Owen Mansel-Chan
e19ebf9ca8
Add external file scope
2023-10-19 16:48:38 +01:00
Owen Mansel-Chan
563805ff0c
Fix nodeGetEnclosingCallable
...
It wasn't updated when MkImplicitVarargsSlice was added as a branch of
TNode. This meant that it gave no result for `ImplicitVarargsSlice`s
in function calls used to initialise variables declared at file level.
2023-10-19 16:48:37 +01:00
Owen Mansel-Chan
67601b5312
Add DataFlowImplConsistency.qll for Go library
2023-10-19 11:43:00 +01:00
Owen Mansel-Chan
53561008a1
Merge pull request #14445 from owen-mc/go/automated-mad-coverage-report
...
Go: automated mad coverage report
2023-10-15 21:49:47 +01:00
BD
0ef83b3c74
Merge branch 'main' into enable-gokit-by-default
2023-10-15 10:22:27 +05:30
Owen Mansel-Chan
e300440a8b
Delete redundant import
2023-10-11 21:28:31 +01:00
Owen Mansel-Chan
b6bf4d04ff
Fix module name
2023-10-11 14:47:46 +01:00
Owen Mansel-Chan
477d8f8b9a
Merge pull request #14064 from amammad/amammad-go-NewFileSystemAccess
...
Go: New File System Access Sinks
2023-10-11 12:58:38 +01:00
amammad
8d6f985aea
fix afero additional step and tests
2023-10-10 23:24:04 +02:00
Owen Mansel-Chan
fd9c1d30f9
Remove argument that is always one value
2023-10-10 10:35:04 +01:00
Owen Mansel-Chan
cf0411e7e2
Change MaxValueState API to get architecture bit size
...
This fixes a performance regression, though it is not clear why.
2023-10-10 10:35:02 +01:00
erik-krogh
4bc4e0845d
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
Owen Mansel-Chan
602bb4083c
Merge pull request #13949 from owen-mc/go/change-flowstate-for-incorrect-integer-conversion
...
Go: Improve incorrect integer conversion
2023-10-05 09:59:36 +01:00
Owen Mansel-Chan
ab07a38c25
Use ternary type for architecture bit size
2023-10-04 15:43:51 +01:00
Owen Mansel-Chan
015519e9e0
Combine isBoundFor and isBoundFor2
2023-10-04 15:31:00 +01:00
Owen Mansel-Chan
cd40663ca4
Address lots of review comments
2023-10-04 15:24:56 +01:00
Owen Mansel-Chan
4122fd881f
Move UpperBoundCheckGuard
2023-10-04 14:17:00 +01:00
Bharadwaj Machiraju
6c8ae55a68
Enable GoKit module into the default list
2023-10-03 15:39:52 +05:30
amammad
95363455af
fix tests, and review suggestions.
2023-09-30 22:50:08 +10:00
Owen Mansel-Chan
832e78c518
Unify approach to architecture bit size in isSink2
2023-09-28 11:24:48 +01:00
Owen Mansel-Chan
cf5d1e36fe
Add QLDoc
2023-09-28 11:02:04 +01:00
Owen Mansel-Chan
e0b61b2d68
Reduce the number of UpperBoundChecks
...
No need to have a separate class for each state
being blocked.
2023-09-28 11:00:43 +01:00
Owen Mansel-Chan
7d34ce4dea
Rewrite with different flow state
2023-09-28 11:00:34 +01:00
Asger F
0d96ed8aee
Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers
...
Shared: add in/out barriers with flow state
2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen
a08fe5b8b1
Go: Use shared FileSystem library.
2023-09-28 08:58:55 +02:00
Owen Mansel-Chan
84c0c09673
Always use getters for FlowState
2023-09-27 17:13:58 +01:00
Owen Mansel-Chan
72ca6b8c5f
Add isSigned to IntegerParsers
2023-09-27 17:13:56 +01:00
Owen Mansel-Chan
c796cba02f
Improve UpperBoundCheckGuard.isBoundFor
2023-09-27 17:13:55 +01:00
amammad
9598bb5a68
stash
2023-09-27 23:22:29 +10:00
amammad
c6ad358751
fix package FPs, fix additioanlstep issue
2023-09-27 21:11:07 +10:00
amammad
73803eaac9
fix tests
...
add missed afero sinks
2023-09-27 06:27:05 +10:00
amammad
3febbec64e
fix qldoc and review suggestions
2023-09-27 05:16:35 +10:00
amammad
b7f874d1f1
fix tests, better afero support!
2023-09-26 05:04:25 +10:00
amammad
c5faddc2a4
remove fasthttp in favor or fasthttp framework
2023-09-26 03:01:51 +10:00
amammad
9f9c9e0e5e
fix issues according to codereview
2023-09-26 02:06:57 +10:00
amammad
e239d763dc
Merge branch 'main' into amammad-go-NewFileSystemAccess
2023-09-26 02:04:59 +10:00
Asger F
d501856519
Update DataFlowImpl.qll copies
2023-09-25 10:05:29 +02:00
Anders Schack-Mulligen
6316f61af9
Go: Fix import conflict.
2023-09-22 15:09:25 +02:00
Anders Schack-Mulligen
66da997b7b
Dataflow: Make use of defaults for language-specific hooks.
2023-09-22 14:54:22 +02:00
Anders Schack-Mulligen
13f7daf71e
Merge pull request #13982 from aschackmull/dataflow/typeflow-calledge-pruning
...
Dataflow: Add type-based call-edge pruning.
2023-09-21 13:33:08 +02:00
amammad
52d1e45b05
add comments for better quality
2023-09-15 23:25:25 +10:00
Chris Smowton
a63bb1bbed
Tidy
2023-09-15 12:58:44 +01:00
Anders Schack-Mulligen
f5a4b792bd
C++/Go/Python/Ruby/Swift: Add dummy localMustFlowStep.
2023-09-13 15:43:46 +02:00
Kevin Stubbings
7d213d5bb9
Add Integer/Boolean Sanitizer
2023-09-12 21:10:11 -07:00
Michael B. Gale
77369a09a4
Merge pull request #13872 from Kwstubbs/Kevin_error_sanitizer
...
Go: Add sanitizer to remove paths passing through http.Error
2023-09-04 13:25:55 +01:00
amammad
f3ea72c234
proper tests with depstubber, remove Duplicates :(
2023-09-03 04:51:05 +10:00
Kevin Stubbings
29e14f7d8d
Feedback, Format, Add Change Notes
2023-08-28 14:15:21 -07:00
amammad
25c60c455e
v1
2023-08-27 23:53:45 +10:00
Michael Nebel
ce6fd8ac5f
Merge pull request #13432 from michaelnebel/updateissupported
...
Java/C#: Update telemetry queries to report callables with sink/source neutrals as being supported.
2023-08-22 08:39:38 +02:00
Jeroen Ketema
2d0f73d7c2
Merge pull request #13881 from jketema/shared-taint-tracking
...
Introduce shared taint tracking library
2023-08-21 12:45:49 +02:00
