11240 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Philip Ginsbach	135a288bed	Update docs/language/ql-handbook/expressions.rst ... Co-Authored-By: Shati Patel <42641846+shati-patel@users.noreply.github.com>	2020-03-27 12:55:42 +00:00
Philip Ginsbach	1b4df6e24c	whitespace fix	2020-03-27 11:53:19 +00:00
Philip Ginsbach	8e873f35ac	mention set literals in handbook	2020-03-27 11:51:03 +00:00
yo-h	0f70da2258	Merge pull request #3105 from aschackmull/java/postupdate-jump ... Java: Fix missing jump step from PostUpdate to capture.	2020-03-25 22:05:30 -04:00
Robert Marsh	e6cdbb9bd2	Merge pull request #3121 from dbartol/dbartol/ir-generate-all-fixup ... C++: Late fix for PR feedback	2020-03-25 17:58:01 -07:00
semmle-qlci	e7fd97e72b	Merge pull request #3119 from erik-krogh/SockJS ... Approved by esbena	2020-03-25 21:36:29 +00:00
Erik Krogh Kristensen	4b0bc6b2b3	autoformat	2020-03-25 19:47:41 +01:00
Dave Bartolomeo	f981ce6be4	Merge pull request #3122 from jbj/getParameter-docs ... C++: Improve QLDoc for Function.getParameter	2020-03-25 12:59:28 -04:00
Jonas Jensen	bc3bdbb11b	C++: Improve QLDoc for Function.getParameter	2020-03-25 15:21:24 +01:00
Dave Bartolomeo	1edd492abf	C++: Late fix for PR feedback ... I missed this suggestion before I merged the original PR. Fixing it now before I forget.	2020-03-25 10:10:30 -04:00
Dave Bartolomeo	376779421d	Merge pull request #2975 from rdmarsh2/printir-generate-all ... C++/C#: generate IR for funcs excluded in PrintIR	2020-03-25 09:45:02 -04:00
semmle-qlci	cf5b1f0cd5	Merge pull request #3019 from erik-krogh/ArrayStep ... Approved by asgerf	2020-03-25 12:08:44 +00:00
Erik Krogh Kristensen	abcdfe3c53	use LibraryName class for websocket library names	2020-03-25 13:06:21 +01:00
Erik Krogh Kristensen	f7faaa634f	change-note	2020-03-25 11:37:39 +01:00
semmle-qlci	a413a3254b	Merge pull request #3114 from RasmusWL/python-add-fp-for-non-callable ... Approved by tausbn	2020-03-25 10:34:50 +00:00
semmle-qlci	ac7c74dcee	Merge pull request #3111 from RasmusWL/python-fabric-command-injection ... Approved by BekaValentine	2020-03-25 10:07:33 +00:00
Mathias Vorreiter Pedersen	ae076da517	Merge pull request #3112 from dbartol/codeql-c-analysis/34-Bad-Overlap ... C++/C#: Fix invalid overlap	2020-03-25 10:40:39 +01:00
yo-h	116c13eb18	Merge pull request #3106 from aschackmull/java/getstmtbody-type ... Java: Sharpen return type of LambdaExpr.getStmtBody().	2020-03-24 19:20:57 -04:00
yo-h	ac68b62b48	Merge pull request #3115 from aschackmull/java/experimental-dir ... Java: Fix directory structure in experimental.	2020-03-24 16:50:28 -04:00
Dave Bartolomeo	2b69cc9738	C#: Make IRConfiguration.qll just forward to the implementation ... Just like C++ already does.	2020-03-24 13:33:50 -04:00
Anders Schack-Mulligen	75523e4eb8	Java: Fix directory structure in experimental.	2020-03-24 16:47:55 +01:00
Dave Bartolomeo	cc76782545	Merge remote-tracking branch 'upstream/master' into codeql-c-analysis/34-Bad-Overlap	2020-03-24 11:38:39 -04:00
semmle-qlci	ce0b72f949	Merge pull request #3093 from erik-krogh/MorePathSinks ... Approved by asgerf	2020-03-24 14:26:41 +00:00
Anders Schack-Mulligen	d8edae96df	Java: Add test.	2020-03-24 15:24:17 +01:00
Rasmus Wriedt Larsen	05ecfc83f7	Python: Add test-case with swapped decorator order	2020-03-24 14:18:46 +01:00
Taus	fe00d1cbf4	Merge pull request #2888 from RasmusWL/python-tarslip-sanitizer ... Python: Improve tarslip sanitizer	2020-03-24 12:59:20 +01:00
Rasmus Wriedt Larsen	3ed48aae4c	Python: remove leftover arg in test code	2020-03-24 11:49:08 +01:00
Rasmus Wriedt Larsen	5ec0716cb0	Python: Add points-to regression when using @classmethod decorators ... Specifically a problem when using a second decorator	2020-03-24 11:39:08 +01:00
Erik Krogh Kristensen	36981f385a	Merge branch 'master' of git.semmle.com:Semmle/ql into MorePathSinks	2020-03-24 11:20:33 +01:00
Rasmus Wriedt Larsen	49fa7c8589	Python: update 1.24 changelog	2020-03-24 10:15:36 +01:00
Rasmus Wriedt Larsen	4b8020b98d	Python: Autoformat Command.qll	2020-03-24 10:11:57 +01:00
semmle-qlci	4c9a6b73ee	Merge pull request #3107 from erik-krogh/FArgs ... Approved by esbena	2020-03-24 08:32:56 +00:00
Erik Krogh Kristensen	5b4f091257	add test for remote flow sources in WebSockets	2020-03-23 23:58:20 +01:00
Erik Krogh Kristensen	6a1491d83d	add SockJS to the existing WebSocket model	2020-03-23 23:56:11 +01:00
Erik Krogh Kristensen	9a18dc32c1	autoformat WebSocket tests	2020-03-23 23:49:26 +01:00
Erik Krogh Kristensen	7b7eddff1e	remove previous SockJS implementation, and move example to WebSocket test	2020-03-23 23:45:05 +01:00
Asger F	a1e032bee6	Merge pull request #3098 from kyprizel/master ... Experimental SockJS support	2020-03-23 22:39:10 +00:00
yo-h	d315864383	Merge pull request #3108 from aschackmull/java/finalizemethod ... Java: Fixup FinalizeMethod definition.	2020-03-23 18:27:57 -04:00
Dave Bartolomeo	bebf89fed5	C++: Accept test diffs ... All changes look like real improvements.	2020-03-23 17:20:19 -04:00
kyprizel	dec1b8b070	Update javascript/ql/src/experimental/SockJS/SockJS.qll ... Fix comments Co-Authored-By: Erik Krogh Kristensen <erik-krogh@github.com>	2020-03-23 22:59:48 +03:00
kyprizel	b90ff5e84d	Update javascript/ql/src/experimental/SockJS/SockJS.qll ... do not import specific libs Co-Authored-By: Erik Krogh Kristensen <erik-krogh@github.com>	2020-03-23 22:59:23 +03:00
Dave Bartolomeo	c5ac357bfc	C++/C#: Fix bad overlap sanity failures ... `Instruction.getDefinitionOverlap()` depends on `SSAConstruction::getMemoryOperandDefinition()`, which in turn depends on `SSAConstruction::hasMemoryOperandDefinition()`. When the definition in question came from a `Chi` instruction, `hasMemoryOperandDefinition()` incorrectly bound `overlap` to the overlap relationship between the original (non-`Chi`) instruction and the use. The fix is to make use of the `actualDefLocation` parameter to `getDefinitionOrChiInstruction()`, which specifies the location for the result of the `Chi` in that case.	2020-03-23 14:57:41 -04:00
Dave Bartolomeo	a2741da8e2	C++/C#: Add sanity test for invalid overlap from getDefinitionOverlap() ... The result of `getDefinitionOverlap()` should never be `MayPartiallyOverlap`, because if that were the case, we should have inserted as `Chi` instruction and hooked the definition up to that instead. There are quite a few existing failures.	2020-03-23 14:37:06 -04:00
Rasmus Wriedt Larsen	b567205579	Python: Model fabric v1.x command injection sinks	2020-03-23 17:49:56 +01:00
Rasmus Wriedt Larsen	a57eadaeb6	Python: Model fabric/invoke command injection sinks	2020-03-23 17:33:41 +01:00
semmle-qlci	e5590091a0	Merge pull request #3109 from max-schaefer/js/performance-fixes ... Approved by asgerf	2020-03-23 16:08:07 +00:00
Rasmus Wriedt Larsen	d475bb998e	Python: Add abstract class CommandSink ... I'm going to add more in a sec, and listing *all* of them in CommandInjection.ql started to be silly	2020-03-23 17:04:08 +01:00
Max Schaefer	55e7b22cdf	JavaScript: Autoformat.	2020-03-23 14:37:04 +00:00
kyprizel	49e5a22cab	Fixed code style for SockJS ... also fixed appCreation, thanks to Erik Krogh.	2020-03-23 17:16:17 +03:00
Jonas Jensen	13465921a3	Merge pull request #3092 from dbartol/dbartol/VarArgIR2_ElectricBoogaloo ... C++: Better IR for varargs	2020-03-23 14:13:54 +01:00