
...
Conflicts:
shared/tree-sitter-extractor/src/trap.rs
2024-09-09 14:15:34 +02:00
Paolo Tranquilli
2c472dd5b8
Tree-sitter: fix formatting
2024-09-09 11:59:17 +02:00
Paolo Tranquilli
4454566d8d
Tree-sitter: allow multiple sources per trap file
...
This generalizes the location cache to allow multiple sources to be
extracted in the same trap file, by adding `file_label` to `Location`,
and therefore to location cache keys. This will be used by the Rust
extractor.
2024-09-09 09:17:45 +02:00
