Owen Mansel-Chan
f307f272d5
Go: Use provenance pretty-printing as a qltest post-process step
2024-07-28 21:31:50 +01:00
Owen Mansel-Chan
6960c5232b
Go: Add support for provenance pretty-printing as a qltest post-process step
2024-07-28 21:31:50 +01:00
Owen Mansel-Chan
1aa63c3f2e
Accept model numbering changes
2024-07-25 14:55:50 +01:00
Owen Mansel-Chan
a6cb511ed7
Convert XPath injection sinks to MaD
2024-07-25 12:56:06 +01:00
Owen Mansel-Chan
f3069c8fbb
Improve XPath injection test (incl extra sinks)
...
Currently the extra sinks are not detected. This will be fixed in the
next commit.
2024-07-25 12:55:05 +01:00
Owen Mansel-Chan
cb0589dfb7
Tests: accept model numbering changes
2024-07-18 11:35:52 +01:00
Owen Mansel-Chan
0a2ed8302a
Add test for websocket remote flow sources
2024-07-18 07:45:03 +01:00
Owen Mansel-Chan
1e4aadfbfd
Trivial: improve variable name
2024-07-18 07:44:19 +01:00
Owen Mansel-Chan
8bc883274f
Minor improvement to jsoniter test
2024-07-18 07:38:23 +01:00
Owen Mansel-Chan
d109b1e20d
Accept model numbering changes in tests
2024-07-17 12:37:23 +01:00
Owen Mansel-Chan
f33927457f
Adapt test to work better for MaD
...
In MaD, `Argument[n]` corresponds to the post-update node of the
argument, which in the old version of the test will be the definition of
`dstReader` for the tests for `ReadBody`, `ReadLimitBody`,
`ContinueReadBodyStream`, `ContinueReadBody`.
2024-07-17 12:11:55 +01:00
Owen Mansel-Chan
f67026f2ad
Accept model numbering changes in tests
2024-07-17 11:02:28 +01:00
Owen Mansel-Chan
fc6b17ad64
Test: accept model numbers changing
2024-07-16 21:36:12 +01:00
Owen Mansel-Chan
cafb1181a0
Tests: Accept model numbering changes
2024-07-16 12:14:09 +01:00
Owen Mansel-Chan
b3744ef230
Sort Gin source models
2024-07-16 11:18:18 +01:00
Owen Mansel-Chan
ef833de123
Convert GithubComGinGonicGinContextSource to MaD
2024-07-16 11:18:17 +01:00
Owen Mansel-Chan
06a2a40f50
Convert GoRestfulReadEntitySource to MaD
2024-07-16 11:18:16 +01:00
Owen Mansel-Chan
7bfa4c1947
Convert GoRestfulSource to MaD
2024-07-16 11:18:14 +01:00
Owen Mansel-Chan
3efbee0d81
Accept provenance numbering changes
2024-07-14 16:06:29 +01:00
Owen Mansel-Chan
3417605b6d
Tests: update provenance numbering
2024-07-11 06:42:58 +01:00
Owen Mansel-Chan
01afa360d7
Tests: accept model numbering changes
2024-07-10 16:48:05 +01:00
Owen Mansel-Chan
eec2aa82a6
Add failing tests for ClearSanitizer
2024-07-08 16:05:04 +01:00
Owen Mansel-Chan
801edda9b2
Accept MaD edge provenance label changes/additions
2024-07-01 16:13:41 +01:00
Owen Mansel-Chan
a30b34c4bd
Used "fixed-version:" prefix in a test
2024-06-26 05:01:09 +01:00
Edward Minnix III
8997f2cdf2
Merge pull request #16697 from egregius313/egregius313/go/dataflow/threat-modeling
...
Go: Introduce Threat Modeling
2024-06-18 12:25:33 -04:00
Chris Smowton
38ee085782
Adjust test expectation
2024-06-17 16:46:49 +01:00
Chris Smowton
822f6eebfb
Add support for flow through content of global variables
2024-06-17 16:42:23 +01:00
Ed Minnix
b4ecc81145
Fix provenance numbers in tests
2024-06-17 11:33:19 -04:00
Ed Minnix
fa2c50616b
Remove getSourceType definitions
2024-06-17 10:57:11 -04:00
Ed Minnix
b6adff6377
Fix jsoniter test
2024-06-17 10:51:13 -04:00
Ed Minnix
53dd269f9f
Go: Threat model tests
2024-06-17 10:51:11 -04:00
Owen Mansel-Chan
2ae7fa4897
Tests: accept expected changes
2024-06-11 16:20:06 +01:00
Owen Mansel-Chan
6fd2ab7cef
Tests: Accept model renumbering in edge provenance
2024-06-11 16:18:18 +01:00
Anders Schack-Mulligen
9b1e4d7895
Go: Fix test failure.
2024-06-07 13:16:20 +02:00
Anders Schack-Mulligen
a26c01d7c7
Go: Add support for pretty-printed provenace in tests. Convert one test.
2024-06-07 11:47:45 +02:00
Owen Mansel-Chan
44a56c420f
Merge pull request #16558 from owen-mc/go/sync-external-flow
...
Go: sync ExternalFlow.qll
2024-06-05 11:31:34 +01:00
Owen Mansel-Chan
60970ff015
Merge pull request #16571 from owen-mc/go/remove-step-duplication-in-config
...
Go: remove flow step duplication in configs
2024-06-04 12:57:26 +01:00
Owen Mansel-Chan
5c5949ba5e
Add tests for neutral models
2024-06-04 11:46:01 +01:00
Owen Mansel-Chan
c964fc2dca
Update expected results (only empty predicate names added)
2024-06-04 11:46:00 +01:00
Owen Mansel-Chan
18fa454d33
Replace Argument[-1] with Argument[receiver]
2024-06-04 11:45:59 +01:00
Owen Mansel-Chan
0870946e05
Add model validation to more tests
2024-06-04 11:45:58 +01:00
Chuan-kai Lin
8d5bb21643
Merge pull request #16642 from github/post-release-prep/codeql-cli-2.17.4
...
Post-release preparation for codeql-cli-2.17.4
2024-05-31 09:08:03 -07:00
Owen Mansel-Chan
ffc25add70
Accept test changes
2024-05-30 21:01:06 +01:00
Owen Mansel-Chan
7ff1eabfc3
Add tests (mostly failing) for writes to global variables
...
This was based on the equivalent for java:
https://github.com/github/codeql/pull/16500
2024-05-29 16:07:16 +01:00
Owen Mansel-Chan
b2deea4606
Avoid duplicate additional flow steps in configs
...
`localTaintStep` includes a lot of steps which are already part of value
flow. Instead use `defaultAdditionalTaintStep`, which is just the extra
steps that are added for taint tracking.
2024-05-23 11:13:35 +01:00
Owen Mansel-Chan
7e5891b443
Remove unnecessary additional flow step
...
TaintTracking already adds taint steps for field reads
2024-05-23 11:08:29 +01:00
Anders Schack-Mulligen
f931c8d836
Go: Accept qltest .expected file changes.
2024-05-22 15:39:47 +02:00
Anders Schack-Mulligen
8db9187698
Go: Accept qltest .expected file changes (interesting).
2024-05-22 15:38:01 +02:00
Rasmus Wriedt Larsen
2451a6d3f6
Accept .expected changes
2024-05-21 14:47:42 +02:00
Erik Krogh Kristensen
bfc95c6f13
Merge pull request #16510 from erik-krogh/go-command
...
Go: Update the QHelp for `go/command-injection`.
2024-05-17 17:45:10 +02:00
