Paolo Tranquilli
20eaa34485
Swift: failing tests for linkage awareness
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
2c4c2dfeb3
Swift: remove obsolete configuration fields
2023-01-18 08:55:59 +01:00
Geoffrey White
a568d0af7f
Swift: Remove unused variable.
2023-01-17 18:10:02 +00:00
Geoffrey White
b3d30bfc4f
Swift: Add NumberLiteral sources as well.
2023-01-17 18:04:26 +00:00
Geoffrey White
d1cfdb97ee
Swift: Model RNCryptor.
2023-01-17 17:55:52 +00:00
Geoffrey White
a92e1c7ea0
Swift: Add tests for RNCryptor library.
2023-01-17 17:31:49 +00:00
Geoffrey White
5e5c4e9a8c
Swift: Accept QL-for-QL recommendation.
2023-01-17 16:25:34 +00:00
Geoffrey White
9911dd53e1
Merge branch 'main' into coredata
2023-01-17 16:22:53 +00:00
Geoffrey White
ea06ad1933
Merge pull request #11529 from geoffw0/format
...
Swift: Uncontrolled format string query
2023-01-17 16:16:10 +00:00
Geoffrey White
3c55cdd5be
Swift: Catch the last two test results as well.
2023-01-17 16:04:58 +00:00
Geoffrey White
d42848bb7e
Swift: Upgrade the query from dataflow to taint tracking, so as to support more flows.
2023-01-17 16:04:58 +00:00
Geoffrey White
28a707a956
Swift: Model RNCryptor.
2023-01-17 16:04:58 +00:00
Geoffrey White
a8ef9cc987
Swift: Add tests for RNCryptor library.
2023-01-17 16:04:57 +00:00
Geoffrey White
037b49b454
Update swift/ql/test/query-tests/Security/CWE-259/rncryptor.swift
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-01-17 14:16:52 +00:00
Paolo Tranquilli
6b43ff45a4
Merge pull request #11904 from github/redsun82/swift-extension-protocols
...
Swift: extract `ExtensionDecl` protocols
2023-01-17 15:16:20 +01:00
Paolo Tranquilli
d9bd41b8b1
Merge pull request #11571 from github/redsun82/swift-open-redirection
...
Swift: generalize open redirection on both platforms and rework output rewriting
2023-01-17 15:15:56 +01:00
Paolo Tranquilli
9e5db7c6ec
Merge branch 'main' into redsun82/swift-extension-protocols
2023-01-17 14:39:09 +01:00
Rasmus Wriedt Larsen
a0b1c2ea79
DataFlow: Add uniqueParameterNodePositionExclude
2023-01-17 14:05:22 +01:00
Rasmus Wriedt Larsen
2b0a5fd5d1
DataFlow: Add uniqueParameterNodeAtPositionExclude
2023-01-17 14:05:17 +01:00
Paolo Tranquilli
0a792f2f61
Swift: add upgrade and downgrade scripts for ExtensionDecl new protocols property
2023-01-17 13:07:02 +01:00
Paolo Tranquilli
0d32f00020
Swift: update ExtensionDecl test results
2023-01-17 12:58:02 +01:00
Paolo Tranquilli
d6e0ef9ff9
Swift: extract ExtensionDecl protocols
2023-01-17 12:56:09 +01:00
Paolo Tranquilli
f6e26211f9
Swift: add protocols to ExtensionDecl schema
2023-01-17 12:54:50 +01:00
Geoffrey White
74a37475db
Swift: Model RNCryptor.
2023-01-17 11:54:12 +00:00
Paolo Tranquilli
8906e101cb
Swift: add ExtensionDecl QL test
2023-01-17 12:49:53 +01:00
Mathias Vorreiter Pedersen
77a9cea737
Merge pull request #11901 from github/redsun82/swift-ql-internal
...
Swift: introduce `@ql.internal` pragma for classes
2023-01-17 10:46:56 +00:00
Paolo Tranquilli
6106edd5e2
Swift: add INTERNAL doc marker to ql.internal classes
2023-01-17 10:30:59 +01:00
Paolo Tranquilli
b22da25e05
Swift: remove ql.internal classes from global import
2023-01-17 10:18:03 +01:00
Paolo Tranquilli
48825442c3
Swift: add ql.internal pragma in schema definitions
2023-01-17 10:10:35 +01:00
Paolo Tranquilli
cdc99b5240
Swift: simplify pragma definition
2023-01-17 10:10:02 +01:00
Geoffrey White
449ebb8a12
Swift: Add tests for RNCryptor library.
2023-01-17 09:03:07 +00:00
Paolo Tranquilli
e3502e2e5f
Merge branch 'main' into redsun82/swift-open-redirection
2023-01-17 09:43:00 +01:00
Alex Denisov
63b4e5ef5c
Swift: do not trace lsregister
2023-01-17 09:26:31 +01:00
Tony Torralba
bd5619147d
Merge pull request #11590 from atorralba/atorralba/swift/sensitive-info-logs
...
Swift: Add Cleartext Logging query
2023-01-16 16:22:20 +01:00
Tony Torralba
0017461e2d
Update swift/ql/src/queries/Security/CWE-312/CleartextLogging.ql
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-01-16 15:35:58 +01:00
Paolo Tranquilli
874fe2b8f9
Swift: introduce an in-memory file hash cache
...
File hashing is now done internally in `SwiftFileInterception` (and
exported as a `getHashOfRealFile` function for future use in linkage
awareness), and using a per-process in-memory cache. The persistent
caching of paths is removed, so the solution is now robust against input
file changes during the build.
For the same reason, the hash to artifact mapping have the symlinks
reversed now. The artifacts themselves are stored using the hash as
filenames, and the original paths of the artifacts are reacreated in the
scratch dir with symlinks mostly for debugging purposes (to understand
what artifact each hash corresponds to, and to follow what was built by
the extractor).
2023-01-16 12:05:36 +01:00
Tony Torralba
fdb3b65bce
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-01-16 11:57:37 +01:00
Paolo Tranquilli
738412260f
Merge branch 'main' into redsun82/swift-open-redirection
2023-01-16 09:09:10 +01:00
Mathias Vorreiter Pedersen
2dbacbc302
Merge pull request #11841 from MathiasVP/swift-add-integral-types
...
Swift: Add integral type classes
2023-01-13 17:30:57 +00:00
Geoffrey White
c9a0067705
Swift: Remove flow in cases with multiple variables.
2023-01-13 16:37:23 +00:00
Geoffrey White
2c35af51cd
Swift: Move logic into Ssa::WriteDefinition.assigns.
2023-01-13 15:19:33 +00:00
Geoffrey White
8a77906296
Swift: Use Ssa::Definition rather than ConcreteVarDecl.
2023-01-13 15:01:20 +00:00
Geoffrey White
7f31c9c7e5
Swift: Add a test.
2023-01-12 15:19:57 +00:00
Geoffrey White
3d1b2fdbda
Swift: Rename NumericOrCharType.qll -> Numer> NumericType.qll.
2023-01-12 11:46:51 +00:00
Geoffrey White
418d593a97
Swift: Replace NumericOrCharType with a more basic NumericType, and rename classes for consistency with other static languages.
2023-01-12 11:43:20 +00:00
Geoffrey White
d0eb167d47
Swift: Merge FloatingPointType.qll into NumericOrCharType.qll, because it is a numeric type and other stuff like CharacterType is there.
2023-01-12 11:42:36 +00:00
Geoffrey White
4e5483744f
Swift: Add a test case we're discussing.
2023-01-12 10:52:03 +00:00
Paolo Tranquilli
4f5f0aad45
Merge branch 'main' into redsun82/swift-open-redirection
2023-01-12 10:54:04 +01:00
Michael Nebel
18a815ca8b
Merge pull request #11721 from michaelnebel/csharpjava/refactorprovenance
...
C#/Java: Re-factor provenance related predicates.
2023-01-12 10:50:31 +01:00
Geoffrey White
994ea704da
Swift: Clean up the QL a little.
2023-01-12 09:31:48 +00:00
