Ed Minnix
e14e47cd73
Fix Stream::Read(Span<byte>) model
2024-03-21 13:06:28 -04:00
Ed Minnix
d6f085373e
System.IO.Stream::ReadExactly models
2024-03-21 13:06:27 -04:00
Ed Minnix
2a73677fd2
Missing Stream::ReadAsync overload
2024-03-21 13:06:26 -04:00
Ed Minnix
a698684fec
System.IO.Stream::ReadAtLeast
2024-03-21 13:06:24 -04:00
Ed Minnix
3e29a8d2a1
System.IO files test
2024-03-21 13:06:23 -04:00
Ed Minnix
d387e6d068
Fix flow-summary tests
2024-03-21 13:06:21 -04:00
Ed Minnix
9232fafde1
Add System.IO.Stream::Read(Span<Byte>) model
2024-03-21 13:06:20 -04:00
Ed Minnix
a8c5e4e0f2
FileInfo source models
2024-03-21 13:06:18 -04:00
Ed Minnix
bb9b0eabf2
Add BufferedStream summary models
2024-03-21 13:06:17 -04:00
Ed Minnix
a5b801b31f
Add File reading methods
2024-03-21 13:06:15 -04:00
Arthur Baars
c219b1a3c7
Merge pull request #16013 from github/rc/3.13
...
Merge rc/3.13 into main
2024-03-21 16:04:58 +01:00
Tamás Vajk
0aa7de295b
Merge pull request #16004 from tamasvajk/feature/adjust-incorrect-compare-to
...
C#: Simplify the output of `cs/wrong-compareto-signature` to remove e…
2024-03-21 14:38:54 +01:00
Henry Mercer
4e3a6e2140
Merge pull request #15874 from github/henrymercer/mark-loc-as-telemetry
...
Show lines of code data in debug mode only
2024-03-21 12:20:09 +00:00
Tamas Vajk
9d655520cc
Code quality improvement
2024-03-21 11:26:45 +01:00
Tamas Vajk
d0c09f43a9
Add change note
2024-03-21 11:13:42 +01:00
Tamas Vajk
9da8cb1165
C#: Simplify the output of cs/wrong-compareto-signature to remove entity locations
2024-03-21 10:27:55 +01:00
Michael Nebel
6619be3137
Merge pull request #15940 from michaelnebel/csharp/sourcesinktests
...
C#: Source- and sink tests.
2024-03-21 08:12:16 +01:00
Henry Mercer
a76832f4e0
Mark LOC queries as debug instead
2024-03-20 21:18:55 +00:00
Michael Nebel
969676975d
C#: Address review comments.
2024-03-20 15:28:56 +01:00
Michael Nebel
d3aa2eed64
C#: Fix test.
2024-03-19 16:30:24 +01:00
Dave Bartolomeo
311ba8ea1b
Merge from main to resolve conflicts
2024-03-19 10:41:31 -04:00
Tom Hvitved
ee3e38f0eb
Simplify test interface in FlowSummaryImpl.qll
2024-03-19 14:35:00 +01:00
Michael Nebel
d24f032d97
C#: Update other tests.
2024-03-19 14:20:43 +01:00
Michael Nebel
b39842501a
C#: Update sink test expected output.
2024-03-19 14:20:42 +01:00
Michael Nebel
e32902ad47
C#: Update source expected test output.
2024-03-19 14:20:42 +01:00
Michael Nebel
5b37ee4ec7
Re-factor TestOutput into a param module.
2024-03-19 14:20:42 +01:00
Michael Nebel
90db9b330f
C#: Add MaD source and sink test query to shared library.
2024-03-19 13:45:38 +01:00
Tom Hvitved
529e901fb1
C#: Switch to shared XML.qll implementation
2024-03-19 13:14:42 +01:00
Erik Krogh Kristensen
a3da6c886b
Merge pull request #15895 from erik-krogh/url-java-qhelp
...
Java: update the url-redirection in the same style as the C# qhelp
2024-03-18 21:10:07 +01:00
Tom Hvitved
fc55567d90
Merge pull request #15853 from hvitved/dataflow/get-location
...
Data flow: Replace `hasLocationInfo` with `getLocation`
2024-03-18 20:21:46 +01:00
Tamas Vajk
322fb6c507
Change integration test to return stable results
2024-03-18 14:53:49 +01:00
Tom Hvitved
e53357d376
Update expected test output
2024-03-18 14:49:32 +01:00
Tamas Vajk
d749335f54
C#: Limit extracted compilation and extraction messages
2024-03-18 14:24:34 +01:00
Tamas Vajk
e8e1dc0390
C#: Add integration test with extraction and compilation messages
2024-03-18 14:23:40 +01:00
github-actions[bot]
aebe9f6992
Post-release preparation for codeql-cli-2.16.5
2024-03-18 12:16:26 +00:00
Arthur Baars
dbf16827bf
Merge pull request #15951 from github/aibaars/changenotes-fixes
...
Fix minor formatting issues in changenotes
2024-03-18 12:56:50 +01:00
github-actions[bot]
0a6243d07b
Release preparation for version 2.16.5
2024-03-18 10:14:07 +00:00
Arthur Baars
a810165e35
Fix minor formatting issues in changenotes
2024-03-18 10:57:05 +01:00
Tom Hvitved
a13391bda1
Merge pull request #15802 from hvitved/dataflow/variable-capture-overlapping-paths
...
Variable capture: Avoid overlapping and false-positive data flow paths
2024-03-18 10:45:55 +01:00
Ed Minnix
71cf948650
Classes extending SourceNode for local and stored source models
...
Queries such as `cs/sql-injection` cast their source to a `SourceNode`
in order to describe them. For example:
```ql
import semmle.code.csharp.security.dataflow.flowsources.FlowSources
string getSourceType(DataFlow::Node source) {
result = source.(SourceNode).getSourceType()
}
```
Models as data source models are not included in `SourceNode` by
default, they must be wrapped with a class extending `SourceNode`.
This adds such classes, which wrap the
`sourceNode(DataFlow::Node,string)` predicate and assigns a
`getSourceType`.
2024-03-14 22:23:54 -04:00
erik-krogh
ef8368cfc4
fix typo
2024-03-13 22:37:13 +01:00
Michael Nebel
560b355e0c
C#: Remove hard-coded local sources from the uncontrolled-format-string query.
2024-03-13 14:26:30 +01:00
Edward Minnix III
c190dd21db
Merge pull request #15877 from egregius313/egregius313/csharp/mad/sources/windows-registry
...
C#: Add source models for values from the Windows registry
2024-03-12 16:41:42 -04:00
Tom Hvitved
dddba3228b
Merge pull request #15867 from hvitved/dataflow/ap-limit
...
Data flow: Add `ConfigSig::accessPathLimit`
2024-03-12 14:57:51 +01:00
Michael Nebel
f59aaf1d75
C#: Add change note.
2024-03-12 11:12:55 +01:00
Michael Nebel
2e5155d1f8
C#: Remove all CIL related tests.
2024-03-12 11:12:55 +01:00
Ed Minnix
7745c2c2b7
Change note
2024-03-11 17:00:12 -04:00
Tom Hvitved
257686eb9a
C#: Implement new data flow interface
2024-03-11 20:56:38 +01:00
Ed Minnix
bc745dfd5e
Windows registry sources
2024-03-11 13:55:34 -04:00
Henry Mercer
c325ff8a23
Mark lines of code queries as telemetry queries
...
The new file coverage metrics are available in all supported GHES
versions. This PR tags lines of code queries as telemetry queries. Lines
of code information will still be available in the SARIF file, but it
will no longer be displayed in the logging output of the CLI.
The one exception is the metric queries for Java/Kotlin that provides
separate lines of code information for Java and Kotlin. I've kept these
since separate file coverage information for languages like Java and
Kotlin is only available for GHES 3.12 and later.
2024-03-11 16:40:31 +00:00
