Anders Schack-Mulligen
|
ac115e0a6f
|
Rangeanalysis: Reshuffle perf fix. This should result in the same join-order, but with less materialisation.
|
2023-11-01 15:59:24 +01:00 |
|
Anders Schack-Mulligen
|
bb2bbd2d4d
|
Rangeanalysis: Remove useless pragma.
|
2023-11-01 15:59:24 +01:00 |
|
Anders Schack-Mulligen
|
f6794fe859
|
Rangeanalysis: Adjust modulo analysis comment.
|
2023-11-01 15:59:24 +01:00 |
|
Anders Schack-Mulligen
|
a7f3ef1a6c
|
Rangeanalysis: Parameterise shared modulus analysis.
|
2023-11-01 15:59:24 +01:00 |
|
Anders Schack-Mulligen
|
8e2b17cd86
|
Rangeanalysis: Copy C++ ModulusAnalysis file verbatim.
|
2023-11-01 15:59:24 +01:00 |
|
Anders Schack-Mulligen
|
6d859daf3d
|
Merge pull request #14656 from aschackmull/shared/range-utils
Rangeanalysis: Share ssaRead predicate
|
2023-11-01 15:57:52 +01:00 |
|
Anders Schack-Mulligen
|
048a7c4e42
|
Rangeanalysis: Rename SsaBound.getAVariable to getVariable.
|
2023-11-01 11:58:06 +01:00 |
|
Anders Schack-Mulligen
|
48291dd32d
|
Rangeanalysis: Remove superfluous ignoreZeroLowerBound.
|
2023-11-01 11:51:46 +01:00 |
|
Edward Minnix III
|
1ec1dd368d
|
Merge pull request #13978 from egregius313/egregius313/java/mad/convert-sensitive-api-to-mad
Java: Convert `SensitiveApi.qll` to use Models-as-Data
|
2023-10-31 15:25:42 -04:00 |
|
Anders Schack-Mulligen
|
34b9791e46
|
Rangeanalysis: Remove superfluous ignoreSsaReadCopy.
|
2023-10-31 15:32:25 +01:00 |
|
Anders Schack-Mulligen
|
322e6c91be
|
Rangeanalysis: Remove superfluous specificSsaRead.
|
2023-10-31 15:30:36 +01:00 |
|
Anders Schack-Mulligen
|
8b6c940e76
|
Rangeanalysis: Remove superfluous ignoreSsaReadAssignment.
|
2023-10-31 15:28:37 +01:00 |
|
Anders Schack-Mulligen
|
6d6f89e71e
|
Rangeanalysis: Remove superfluous ignoreSsaReadArithmeticExpr.
|
2023-10-31 15:25:28 +01:00 |
|
Anders Schack-Mulligen
|
a39a94ca8e
|
Rangeanalysis: Switch to shared ssaRead predicate.
|
2023-10-31 15:23:05 +01:00 |
|
Anders Schack-Mulligen
|
19644a8f07
|
Rangeanalysis: Implement shared ssaRead predicate
|
2023-10-31 15:07:11 +01:00 |
|
github-actions[bot]
|
2b939fdf08
|
Post-release preparation for codeql-cli-2.15.2
|
2023-10-30 16:06:51 +00:00 |
|
Geoffrey White
|
8f115bfd06
|
Swift: Implement 'isUsedAsReplace'.
|
2023-10-30 14:33:42 +00:00 |
|
github-actions[bot]
|
4641990021
|
Release preparation for version 2.15.2
|
2023-10-30 11:05:53 +00:00 |
|
Dave Bartolomeo
|
b18a6d5e0b
|
Merge pull request #14582 from github/dbartol/threat-models-2
Java: Threat model implementation with priorities.
|
2023-10-27 09:33:53 -04:00 |
|
Anders Schack-Mulligen
|
e9cb272396
|
Merge pull request #14615 from aschackmull/dataflow/stage-alias
Dataflow: simplify using stage aliases.
|
2023-10-27 14:17:30 +02:00 |
|
Anders Schack-Mulligen
|
10c657bc23
|
Dataflow: simplify using stage aliases.
|
2023-10-27 13:40:21 +02:00 |
|
Mathias Vorreiter Pedersen
|
9cae488ef4
|
Merge pull request #14612 from aschackmull/dataflow/type-doc
Dataflow: Improve qldoc on the type system.
|
2023-10-27 10:39:57 +01:00 |
|
Anders Schack-Mulligen
|
776e35279d
|
Dataflow: Improve qldoc on the type system.
|
2023-10-27 10:43:54 +02:00 |
|
Michael Nebel
|
e4276f7adb
|
Java: Apply suggestions from code review
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2023-10-27 10:34:20 +02:00 |
|
Anders Schack-Mulligen
|
b106db6fda
|
Dataflow: Add change note for partial flow api change.
|
2023-10-27 09:46:46 +02:00 |
|
Dave Bartolomeo
|
d2afb20f3f
|
Merge remote-tracking branch 'origin/main' into dbartol/threat-models-2
|
2023-10-26 14:05:40 -04:00 |
|
Dave Bartolomeo
|
9800458467
|
Update shared/threat-models/codeql/threatmodels/ThreatModels.qll
Co-authored-by: Michael Nebel <michaelnebel@github.com>
|
2023-10-26 13:46:55 -04:00 |
|
Dave Bartolomeo
|
927eb8424d
|
Update shared/threat-models/codeql/threatmodels/ThreatModels.qll
Co-authored-by: Michael Nebel <michaelnebel@github.com>
|
2023-10-26 13:46:37 -04:00 |
|
Dave Bartolomeo
|
8d9e4d391f
|
Update shared/threat-models/codeql/threatmodels/ThreatModels.qll
Co-authored-by: Michael Nebel <michaelnebel@github.com>
|
2023-10-26 13:46:28 -04:00 |
|
Mathias Vorreiter Pedersen
|
30ecb4b0c8
|
Merge pull request #14588 from aschackmull/shared/rangeanalysis
C++/Java: Share core range analysis
|
2023-10-26 16:32:46 +01:00 |
|
Anders Schack-Mulligen
|
a2e3b37847
|
Dataflow: Fix accidental visibility.
|
2023-10-26 11:28:52 +02:00 |
|
Anders Schack-Mulligen
|
4dca4a7389
|
Dataflow: Restrict partial flow to either forward or reverse flow.
|
2023-10-26 10:33:03 +02:00 |
|
Ed Minnix
|
3b0b5e403c
|
Replace crypto-parameter with credentials-key
|
2023-10-25 14:31:55 -04:00 |
|
Ed Minnix
|
24c809b3b5
|
Move credentials-% sink kinds to "shared" status
|
2023-10-25 14:31:54 -04:00 |
|
Ed Minnix
|
c6641dfbf3
|
fix model validator to credentials-password
|
2023-10-25 14:31:54 -04:00 |
|
Ed Minnix
|
a85df81b67
|
Rename sink kind to "credentials-username" to match naming convention
|
2023-10-25 14:31:54 -04:00 |
|
Ed Minnix
|
958c6ff289
|
Remove credential-other
|
2023-10-25 14:31:53 -04:00 |
|
Ed Minnix
|
4aec302fb7
|
Create new sink kinds
|
2023-10-25 14:31:53 -04:00 |
|
Anders Schack-Mulligen
|
283d6efdf8
|
Rangeanalysis/Java/C++: Address some ql4ql findings.
|
2023-10-25 14:06:35 +02:00 |
|
Anders Schack-Mulligen
|
c1c4a5bfcf
|
Rangeanalysis: Copy qldoc and simplification from Java.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
cd44d67529
|
Rangeanalysis: Add temporary Java compatibility flag.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
06fe10bbe9
|
Rangeanalysis: Bugfix division with float representation.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
232c147f6b
|
Rangeanalysis: Port join-order fix from Java version.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
38274db205
|
Rangeanalysis: Parameterise library.
|
2023-10-25 11:17:01 +02:00 |
|
Anders Schack-Mulligen
|
169ba03778
|
Rangeanalysis: Copy C++ version verbatim.
|
2023-10-25 11:17:01 +02:00 |
|
Anders Schack-Mulligen
|
aed830cf1b
|
Rangeanalysis: Make new qlpack
|
2023-10-25 11:17:01 +02:00 |
|
Dave Bartolomeo
|
33f10d8d19
|
Better handling of all threat model without too many binding sets
|
2023-10-24 13:59:15 -04:00 |
|
Dave Bartolomeo
|
5fd56ce866
|
Alternate threat model implementation
|
2023-10-24 13:12:37 -04:00 |
|
Joe Farebrother
|
3f11d83b7b
|
Merge pull request #14500 from joefarebrother/shared-filepath-normalize
Shared: Add library for filepath normalization
|
2023-10-23 16:09:44 +01:00 |
|
Dave Bartolomeo
|
15e9838f16
|
Add a readme file
|
2023-10-19 17:27:21 -04:00 |
|