Geoffrey White
9f9712047c
CPP: Add a few more tests of '%c'.
2019-03-06 10:23:45 +00:00
Jason Reed
8829fde86b
JS: Add test for zipslip basename sanitization.
2019-03-06 09:46:41 +00:00
Jason Reed
126e207bd0
JS: Add change note.
2019-03-06 09:46:41 +00:00
Jason Reed
0a91d919b0
JS: Allow path.basename sanitization in zipslip.
2019-03-06 09:46:41 +00:00
Jonas Jensen
80b0765618
C++: Make IR DataFlow dispatch use non-IR version
...
This removes code duplication and ensures that the IR version also gets
the support for flow across link targets.
2019-03-06 10:08:14 +01:00
Jonas Jensen
10ce13d1e9
C++: Tests for cross-target dispatch
2019-03-06 10:08:13 +01:00
Jonas Jensen
14f1ecb456
C++: Data flow dispatch across link targets
2019-03-06 10:08:13 +01:00
Asger F
50a77ea843
JS: update test expectations
2019-03-06 08:41:03 +00:00
Asger F
ee7461380e
JS: Omit uninteresting nodes from path explanations
2019-03-06 08:41:03 +00:00
Jonas Jensen
94699175a4
Merge pull request #1046 from xiemaisi/rc/1.20
...
Merge rc/1.20 into master
2019-03-06 07:49:15 +00:00
Tom Hvitved
440809623b
C#: Fix whitespaces
2019-03-06 08:15:46 +01:00
semmle-qlci
69a048d102
Merge pull request #1045 from jbj/import-additional-ir-TaintTracking
...
Approved by rdmarsh2
2019-03-05 20:52:29 +00:00
Tom Hvitved
0afb85cb91
C#: Address review comments
2019-03-05 19:27:36 +01:00
calum
58fdcd8703
C#: Regression test case demonstrating extractor error.
2019-03-05 18:24:01 +00:00
Asger F
eb08dcfbd0
Merge pull request #1044 from xiemaisi/js/fix-javadoc
...
JavaScript: Remove a `@link` in Javadoc.
2019-03-05 18:09:10 +01:00
Jonas Jensen
6ef946c2b0
C++: Make IR TaintTracking available on LGTM
...
Because this new library is not used in a default query, it needs to be
imported here in order to be available in the LGTM query console.
2019-03-05 18:05:27 +01:00
Max Schaefer
832dff54e8
JavaScript: Remove a @link in Javadoc.
...
Javadoc claims not to be able to resolve this link, while Eclipse manages to do so without any problems, failing an internal PR check.
It's only in a test, though, so I just removed it.
2019-03-05 17:02:44 +00:00
Mark Shannon
38a5fb715a
Python: Avoid cross-talk between unrelated sources in py/stack-trace-exposure query.
2019-03-05 16:52:28 +00:00
Calum Grant
926ee7425a
Merge pull request #1014 from hvitved/csharp/same-children-modulo-type-params
...
C#: Speedup `sameChildrenModuloTypeParameters()`
2019-03-05 16:43:33 +00:00
Calum Grant
b17de116f8
Merge pull request #995 from hvitved/csharp/split-guards-performance
...
C#: Speedup guards predicates
2019-03-05 16:42:39 +00:00
Geoffrey White
d5627fdc9e
Merge pull request #1040 from jbj/dominanceFrontier-iterated
...
C++: Implement dominanceFrontier with recursion
2019-03-05 16:27:53 +00:00
Mark Shannon
32dabcee1e
Python: Ignore dead objects from library trap files.
2019-03-05 15:27:45 +00:00
Jonas Jensen
b3d935063f
Merge pull request #815 from geoffw0/keyset
...
CPP: dbscheme annotations
2019-03-05 14:53:46 +00:00
semmle-qlci
dedefe0f9e
Merge pull request #1039 from xiemaisi/js/parallel-extraction-env-vars
...
Approved by asger-semmle
2019-03-05 14:42:01 +00:00
Tom Hvitved
b2ede5e2a1
Revise logic for reducing size of getAThrownException()
...
When determining which core library a "tried control flow element" is compiled against,
first look at exceptions caught by the surrounding `try` block, then look at assembly
attributes, and finally choose (randomly) the core library with the highest lexicographic
order.
2019-03-05 14:57:46 +01:00
Jonas Jensen
0a57767cc6
C++: Data flow through StmtExpr
2019-03-05 14:36:40 +01:00
Jonas Jensen
a2de057c26
C++: Test for StmtExpr data flow
2019-03-05 14:34:19 +01:00
Jonas Jensen
9d595aa5ea
Merge pull request #1033 from geoffw0/newdelete-perf
...
CPP: NewDelete.qll performance
2019-03-05 12:52:59 +00:00
semmle-qlci
1327b9f552
Merge pull request #1038 from xiemaisi/js/consolidate-tests
...
Approved by esben-semmle
2019-03-05 11:02:33 +00:00
Jonas Jensen
d310338c9b
C++: Implement dominanceFrontier with recursion
...
This implementation is borrowed from Java's QL library and offers a
great performance improvement. For example, on Wireshark the performance
goes from
Dominance::bbDominates#ff ....... 40.3s
SSAUtils::dominanceFrontier#ff .. 30s
to
SSAUtils::dominanceFrontier#ff .. 418ms (executed 67 times)
The big performance problem before was the need to materialize
`bbDominates`, which is the reflexive-transitive "basic block dominates"
relation. It had 79 million rows on Wireshark.
2019-03-05 11:54:45 +01:00
Geoffrey White
4e1e3131ac
CPP: Revert annotation on 'externalData'.
2019-03-05 10:22:33 +00:00
Max Schaefer
b1033b079f
JavaScript: Make configuration of parallel extraction consistent with parallel evaluation.
...
Just like parallel evaluation, the number of extractor threads is now determined by the `LGTM_THREADS` environment variable, and defaults to one.
2019-03-05 10:06:32 +00:00
Geoffrey White
56fe91d774
CPP: cached -> pragma[nomagic].
2019-03-05 08:59:16 +00:00
Max Schaefer
29f381eb34
JavaScript: Consolidate DOM tests.
2019-03-05 08:24:39 +00:00
Max Schaefer
3ab465edcc
JavaScript: Consolidate ReactJS tests.
2019-03-05 08:24:39 +00:00
Max Schaefer
1c97a57888
JavaScript: Consolidate Promises tests.
2019-03-05 08:24:36 +00:00
Max Schaefer
41349c547f
JavaScript: Consolidate stmts tests.
2019-03-05 08:14:47 +00:00
Max Schaefer
eb02e8bd36
JavaScript: Consolidate CallGraphs tests.
2019-03-05 08:14:47 +00:00
Max Schaefer
9178da4f61
JavaScript: Consolidate Expr tests.
2019-03-05 08:14:47 +00:00
Max Schaefer
256f3b013b
JavaScript: Consolidate tutorial tests.
2019-03-05 08:14:47 +00:00
Max Schaefer
5a242d4849
JavaScript: Consolidate ModuleImportNode tests.
...
Note that `CustomImport.ql` is still separate since it customises the standard library and would hence influennce other tests.
2019-03-05 08:14:47 +00:00
Max Schaefer
deff97a9e6
JavaScript: Consolidate PropWrite tests.
2019-03-05 08:14:39 +00:00
Max Schaefer
0b5599d009
JavaScript: Consolidate connect, koa, hapi and restify tests.
2019-03-05 08:04:01 +00:00
Max Schaefer
89ad16be4b
JavaScript: Consolidate Functions tests.
2019-03-05 08:04:01 +00:00
Max Schaefer
40502c68a5
JavaScript: Consolidate Classes tests.
2019-03-05 08:04:01 +00:00
Max Schaefer
3b89c70da8
JavaScript: Consolidate Modules tests.
2019-03-05 08:04:01 +00:00
Max Schaefer
f3eca887a9
JavaScript: Consolidate JSDoc tests.
2019-03-05 08:04:01 +00:00
Max Schaefer
65ece6e895
JavaScript: Consolidate TypeAnnotations tests.
2019-03-05 08:04:01 +00:00
Max Schaefer
716e741371
JavaScript: Consolidate NodeJSLib tests.
2019-03-05 08:04:01 +00:00
yh-semmle
4908ccc493
Java: update frameworks list for 1.20 release
2019-03-04 20:31:34 -05:00