Owen Mansel-Chan
d9d3e74e8c
Convert gogf/gf sql-injection sinks to MaD
2024-11-19 11:13:17 +00:00
Owen Mansel-Chan
1315a1e9ae
Upgrade and convert gorqlite sql-injection sinks to MaD
2024-11-19 11:13:13 +00:00
Owen Mansel-Chan
924467bebe
Convert squirrel sql-injection sinks to MaD (non-existent methods removed)
...
Various non-existent methods were modeled, and I couldn't find any
evidence that they used to exist. They aren't in the stubs or tests. I
have removed them.
2024-11-19 11:13:10 +00:00
Geoffrey White
c7c6924fda
Rust: Implement query, source/sink/barrier classes and concepts. All of this is framework, nothing is concretely modelled yet.
2024-11-19 11:09:43 +00:00
Geoffrey White
6a7fb06086
Rust: Add .qhelp and examples.
2024-11-19 11:09:42 +00:00
Simon Friis Vindum
bacc37d886
Rust: Add additional tests for intraprocedural data flow
2024-11-19 12:07:26 +01:00
Geoffrey White
2df565c84f
Rust: Add options.yml and sqlx 'query cache' (result of 'sqlx prepare') so that the query test can function.
2024-11-19 10:56:37 +00:00
Geoffrey White
28d0ad94d5
Rust: Add placeholder SQL injection query, linked in test.
2024-11-19 10:56:36 +00:00
Geoffrey White
3673c7c813
Rust: Add SQL injection test cases (complete and functioning).
2024-11-19 10:56:35 +00:00
Michael Nebel
45458ed72b
Merge pull request #17845 from michaelnebel/csharp/net8runtimehigherorder
...
C#: Add generated higher order models for .NET8 Runtime.
2024-11-19 11:52:34 +01:00
Alvaro Muñoz
afb7967a0c
Delete .actual test files
2024-11-19 11:31:59 +01:00
Alvaro Muñoz
3ce3cf43be
refactor common code to identify untrusted checkouts
2024-11-19 11:31:35 +01:00
Simon Friis Vindum
b3668f8183
Merge pull request #17971 from paldepind/rust-df-patterns
...
Rust: Include patterns as data flow nodes
2024-11-19 11:12:12 +01:00
Simon Friis Vindum
2307df41ed
Merge pull request #18010 from paldepind/rust-df-viable-callable
...
Rust: Include method calls in DataFlowCall and implement simple call target resolution
2024-11-19 11:10:34 +01:00
Michael Nebel
e3990b7d04
C#: Add change-note.
2024-11-19 10:56:19 +01:00
Stephan Brandauer
4208f031e3
Java: drop automodel queries
2024-11-19 10:40:22 +01:00
Stephan Brandauer
aea7c3fc81
Java: drop automodel change note
2024-11-19 10:40:17 +01:00
Paolo Tranquilli
e8677b46d5
Bazel: rename shortcut to install
2024-11-19 10:34:40 +01:00
Tom Hvitved
bb8d0b4881
Rust: Handle early returns in async blocks in CFG
2024-11-19 10:33:25 +01:00
Tom Hvitved
b6103e1ef4
Rust: Add CFG test for early return in async block
...
Also made the test comply with `cargo check`.
2024-11-19 10:32:43 +01:00
Paolo Tranquilli
40b8406d62
Bazel: use installer shortcut in docs and workflows
2024-11-19 10:32:21 +01:00
Michael Nebel
263a4a9fcb
C#: Allow other characters between build-stdput and the expected message.
2024-11-19 10:26:07 +01:00
Michael Nebel
f89e80f402
C#: Update integration tests expected output.
2024-11-19 10:26:06 +01:00
Michael Nebel
05a19adc8f
C#: Update global.json files.
2024-11-19 10:26:04 +01:00
Michael Nebel
d8313fc7b4
C#: Update .NET version in project files.
2024-11-19 10:26:02 +01:00
Michael Nebel
6b9d9a2c94
C#: Update stub generator script.
2024-11-19 10:26:00 +01:00
Michael Nebel
57e0e2dba1
C#: Update workflow files and scripts.
2024-11-19 10:25:58 +01:00
Michael Nebel
201a5e9faa
C#: Update the extractor to target .NET 9.
2024-11-19 10:25:52 +01:00
Paolo Tranquilli
6e33f979c7
Bazel: add an installer shortcut to codeql_pack
...
This makes the first `codeql_pack` in a package add an `installer` target
aliasing the `<name>-installer` one. This makes it so that one can for
example do `bazel run //rust:installer` instead of the stuttering
`bazel run //rust:rust-installer`. If a bazel package defines multiple
`codeql_pack` targets, the first one only will get the `installer` alias.
2024-11-19 10:25:31 +01:00
Tom Hvitved
ef9f3835e5
Merge pull request #18007 from hvitved/rust/cfg/and-let
...
Rust: Improve CFG for `let` expressions
2024-11-19 10:23:32 +01:00
Calum Grant
2bfd7326d9
Merge pull request #18004 from github/revert-17948-revert-17694-multiple-entry-point
...
Revert "Revert "C++: Do not generate IR for functions with multiple entry points""
2024-11-19 09:20:24 +00:00
Napalys
c03d69af1e
JS: Add: dataflow step for find, findLast, findLastIndex callback functions
2024-11-19 09:42:11 +01:00
Napalys
b64b837db3
JS: Add: test cases for find, findLast, findLastIndex with callbacks
2024-11-19 09:35:43 +01:00
Napalys
1b0f8aa657
JS: removed unnecessary findlast module import
2024-11-19 09:30:05 +01:00
Paolo Tranquilli
99494dd540
Merge pull request #18012 from github/revert-18011-revert-17937-redsun82/rust-cargo-options
...
Revert "Revert "Rust: allow to specify more cargo configuration options""
2024-11-19 09:03:52 +01:00
Tom Hvitved
46b4bad510
Rust: Update expected test output
2024-11-19 08:59:12 +01:00
Tom Hvitved
c85a5f9644
Rust: Run cargo fmt
2024-11-19 08:58:34 +01:00
Napalys
72a69cfa17
Added change notes
2024-11-19 08:24:36 +01:00
Owen Mansel-Chan
e2f17c63d7
Merge pull request #17988 from owen-mc/java/fix-unreachable-blocks-in-const-switch-stmt
...
Java: fix unreachable basic blocks in const switch stmt
2024-11-19 00:48:12 +00:00
Owen Mansel-Chan
c5bec1cc7f
Merge pull request #17966 from owen-mc/go/mad/subtypes-true
...
Go: set `subtypes` column to true for models where it has a meaning
2024-11-19 00:43:55 +00:00
Jeroen Ketema
b622c6e9ca
Merge pull request #18015 from jketema/cpu-cleanup
...
Remove duplicated "Supported CPU architectures" from "Supported platforms" table
2024-11-18 21:10:17 +01:00
REDMOND\brodes
792231c949
Removing SEH default case for function calls as the logic to handle SEH is not yet part of the IR generation to make this logic work.
2024-11-18 14:43:44 -05:00
Jeroen Ketema
ba545ca5d8
Remove duplicated "Supported CPU architectures" from "Supported platforms" table
2024-11-18 19:18:35 +01:00
Jeroen Ketema
84f3e6a0d3
Merge branch 'main' into guarded-free2
2024-11-18 19:09:23 +01:00
Ben Rodes
1c7b5aebb5
Merge branch 'main' into brodes/seh_flow_phase1_throwing_models
2024-11-18 12:48:38 -05:00
Mathias Vorreiter Pedersen
f2f83f77e0
Merge pull request #18013 from MathiasVP/non-boolean-consistency-check
...
C++: Add another IR consistency query
2024-11-18 17:27:33 +00:00
Paolo Tranquilli
f7ee5f4bf5
Merge pull request #18003 from github/redsun82/rust-qltest
...
Rust: only accept `options.yml` in QL tests
2024-11-18 17:24:57 +01:00
Paolo Tranquilli
8377ee545f
Rust: fix reading lists from options.yml
2024-11-18 17:22:23 +01:00
REDMOND\brodes
4b83a451bd
Change log
2024-11-18 11:14:46 -05:00
REDMOND\brodes
de05aee483
Adding model transition to using Throwing.qll.
2024-11-18 11:11:25 -05:00
