Commit Graph

29908 Commits

Author SHA1 Message Date
Jonas Jensen
e0ba2b2251 C++: Fix name of suppressUnusedType 2018-09-04 13:38:28 +02:00
Jonas Jensen
ab944f3807 Merge pull request #139 from geoffw0/function-wrappers
CPP: Make FunctionWithWrappers `toCause` work on builtins.
2018-09-04 13:36:33 +02:00
Tom Hvitved
c4c74cd005 C#: Split up DataFlowInternal.qll
Split up into `internal/BaseSSA.qll` and `internal/Steps.qll`.
2018-09-04 13:30:54 +02:00
Ian Lynagh
3fd6a8de7d C++: Fix the definition of GlobalNamespace.getADeclaration()
Globals can still have declarations in declaration statements.
We already rule out local variables etc via the isTopLevel check,
so we don't need to consider DeclStmt.
2018-09-04 11:37:10 +01:00
Ian Lynagh
1fcf156e7e C++: Add another test to namespaces test 2018-09-04 11:36:50 +01:00
Ian Lynagh
e39a0d2f72 C++: Tweak namespaces test 2018-09-04 11:36:09 +01:00
Jonas Jensen
73675e29f2 Merge pull request #138 from ian-semmle/topLevel
C++: Use Declaration.isTopLevel() in GlobalNamespace.getADeclaration()
2018-09-04 10:03:19 +02:00
Jonas Jensen
07bacbf389 C++: Follow suppressUnusedThis convention 2018-09-04 09:40:50 +02:00
Esben Sparre Andreasen
cb2a6ede59 JS: support http.request URL requests 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
0a89f1a420 JS: eliminate DefaultUrlRequest: extract the got library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
de6b83548a JS: refactor DefaultUrlRequest: extract the got library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
1abdf2ffd5 JS: refactor DefaultUrlRequest: extract the http library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
5f26c23582 JS: refactor DefaultUrlRequest: extract the fetch API 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
b3b997ca91 JS: refactor DefaultUrlRequest: extract the axios library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
d7a81ef8ef JS: refactor DefaultUrlRequest: extract the request library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
80b81b07c5 JS: refactor DefaultUrlRequest: extract names 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
68b7a8b57e JS: change notes for UrlRequest libraries and js/request-forgery 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
f5a6af54e6 JS: add security query: js/request-forgery 2018-09-04 09:25:42 +02:00
Esben Sparre Andreasen
2104cf55e3 JS: add models of URL requests 2018-09-04 09:25:42 +02:00
Jonas Jensen
6e9cc46e80 Merge pull request #131 from ian-semmle/namespace_vars
C++: Give namespace variables a qualified name
2018-09-04 08:56:01 +02:00
Jonas Jensen
a2946f71bd Merge pull request #96 from ian-semmle/typo
C++: Fix typo
2018-09-04 08:51:15 +02:00
Jonas Jensen
adc5ee86ad Merge pull request #128 from geoffw0/cwe-190-precision
CPP: Adjust precisions for the CWE-190 queries.
2018-09-04 08:44:38 +02:00
Ian Lynagh
4230adbca2 C++: Remove reundant override 2018-09-03 18:12:30 +01:00
calumgrant
af3f855491 Merge pull request #94 from hvitved/csharp/cfg/minor-fixes
C#: Minor CFG improvements
2018-09-03 17:41:18 +01:00
Nick Rolfe
78f5be0d49 Merge pull request #143 from adityasharad/version/1.19.0
Version: Bump to 1.19.0 dev.
2018-09-03 17:40:23 +01:00
Nick Rolfe
04e919df9d C++: clearer alert wording in integer-multiplication-cast-to-long 2018-09-03 16:56:56 +01:00
Aditya Sharad
2363f49e3a Version: Bump to 1.19.0 dev.
This keeps the QL for Eclipse language plugins in sync with internal `master`.
2018-09-03 16:41:28 +01:00
semmle-qlci
4dec7c5036 Merge pull request #127 from xiemaisi/js/incomplete-sanitisation-doc-improvement
Approved by esben-semmle
2018-09-03 16:25:44 +01:00
Jonas Jensen
88f80e4d4b C++: Silence two more QL compiler warnings
One was for an unused parameter (a deliberate CP of `Type` x
`VoidType`), and one was for use of a deprecated predicate.
2018-09-03 13:45:04 +02:00
Jonas Jensen
ab6dc1d70c C++: Add missing override annotations 2018-09-03 13:22:22 +02:00
Geoffrey White
d5b7ab5aa1 CPP: Make FunctionWithWrappers toCause work on builtin functions. 2018-09-03 11:26:02 +01:00
Nick Rolfe
5d5febf4d4 Merge pull request #137 from jbj/getEnclosingElement-changenote
C++: Change note for getEnclosingElement macro changes
2018-09-03 10:44:30 +01:00
Jonas Jensen
2fd73f2171 C++: getEnclosingElement-without-macros changenote 2018-09-03 11:29:03 +02:00
Jonas Jensen
b34dbfa68b C++: Correct change note formatting
In Markdown, nested bullet lists are formatted with indented asterisks
rather than double asterisks.
2018-09-03 11:29:02 +02:00
Jonas Jensen
18dc1d0af0 Merge pull request #129 from Semmle/changenote-desig-init
cherry-pick onto rc/1.18: C++: change note for designated intializer fixes
2018-09-03 11:28:20 +02:00
Max Schaefer
759d98661c Merge pull request #117 from esben-semmle/js/push-sort-taint-steps
JS: support `push` and `sort` taint steps for arrays
2018-09-03 09:20:35 +01:00
Geoffrey White
8e5c170af6 CPP: Change note. 2018-09-03 08:30:05 +01:00
Geoffrey White
3e18a9b885 CPP: Improve the special case for realloc in MemoryMayNotBeFreed.ql. 2018-09-03 08:30:05 +01:00
Max Schaefer
58e384558c JavaScript: Improve query name and help for js/incomplete-sanitization.
The query applies more generally to all kinds of string escaping and encoding, not just sanitization.
2018-09-03 08:20:01 +01:00
Max Schaefer
20bff709b1 Merge pull request #136 from esben-semmle/js/composed-function-taint
JS: model composed functions (RC)
2018-09-03 08:18:20 +01:00
Max Schaefer
7e3adec789 Merge pull request #135 from esben-semmle/js/pick-get-taint-steps
JS: model property projection calls (RC)
2018-09-03 08:17:42 +01:00
Ian Lynagh
c8fcab8cfe C++: Use Declaration.isTopLevel() in GlobalNamespace.getADeclaration() 2018-09-03 01:01:10 +01:00
Ian Lynagh
f6582ef285 C++: Fix typo 2018-09-01 15:45:41 +01:00
Jonas Jensen
98612b9f9a C++: Tidy primitive_basic_block_member calculation
This change gave a slight speed-up by eliminating an unnecessary
intermediate predicate.
2018-09-01 07:46:00 +02:00
Nick Rolfe
f6e5be0af8 cherry-pick 35d31aee onto 1.18 branch
This changenote was committed after the `rc/1.18 branch` was taken.
2018-08-31 18:09:39 +01:00
ian-semmle
eac82f2a8a Merge pull request #18 from nickrolfe/builtin_types_on_demand3
C++: built-in type tweaks
2018-08-31 16:41:02 +01:00
Ian Lynagh
3a00e24e89 C++: Give NamespaceVariables a qualified name 2018-08-31 16:39:21 +01:00
Ian Lynagh
d7d8186bbe C++: Improve namespaces/namespaces test 2018-08-31 16:37:59 +01:00
Geoffrey White
074894298c CPP: Adjust precisions for the CWE-190 queries. 2018-08-31 16:15:53 +01:00
ian-semmle
1ed82d63f3 Merge pull request #124 from nickrolfe/desig_init_changenote
C++: change note for designated intializer fixes
2018-08-31 13:19:52 +01:00