Jonas Jensen
e0ba2b2251
C++: Fix name of suppressUnusedType
2018-09-04 13:38:28 +02:00
Jonas Jensen
ab944f3807
Merge pull request #139 from geoffw0/function-wrappers
...
CPP: Make FunctionWithWrappers `toCause` work on builtins.
2018-09-04 13:36:33 +02:00
Tom Hvitved
c4c74cd005
C#: Split up DataFlowInternal.qll
...
Split up into `internal/BaseSSA.qll` and `internal/Steps.qll`.
2018-09-04 13:30:54 +02:00
Ian Lynagh
3fd6a8de7d
C++: Fix the definition of GlobalNamespace.getADeclaration()
...
Globals can still have declarations in declaration statements.
We already rule out local variables etc via the isTopLevel check,
so we don't need to consider DeclStmt.
2018-09-04 11:37:10 +01:00
Ian Lynagh
1fcf156e7e
C++: Add another test to namespaces test
2018-09-04 11:36:50 +01:00
Ian Lynagh
e39a0d2f72
C++: Tweak namespaces test
2018-09-04 11:36:09 +01:00
Jonas Jensen
73675e29f2
Merge pull request #138 from ian-semmle/topLevel
...
C++: Use Declaration.isTopLevel() in GlobalNamespace.getADeclaration()
2018-09-04 10:03:19 +02:00
Jonas Jensen
07bacbf389
C++: Follow suppressUnusedThis convention
2018-09-04 09:40:50 +02:00
Esben Sparre Andreasen
cb2a6ede59
JS: support http.request URL requests
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
0a89f1a420
JS: eliminate DefaultUrlRequest: extract the got library
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
de6b83548a
JS: refactor DefaultUrlRequest: extract the got library
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
1abdf2ffd5
JS: refactor DefaultUrlRequest: extract the http library
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
5f26c23582
JS: refactor DefaultUrlRequest: extract the fetch API
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
b3b997ca91
JS: refactor DefaultUrlRequest: extract the axios library
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
d7a81ef8ef
JS: refactor DefaultUrlRequest: extract the request library
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
80b81b07c5
JS: refactor DefaultUrlRequest: extract names
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
68b7a8b57e
JS: change notes for UrlRequest libraries and js/request-forgery
2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
f5a6af54e6
JS: add security query: js/request-forgery
2018-09-04 09:25:42 +02:00
Esben Sparre Andreasen
2104cf55e3
JS: add models of URL requests
2018-09-04 09:25:42 +02:00
Jonas Jensen
6e9cc46e80
Merge pull request #131 from ian-semmle/namespace_vars
...
C++: Give namespace variables a qualified name
2018-09-04 08:56:01 +02:00
Jonas Jensen
a2946f71bd
Merge pull request #96 from ian-semmle/typo
...
C++: Fix typo
2018-09-04 08:51:15 +02:00
Jonas Jensen
adc5ee86ad
Merge pull request #128 from geoffw0/cwe-190-precision
...
CPP: Adjust precisions for the CWE-190 queries.
2018-09-04 08:44:38 +02:00
Ian Lynagh
4230adbca2
C++: Remove reundant override
2018-09-03 18:12:30 +01:00
calumgrant
af3f855491
Merge pull request #94 from hvitved/csharp/cfg/minor-fixes
...
C#: Minor CFG improvements
2018-09-03 17:41:18 +01:00
Nick Rolfe
78f5be0d49
Merge pull request #143 from adityasharad/version/1.19.0
...
Version: Bump to 1.19.0 dev.
2018-09-03 17:40:23 +01:00
Nick Rolfe
04e919df9d
C++: clearer alert wording in integer-multiplication-cast-to-long
2018-09-03 16:56:56 +01:00
Aditya Sharad
2363f49e3a
Version: Bump to 1.19.0 dev.
...
This keeps the QL for Eclipse language plugins in sync with internal `master`.
2018-09-03 16:41:28 +01:00
semmle-qlci
4dec7c5036
Merge pull request #127 from xiemaisi/js/incomplete-sanitisation-doc-improvement
...
Approved by esben-semmle
2018-09-03 16:25:44 +01:00
Jonas Jensen
88f80e4d4b
C++: Silence two more QL compiler warnings
...
One was for an unused parameter (a deliberate CP of `Type` x
`VoidType`), and one was for use of a deprecated predicate.
2018-09-03 13:45:04 +02:00
Jonas Jensen
ab6dc1d70c
C++: Add missing override annotations
2018-09-03 13:22:22 +02:00
Geoffrey White
d5b7ab5aa1
CPP: Make FunctionWithWrappers toCause work on builtin functions.
2018-09-03 11:26:02 +01:00
Nick Rolfe
5d5febf4d4
Merge pull request #137 from jbj/getEnclosingElement-changenote
...
C++: Change note for getEnclosingElement macro changes
2018-09-03 10:44:30 +01:00
Jonas Jensen
2fd73f2171
C++: getEnclosingElement-without-macros changenote
2018-09-03 11:29:03 +02:00
Jonas Jensen
b34dbfa68b
C++: Correct change note formatting
...
In Markdown, nested bullet lists are formatted with indented asterisks
rather than double asterisks.
2018-09-03 11:29:02 +02:00
Jonas Jensen
18dc1d0af0
Merge pull request #129 from Semmle/changenote-desig-init
...
cherry-pick onto rc/1.18: C++: change note for designated intializer fixes
2018-09-03 11:28:20 +02:00
Max Schaefer
759d98661c
Merge pull request #117 from esben-semmle/js/push-sort-taint-steps
...
JS: support `push` and `sort` taint steps for arrays
2018-09-03 09:20:35 +01:00
Geoffrey White
8e5c170af6
CPP: Change note.
2018-09-03 08:30:05 +01:00
Geoffrey White
3e18a9b885
CPP: Improve the special case for realloc in MemoryMayNotBeFreed.ql.
2018-09-03 08:30:05 +01:00
Max Schaefer
58e384558c
JavaScript: Improve query name and help for js/incomplete-sanitization.
...
The query applies more generally to all kinds of string escaping and encoding, not just sanitization.
2018-09-03 08:20:01 +01:00
Max Schaefer
20bff709b1
Merge pull request #136 from esben-semmle/js/composed-function-taint
...
JS: model composed functions (RC)
2018-09-03 08:18:20 +01:00
Max Schaefer
7e3adec789
Merge pull request #135 from esben-semmle/js/pick-get-taint-steps
...
JS: model property projection calls (RC)
2018-09-03 08:17:42 +01:00
Ian Lynagh
c8fcab8cfe
C++: Use Declaration.isTopLevel() in GlobalNamespace.getADeclaration()
2018-09-03 01:01:10 +01:00
Ian Lynagh
f6582ef285
C++: Fix typo
2018-09-01 15:45:41 +01:00
Jonas Jensen
98612b9f9a
C++: Tidy primitive_basic_block_member calculation
...
This change gave a slight speed-up by eliminating an unnecessary
intermediate predicate.
2018-09-01 07:46:00 +02:00
Nick Rolfe
f6e5be0af8
cherry-pick 35d31aee onto 1.18 branch
...
This changenote was committed after the `rc/1.18 branch` was taken.
2018-08-31 18:09:39 +01:00
ian-semmle
eac82f2a8a
Merge pull request #18 from nickrolfe/builtin_types_on_demand3
...
C++: built-in type tweaks
2018-08-31 16:41:02 +01:00
Ian Lynagh
3a00e24e89
C++: Give NamespaceVariables a qualified name
2018-08-31 16:39:21 +01:00
Ian Lynagh
d7d8186bbe
C++: Improve namespaces/namespaces test
2018-08-31 16:37:59 +01:00
Geoffrey White
074894298c
CPP: Adjust precisions for the CWE-190 queries.
2018-08-31 16:15:53 +01:00
ian-semmle
1ed82d63f3
Merge pull request #124 from nickrolfe/desig_init_changenote
...
C++: change note for designated intializer fixes
2018-08-31 13:19:52 +01:00