Commit Graph

78658 Commits

Author SHA1 Message Date
semmle-qlci
7513bcf7ec Merge pull request #1095 from xiemaisi/js/base64
Approved by esben-semmle
2019-03-14 11:58:50 +00:00
semmle-qlci
bd3792a49a Merge pull request #1108 from xiemaisi/js/make-zipslip-visible-by-default
Approved by esben-semmle
2019-03-14 11:58:00 +00:00
Max Schaefer
8e52528219 JavaScript: Refactor reachableFromInput to improve join. 2019-03-14 11:53:46 +00:00
Max Schaefer
993345fb7b JavaScript: Track Electron browser objects locally only. 2019-03-14 11:53:46 +00:00
Esben Sparre Andreasen
bd7eef08e8 JS: introduce CallToObjectDefineProperty::getAPropertyAttribute 2019-03-14 11:59:27 +01:00
Esben Sparre Andreasen
ff5b85067a JS: add tests 2019-03-14 11:55:41 +01:00
Max Schaefer
69c63110c1 JavaScript: Teach Function.isGenerator to check for yield. 2019-03-14 10:48:44 +00:00
Mark Shannon
ab23a157ef Python: Move taint-tracking library to new location and extend configuration to match API of other languages. 2019-03-14 10:22:57 +00:00
Tom Hvitved
84c3073c2a C#: Fix performance regression in cs/user-controlled-bypass 2019-03-14 10:36:50 +01:00
Felicity Chapman
01b8770b7c Merge pull request #1065 from yh-semmle/java-frameworks-notes
Java: update frameworks list for 1.20 release
2019-03-14 09:15:46 +00:00
Max Schaefer
5d35626c58 JavaScript: Rename a test file to avoid case clash. 2019-03-14 08:55:30 +00:00
Max Schaefer
cc8d68082e JavaScript: Show ZipSlip results by default. 2019-03-14 08:50:47 +00:00
semmle-qlci
28efd91bbc Merge pull request #1106 from xiemaisi/js/fix-backtrack-example
Approved by asger-semmle
2019-03-14 08:18:00 +00:00
Ziemowit Laski
586aa0ae41 Updated query to look for Microsoft-specific '_alloca' and '_malloca' entry points. Added sundry positive and negative test cases. 2019-03-13 18:43:24 -07:00
ian-semmle
6a555d0054 Merge pull request #1102 from nickrolfe/declarationEntry
C++: accept test output from extractor changes to template class decls
2019-03-13 22:45:49 +00:00
yh-semmle
d7925ee2ec Java: tweak change note as per review comment 2019-03-13 14:31:13 -04:00
Rebecca Valentine
f9012cb00e improves tests 2019-03-13 10:48:02 -07:00
Rebecca Valentine
64f731c8aa adds clarification in docs 2019-03-13 10:46:39 -07:00
Rebecca Valentine
688e7a9730 improves docs 2019-03-13 10:10:57 -07:00
Calum Grant
a547fbea14 Merge pull request #1073 from hvitved/csharp/get-an-indexer-call
C#: Improve performance and correctness of `IndexerProperty::getAnIndexerCall()`
2019-03-13 17:10:52 +00:00
Rebecca Valentine
7ef33de9d2 add tests to ignore generators and async functions per PR change request in description
https://github.com/Semmle/ql/pull/1078#discussion_r265010018
2019-03-13 10:04:23 -07:00
Nick Rolfe
ac2dbbff13 C++: accept test output from extractor changes to template class decls 2019-03-13 16:38:24 +00:00
Jonas Jensen
028e61b71c Merge pull request #1101 from robertbrignull/merge/rc/1.20
Merge rc/1.20 => master
2019-03-13 16:36:55 +01:00
Max Schaefer
e2cb8c5ceb JavaScript: Fix example in TypeBackTracker qldoc. 2019-03-13 15:20:41 +00:00
Max Schaefer
03a2204c30 JavaScript: Improve support for dynamic imports.
`yield import(...)` previously caused a syntax error, now it is parsed
correctly.

`parseYield` is the only place where the value of `startsExpr` matters,
so this change should not affect anything else.
2019-03-13 14:40:12 +00:00
Tom Hvitved
638af39aa0 C#: Dispatch library performance tweaks
- Restrict `OverridableCallable::getAnOverrider(ValueOrRefType t)` to types `t`
  that are sub types of the callable's declaring type.
- Use explicit recursion in `OverridableCallable::getInherited()`.
2019-03-13 13:59:46 +01:00
Kevin Backhouse
08d852fa94 Merge pull request #1048 from jbj/dataflow-link-targets
C++: Data flow dispatch across link targets
2019-03-13 12:39:59 +00:00
Tom Hvitved
5b491a8564 Merge pull request #1100 from felicity-semmle/1.20/csharp-change-notes
1.20: minor updates to C# change notes
2019-03-13 13:31:23 +01:00
Max Schaefer
bce3cd8d2f Merge pull request #1097 from felicity-semmle/1.20/javascript-change-notes
1.20: minor updates to the javascript change notes
2019-03-13 12:28:31 +00:00
Max Schaefer
8f6cb1cdb9 JavaScript: Add models for many more base64 packages.
No tests; there are too many of these.
2019-03-13 12:27:23 +00:00
Max Schaefer
f76efcb558 JavaScript: Fix modelling of Buffer base64 encoders and decoders. 2019-03-13 12:27:23 +00:00
Mark Shannon
3fbe3c37aa Add change note. 2019-03-13 12:00:42 +00:00
Jonas Jensen
e83dd6708d Merge pull request #1099 from Semmle/pdb_attrs
.gitattributes: PDB files are binary
2019-03-13 11:56:54 +01:00
Robert Brignull
5380e1df68 Merge remote-tracking branch 'upstream/rc/1.20' into merge/rc/1.20 2019-03-13 10:55:30 +00:00
Nick Rolfe
5c4c8eec3b .gitattributes: PDB files are binary 2019-03-13 10:42:28 +00:00
Felicity Chapman
7c4ab6f2ae Text updates for consistency 2019-03-13 10:31:44 +00:00
Felicity Chapman
e46eb36e58 Duplicate information for easier look up 2019-03-13 10:25:41 +00:00
Mark Shannon
e9a45268a8 Python: Don't report Python 2 print statements as having no effect. 2019-03-13 10:08:07 +00:00
Felicity Chapman
a5fbad858b Sort table alphabetically 2019-03-13 09:49:09 +00:00
Jonas Jensen
4c7b4b42a8 Merge pull request #1096 from felicity-semmle/1.20/cpp-change-notes
1.20: minor updates to the cpp change notes
2019-03-13 10:23:49 +01:00
Felicity Chapman
7da36081b2 Minor text updates for consistency 2019-03-13 09:03:29 +00:00
Felicity Chapman
5c29a2641c Sort table alphabetically 2019-03-13 08:51:49 +00:00
Esben Sparre Andreasen
3e8e2ca890 JavaScript: Accept review suggestion.
Co-Authored-By: xiemaisi <max@semmle.com>
2019-03-13 08:47:17 +00:00
Max Schaefer
37f29aafcc JavaScript: Add change note. 2019-03-13 08:21:34 +00:00
semmle-qlci
8ed5d93721 Merge pull request #1090 from hvitved/merge-rc
Approved by calumgrant
2019-03-13 08:21:02 +00:00
Max Schaefer
2dccd39bb7 JavaScript: Fix two comments. 2019-03-13 08:20:58 +00:00
Max Schaefer
28d8011bcf JavaScript: Add models for popular base64 transcoders. 2019-03-13 08:20:58 +00:00
Felicity Chapman
eae6d92dc3 Minor text changes for consistency 2019-03-13 08:06:50 +00:00
james
18ee2866be docs: reword slightly 2019-03-13 07:54:44 +00:00
Felicity Chapman
53d9f0b033 Sort tables into alphabetic order 2019-03-13 07:54:20 +00:00