Geoffrey White
0a0cfc34e7
Swift: Do the same for methods.
2022-12-01 08:47:29 +00:00
Geoffrey White
5a4d188255
Swift: Fix for extensions.
2022-12-01 08:47:29 +00:00
Geoffrey White
d71eeb4c95
Swift: First fix for MaD on generics.
2022-12-01 08:47:29 +00:00
Geoffrey White
8f24b0b815
Swift: Add missing comment.
2022-12-01 08:47:28 +00:00
Geoffrey White
b1b3487028
Swift: Add a test for MaD data sources in generics.
2022-12-01 08:47:28 +00:00
Tony Torralba
d958a62bf2
Fix expectations in data.swift
2022-11-30 16:19:55 +01:00
Karim Ali
8f456295e0
Merge pull request #11185 from karimhamdanali/swift-string-taint-steps
...
Swift: add `String` taint steps
2022-11-30 17:03:15 +02:00
Karim Ali
f6bc88471a
update the expected output for CWE-079
...
Now that we have support for taint through fields of String, we can now detect certain flows that we previously marked as [NOT DETECTED]. This commit updates the expected output of CWE-079 (and the in-code annotation of the accompanying test case) to reflect that update.
2022-11-30 16:34:24 +02:00
Owen Mansel-Chan
45e2a13c37
Merge pull request #11494 from owen-mc/dataflow/some-trivial-fixes
...
Dataflow: some trivial fixes
2022-11-30 13:59:41 +00:00
Tom Hvitved
b33f5925bb
Data flow: Sync files
2022-11-30 13:39:25 +01:00
Tony Torralba
e222807693
Remove dubious sinks
2022-11-30 13:25:17 +01:00
Alex Denisov
fe0ae6bf0b
Swift: add 5.7.1 migration scripts
2022-11-30 12:52:26 +01:00
Alex Denisov
f618d53302
Swift: add new implicit conversion
2022-11-30 12:40:34 +01:00
Alex Denisov
90d471b486
Swift: upgrade to Swift 5.7.1
2022-11-30 12:40:27 +01:00
Mathias Vorreiter Pedersen
d53d275bba
Merge pull request #11450 from d10c/swift/missing-enum-cases
...
Swift: extract missing cases of `AccessorKind` and `AccessSemantics` enums
2022-11-30 11:18:52 +00:00
Owen Mansel-Chan
55c4643b20
Dataflow: Sync.
2022-11-30 11:00:07 +00:00
Tony Torralba
56f5214782
Remove invalid MaD row
2022-11-30 11:10:30 +01:00
Nora Dimitrijević
91edeacb9f
Swift: update .expected test files
2022-11-29 19:39:48 +01:00
Nora Dimitrijević
c5b4e87f6d
Swift: AccessorDecl tests for new cases
2022-11-29 16:00:00 +01:00
Karim Ali
9048d5d79b
fix expected output for LocalTaint
2022-11-29 15:38:44 +02:00
Karim Ali
9d17fae00c
fix expected output for TaintInline
2022-11-29 15:24:12 +02:00
Karim Ali
c0085cbb1a
fix expected output for Taint.ql
2022-11-29 15:18:39 +02:00
Tony Torralba
bf023b0aed
Use dominance in path injection sanitizer to avoid FNs
2022-11-29 13:33:27 +01:00
Tony Torralba
52ebf66d21
Add basic path sanitizer
2022-11-29 11:55:04 +01:00
Tony Torralba
1576ee9410
Add additional stub to avoid errors when building on Linux
2022-11-29 11:55:03 +01:00
Tony Torralba
8cc66172c3
Add path injection query
2022-11-29 11:55:03 +01:00
Geoffrey White
63c139fdbe
Merge branch 'main' into constructor
2022-11-29 10:40:19 +00:00
Nora Dimitrijević
93cce0f4c2
Swift: upgrade script
2022-11-29 11:31:08 +01:00
Nora Dimitrijević
13bbee73d8
Swift: Add .generated.list file from codegen
2022-11-29 11:31:07 +01:00
Nora Dimitrijević
931173350f
Swift: extract missing cases of AccessorKind and AccessSemantics
...
This resolves the warnings that were showing up during extractor-pack
compilation.
2022-11-29 11:31:07 +01:00
Karim Ali
f0d9dabca2
updated expected output for LocalTaint and Tain
2022-11-29 12:13:10 +02:00
Karim Ali
9b3c4e8db2
add test case for unicodeScalars
2022-11-29 12:12:10 +02:00
Karim Ali
7541b01a86
add test case for utf8CString
2022-11-29 12:12:10 +02:00
Karim Ali
58a87396ba
add taint steps for fields of String
...
if a String is tainted, then all its fields (including those declared in extensions) should be tainted as well
2022-11-29 12:12:10 +02:00
Mathias Vorreiter Pedersen
4233c91a7e
Merge pull request #11469 from atorralba/atorralba/swift/fix-local-taint
...
Swift: Fix local taint
2022-11-29 10:00:12 +00:00
Tony Torralba
0e59257442
Fix local taint steps
...
Local taint should include local flow and simple summaries through library code
2022-11-29 10:36:56 +01:00
Tom Hvitved
f3dca95958
Merge pull request #11087 from hvitved/dataflow/summary-ctx
...
Data flow: Add summary/return context to pruning stages 2-4
2022-11-29 10:36:53 +01:00
Geoffrey White
cf7cd2b470
Swift: Convert to MaD.
2022-11-28 19:02:56 +00:00
Geoffrey White
03ae2821c3
Update swift/ql/lib/codeql/swift/frameworks/Alamofire/Alamofire.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-11-28 18:24:28 +00:00
Geoffrey White
349a10c013
Swift: codegen.
2022-11-28 17:41:41 +00:00
Geoffrey White
96e04e7f63
Swift: Use ConstructorDecl in place of name matching.
2022-11-28 17:39:45 +00:00
Geoffrey White
e97aee5d9d
Swift: QLDoc.
2022-11-28 17:39:44 +00:00
Geoffrey White
410609fed4
Swift: Make ConstructorDecl, DestructorDecl into MethodDecls.
2022-11-28 17:20:43 +00:00
Geoffrey White
edb6325117
Swift: Fix comment.
2022-11-28 17:07:34 +00:00
Geoffrey White
aa5c893d5e
Swift: Further simplify.
2022-11-28 17:07:34 +00:00
Geoffrey White
97bd91ed19
Swift: Simplify using ApplyExpr.getArgumentWithLabel.
2022-11-28 16:51:46 +00:00
Mathias Vorreiter Pedersen
3716d67cc9
Merge pull request #11451 from geoffw0/wkuserscript
...
Swift: models for WKUserScript
2022-11-28 14:24:19 +00:00
Geoffrey White
30468dd419
Swift: Implement field content as well.
2022-11-28 12:27:33 +00:00
Geoffrey White
ffbd201450
Swift: Implement basic model of WKUserScript.
2022-11-28 12:20:29 +00:00
Geoffrey White
116d9667e7
Swift: Remove special case from query.
2022-11-28 12:15:38 +00:00
