Tom Hvitved
7dc0a8132e
Merge pull request #513 from calumgrant/cs/cwe-134
...
C#: New query cs/uncontrolled-format-string
2018-11-26 14:58:54 +01:00
calum
de36151c4a
C#: Add regression test and fix for type mentions of type parameter constraints.
2018-11-26 13:51:02 +00:00
semmle-qlci
03fd5498d9
Merge pull request #542 from xiemaisi/js/move-project-file-back-to-code
...
Approved by esben-semmle
2018-11-26 11:41:39 +00:00
Max Schaefer
a1772a9ae4
Merge pull request #543 from markshannon/python-backward-compat-default
...
Python: Add default.qll for backwards compatibility with older queries and libraries.
2018-11-26 11:27:17 +00:00
Mark Shannon
4d8f5e1020
Python: Add default.qll for backwards compatibility with older queries and libraries.
2018-11-26 11:25:28 +00:00
Esben Sparre Andreasen
2d7f09d321
JS(ql): support nullish coalescing operators
2018-11-26 10:31:19 +01:00
Esben Sparre Andreasen
a2a798e59c
JS(extractor): support nullish coalescing operators
2018-11-26 09:45:19 +01:00
Max Schaefer
93f4ee8813
JavaScript: Remove Eclipse metadata files for extractor.
2018-11-26 08:24:33 +00:00
Arthur Baars
8d7ace25bf
Merge pull request #535 from adityasharad/merge/master-next-231118
...
Merge master into next.
2018-11-25 20:19:23 +01:00
Kevin Backhouse
bc752e1a98
Add post-dominators.
2018-11-24 18:23:27 +00:00
Geoffrey White
f338a4f0d6
CPP: Fix false positive from AutoGeneratedFile.qll.
2018-11-23 17:34:18 +00:00
Taus
f0fbed76e7
Merge pull request #539 from markshannon/python-path-fix-siblings
...
Python: Fix parents relation for path queries.
2018-11-23 17:59:04 +01:00
Aditya Sharad
c20b688a3f
Merge master into next.
2018-11-23 16:36:31 +00:00
Taus
3cee874ee3
Merge pull request #536 from markshannon/python-more-shell-injection
...
Python: Some additional sinks for command injection.
2018-11-23 17:12:20 +01:00
yh-semmle
17b063f0b2
Merge pull request #473 from sb-semmle/add-properties-files-to-java-schema
...
Add properties files to java schema
2018-11-23 11:09:00 -05:00
yh-semmle
f4ec168666
Merge pull request #533 from aschackmull/java/inherit-bugfix-changenote
...
Java: Add change note for #459 .
2018-11-23 10:53:44 -05:00
Mark Shannon
3190b12544
Python: Fix parent relation for path-queries.
2018-11-23 15:04:01 +00:00
Mark Shannon
bfc001cc68
Python: Add change note for requests without cert verification query.
2018-11-23 14:48:19 +00:00
Mark Shannon
6588606739
Python: Account for other 'falsey' values in query.
2018-11-23 14:42:45 +00:00
Mark Shannon
06e5bc8359
Python: Add qhelp for new query.
2018-11-23 14:42:45 +00:00
Mark Shannon
45e864a395
Python: New query to test for requests without validation.
2018-11-23 14:42:45 +00:00
Mark Shannon
f0206a2ff4
Python: Tests for new query: requests called with verify=False.
2018-11-23 14:42:45 +00:00
Mark Shannon
7f5d46b32f
Python: Add change note for new sinks.
2018-11-23 14:30:57 +00:00
Mark Shannon
b94493aec3
Python: Add extra sinks for command-injection query.
2018-11-23 14:29:02 +00:00
Taus
ceb316df60
Merge pull request #527 from markshannon/python-security-change-note
...
Collated python change notes
2018-11-23 15:28:18 +01:00
Pavel Avgustinov
d4b2c01634
Lift out intermediate helper predicate.
2018-11-23 14:22:44 +00:00
Tom Hvitved
03e69e9945
C#: Make guards library work with CFG splitting
2018-11-23 15:20:33 +01:00
Tom Hvitved
228189db5a
C#: Add tests for guards inside split CFG blocks
2018-11-23 15:20:27 +01:00
Taus
61f5c2e834
Merge pull request #516 from markshannon/python-path-queries
...
Python path queries
2018-11-23 15:20:19 +01:00
Anders Schack-Mulligen
d24145831b
Java: Add change note for #459 .
2018-11-23 14:21:30 +01:00
Aditya Sharad
10dc183495
Merge pull request #512 from hvitved/csharp/autobuilder/dirs-proj
...
C#: Recognize `.proj` files in autobuilder
2018-11-23 13:18:04 +00:00
Mark Shannon
4f5cfbc336
Correct change for extractor logging levels.
2018-11-23 13:03:16 +00:00
Mark Shannon
95f1935eaa
Python change notes: Merge in internal change notes.
2018-11-23 12:55:04 +00:00
semmle-qlci
04c2b23abd
Merge pull request #520 from esben-semmle/js/clear-text-logging-taint-kinds
...
Approved by asger-semmle
2018-11-23 12:40:40 +00:00
Mark Shannon
61bd8682df
Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.
2018-11-23 12:32:14 +00:00
calum
b67bc7b612
C#: Fix id generation of constructed methods, by avoid id clashes by ensuring that method type parameters are qualified where necessary. Add a qltest.
2018-11-23 12:11:10 +00:00
calum
051dd191ac
C#: Change notes.
2018-11-23 12:11:10 +00:00
calum
e00807d66b
C#: Fix decoding method type parameters in FSharp.Core.
2018-11-23 12:09:52 +00:00
semmle-qlci
817456ee9f
Merge pull request #529 from asger-semmle/js-line-map
...
Approved by xiemaisi
2018-11-23 12:00:17 +00:00
Anders Schack-Mulligen
a0d8888224
Merge pull request #531 from yh-semmle/java/deprecate-vcs
...
Java: deprecate queries that use `VCS.qll`
2018-11-23 11:59:17 +01:00
Geoffrey White
0855543ac4
CPP: Tag the JPL_C LOC-4 queries.
2018-11-23 10:31:37 +00:00
Geoffrey White
e6dddd90b7
CPP: Add a test of FunctionPointerConversions.ql.
2018-11-23 10:31:36 +00:00
Geoffrey White
0a27022dd4
Merge pull request #523 from jbj/placement-new-never-freed
...
C++: Detect non-allocating placement new in cpp/memory-never-freed
2018-11-23 09:40:11 +00:00
Tom Hvitved
1939773684
C#: Address review comments
2018-11-23 09:32:12 +01:00
Tom Hvitved
c3ccdfa7f9
C#: Guard against cyclic inclusions in project files
2018-11-23 09:32:12 +01:00
Tom Hvitved
e4f68ae324
C#: Address review comments
2018-11-23 09:32:12 +01:00
Tom Hvitved
836daaf07b
C#: Recognize .proj files in autobuilder
...
When determining the target of `msbuild` or `dotnet build`, first look for `.proj`
files, then `.sln` files, and finally `.csproj`/`.vcxproj` files. In all three cases,
choose the project/solution file closest to the root.
2018-11-23 09:32:12 +01:00
Tom Hvitved
b95d7e5302
C#: Move autobuilder into separate folder
2018-11-23 09:32:12 +01:00
Jonas Jensen
4ad59235d8
Merge pull request #524 from geoffw0/cpp-299
...
CPP: Add (partial) dataflow to OverflowStatic.ql
2018-11-23 08:46:07 +01:00
Sebastian Bauersfeld
4eabca6dde
Update java schema to accommodate for key-value configuration files.
2018-11-22 19:08:43 -05:00