Asger F
b4bd8e701c
JS: Add test for file classification change
2024-11-26 12:33:39 +01:00
Geoffrey White
d1915c707d
Swift: Add a test revealing the issue in pure dataflow.
2024-11-26 11:24:42 +00:00
Geoffrey White
45858527e2
Swift: Add another test case.
2024-11-26 11:15:24 +00:00
Geoffrey White
6130679c34
Swift: Label the now missing cases for CWE-020 and dataflow.
2024-11-26 11:13:19 +00:00
Paolo Tranquilli
cb0ac61db6
Merge pull request #18069 from geoffw0/sourcemodels
...
Rust: Add some flow source models
2024-11-26 12:08:02 +01:00
Jeroen Ketema
d9b278de66
C++: Promote cpp/guarded-free
2024-11-26 11:45:55 +01:00
Rasmus Lerchedahl Petersen
f508f8eb83
Java: address review comments
2024-11-26 11:44:16 +01:00
Paolo Tranquilli
7a86257968
Merge branch 'main' into redsun82/rust-rename
2024-11-26 10:48:19 +01:00
Paolo Tranquilli
d73dcd6753
Merge pull request #18105 from paldepind/rust-string-to-str
...
Rust: Change `&String` to `&str`
2024-11-26 10:45:44 +01:00
Paolo Tranquilli
8a01161d4a
Rust: rename MatchExpr.expr to scrutinee in all layers
...
This doesn't require `ql.name` and is simpler while we don't have
to write upgrade scripts. The `ql.name` mechanism might get useful
once we do have to write upgrade scripts, as that doesn't change the
dbscheme.
2024-11-26 10:42:13 +01:00
Simon Friis Vindum
8252e1da02
Rust: Change &String to &str
2024-11-26 09:21:44 +01:00
Simon Friis Vindum
44b1ad52d9
Rust: Support self parameters in variable and SSA library
2024-11-26 09:02:13 +01:00
Ed Minnix
8c6e08c94e
Add `slices.Concat` example
2024-11-25 21:57:24 -05:00
Ed Minnix
96a796585f
fix formatting issue
2024-11-25 21:57:09 -05:00
Ed Minnix
460df89f28
Add `slices.Max` example
2024-11-25 21:56:52 -05:00
Geoffrey White
1090164b77
Merge branch 'main' into sourcemodels
2024-11-25 21:12:24 +00:00
Geoffrey White
28c0e899b7
Rust: Autoformat.
2024-11-25 20:50:56 +00:00
Geoffrey White
e6302cae53
Rust: Address CI and ql-for-ql issues.
2024-11-25 20:07:47 +00:00
Geoffrey White
e8981a505d
Rust: Fix qhelp.
2024-11-25 20:00:22 +00:00
Geoffrey White
77f5168590
Rust: Query metadata and path edges.
2024-11-25 19:54:06 +00:00
Geoffrey White
be5bd1da0a
Rust: Also add the good example and a couple of other cited good cases to the test.
2024-11-25 19:54:04 +00:00
Geoffrey White
82f2c6075f
Rust: Add qhelp + examples.
2024-11-25 19:54:03 +00:00
Geoffrey White
88fc7be0a2
Rust: Implement the query.
2024-11-25 19:22:13 +00:00
Geoffrey White
9ead2dc03c
Rust: Add a query test.
2024-11-25 19:14:16 +00:00
Geoffrey White
93e7202a69
Merge pull request #17940 from geoffw0/resolvable
...
Rust: Add unresolved macro calls diagnostic
2024-11-25 19:08:29 +00:00
Tom Hvitved
5e7cd46117
Rust: Flow through variants
2024-11-25 19:17:57 +01:00
Tom Hvitved
2fb670a27c
Rust: Do not print unit type in data flow
2024-11-25 19:14:44 +01:00
Tom Hvitved
511f791511
Rust: Add more flow tests
2024-11-25 19:14:42 +01:00
Paolo Tranquilli
c3b4447586
Merge branch 'main' into redsun82/rust-canonical-enum
2024-11-25 17:46:48 +01:00
Paolo Tranquilli
74aa47a809
Merge pull request #18094 from github/redsun82/rust-rename
...
Codegen/Rust: allow renaming in QL
2024-11-25 17:42:25 +01:00
Paolo Tranquilli
269ea75036
Rust: matched_expr -> scrutinee
2024-11-25 17:23:47 +01:00
Paolo Tranquilli
b47e9612eb
Rust: fix MatchExpr.getExpr renaming
2024-11-25 17:14:05 +01:00
Paolo Tranquilli
261e0a1a53
Codegen/Rust: allow renaming in QL
...
This adds a `ql.name` codegen pragma to change the name of a property on
the QL side. This is useful to give more meaningful names than what we
get from the generated rust AST.
2024-11-25 17:04:03 +01:00
Mathias Vorreiter Pedersen
8fd581dd7e
Merge pull request #18093 from MathiasVP/more-win32-command-execution-functions
...
C++: Add more `CommandExecutionFunction`s
2024-11-25 15:26:50 +00:00
Simon Friis Vindum
d06b5833cf
Rust: Add an additional variables test with a self parameter
2024-11-25 16:08:26 +01:00
Geoffrey White
f92e8555a6
Rust: update for toString changes in main.
2024-11-25 14:35:12 +00:00
Geoffrey White
e9a13aec1d
Merge branch 'main' into resolvable
2024-11-25 14:33:56 +00:00
Paolo Tranquilli
adafe3e5b0
Merge branch 'main' into redsun82/rust-canonical-enum
2024-11-25 15:28:45 +01:00
Jami Cogswell
05b6700607
Java: add SHA384 to list of secure algorithms
2024-11-25 09:27:53 -05:00
Arthur Baars
c2b342f1a0
Merge pull request #18084 from github/aibaars/java-sha3
...
Java: add SHA3 family to list of secure crypto algorithms
2024-11-25 15:07:43 +01:00
Simon Friis Vindum
d5c8dfd88c
Merge pull request #18092 from paldepind/rust-param-base
...
Rust: Generate `ParamBase`, a superclass of `Param` and `SelfParam`
2024-11-25 14:58:07 +01:00
Rasmus Lerchedahl Petersen
25664d0e53
Java: Add support for non-integer bounds in inline expectations
2024-11-25 14:48:17 +01:00
Mathias Vorreiter Pedersen
03ab74e07d
C++: Add more 'CommandExecutionFunction's.
2024-11-25 13:43:20 +00:00
Simon Friis Vindum
0de6658660
Rust: Use ParamBase in data flow implementation
2024-11-25 14:18:08 +01:00
Napalys Klicius
e9dff4d68f
Merge pull request #17953 from Napalys/napalys/ts57
...
JS: upgrade TypeScript to 5.7
2024-11-25 14:16:40 +01:00
Simon Friis Vindum
0d02126f12
Generate ParamBase, superclass of Param and SelfParam
2024-11-25 14:07:50 +01:00
Rasmus Lerchedahl Petersen
37935eea3b
java: separate bounds onto different lines
2024-11-25 12:32:11 +01:00
Napalys Klicius
d6372aebc7
Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-11-25 12:12:12 +01:00
Napalys
e38b63ebcd
JS: previously js/case-sensitive-middleware-path was not taking into consideration unknown flags
2024-11-25 11:56:06 +01:00
Napalys
178da21fb8
JS: Added test case for CWE-178 RegExp with unknown flags
2024-11-25 11:53:00 +01:00
