Paolo Tranquilli
|
0d32f00020
|
Swift: update ExtensionDecl test results
|
2023-01-17 12:58:02 +01:00 |
|
Paolo Tranquilli
|
f6e26211f9
|
Swift: add protocols to ExtensionDecl schema
|
2023-01-17 12:54:50 +01:00 |
|
Geoffrey White
|
74a37475db
|
Swift: Model RNCryptor.
|
2023-01-17 11:54:12 +00:00 |
|
Paolo Tranquilli
|
8906e101cb
|
Swift: add ExtensionDecl QL test
|
2023-01-17 12:49:53 +01:00 |
|
Geoffrey White
|
449ebb8a12
|
Swift: Add tests for RNCryptor library.
|
2023-01-17 09:03:07 +00:00 |
|
Tony Torralba
|
bd5619147d
|
Merge pull request #11590 from atorralba/atorralba/swift/sensitive-info-logs
Swift: Add Cleartext Logging query
|
2023-01-16 16:22:20 +01:00 |
|
Tony Torralba
|
0017461e2d
|
Update swift/ql/src/queries/Security/CWE-312/CleartextLogging.ql
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
|
2023-01-16 15:35:58 +01:00 |
|
Tony Torralba
|
fdb3b65bce
|
Apply suggestions from code review
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
|
2023-01-16 11:57:37 +01:00 |
|
Mathias Vorreiter Pedersen
|
2dbacbc302
|
Merge pull request #11841 from MathiasVP/swift-add-integral-types
Swift: Add integral type classes
|
2023-01-13 17:30:57 +00:00 |
|
Geoffrey White
|
c9a0067705
|
Swift: Remove flow in cases with multiple variables.
|
2023-01-13 16:37:23 +00:00 |
|
Geoffrey White
|
2c35af51cd
|
Swift: Move logic into Ssa::WriteDefinition.assigns.
|
2023-01-13 15:19:33 +00:00 |
|
Geoffrey White
|
8a77906296
|
Swift: Use Ssa::Definition rather than ConcreteVarDecl.
|
2023-01-13 15:01:20 +00:00 |
|
Geoffrey White
|
7f31c9c7e5
|
Swift: Add a test.
|
2023-01-12 15:19:57 +00:00 |
|
Geoffrey White
|
3d1b2fdbda
|
Swift: Rename NumericOrCharType.qll -> Numer> NumericType.qll.
|
2023-01-12 11:46:51 +00:00 |
|
Geoffrey White
|
418d593a97
|
Swift: Replace NumericOrCharType with a more basic NumericType, and rename classes for consistency with other static languages.
|
2023-01-12 11:43:20 +00:00 |
|
Geoffrey White
|
d0eb167d47
|
Swift: Merge FloatingPointType.qll into NumericOrCharType.qll, because it is a numeric type and other stuff like CharacterType is there.
|
2023-01-12 11:42:36 +00:00 |
|
Geoffrey White
|
4e5483744f
|
Swift: Add a test case we're discussing.
|
2023-01-12 10:52:03 +00:00 |
|
Michael Nebel
|
18a815ca8b
|
Merge pull request #11721 from michaelnebel/csharpjava/refactorprovenance
C#/Java: Re-factor provenance related predicates.
|
2023-01-12 10:50:31 +01:00 |
|
Geoffrey White
|
994ea704da
|
Swift: Clean up the QL a little.
|
2023-01-12 09:31:48 +00:00 |
|
Geoffrey White
|
6a0b56bf40
|
Swift: Fix for extensions.
|
2023-01-11 18:32:07 +00:00 |
|
Geoffrey White
|
2622de9747
|
Swift: Improve Core Data coverage.
|
2023-01-11 18:26:34 +00:00 |
|
Geoffrey White
|
82f9903bf0
|
Swift: Additional test cases for swift/cleartext-storage-database on Core Data.
|
2023-01-11 18:22:32 +00:00 |
|
Pierre
|
c3116b3f0f
|
Merge branch 'main' into turbo/experimental/combined
|
2023-01-11 18:02:55 +01:00 |
|
Michael Nebel
|
7e4f7a0c17
|
C#: Address review comments and sync files.
|
2023-01-11 16:29:24 +01:00 |
|
Michael Nebel
|
67cbe38255
|
Sync files.
|
2023-01-11 16:20:55 +01:00 |
|
Michael Nebel
|
80a4197604
|
Swift: Re-factor provenance related predicates for summarized callable.
|
2023-01-11 16:20:55 +01:00 |
|
Michael Nebel
|
ea173f9516
|
Sync files.
|
2023-01-11 16:20:55 +01:00 |
|
Tony Torralba
|
c115a9fee4
|
Add more path injection sinks
|
2023-01-11 14:28:24 +01:00 |
|
Tony Torralba
|
a4f813183e
|
Merge pull request #11785 from atorralba/atorralba/swift/grdb-sinks
Swift: Add sinks for the GRDB library
|
2023-01-11 11:49:37 +01:00 |
|
Tony Torralba
|
50cd40ed20
|
Swift: Remove omittable exists variables
|
2023-01-10 13:39:50 +01:00 |
|
Mathias Vorreiter Pedersen
|
7f5344e025
|
Update swift/ql/lib/codeql/swift/elements/type/NumericOrCharType.qll
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2023-01-09 17:08:27 +00:00 |
|
Tony Torralba
|
8e0a018673
|
Consider Int8 and UInt8 as OsLogNonRedactedTypes
|
2023-01-09 18:05:18 +01:00 |
|
Tony Torralba
|
49a41c98ee
|
Test that hashed passwords are 'safe' to log
This doesn't seem completely right, but the heuristic approach we have regarding sensitive expressions has to draw the line somewhere.
|
2023-01-09 18:01:07 +01:00 |
|
Tony Torralba
|
160d89fb4e
|
Add qhelp examples
|
2023-01-09 18:01:07 +01:00 |
|
Tony Torralba
|
33029b0ed8
|
Fix sanitizer QLDoc
|
2023-01-09 18:01:07 +01:00 |
|
Tony Torralba
|
7e0869965c
|
Uncomment tests
|
2023-01-09 18:01:07 +01:00 |
|
Tony Torralba
|
c1f19dd145
|
Add stub so that tests work on Linux
|
2023-01-09 18:01:07 +01:00 |
|
Tony Torralba
|
b203a9eb6e
|
Add a sanitizer for OSLogPrivacy options
Add test cases to verify how the sanitizer behaves depending on the argument type and the privacy option being used.
|
2023-01-09 18:01:07 +01:00 |
|
Tony Torralba
|
aad56097ac
|
Add Cleartext Loggin query for Swift.
With some caveats: see TODO comments and failing tests.
|
2023-01-09 18:01:07 +01:00 |
|
Tony Torralba
|
eb78661c1f
|
Add missing SQL injection tests for the GRDB SQL class
|
2023-01-09 17:36:54 +01:00 |
|
yoff
|
c01ce955ba
|
Merge pull request #11778 from yoff/shared/inline-tests
Shared: Inline test expectations
|
2023-01-09 13:21:18 +01:00 |
|
Mathias Vorreiter Pedersen
|
381301e552
|
Update swift/ql/lib/swift.qll
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2023-01-09 10:32:52 +00:00 |
|
Geoffrey White
|
9333e80def
|
Swift: Add getVaList stub to the test.
|
2023-01-09 10:29:37 +00:00 |
|
Mathias Vorreiter Pedersen
|
6bb09ef289
|
Swift: Add integral type classes.
|
2023-01-09 09:43:09 +00:00 |
|
Mathias Vorreiter Pedersen
|
9be9636816
|
Merge pull request #11670 from atorralba/atorralba/swift/predicate-injection
Swift: Add predicate injection query
|
2023-01-09 08:54:13 +00:00 |
|
Geoffrey White
|
bb50a99b36
|
Swift: Additional test cases.
|
2023-01-06 18:48:46 +00:00 |
|
Geoffrey White
|
b5dd815249
|
Swift: Flow through optional binding.
|
2023-01-06 18:34:22 +00:00 |
|
Geoffrey White
|
c598d9b882
|
Swift: Generalize an SSA case for variables declared in Patterns.
|
2023-01-06 18:34:22 +00:00 |
|
Geoffrey White
|
8a9a69fa00
|
Swift: Add more dataflow tests for of optionals, patterns, enums.
|
2023-01-06 18:34:22 +00:00 |
|
Geoffrey White
|
04f87a26a9
|
Swift: Test layout change.
|
2023-01-06 16:52:54 +00:00 |
|