Rasmus Wriedt Larsen
4895daba85
DataFlow: Add read/store stepIsLocal consistency checks
2022-11-08 13:32:49 +01:00
Paolo Tranquilli
450a4a04af
Swift: add incomplete ast test
...
The test was inspired by locally running the query against files in
https://github.com/apple/swift/tree/main/test/Parse
A query for missing elements was also added to the AST tests, expecting
nothing to be found.
2022-11-08 11:46:07 +01:00
Paolo Tranquilli
d6fb6bf036
Swift: customize UnspecifiedElement
2022-11-08 11:40:27 +01:00
Paolo Tranquilli
e17bc6c581
Swift: add UnspecifiedElement
2022-11-08 11:40:27 +01:00
Tony Torralba
4411852e59
Add BitwiseOperation.qll
2022-11-08 11:33:10 +01:00
Nora Dimitrijević
7585541514
Merge branch 'main' into swift/js-injection
2022-11-08 11:25:54 +01:00
Nora Dimitrijević
d37ed02e79
Swift: basic Data-related taint flow in query
...
Still TODO: a more comprehensive taint flow model for Data in the libs.
2022-11-08 11:24:53 +01:00
Nora Dimitrijević
66291d3575
Swift: sync tests pass with additional flow steps
...
TODO: Convert those flow steps to taint flow models in the library.
2022-11-08 11:09:55 +01:00
Karim Ali
c794fef9cb
update qhelp with more details about the use of constant passwords
2022-11-08 11:26:52 +02:00
Karim Ali
b1679df3d2
tighten check against the "iv" argument only
2022-11-08 11:22:18 +02:00
Karim Ali
b077fc5e91
add more details in qhelp about the use of hardcoded/constant IVs
2022-11-08 11:19:41 +02:00
Paolo Tranquilli
072edad0fd
Swift: accept new test changes
2022-11-08 09:30:25 +01:00
Paolo Tranquilli
21adcca065
Swift: add bitwise ops to PrintAst test
2022-11-08 08:53:36 +01:00
Nora Dimitrijević
7c515bbef7
Swift: _ as in _ = ... is a CFG leaf node.
...
This enables DataFlow to skip over it and not get stuck.
2022-11-07 18:02:06 +01:00
Karim Ali
5766ff21d0
Merge pull request #10993 from karimhamdanali/swift-pbe-constant-salts
...
Swift: detect the use of constant salts
2022-11-07 16:22:41 +02:00
Geoffrey White
645906a7d7
Merge branch 'main' into tuples
2022-11-07 13:17:12 +00:00
Karim Ali
53055bc8b6
add another reference to RFC 2898
2022-11-07 13:44:25 +02:00
Karim Ali
2a22c69a64
remove unused variable from test + updated expected output
2022-11-07 13:31:55 +02:00
Karim Ali
1756feae71
address docs review
2022-11-07 13:20:02 +02:00
Paolo Tranquilli
b30a6d36b5
Swift: extract AwaitExpr
2022-11-07 12:08:51 +01:00
Paolo Tranquilli
b94066acd8
Merge pull request #11094 from github/redsun82/swift-translators
...
Swift: refactor visitors to use translations
2022-11-07 12:01:44 +01:00
Geoffrey White
7b62bed9db
Merge pull request #10947 from karimhamdanali/swift-pbe-iterations
...
Swift: detect hash functions with low # of iterations
2022-11-07 10:38:29 +00:00
Anders Schack-Mulligen
99ca28ea9b
Merge pull request #10886 from aschackmull/dataflow/joinorders
...
Dataflow: Fix a couple of join-orders.
2022-11-07 11:05:29 +01:00
Mathias Vorreiter Pedersen
60ac031db4
Merge pull request #11036 from geoffw0/simplify3
2022-11-05 00:31:05 +00:00
Anders Schack-Mulligen
a1dba82360
Dataflow: Sync.
2022-11-04 12:41:55 +01:00
Paolo Tranquilli
2bec4479e7
Merge pull request #11029 from github/redsun82/swift-filtered-debugging
...
Swift: add possibility to run the extractor under an env-specified tool
2022-11-04 11:44:11 +01:00
Erik Krogh Kristensen
ec87a932b8
Merge pull request #11078 from erik-krogh/stableCI
...
add workflow that checks compilation of all queries with the latest stable release
2022-11-04 11:21:23 +01:00
Geoffrey White
3c07ff592a
Swift: Fix result expectations.
2022-11-04 09:44:48 +00:00
Paolo Tranquilli
fdde84ac35
Merge branch 'main' into redsun82/swift-filtered-debugging
2022-11-04 10:42:48 +01:00
Geoffrey White
20147e87b2
Swift: Correct var names.
2022-11-04 09:38:12 +00:00
Tom Hvitved
587e6739d9
Merge pull request #11060 from hvitved/dataflow/path-node-reach-charpred
...
Data flow: Restrict public `PathNode`s to those that may reach a sink
2022-11-04 10:17:09 +01:00
Michael Nebel
3c8fb0520e
C#: Sync files.
2022-11-04 08:20:53 +01:00
Geoffrey White
d69d289020
Swift: remove getArgumentByParamName (for now).
2022-11-03 18:56:13 +00:00
Geoffrey White
86cbf1b82c
Swift: Add comments.
2022-11-03 18:45:43 +00:00
Paolo Tranquilli
a6b1806e66
Swift: refactor TypeVisitor to use translations
2022-11-03 18:16:53 +01:00
Paolo Tranquilli
c8cb30f76e
Swift: refactor StmtVisitor to use translations
...
Also make `visit` in `SwiftDispatcher` work on `const` pointers.
Also, fixed a bug where the guard of a `CaseLabelItem` was not being
extracted, hence the test updates.
2022-11-03 18:16:53 +01:00
Paolo Tranquilli
4702271102
Swift: add cfg.swift to AST tests
2022-11-03 18:16:53 +01:00
Geoffrey White
24f0eeb6df
Swift: Better assigning to tuple values.
2022-11-03 15:52:01 +00:00
Geoffrey White
6dc51edb4c
Swift: Assigning to tuple values.
2022-11-03 15:51:58 +00:00
Geoffrey White
472ece45e7
Swift: Basic content flow through tuples.
2022-11-03 15:51:33 +00:00
Geoffrey White
a7ecdef2a6
Swift: Add dataflow tests for tuples.
2022-11-03 15:50:27 +00:00
Nora Dimitrijević
924f999aa8
Merge pull request #11104 from github/swift/webviewjoinorder
2022-11-03 16:44:17 +01:00
Nora Dimitrijević
fdd7d76ffd
Swift: use FreeFunctionDecl/.has(Qualified)Name
...
Instead of hand-rolled predicates.
2022-11-03 16:14:43 +01:00
Tom Hvitved
d3488da0c2
Data flow: Sync files
2022-11-03 15:52:30 +01:00
Nora Dimitrijević
0e67100cad
Swift: fix bad join order in WebView/JsExportedSource
...
The `getName = getName` join was happening too early,
before the methods themselves have been enumerated.
2022-11-03 15:30:04 +01:00
Tony Torralba
da67b1059c
Remove (now unnecessary) import
2022-11-03 12:38:45 +01:00
Tony Torralba
3e1819f25d
Model XMLParser constructor init(contentsOf:)
2022-11-03 12:01:42 +01:00
Tony Torralba
fe138dc0a1
Add explicitly safe test cases
2022-11-03 12:01:42 +01:00
Tony Torralba
0c6957ea78
Adjust test expectations of a query affected by new summaries
2022-11-03 12:01:42 +01:00
Tony Torralba
f4047e016c
Address QL-for-QL alert
...
Use an alert message consistent with the other languages
2022-11-03 12:01:42 +01:00
