Commit Graph

9664 Commits

Author SHA1 Message Date
Rebecca Valentine
fc4bb028b7 Merge pull request #1636 from markshannon/python-api-odds-and-ends
Python: Assorted improvements to API.
2019-08-07 09:50:44 -07:00
Mark Shannon
44a27c39b1 Python: Add a few addition qldoc comments. 2019-08-07 10:06:01 +01:00
Rebecca Valentine
5fdf6a8e11 Merge pull request #1640 from markshannon/python-update-all-taint-tracking-to-use-config
Python: Update all remaining taint-tracking queries to use configurations
2019-08-05 14:30:30 -07:00
Rebecca Valentine
9d2061b439 Merge pull request #1669 from markshannon/python-better-handling-unknown-decorators
Python: Treat the result of calling a missing module member as 'unknown'.
2019-08-05 14:30:00 -07:00
Mark Shannon
63f24dfe18 Python: Add some more utility predicates and classes to the new 'Value' API. 2019-08-02 10:50:51 +01:00
Mark Shannon
4a6f385feb Python objects: Add clarify comments on callResult predicates. 2019-08-02 10:10:47 +01:00
Rebecca Valentine
40d7f5a332 Merge pull request #1671 from markshannon/python-flask-escape
Python: Add missing function to flask test stub.
2019-08-01 11:47:09 -07:00
Mark Shannon
fab2cb5a32 Python: Add missing function to flask test stub. 2019-08-01 13:11:41 +01:00
Mark Shannon
ebd5829bfb Python: Treat the result of calling a missing module member as 'unknown'. 2019-08-01 10:37:41 +01:00
Mark Shannon
5496fa41c8 Python: Add a way to easily specify constant values for in new Value API. 2019-07-31 12:41:51 +01:00
Mark Shannon
6b2938a387 Python: Extends new Value API a bit to support callable subclasses and sequences. 2019-07-29 16:25:31 +01:00
Arthur Baars
ccde7cf6cf Add @id to example queries 2019-07-26 17:47:11 +02:00
Arthur Baars
bdce7d07c1 Move 'snippet' queries to 'snippets' folders 2019-07-26 17:47:11 +02:00
Arthur Baars
30860daac4 Add cookbook queries 2019-07-26 17:47:11 +02:00
Mark Shannon
3e5fddd776 Python: Update all remaining taint-tracking queries to use configurations. 2019-07-26 16:39:10 +01:00
Mark Shannon
f69ea7f65e Python: Add redimentary tests for new Value API. 2019-07-26 15:11:48 +01:00
Mark Shannon
f0bb07fc24 Python: Assorted improvements to API. 2019-07-26 15:11:47 +01:00
Taus
8443f68a33 Merge pull request #1624 from markshannon/python-fix-pruning-for-constants
Python: Fix up pruning in QL to better handle constraints from constants.
2019-07-26 16:05:14 +02:00
Taus
0258f799df Merge pull request #1591 from markshannon/python-fix-property-setter-handling
Python: fix property setter handling in points-to.
2019-07-26 14:01:41 +02:00
Mark Shannon
59ea825bbc Python objects: Add explanatory comment. 2019-07-26 12:07:16 +01:00
Mark Shannon
159b111aa8 Python: remove some unnecessary pragmas. 2019-07-26 11:07:39 +01:00
Taus
a557c6a3ea Merge pull request #1627 from markshannon/python-points-to-from-comprehensions
Python points-to: Infer types for comprehensions.
2019-07-25 16:09:33 +02:00
Taus
76fe36aa48 Merge pull request #1618 from markshannon/python-refine-module-names
Python refine module naming.
2019-07-25 15:29:47 +02:00
Mark Shannon
27c0571a86 Python points-to: Infer types for comprehensions. 2019-07-25 14:18:05 +01:00
Taus
85a0566c43 Merge pull request #1597 from markshannon/python-tracking-special-variable-attributes-through-phis
Python points-to: Track implicit module attributes through phi-nodes.
2019-07-25 11:43:16 +02:00
Taus
cca1593ea4 Merge pull request #1598 from markshannon/python-better-parameter-api
Python: Better API for parameters.
2019-07-25 11:35:51 +02:00
Mark Shannon
2e8c7a9d20 Python points-to: Support property setters and deleters. 2019-07-25 09:35:56 +01:00
Mark Shannon
9b00177544 Python: Add failing test for analysis of property with .setter. 2019-07-25 09:33:41 +01:00
Mark Shannon
90475fa7ef Python: Do not give module names to folders without __init__.py unless specified during extraction. 2019-07-24 15:35:57 +01:00
Mark Shannon
05e498dfdc Python: Clarify pruning code. 2019-07-24 14:47:46 +01:00
Felicity Chapman
b7be2f5045 Merge pull request #1625 from taus-semmle/python-fix-commented-out-code-qhelp-include
Python: Fix missing include in `FCommentedOutCode.qhelp`.
2019-07-24 11:59:40 +01:00
Taus Brock-Nannestad
8c6a4bcd9d Python: Fix missing include in FCommentedOutCode.qhelp. 2019-07-24 11:13:33 +02:00
Taus
f214f0e742 Merge pull request #1589 from markshannon/python-fix-sanity
Python: Fix a couple of  false positives in sanity query
2019-07-24 10:59:01 +02:00
Mark Shannon
2bdf42388c Python: Fix up pruning in QL to better handle constraints from constants. 2019-07-23 16:28:13 +01:00
Mark Shannon
88f9685d40 Merge rc/1.21 into master 2019-07-18 16:40:32 +01:00
Mark Shannon
3343f6bd2f Fix typo. 2019-07-18 15:44:29 +01:00
Mark Shannon
c6ae06f1df Python: modernize regex library to use new points-to. 2019-07-18 14:16:57 +01:00
Mark Shannon
54a8c64b23 Python points-to: Remove negative recursion when using legacy points-to in legacy points-to extensions. 2019-07-18 14:16:52 +01:00
Taus
f70e7d774f Merge pull request #1604 from markshannon/python-performance-fixes
Python: Performance improvements to points-to.
2019-07-18 10:58:15 +01:00
Mark Shannon
71d353f03b Python: Performance improvements to points-to. Uses extensional (not IPA) for origins and prevents some harmful magic. 2019-07-17 10:25:23 +01:00
Mark Shannon
3035178391 Python: Better API for parameters. 2019-07-16 16:50:40 +01:00
Mark Shannon
b4d413cfa8 Python points-to: Track implicit module attributes through phi-nodes. 2019-07-16 15:39:58 +01:00
Calum Grant
87a43718e9 Merge pull request #1588 from felicity-semmle/qhelp/SD-3447-commented-out-code
Update Python and C# help for commented-out code to use common qhelp
2019-07-16 09:38:33 +01:00
Mark Shannon
d750f38532 Python: Fix a couple of false positives for AST and CFG sanity and improve reporting for ClassValue sanity. 2019-07-15 16:28:28 +01:00
Mark Shannon
2c5b1c0810 Fix semantic merge conflict between #1470 and #1487. 2019-07-15 15:34:00 +01:00
Taus
f12c057826 Merge pull request #1470 from markshannon/python-tarslip
Python: "TarSlip" query
2019-07-15 12:43:47 +02:00
Felicity Chapman
cb48af7395 Update Python and C# help for commented-out code to use common qhelp 2019-07-15 09:26:17 +01:00
Taus Brock-Nannestad
4ddebb9349 Better names for helper predicates. 2019-07-05 16:38:39 +02:00
Taus Brock-Nannestad
703139142a More performance fixes. 2019-07-05 14:44:56 +02:00
Taus Brock-Nannestad
d2113f1ced More performance stuff. (Possibly not all needed.) 2019-07-04 17:28:40 +02:00