Tom Hvitved
89502d63e5
Rust: Implement database quality telemetry query
2025-02-06 10:46:48 +01:00
Simon Friis Vindum
820d2cbeb8
Shared: Use edge dominance in basic block library
2025-02-06 10:38:32 +01:00
Asger F
d3ee658399
Python: resolve remaining TODOs
2025-02-06 10:27:56 +01:00
Asger F
975ce064fc
Python: implement for polynomial redos
2025-02-06 10:27:45 +01:00
Asger F
15c2ccb880
Python: ignore experimental for now
2025-02-06 10:27:43 +01:00
Asger F
9dfd1cc608
Python: Fixup broken patch
2025-02-06 10:27:21 +01:00
Asger F
e4a1847dad
Python: mass enable diff-informed data flow
2025-02-06 10:27:19 +01:00
Asger F
6ae06aed9e
Update javascript/extractor/src/com/semmle/js/extractor/CFGExtractor.java
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-02-06 10:03:28 +01:00
Asger F
83ccdb76ed
Merge pull request #18686 from asgerf/ac/bash-quotation-oom
...
Actions: avoid N^2 parsing in common cases
2025-02-06 09:59:23 +01:00
Asger F
6207e39b5f
JS: Change note
2025-02-06 09:58:24 +01:00
Jami Cogswell
d21c8d789b
Java: restrict sink to first arg of two-arg constructor call
2025-02-05 21:19:59 -05:00
Jami Cogswell
bd47dcc87d
Java: check first arg for taint
2025-02-05 16:56:16 -05:00
Lindsay Simpkins
6f2832401c
csharp MaD add change note
2025-02-05 16:37:53 -05:00
Lindsay Simpkins
e0034e566f
csharp update MaD for HttpRequestMessage and UriBuilder
2025-02-05 15:49:49 -05:00
Jami Cogswell
e8724ab220
Java: sanitize constructor call instead and update test cases
2025-02-05 15:46:10 -05:00
Remco Vermeulen
7619f1dac9
Merge pull request #18679 from rvermeulen/rvermeulen/ccr-suites
...
Add CCR suites
2025-02-05 09:35:48 -08:00
Jami Cogswell
4a4585a526
Java: move comment
2025-02-05 11:36:58 -05:00
Ed Minnix
0a817eb1da
Fix test expectations
2025-02-05 11:25:51 -05:00
Ed Minnix
274a2d8dac
Remove remoteFlowSource integration test
2025-02-05 11:24:29 -05:00
Ed Minnix
a783ac1abf
Add QL tests for remoteFlowSource
2025-02-05 11:22:23 -05:00
Paolo Tranquilli
d65a704209
Merge pull request #18635 from hvitved/codegen/self-type-alias
...
Codegen: Improve return type of self-typed properties
2025-02-05 17:20:25 +01:00
Jami Cogswell
dce89c5419
Java: update qhelp to align with other csrf queries
2025-02-05 10:57:47 -05:00
Rasmus Lerchedahl Petersen
5feb401607
ruby: Add query for hoisting Rails ActiveRecord calls
...
This does not take assicoations into account.
It uses ActiveRecordModelFinderCall to identify relevant calls.
This class has therefor been made public.
2025-02-05 16:47:48 +01:00
Paolo Tranquilli
e4523ef581
Merge pull request #18684 from github/redsun82/swift-keypath-expr
...
Swift: fix `KeyPathExpr` assertion
2025-02-05 16:40:25 +01:00
Jami Cogswell
c6a71cd3fd
Java: minor qhelp updates
2025-02-05 10:20:57 -05:00
Nora Dimitrijević
ab521ff180
Merge pull request #18688 from d10c/d10c/drop-bigint-avg
...
Update docs to remove BigInt `avg`
2025-02-05 16:07:57 +01:00
Tom Hvitved
493953e724
Rust: Extend path resolution to cover type parameters
2025-02-05 15:30:07 +01:00
Tom Hvitved
9319b1848d
Merge pull request #18682 from hvitved/dataflow/aliases
...
Data flow: Add aliases for removing `DataFlow` prefixes
2025-02-05 15:04:13 +01:00
Nora Dimitrijević
e455a6c5d7
Update docs to remove BigInt avg
2025-02-05 14:27:21 +01:00
Taus
60d97e0e16
Python: Print file path when logging context errors
...
This makes it _much_ easier to find the offending bit of syntax.
2025-02-05 13:13:39 +00:00
Asger F
4ec84e9327
Actions: update expected output
2025-02-05 13:36:38 +01:00
Asger F
1904b026b2
Actions: Avoid blowup in quotation parser
...
The parser has an inherent N^2 blowup and will need a rewrite eventually. For now I'm just trying to make it not blow up as often.
2025-02-05 13:35:52 +01:00
Asger F
e6b5040909
Actions: add test with many quoted strings
2025-02-05 13:35:50 +01:00
Tom Hvitved
95ab48dfbf
Rust: Run codegen
2025-02-05 13:27:08 +01:00
Tom Hvitved
e4d9e29368
Rust: Implement data flow through tuple structs
2025-02-05 13:27:07 +01:00
Tom Hvitved
22f6f4e46b
Rust: Add data flow test for tuple structs
2025-02-05 13:27:04 +01:00
Simon Friis Vindum
6e99087b40
Rust: Basic support for futures and await
2025-02-05 13:22:57 +01:00
Geoffrey White
f9f5d2c3c2
Rust: Accept changes to consistency test .expected file as well.
2025-02-05 11:45:38 +00:00
Simon Friis Vindum
a40cfeb6c7
Rust: Add test for model returning a future
2025-02-05 12:35:56 +01:00
Owen Mansel-Chan
d7117ef3e5
Merge pull request #18681 from github/dependabot/go_modules/go/extractor/extractor-dependencies-bab70e25a9
...
Bump golang.org/x/mod from 0.22.0 to 0.23.0 in /go/extractor in the extractor-dependencies group
2025-02-05 10:50:22 +00:00
Geoffrey White
1608524c26
Rust: Accept changes to the dataflow/sources test as well.
2025-02-05 10:40:26 +00:00
Geoffrey White
0590c6f171
Rust: Fix .expected after merge.
2025-02-05 10:36:11 +00:00
Paolo Tranquilli
749fcb07be
Merge pull request #18683 from github/redsun82/swift-docs
...
Swift: update supported version in docs
2025-02-05 11:05:33 +01:00
Tom Hvitved
0f52fe92cf
Data flow: Add aliases for removing DataFlow prefixes
2025-02-05 10:57:16 +01:00
Paolo Tranquilli
1a654557a9
Swift: fix KeyPathExpr assertion
2025-02-05 10:52:34 +01:00
Paolo Tranquilli
48427b6700
Swift: update supported version in docs
2025-02-05 10:39:39 +01:00
Geoffrey White
70d969f3a0
Merge branch 'main' into http
2025-02-05 09:36:43 +00:00
Anders Schack-Mulligen
bcec7ee234
Merge pull request #18633 from aschackmull/dataflow/refactor-flowstate
...
Dataflow: Refactor FlowState to be paired with Node
2025-02-05 09:43:25 +01:00
Simon Friis Vindum
86d7feabc6
Rust: Add value flow model for clone methods
2025-02-05 09:18:58 +01:00
Simon Friis Vindum
670ecb3298
Merge pull request #18673 from paldepind/rust-higher-order-function-model-generation
...
Rust: Higher order function model generation
2025-02-05 09:15:46 +01:00
