Paolo Tranquilli
23626f2c69
Swift: add TupleType test
2022-12-07 13:46:51 +01:00
Paolo Tranquilli
9b89ded908
Swift: accept test changes
2022-12-07 13:46:51 +01:00
Paolo Tranquilli
d39f37540e
Swift: add has and getNumberOf properties to generated tests
2022-12-07 13:46:51 +01:00
Jami Cogswell
b82f9b1911
Java: add draft of generated vs manual MaD metrics query
2022-12-06 22:15:19 -05:00
Mathias Vorreiter Pedersen
3eea3b2f45
Merge pull request #11446 from atorralba/atorralba/swift/path-injection
...
Swift: Add path injection query
2022-12-06 11:03:26 +00:00
Tom Hvitved
b5e2e1e469
Merge pull request #11564 from hvitved/dataflow/parameter-position-consistency-checks
...
Data flow: Add consistency checks for parameter positions
2022-12-06 09:33:36 +01:00
Tony Torralba
7dca1b4b06
Merge branch 'main' into atorralba/swift/path-injection
2022-12-05 16:21:22 +01:00
Mathias Vorreiter Pedersen
012beebe3b
Swift: Update .generated.list
2022-12-05 15:02:44 +00:00
Mathias Vorreiter Pedersen
e7ec5a69a3
Swift: Accept more test changes.
2022-12-05 14:53:23 +00:00
Tony Torralba
bf8084080b
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2022-12-05 15:37:40 +01:00
Mathias Vorreiter Pedersen
a07c9ffbc5
Swift: Accept test changes.
2022-12-05 14:19:00 +00:00
Mathias Vorreiter Pedersen
8053b72901
Swift: Skip lvalue types.
2022-12-05 14:15:32 +00:00
Geoffrey White
64fb98e46f
Swift: Rewrite bits to try and get rid of red highlighting.
2022-12-05 13:41:21 +00:00
Geoffrey White
17244734d0
Swift: Results repaired by merge.
2022-12-05 13:36:14 +00:00
Geoffrey White
07c790a430
Merge branch 'main' into alamofire3
2022-12-05 13:29:26 +00:00
Geoffrey White
6cb69c907d
Merge pull request #11514 from geoffw0/generics
...
Swift: Fix for MaD with generics
2022-12-05 13:02:35 +00:00
Tom Hvitved
52f3a48638
Data flow: Sync files
2022-12-05 12:57:27 +01:00
Tom Hvitved
faca4b5b56
Merge pull request #11461 from hvitved/ruby/unique-hash-splat-param
...
Ruby: At most one hash-splat `ParameterNode` per callable
2022-12-05 11:53:28 +01:00
Geoffrey White
59e9d0828b
Merge branch 'main' into generics
2022-12-05 10:30:10 +00:00
Tony Torralba
9d2b04928d
Fix qhelp after suggestions
2022-12-05 09:16:27 +01:00
Tony Torralba
6e7c7c245b
Update swift/ql/src/queries/Security/CWE-022/PathInjection.qhelp
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2022-12-05 08:47:18 +01:00
Geoffrey White
cf3345ee8f
Swift: Revert security-severity on CWE-321, for now.
2022-12-02 12:01:43 +00:00
Geoffrey White
85a0a42da9
Swift: try again to satisfy ql-for-ql.
2022-12-02 10:15:11 +00:00
Geoffrey White
f7ebd1312e
Swift: Corrections.
2022-12-01 20:13:56 +00:00
Geoffrey White
157a7829ca
Swift: correct the example.
2022-12-01 18:35:10 +00:00
Geoffrey White
ad05cc3cb1
Swift: Separate out a FormatString library as well.
2022-12-01 18:09:46 +00:00
Geoffrey White
43596869e7
Swift: Move query logic to a .qll.
2022-12-01 18:09:45 +00:00
Geoffrey White
87fa159384
Swift: Add security-severity, and correct one for another query that apparently wasn't right.
2022-12-01 18:09:39 +00:00
Geoffrey White
58e9a0436e
Swift: Add metadata.
2022-12-01 18:09:33 +00:00
Tony Torralba
6bb54f07bf
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2022-12-01 18:08:47 +01:00
Geoffrey White
2b61f26a64
Swift: Add doc.
2022-12-01 16:32:34 +00:00
Geoffrey White
32c4728f83
Swift: Add tests.
2022-12-01 16:32:33 +00:00
Geoffrey White
a2210959b5
Swift: Uncontrolled format string query (initial version).
2022-12-01 16:32:33 +00:00
Geoffrey White
a6b8ef310a
Swift: Rename predicate.
2022-12-01 16:20:28 +00:00
Paolo Tranquilli
68504c097c
Swift: remove obsolete file
2022-12-01 17:07:54 +01:00
Geoffrey White
c6c4975aa6
Swift: codegen.
2022-12-01 14:23:12 +00:00
Geoffrey White
b7d0d28ef9
Swift: QLDoc.
2022-12-01 14:23:03 +00:00
Geoffrey White
d64fd62194
Swift: resolve TODOs.
2022-12-01 14:18:24 +00:00
Geoffrey White
8acc09b551
Swift: Make ql-for-ql happy.
2022-12-01 09:07:17 +00:00
Geoffrey White
1ea44374a4
Swift: Autoformat.
2022-12-01 08:47:30 +00:00
Geoffrey White
c71bd4cad9
Swift: Remove unused predicate.
2022-12-01 08:47:29 +00:00
Geoffrey White
0a0cfc34e7
Swift: Do the same for methods.
2022-12-01 08:47:29 +00:00
Geoffrey White
5a4d188255
Swift: Fix for extensions.
2022-12-01 08:47:29 +00:00
Geoffrey White
d71eeb4c95
Swift: First fix for MaD on generics.
2022-12-01 08:47:29 +00:00
Geoffrey White
8f24b0b815
Swift: Add missing comment.
2022-12-01 08:47:28 +00:00
Geoffrey White
b1b3487028
Swift: Add a test for MaD data sources in generics.
2022-12-01 08:47:28 +00:00
Tony Torralba
d958a62bf2
Fix expectations in data.swift
2022-11-30 16:19:55 +01:00
Karim Ali
8f456295e0
Merge pull request #11185 from karimhamdanali/swift-string-taint-steps
...
Swift: add `String` taint steps
2022-11-30 17:03:15 +02:00
Karim Ali
f6bc88471a
update the expected output for CWE-079
...
Now that we have support for taint through fields of String, we can now detect certain flows that we previously marked as [NOT DETECTED]. This commit updates the expected output of CWE-079 (and the in-code annotation of the accompanying test case) to reflect that update.
2022-11-30 16:34:24 +02:00
Owen Mansel-Chan
45e2a13c37
Merge pull request #11494 from owen-mc/dataflow/some-trivial-fixes
...
Dataflow: some trivial fixes
2022-11-30 13:59:41 +00:00