Owen Mansel-Chan
|
1aa63c3f2e
|
Accept model numbering changes
|
2024-07-25 14:55:50 +01:00 |
|
Owen Mansel-Chan
|
a6cb511ed7
|
Convert XPath injection sinks to MaD
|
2024-07-25 12:56:06 +01:00 |
|
Owen Mansel-Chan
|
f3069c8fbb
|
Improve XPath injection test (incl extra sinks)
Currently the extra sinks are not detected. This will be fixed in the
next commit.
|
2024-07-25 12:55:05 +01:00 |
|
Owen Mansel-Chan
|
78b66abad3
|
Convert existing credentials sinks to MaD
I checked that the tests failed when I removed the classes and passed
again when I add the MaD models.
|
2024-07-25 12:53:16 +01:00 |
|
Owen Mansel-Chan
|
93c9910e6f
|
Convert go/request-forgery sinks to MaD
|
2024-07-25 12:53:15 +01:00 |
|
Owen Mansel-Chan
|
f7d681516a
|
Allow MaD sinks for go/request-forgery
Request forgery sinks which have `getRequest` different from the sink
itself cannot be modeled using models-as-data.
|
2024-07-25 12:53:14 +01:00 |
|
Mathias Vorreiter Pedersen
|
c5da43e691
|
Merge pull request #16981 from MathiasVP/phi-escape-5-follow-up-2
C++: Alias analysis follow-up to #16907
|
2024-07-25 11:59:44 +01:00 |
|
Mathias Vorreiter Pedersen
|
032ae9e1e7
|
Merge pull request #17034 from MathiasVP/more-alias-and-side-effect-models
C++: Add more alias and side effect models
|
2024-07-25 10:40:32 +01:00 |
|
Owen Mansel-Chan
|
5a39610ba7
|
Merge pull request #17053 from owen-mc/java/fix/regex-use-sink-kind
Java: Add comments about use of sink kind `regex-use`
|
2024-07-24 21:08:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
3f5b4a81cf
|
C++: Fix more inconsistencies.
|
2024-07-24 17:53:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
b3bffb6826
|
Merge branch 'main' into phi-escape-5-follow-up-2
|
2024-07-24 15:22:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
7ec3162583
|
C++: Sync identical files.
|
2024-07-24 15:20:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
a5efe9fa09
|
C++: Respond to review comments.
|
2024-07-24 15:18:26 +01:00 |
|
Mathias Vorreiter Pedersen
|
90b25a6696
|
Merge pull request #17057 from MathiasVP/avoid-expensive-negation
C++: Avoid expensive negation
|
2024-07-24 15:09:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
ff60d9647f
|
C++: Sync identical files.
|
2024-07-24 11:53:14 +01:00 |
|
Mathias Vorreiter Pedersen
|
ec134927d8
|
C++: Avoid expensive negation.
|
2024-07-24 11:53:11 +01:00 |
|
Anders Schack-Mulligen
|
9f79a39deb
|
Merge pull request #17026 from Marcono1234/patch-1
Java: Update `Annotation` predicate examples in language guide
|
2024-07-24 12:43:50 +02:00 |
|
Mathias Vorreiter Pedersen
|
854a277ab5
|
Merge branch 'main' into more-alias-and-side-effect-models
|
2024-07-24 10:53:27 +01:00 |
|
Mathias Vorreiter Pedersen
|
b7542ee575
|
C++: Fix more inconsistencies (and delete unnecessary override).
|
2024-07-24 10:52:35 +01:00 |
|
Geoffrey White
|
eaf2949857
|
Merge pull request #17054 from geoffw0/scanf
C++: Fix false positives in cpp/incorrectly-checked-scanf
|
2024-07-24 10:51:25 +01:00 |
|
Geoffrey White
|
741a3289a1
|
Merge pull request #17055 from geoffw0/usefree
C++: More tests for cpp/use-after-free
|
2024-07-24 10:35:32 +01:00 |
|
Jeroen Ketema
|
4cbc3349f6
|
Merge pull request #17050 from jketema/destroying-deletes
C++: Support destroying deletes
|
2024-07-24 09:29:55 +02:00 |
|
Jeroen Ketema
|
acbca9c108
|
C++: Support destroying deletes
|
2024-07-24 08:21:01 +02:00 |
|
Owen Mansel-Chan
|
3edeb82d5b
|
Add comment by models using regex-use sink kind
|
2024-07-23 21:40:45 +01:00 |
|
Owen Mansel-Chan
|
89f958105a
|
Mention regex-use sink kind in QLDoc for regexSinkKindInfo
|
2024-07-23 21:38:30 +01:00 |
|
Geoffrey White
|
1456012b54
|
C++: Additional test cases for cpp/use-after-free.
|
2024-07-23 18:02:14 +01:00 |
|
Geoffrey White
|
4920039a00
|
C++: Test spacing.
|
2024-07-23 18:01:30 +01:00 |
|
Geoffrey White
|
a98fac0d7d
|
C++: Change note.
|
2024-07-23 17:27:42 +01:00 |
|
Geoffrey White
|
6026f65f8b
|
C++: Fix FPs in cpp/incorrectly-checked-scanf.
|
2024-07-23 17:27:37 +01:00 |
|
Mathias Vorreiter Pedersen
|
43df4a9393
|
C++: Fix inconsistencies.
|
2024-07-23 17:22:04 +01:00 |
|
Geoffrey White
|
c3f2faff76
|
C++: Add another pattern I found in the wild.
|
2024-07-23 17:19:01 +01:00 |
|
Geoffrey White
|
a9f6b2110e
|
C++: Add new test cases for cpp/incorrectly-checked-scanf.
|
2024-07-23 15:27:22 +01:00 |
|
Owen Mansel-Chan
|
4c8da54b64
|
Merge pull request #17036 from chmodxxx/sbaddou/fix
Java: Move SensitiveLoggerConfig source to extensible format
|
2024-07-23 14:55:26 +01:00 |
|
Chuan-kai Lin
|
67dac96e80
|
Merge pull request #17041 from github/post-release-prep/codeql-cli-2.18.1
Post-release preparation for codeql-cli-2.18.1
|
2024-07-23 06:48:30 -07:00 |
|
Geoffrey White
|
e467cc033e
|
Merge pull request #17037 from geoffw0/sizecheck
C++: Fix issue with cpp/suspicious-allocation-size
|
2024-07-23 14:47:17 +01:00 |
|
Geoffrey White
|
1ed5af1d6a
|
Merge pull request #17035 from geoffw0/allocerr
C++: Fix issue with cpp/incorrect-allocation-error-handling
|
2024-07-23 14:36:05 +01:00 |
|
Alexandre Boulgakov
|
db53be39fe
|
Merge pull request #17047 from github/sashabu/using-enum
C++: Add `UsingEnumDeclarationEntry` changenote.
|
2024-07-23 14:19:18 +01:00 |
|
Alexandre Boulgakov
|
37ceb0118a
|
Merge pull request #17048 from github/sashabu/ame
Docs: Document preference for American English in change notes.
|
2024-07-23 14:05:57 +01:00 |
|
Alexandre Boulgakov
|
e461691c85
|
C++: Move UsingEnumDeclarationEntry change note.
|
2024-07-23 13:57:07 +01:00 |
|
Alexandre Boulgakov
|
5e6c9fb661
|
Docs: Document preference for American English in change notes.
|
2024-07-23 13:49:30 +01:00 |
|
Alexandre Boulgakov
|
5a5c5d1012
|
C++: Translate change note to American English.
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2024-07-23 13:47:44 +01:00 |
|
Alexandre Boulgakov
|
29bda5a805
|
C++: Add UsingEnumDeclarationEntry changenote.
|
2024-07-23 13:43:57 +01:00 |
|
Salah Baddou
|
4f80ae2190
|
Merge branch 'main' into sbaddou/fix
|
2024-07-23 12:03:13 +01:00 |
|
Salah Baddou
|
092de640fe
|
add change-notes
|
2024-07-23 11:04:56 +01:00 |
|
Owen Mansel-Chan
|
ff8bb2b1f8
|
Merge pull request #16760 from owen-mc/java/reverse-dns-separate-threat-model-kind
Java: make a separate threat model kind for reverse DNS sources
|
2024-07-23 10:08:52 +01:00 |
|
Jeroen Ketema
|
d2573310c6
|
Merge pull request #17006 from github/sashabu/using-enum
C++: Support `using enum` declarations.
|
2024-07-23 10:25:06 +02:00 |
|
Anders Schack-Mulligen
|
b5b9c4d931
|
Update java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
Java: Make class private
|
2024-07-23 10:07:51 +02:00 |
|
Anders Schack-Mulligen
|
bb86a07a93
|
Update java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
fix typo
|
2024-07-23 10:03:07 +02:00 |
|
Anders Schack-Mulligen
|
5912a17ab4
|
Update java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
Autoformat
|
2024-07-23 10:01:49 +02:00 |
|
github-actions[bot]
|
49cc8f8ff8
|
Post-release preparation for codeql-cli-2.18.1
|
2024-07-22 22:00:48 +00:00 |
|