Dave Bartolomeo
c268163804
warnOnImplicitThis
2023-10-19 17:18:47 -04:00
Dave Bartolomeo
910b2a98f1
Merge remote-tracking branch 'origin/main' into dbartol/threat-models
2023-10-19 17:07:38 -04:00
Dave Bartolomeo
bd7de83aab
Use extension packs for threat models
2023-10-19 17:07:26 -04:00
github-actions[bot]
8dcd8b9e5b
Post-release preparation for codeql-cli-2.15.1
2023-10-17 20:24:00 +00:00
Joe Farebrother
aa418dc7d0
Add more line breaks in qldoc
2023-10-17 12:51:22 +01:00
github-actions[bot]
3b3c036626
Release preparation for version 2.15.1
2023-10-16 17:49:39 +00:00
Joe Farebrother
05162c68ec
Fix typo
2023-10-16 13:43:06 +01:00
Joe Farebrother
aade79f723
Improve qldoc and fix changenote
2023-10-16 13:02:28 +01:00
Joe Farebrother
9097d93ac7
Add shared library for filepath normalization
2023-10-13 17:07:47 +01:00
erik-krogh
fa1e8ee426
add getACodepoint to the shared Strings library, and use it in NfaUtils
2023-10-12 13:38:19 +02:00
erik-krogh
116025c569
use the new codePointAt and codePointCount methods instead of regex hacks
2023-10-12 13:38:19 +02:00
Henry Mercer
1a370bfbbe
Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0
...
Post-release preparation for codeql-cli-2.15.0
2023-10-11 17:39:04 +01:00
github-actions[bot]
ae6af17c74
Post-release preparation for codeql-cli-2.15.0
2023-10-11 14:19:20 +00:00
Erik Krogh Kristensen
625e889c62
Merge pull request #14339 from erik-krogh/range-printing
...
JS/PY/RB/Java: escape unicode chars in overly-large-range
2023-10-09 14:22:38 +02:00
Edward Minnix III
8e653d01a8
Merge pull request #14127 from egregius313/egregius313/java/mad/localuserinput
...
Java: Convert implementations of `LocalUserInput` to Models-as-Data
2023-10-04 12:55:44 -04:00
github-actions[bot]
9fe993bec3
Release preparation for version 2.15.0
2023-10-04 14:15:27 +00:00
Ed Minnix
e122d81336
Add new source kinds for threat modeling
2023-10-03 22:29:00 -04:00
Henry Mercer
da92da2204
Bump minor versions of packs we regularly release
2023-10-03 16:31:23 +01:00
Henry Mercer
f3847b3f51
Merge branch 'main' into henrymercer/rc-3.11-mergeback
2023-10-03 16:30:23 +01:00
Tom Hvitved
2684a22484
Merge pull request #14255 from hvitved/dataflow/perf-improvements
...
Data flow: Performance improvements
2023-10-02 16:37:24 +02:00
Tom Hvitved
4fa93a077c
Address review comments
2023-10-02 09:03:12 +02:00
erik-krogh
5d4b542995
escape unicode chars in overly-large-range
2023-09-28 20:16:09 +02:00
Asger F
0d96ed8aee
Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers
...
Shared: add in/out barriers with flow state
2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen
80f00bcb0b
FileSystem: Improve regex by only matching once instead of 3x.
2023-09-28 08:58:55 +02:00
Anders Schack-Mulligen
cfd08f23a5
FileSystem: Fix qldoc.
2023-09-28 08:58:55 +02:00
Asger F
ba1f8766aa
Shared: update PartialPathNode accordingly
2023-09-27 14:38:28 +02:00
Asger F
6792592a15
Shared: add late checks for stateful in/out barriers
2023-09-27 14:38:28 +02:00
Taus
ff35f9fb8c
Shared: Clean up NodeInfo in shared extractor
...
I was perusing the shared extractor the other day, when I came across
the `NodeInfo` struct. I noticed that the `fields` and `subtypes` fields
on this struct had two seemingly identical ways of expressing the same
thing: `None` and `Some(empty)` (where `empty` is respectively the empty
map and the empty vector). As far as I can tell, there's no semantic
difference in either case, so we can just elide the option type entirely
and use the empty value directly. This has the nice side-effect of
cleaning up some of the other code.
2023-09-27 12:29:07 +00:00
Tom Hvitved
e7a3dc83bc
Data flow: Performance improvements
2023-09-26 20:42:03 +02:00
Asger F
6e869452b5
Shared: remove pragma[inline] implied by bindingset
2023-09-26 15:42:24 +02:00
Asger F
c7e892fa8e
Shared: change note
2023-09-26 15:24:29 +02:00
Asger F
cfed7e9b6c
Shared: add in/out barriers with flow state
2023-09-25 09:58:49 +02:00
Anders Schack-Mulligen
aa2c7a79d6
Dataflow: Add bindingset
2023-09-25 08:55:09 +02:00
Anders Schack-Mulligen
66da997b7b
Dataflow: Make use of defaults for language-specific hooks.
2023-09-22 14:54:22 +02:00
Anders Schack-Mulligen
7e04ac55b7
Merge pull request #14268 from aschackmull/java/xmlparsers-typetrack
...
Java/Dataflow: Add new light-weight data flow api and use it in XmlParsers
2023-09-21 13:33:21 +02:00
Anders Schack-Mulligen
13f7daf71e
Merge pull request #13982 from aschackmull/dataflow/typeflow-calledge-pruning
...
Dataflow: Add type-based call-edge pruning.
2023-09-21 13:33:08 +02:00
Anders Schack-Mulligen
3dadfa2243
Dataflow: review fixes
2023-09-21 11:52:41 +02:00
Anders Schack-Mulligen
d285afba08
Typetracking: minor perf fix.
2023-09-20 14:52:49 +02:00
github-actions[bot]
3acf5244b0
Post-release preparation for codeql-cli-2.14.6
2023-09-20 10:25:10 +00:00
Anders Schack-Mulligen
d7e965f863
Dataflow: Add lightweight api based on TypeTracking.
2023-09-20 10:21:21 +02:00
Anders Schack-Mulligen
d7bd8c7ffd
Shared/TypeTracking: Add support for flow from non-LocalSourceNode source and bugfix in smallstep.
2023-09-20 10:19:33 +02:00
Tom Hvitved
7c2df87ea2
Merge pull request #14247 from hvitved/dataflow/fix-consitency-checks
...
Data flow: Fix two consistency checks
2023-09-19 15:45:21 +02:00
github-actions[bot]
0a3670727f
Release preparation for version 2.14.6
2023-09-19 11:40:30 +00:00
Anders Schack-Mulligen
42054539f4
Dataflow: Minor review fixes.
2023-09-19 12:12:15 +02:00
Tom Hvitved
daad69bb30
Data flow: Fix two consistency checks
2023-09-18 16:36:11 +02:00
Anders Schack-Mulligen
b13d026434
Dataflow: Review fixes.
2023-09-18 13:15:26 +02:00
erik-krogh
9c0682848e
use final class aliases to use extends instead of instanceof in the shared libraries
2023-09-18 10:25:49 +02:00
Anders Schack-Mulligen
74787bfba8
Dataflow: One more minor perf tweak.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
b63d518114
Dataflow: Minor perf tweak.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
b456ba217a
Dataflow: Improve rev-to-fwd call edge pruning.
2023-09-13 15:43:46 +02:00
