Alvaro Muñoz
0332c52e77
Update go/ql/lib/semmle/go/frameworks/SQL.qll
2023-06-28 15:20:02 +02:00
Alvaro Muñoz
0043acb8e8
Update go/ql/lib/semmle/go/frameworks/SQL.qll
2023-06-28 15:19:31 +02:00
Alvaro Muñoz
fe4ddab7e4
Add support for the gqlgen library
2023-06-28 15:05:25 +02:00
Alvaro Muñoz
03d0000739
Add support for Bun library
2023-06-28 14:59:38 +02:00
Alvaro Muñoz
f3d979be7a
Improve go-pg support
2023-06-28 14:49:25 +02:00
Owen Mansel-Chan
b3a19ef7b2
Merge pull request #13461 from owen-mc/go/show-functionmodel-steps-to-path-summaries
...
Go: show FunctionModel steps in path summaries
2023-06-22 10:46:12 +01:00
Jami
5259a6ecfc
Merge pull request #13324 from jcogs33/jcogs33/shared-sink-kind-validation
...
Shared: share MaD kind validation across languages
2023-06-20 11:56:12 -04:00
Owen Mansel-Chan
cdc1c2c1aa
Merge pull request #13454 from owen-mc/go/add-mad-content-for-pointer-content
...
Go: Add models-as-data content for pointer content
2023-06-20 14:26:07 +01:00
Owen Mansel-Chan
cc320c5e9c
Never skip functionmodel inputs and outputs in path summaries
2023-06-20 13:25:47 +01:00
Owen Mansel-Chan
d7c97f8759
Merge pull request #13455 from owen-mc/dataflow/add-flowCheckNodeSpecific
...
Dataflow: add language-specific hook for breaking up big step relation
2023-06-20 13:24:26 +01:00
Owen Mansel-Chan
04ff89e1fe
Update access path documentation
2023-06-20 11:05:05 +01:00
Owen Mansel-Chan
732b14ee38
Update pretty printing predicates
2023-06-20 11:04:03 +01:00
Owen Mansel-Chan
a01169eec2
add "Dereference" content for PointerContent
2023-06-20 10:49:37 +01:00
Jeroen Ketema
eb62df6ece
Go: Rewrite InlineFlowTest as a parameterized module
2023-06-15 10:51:29 +02:00
Owen Mansel-Chan
3ff6d033d3
Rename to neverSkipInPathGraph
2023-06-14 15:29:54 +01:00
Owen Mansel-Chan
5f72ce0935
Add stub implementations of flowCheckNodeSpecific
2023-06-14 14:46:35 +01:00
Owen Mansel-Chan
dd57d9fd55
Add flowCheckNodeSpecific
...
This allows individual languages to specify `FlowCheckNode`s, which
break up the big step relation and make sure that those nodes appear in
path summaries.
2023-06-14 14:27:58 +01:00
Jami
35591113c2
Merge branch 'main' into jcogs33/shared-sink-kind-validation
2023-06-14 08:06:34 -04:00
Michael Nebel
afec9b05e9
Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor
...
C#: Use synthetic global in the EntityFramework code instead of jump steps.
2023-06-14 13:47:56 +02:00
Anders Schack-Mulligen
2d616d494e
C#/Ruby: Add fields as per review comments.
2023-06-13 11:26:30 +02:00
Jami Cogswell
9abe3e3da4
Shared: use a module as input to 'KindValidation'
2023-06-09 14:35:37 -04:00
Anders Schack-Mulligen
5062442982
Go/Python/Ruby/Swift: Add stub.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
98f51d7f29
Dataflow: Sync.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
6020e4d0e3
C#/Go/Python/Ruby/Swift: Fix some more references.
2023-06-09 15:30:38 +02:00
Anders Schack-Mulligen
e6e4cef35e
Go: Adjust to FlowSummaryImpl changes.
2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen
2cc5bde925
Dataflow: Sync.
2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen
d230509905
Dataflow: Address review comments.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
4399138c82
Dataflow: Fix QL4QL alert.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
53f2b8aab0
Dataflow: Sync.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
fd832416d8
Dataflow: Add empty type strengthening predicate for languages without type pruning.
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
e8cea79f1d
Dataflow: Sync.
2023-06-09 08:37:35 +02:00
Jami Cogswell
da58b2afc8
Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'
2023-06-08 20:05:27 -04:00
Jami Cogswell
5a23421d9a
Shared: minor updates to comments
2023-06-05 13:46:56 -04:00
Jami Cogswell
6c46cd9c21
Java/C#/Go/Swift: move 'SharedModelValidation.qll' to internal folder
2023-06-05 13:11:08 -04:00
Jami Cogswell
9d5972acc2
Shared: update qldocs
2023-06-05 12:18:34 -04:00
Jami Cogswell
3f1dc8e5c7
Shared: add outdated Swift sink kinds
2023-06-05 12:18:34 -04:00
Jami Cogswell
62ac0dc471
Shared: add outdated sink kind msg to 'getInvalidModelKind' for all languages
2023-06-05 12:18:33 -04:00
Jami Cogswell
76f5dca861
Shared: move 'OutdatedSinkKind' to shared file and add outdated JS and C# sink kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
7b629f5d63
Shared: include 'qltest%' and 'test-%'
2023-06-05 12:18:33 -04:00
Jami Cogswell
76508d17c6
Go/Swift: validate source/sink kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
615f2a573b
Java/C#/Go/Swift: remove commented-out code
2023-06-05 12:18:33 -04:00
Jami Cogswell
7317c29eea
Shared: update kind information
2023-06-05 12:18:33 -04:00
Jami Cogswell
79f61cc645
Java/C#/Go/Swift: use 'SharedModelValidation' file
2023-06-05 12:18:33 -04:00
Jami Cogswell
ddb5d92ef8
Shared: add source, summary, and neutral shared valid kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
869f820fcf
Shared: add 'SharedModelValidation' file as experiment
2023-06-05 12:18:33 -04:00
Michael Nebel
06b02eb3ce
Sync files.
2023-06-01 09:30:31 +02:00
Michael Nebel
915042a881
Minor cleanup and sync files.
2023-05-26 12:25:00 +02:00
Michael Nebel
b794627335
Go: Re-factor getComponent.
2023-05-26 12:24:59 +02:00
Porcupiney Hairs
d536157c1a
Go : Add query to detect potential timing attacks
2023-05-11 09:57:50 +05:30
Owen Mansel-Chan
270ba09ffb
Merge pull request #11732 from owen-mc/go/fix/model-data-flow-through-varargs
...
Go: Allow data flow through varargs parameters
2023-05-11 05:26:40 +01:00
