Chris Smowton
ed9a6bd820
Further join order optimisations
2024-10-08 19:23:27 +01:00
Chris Smowton
bf5ba33c2e
Improve join orders for top 5 perf regressions in QA
2024-10-08 19:23:26 +01:00
Chris Smowton
365ccf4903
autoformat
2024-10-08 19:23:25 +01:00
Chris Smowton
36a031833f
Further optimisation
2024-10-08 19:23:24 +01:00
Chris Smowton
ab99509a11
Rework interface for querying private interface method ids
2024-10-08 19:23:22 +01:00
Chris Smowton
0f95a8d724
Clarify doc
2024-10-08 19:23:21 +01:00
Chris Smowton
288e0ec565
component_tags -> struct_tags
2024-10-08 19:23:20 +01:00
Chris Smowton
c1a1edf24e
Autoformat
2024-10-08 19:23:19 +01:00
Chris Smowton
74cba9056b
Optimise join orders
2024-10-08 19:23:18 +01:00
Chris Smowton
fd615fb7a3
Prevent bad magic
2024-10-08 19:23:14 +01:00
Chris Smowton
7a7ff4a91e
Apply review comments
2024-10-08 19:23:11 +01:00
Chris Smowton
22ed2f9ae3
Autoformat CodeQL
2024-10-08 19:23:09 +01:00
Chris Smowton
dcbb66d366
Go: extract and expose struct tags, interface method IDs
...
This enables us to distinguish all database types in QL. Previously structs with the same field names and types but differing tags, and interface types with matching method names and at least one non-exported method but declared in differing packages, were impossible or only sometimes possible to distinguish in QL. With this change these types can be distinguished, as well as permitting queries to examine struct field tags, e.g. to read JSON field name associations.
2024-10-08 19:23:06 +01:00
Ed Minnix
f8335e6163
Fix formatting
2024-10-01 15:58:07 -04:00
Edward Minnix III
1f932d407f
Remove unnecessary asExpr()
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-10-01 15:56:42 -04:00
Ed Minnix
e18389718c
Implement stdin models
...
Unfortunately due to how variable and varargs work, these are better
done in QL
2024-10-01 15:56:31 -04:00
Chris Smowton
ca68aaa0de
Remove test code
2024-09-27 19:07:00 +01:00
Owen Mansel-Chan
796db77104
Add comments noting methods from embedded interfaces are already included
2024-09-27 15:03:09 +01:00
Owen Mansel-Chan
fdff209938
Merge pull request #17505 from owen-mc/go/inheritance-tests
...
Go: Add tests for model inheritance and fix bug in promoted methods
2024-09-26 16:42:25 +01:00
Rasmus Wriedt Larsen
381ea93ec3
Merge pull request #17424 from RasmusWL/active-threat-model-source
...
Go/Java/C#: Rename `ThreatModelFlowSource` to `ActiveThreatModelSource`
2024-09-26 13:08:17 +02:00
Chris Smowton
d673d24ca6
Revise notation to more closely resemble real Go
2024-09-24 17:22:26 +01:00
Chris Smowton
40035a0b62
Improve pretty-printer
2024-09-24 17:18:09 +01:00
Chris Smowton
4d3a140dd7
Expose whether functions are variadic in their pp() output
2024-09-24 17:18:08 +01:00
Owen Mansel-Chan
6e428d5083
Fix bug where some methods were inappropriately promoted
2024-09-24 16:25:53 +01:00
Anders Schack-Mulligen
3a1e50dcf9
Dataflow: Simplify diff-informed implementation and tweak flag name.
2024-09-20 07:07:10 -07:00
Rasmus Wriedt Larsen
8c10155eb7
mass rename to ActiveThreatModelSource
2024-09-12 10:16:55 +02:00
Chuan-kai Lin
ff78bebf19
Shared support for alert filtering
2024-09-11 13:18:26 -07:00
Rasmus Wriedt Larsen
038bc832a7
Go/Java/C#: Rename to ActiveThreatModelSource
...
As part of adding support for threat-models to Python/JS (see
https://github.com/github/codeql/pull/17203 ), we ran into some trouble
with name clashes.
Naming in existing languages supporting threat-models:
- `SourceNode` (for QL only modeling)
- `ThreatModelFlowSource` (for active sources from QL or data-extensions)
However, since we use `LocalSourceNode` in Python, and `SourceNode` in
JS (for local source nodes), it seems a bit confusing to follow the same
naming convention as other languages, and we had to come up with new names.
Initially I used `ThreatModelSource` for the "QL only modeling", but
that meant that we needed a new name to represent the active sources
coming from either QL or data-extensions... for this I came up with
`ActiveThreatModelSource`, and I really liked it. To me, it's much
clearer that this class only contains the currently active threat
model sources.
So to align languages, I got approval from @michaelnebel to rename the
existing classes.
2024-09-10 14:46:15 +02:00
Owen Mansel-Chan
013ee34de7
Merge pull request #17381 from owen-mc/go/fix/qldoc/resultvariabledecl
...
Go: Fix QLDoc for ResultVariableDecl
2024-09-05 11:57:45 +01:00
Owen Mansel-Chan
9786934d9a
Remove errant space at end of line
2024-09-05 11:27:20 +01:00
Owen Mansel-Chan
5bafa8ace2
Add comment about x, y int being a single ResultVariableDecl
2024-09-05 10:27:11 +01:00
Owen Mansel-Chan
351c50afc1
Fix QLDoc for ResultVariableDecl
2024-09-04 14:02:35 +01:00
Michael B. Gale
cd8a5d7707
Merge pull request #17378 from github/mbg/go/improve-typeparamtype
...
Go: Add `getParent` and `getIndex` for `TypeParamType`
2024-09-04 13:31:51 +01:00
Michael B. Gale
db72bd4f96
Go: Add getParent and getIndex for TypeParamType
2024-09-04 12:28:58 +01:00
erik-krogh
0fdd06fff5
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Henry Mercer
3490067316
Merge branch 'main' into henrymercer/rc-3.15-mergeback
2024-08-29 19:48:01 +01:00
Chris Smowton
a832730a11
Revert "Convert squirrel sql-injection sinks to MaD (non-existent methods removed)"
...
This reverts commit 06f86dd22f
2024-08-24 17:44:40 +01:00
Chris Smowton
ab88b9b136
Revert "Upgrade and convert gorqlite sql-injection sinks to MaD"
...
This reverts commit ce0cb12c29
2024-08-24 17:43:15 +01:00
Chris Smowton
8fc3b00fb9
Revert "Convert gogf/gf sql-injection sinks to MaD"
...
This reverts commit db559f75b6
2024-08-24 17:43:12 +01:00
Chris Smowton
e7f788ae35
Revert "Convert sqlx sql-injection sinks to MaD"
...
This reverts commit 7ad63fc3e6
2024-08-24 17:43:09 +01:00
Chris Smowton
4e6d7fcb29
Revert "Convert Gorm sql-injection sinks to MaD"
...
This reverts commit ba310417a8
2024-08-24 17:43:06 +01:00
Chris Smowton
d8a2c08f12
Revert "Convert Xorm sql-injection sinks to MaD"
...
This reverts commit 3b2b7d7d1c
2024-08-24 17:43:03 +01:00
Chris Smowton
59bb142e8b
Revert "Convert Bun sql-injection sinks to MaD"
...
This reverts commit 3eb5b2669b
2024-08-24 17:43:00 +01:00
Chris Smowton
ec59492866
Revert "Convert Beego orm sql-injection sinks to MaD"
...
This reverts commit ad213579a1
2024-08-24 17:42:57 +01:00
Chris Smowton
fa07f16bcc
Revert "Convert database/sql sql-injection sinks to MaD"
...
This reverts commit 501bb3eb56
2024-08-24 17:42:55 +01:00
Chris Smowton
b3326babba
Revert "Convert database/sql/driver sql-injection sinks to MaD"
...
This reverts commit 652dd88c36
2024-08-24 17:42:52 +01:00
Chris Smowton
c33568b602
Revert "Convert mongodb nosql-injection sinks to MaD"
...
This reverts commit ec9d88b364
2024-08-24 17:42:49 +01:00
Chris Smowton
437df5c2a5
Revert "Convert gocb nosql-injection sinks to MaD"
...
This reverts commit 2d2afb17ad
2024-08-24 17:42:45 +01:00
Chris Smowton
a6e3b913d0
Revert "Convert logging sinks to use MaD"
...
This reverts commit fa472f5e18
2024-08-24 17:39:24 +01:00
Owen Mansel-Chan
2edadbf423
Try to fix packages in frameworks coverage
2024-08-22 11:44:34 +01:00
