1630 Commits

Author	SHA1	Message	Date
Owen Mansel-Chan	8cbab0c66e	Model logrus.FieldLogger using models-as-data	2024-11-19 11:18:20 +00:00
Owen Mansel-Chan	d37c816bd9	Model some Xorm methods in QL	2024-11-19 11:18:17 +00:00
Owen Mansel-Chan	25cd4d4585	Model some squirrel methods in QL ... We need to put a restriction on the type of the argument.	2024-11-19 11:18:15 +00:00
Owen Mansel-Chan	a0729fc760	Fix typo in package path ... Co-authored-by: Edward Minnix III <egregius313@github.com>	2024-11-19 11:18:13 +00:00
Owen Mansel-Chan	35cbc162b0	Convert logging sinks to use MaD	2024-11-19 11:18:11 +00:00
Owen Mansel-Chan	85c7e8c221	Convert gocb nosql-injection sinks to MaD	2024-11-19 11:18:09 +00:00
Owen Mansel-Chan	fbaad09179	Convert mongodb nosql-injection sinks to MaD	2024-11-19 11:18:02 +00:00
Owen Mansel-Chan	b4c84be3be	Convert database/sql/driver sql-injection sinks to MaD	2024-11-19 11:15:48 +00:00
Owen Mansel-Chan	e4eef6791a	Convert database/sql sql-injection sinks to MaD	2024-11-19 11:15:42 +00:00
Owen Mansel-Chan	4cca6cff59	Convert Beego orm sql-injection sinks to MaD	2024-11-19 11:13:32 +00:00
Owen Mansel-Chan	2282a8184b	Convert Bun sql-injection sinks to MaD	2024-11-19 11:13:30 +00:00
Owen Mansel-Chan	1c305aa8f3	Convert Xorm sql-injection sinks to MaD	2024-11-19 11:13:28 +00:00
Owen Mansel-Chan	1ab50fc62c	Convert Gorm sql-injection sinks to MaD	2024-11-19 11:13:26 +00:00
Owen Mansel-Chan	fb050e8b43	Convert sqlx sql-injection sinks to MaD	2024-11-19 11:13:23 +00:00
Owen Mansel-Chan	d9d3e74e8c	Convert gogf/gf sql-injection sinks to MaD	2024-11-19 11:13:17 +00:00
Owen Mansel-Chan	1315a1e9ae	Upgrade and convert gorqlite sql-injection sinks to MaD	2024-11-19 11:13:13 +00:00
Owen Mansel-Chan	924467bebe	Convert squirrel sql-injection sinks to MaD (non-existent methods removed) ... Various non-existent methods were modeled, and I couldn't find any evidence that they used to exist. They aren't in the stubs or tests. I have removed them.	2024-11-19 11:13:10 +00:00
Owen Mansel-Chan	5745969462	Set subtypes=false when it has no meaning	2024-11-16 19:34:23 +00:00
Kevin Stubbings	eb3a76ddce	Merge branch 'github:main' into path-sanitizers	2024-11-12 16:03:00 -08:00
Kevin Stubbings	8744f158bd	New tests	2024-11-12 15:44:47 -08:00
Owen Mansel-Chan	44e865114a	Add change note	2024-11-12 11:37:07 +00:00
Owen Mansel-Chan	dfd8e7d397	Set subtypes column to True in models ... This is almost always what we want.	2024-11-12 11:21:52 +00:00
Owen Mansel-Chan	fd4a6d4bb8	Change note	2024-11-11 23:55:57 +00:00
Owen Mansel-Chan	13fb92ad3e	Rename getIntermediateEmbeddedType	2024-11-11 23:53:14 +00:00
Owen Mansel-Chan	d3a6452860	Add missing QLDoc	2024-11-11 23:50:09 +00:00
Owen Mansel-Chan	6af5b55d51	Refactor elementAppliesToQualifier ... This is needed for performance when there are lots of embeddings.	2024-11-11 23:50:08 +00:00
Owen Mansel-Chan	3986dffc91	Keep methods and fields separate in SourceOrSinkElement ... This improves performance.	2024-11-11 23:50:06 +00:00
Owen Mansel-Chan	b6a31b1def	Restrict to Methods	2024-11-11 23:50:04 +00:00
Owen Mansel-Chan	8abb0594c3	Combine two arms of newtype TSourceOrSinkElement	2024-11-11 23:48:32 +00:00
Owen Mansel-Chan	b2c2a94866	Accept review comment - doc clarification	2024-11-11 23:48:30 +00:00
Owen Mansel-Chan	39afb18ee4	Fix bad join order	2024-11-11 23:48:29 +00:00
Owen Mansel-Chan	80e8015e67	Inline late and remove manual magic	2024-11-11 23:48:27 +00:00
Owen Mansel-Chan	c2aee37210	getSyntacticQualifier -> getSyntacticQualifierBaseType ... This improves performance.	2024-11-11 23:48:25 +00:00
Owen Mansel-Chan	ede3b9f033	Improve join order by making a separate predicate	2024-11-11 23:48:23 +00:00
Owen Mansel-Chan	e335737f38	Minor fixes to docs	2024-11-11 23:48:21 +00:00
Owen Mansel-Chan	adc946ec2b	Revert simplification to make tests pass	2024-11-11 23:48:19 +00:00
Chris Smowton	f61251cc24	Document elementAppliesToQualifier	2024-11-11 23:43:59 +00:00
Chris Smowton	7ffff43424	Improve comments	2024-11-11 23:43:57 +00:00
Chris Smowton	cd99bea9c1	Explain getSyntacticQual	2024-11-11 23:43:55 +00:00
Chris Smowton	ccc525abd3	Remove probably-unnecessary pragma	2024-11-11 23:43:53 +00:00
Chris Smowton	fd40662ad8	Rename getImplicitFieldReadInstruction	2024-11-11 23:43:51 +00:00
Chris Smowton	e290cecabd	Rename ensureCorrectTypeInfo and getSyntacticRecv	2024-11-11 23:43:49 +00:00
Chris Smowton	17a3429f1e	Correct hasTypeInfo doc comment	2024-11-11 23:43:47 +00:00
Chris Smowton	20e8d48869	Add comment noting that a Method or Field might have multiple SourceOrSinkElements	2024-11-11 23:43:45 +00:00
Chris Smowton	520acc4b1c	Further simplify interpretElement to avoid 'm' only being used on one side of a disjunction	2024-11-11 23:43:44 +00:00
Chris Smowton	d9126d384f	Simplify interpretElement	2024-11-11 23:43:42 +00:00
Chris Smowton	e90e313295	Simplify ensureCorrectTypeInfo	2024-11-11 23:43:40 +00:00
Owen Mansel-Chan	e46ec5a171	Fix MaD inheritance	2024-11-11 23:41:11 +00:00
Owen Mansel-Chan	91375d3a49	Update ExternalFlow.qll docs on subtypes column	2024-11-11 23:31:39 +00:00
Owen Mansel-Chan	c8f41206be	Add a change note	2024-11-08 14:23:55 +00:00