Geoffrey White
727a7e804c
Update swift/ql/src/queries/Security/CWE-020/MissingRegexAnchor.qhelp
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-11-01 16:32:25 +00:00
Geoffrey White
b3fa59d94b
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-11-01 13:15:06 +00:00
Geoffrey White
554007b305
Swift: Add a couple more test cases close to the failures.
2023-10-31 17:19:28 +00:00
Geoffrey White
c82eb4dff3
Swift: Test spacing.
2023-10-31 17:18:08 +00:00
Paolo Tranquilli
051a77fd79
Merge pull request #14537 from github/alexdenisov/remove-outdated-cli-arg
...
Swift: remove outdated CLI argument
2023-10-31 17:06:52 +01:00
Paolo Tranquilli
567aa1102a
Swift: fix toolchain SHAs
2023-10-31 16:20:58 +01:00
Paolo Tranquilli
bc34374075
Swift: switch to downloading the 20.04 toolchain
2023-10-31 16:20:58 +01:00
Paolo Tranquilli
e25a655509
Swift: fix Linux compatibility problem and fetch resource dir from toolchain
...
This fetches the resource directory directly from the released
toolchains, allowing us to stop prebuilding and assembling them.
Moreover insertion of our resource directory is moved to the lua
tracing configuration (solving a `TODO`) and enhanced. Now all options
that start with the original resource directory (either explicit or
implied) are redirected to our resource directory.
This solves a problem where `-I <original resource dir>/some/path` was
passed to the extractor and did not work.
This works around the 5.9 linux compatibility problem by including the
`PackageDescription` swift modules in the in-dist toolchain. Copying the
toolchain and fixing the `-I` flag was not enough as for some reason
compilation of `PackageDescription.swiftinterface` was causing a crash
in the SIL pass. We work around that by pre-compiling those modules
during the build and including `.swiftmodule` files in the resource
directory.
TODO (apart from testing):
* the libraries included in the macOS toolchain are now fat (they were
intel only before), occupying more space. We should see if we need to
trim them down.
* there might be other swiftinterface files causing problems on linux
lurking around...
* if we go with this, we can simplify and trim down the prebuilding we
do leaving out the resource directory.
2023-10-31 16:20:58 +01:00
Mathias Vorreiter Pedersen
e75562e508
Merge pull request #14633 from github/redsun82/capture-list-vars
...
Swift: add `VarDecl` children to `CaptureListExpr`
2023-10-31 12:48:14 +01:00
Mathias Vorreiter Pedersen
5b17066e6c
Merge pull request #14638 from geoffw0/jsevaltest
...
Swift: Clean up the swift/unsafe-js-eval test
2023-10-31 11:43:41 +01:00
Paolo Tranquilli
ea04b500a3
Swift: tweak dataflow test
2023-10-31 11:39:25 +01:00
Chris Smowton
79e1aa0498
Merge pull request #14634 from github/post-release-prep/codeql-cli-2.15.2
...
Post-release preparation for codeql-cli-2.15.2
2023-10-31 10:24:53 +00:00
Paolo Tranquilli
5407b57261
Swift: add change note
2023-10-31 10:57:02 +01:00
Paolo Tranquilli
aac6cf60ee
Swift: add explicative comment
2023-10-31 10:46:12 +01:00
Paolo Tranquilli
ffff10a7e8
Swift: synthesize CaptureListExpr::getVariable in QL instead of extracting it
2023-10-31 10:44:50 +01:00
Paolo Tranquilli
7bae2d9192
Swift: fix tests
2023-10-31 10:44:41 +01:00
Geoffrey White
6b031a4623
Swift: Fix the example links properly.
2023-10-31 08:52:24 +00:00
Geoffrey White
785175e77f
Swift: Fix QL-for-QL warning.
2023-10-31 08:49:48 +00:00
Geoffrey White
bfd852aacd
Swift: Fix the example links.
2023-10-31 08:48:56 +00:00
Geoffrey White
8913638b25
Swift: I'm happy with 'high' precision for this query (as the Go version already is).
2023-10-30 18:45:19 +00:00
Geoffrey White
b259a0ff6a
Swift: get rid of getRemoteData() in the tests, it's obfuscating results.
2023-10-30 17:48:51 +00:00
Geoffrey White
c8706e2ad7
Swift: Add some annotations to the clarify UnsafeJSEval.swift test.
2023-10-30 17:43:37 +00:00
github-actions[bot]
2b939fdf08
Post-release preparation for codeql-cli-2.15.2
2023-10-30 16:06:51 +00:00
Paolo Tranquilli
f81a3ec464
Swift: add VarDecl children to CaptureListExpr
2023-10-30 17:04:53 +01:00
Geoffrey White
c233094846
Swift: Change note.
2023-10-30 14:33:43 +00:00
Geoffrey White
fa3d401226
Swift: Update the qhelp.
2023-10-30 14:33:43 +00:00
Geoffrey White
7cf5210063
Swift: Port the qhelp examples to Swift.
2023-10-30 14:33:43 +00:00
Geoffrey White
9a95b9bcda
Swift: Enable the isLineAnchoredHostnameRegExp case (not working).
2023-10-30 14:33:42 +00:00
Geoffrey White
c09df2e3f1
Swift: Add test cases for the isLineAnchoredHostnameRegExp query case.
2023-10-30 14:33:42 +00:00
Geoffrey White
8f115bfd06
Swift: Implement 'isUsedAsReplace'.
2023-10-30 14:33:42 +00:00
Geoffrey White
435638a5bb
Swift: Port the JS tests to Swift.
2023-10-30 13:08:11 +00:00
Geoffrey White
954b0612d5
Swift: Initial state of the existing test.
2023-10-30 13:08:10 +00:00
Geoffrey White
14db0dfcc7
Swift: Fairly minimal fix to get the query and test working for Swift.
2023-10-30 13:08:10 +00:00
Geoffrey White
c040d4847b
Swift: Copy MissingRegexAnchor query from JS.
2023-10-30 13:08:10 +00:00
github-actions[bot]
4641990021
Release preparation for version 2.15.2
2023-10-30 11:05:53 +00:00
Mathias Vorreiter Pedersen
9e2f0b5ed0
Merge branch 'main' into redsun82/swift-case-variables
2023-10-30 10:14:45 +00:00
Mathias Vorreiter Pedersen
c4521a30aa
Merge pull request #14113 from geoffw0/implicitflow
...
Swift: Flow through OpenExistentialExpr
2023-10-30 10:08:29 +00:00
Mathias Vorreiter Pedersen
4e08ba6820
Merge pull request #14618 from geoffw0/qldoc
...
Swift: QLDoc and test for getCanonicalType
2023-10-30 10:06:26 +00:00
Geoffrey White
1929dead39
Merge branch 'main' into implicitflow
2023-10-27 23:35:54 +01:00
Geoffrey White
8937e0b313
Swift: == -> =
2023-10-27 17:18:09 +01:00
Mathias Vorreiter Pedersen
28eb2caacb
Swift: Accept test changes.
2023-10-27 16:30:01 +01:00
Mathias Vorreiter Pedersen
6538a7645d
Swift: Add up and downgrade scripts.
2023-10-27 15:55:12 +01:00
Mathias Vorreiter Pedersen
6062fbb475
Merge pull request #14383 from geoffw0/nsstringregex
...
Swift: Add regular expression evaluation models for StringProtocol and NSString methods
2023-10-27 15:49:23 +01:00
Geoffrey White
2a552d9721
Swift: Address QL-for-QL warning.
2023-10-27 14:56:19 +01:00
Geoffrey White
12201d2e8e
Swift: Codegen.
2023-10-27 14:37:06 +01:00
Geoffrey White
6ad5c9542b
Swift: Add getCanonicalType to the NominalType test as well.
2023-10-27 14:37:06 +01:00
Geoffrey White
ce471105e2
Swift: QLDoc getCanonicalType.
2023-10-27 14:23:51 +01:00
Mathias Vorreiter Pedersen
4aed638066
Merge pull request #14577 from MathiasVP/capture-flow-swift
...
Swift: Add variable-capture flow
2023-10-27 14:09:04 +01:00
Mathias Vorreiter Pedersen
68999f3cef
Swift: Fix test by including the 'allowParameterReturnInSelf' hook from the variable capture library.
2023-10-27 11:25:19 +01:00
Mathias Vorreiter Pedersen
9b150e4ea9
Swift: Add failing test.
2023-10-27 11:22:56 +01:00