Arthur Baars
|
200a965fda
|
Update expected output
|
2022-03-07 11:51:54 +01:00 |
|
Arthur Baars
|
95027e746c
|
Ruby: TypeTracker: add smallstep for functions that return their arguments
|
2022-03-07 11:51:54 +01:00 |
|
Tom Hvitved
|
9c4c35141a
|
Ruby: Update type tracker test
|
2022-03-07 11:51:54 +01:00 |
|
Tom Hvitved
|
64b458b166
|
Merge pull request #8319 from hvitved/csharp/recursive-qltest-extraction-change-note
C#: Add change note about recursive `codeql test run` extraction
|
2022-03-07 11:43:11 +01:00 |
|
Tom Hvitved
|
c1db0a9429
|
Merge pull request #8317 from hvitved/typetracker/jump-step
Ruby/Python: Clear call contexts after jump steps in type tracking
|
2022-03-07 11:38:51 +01:00 |
|
Tom Bolton
|
173f45f316
|
Merge pull request #8334 from github/tombolton/add-mapping-query
JS: Add query that maps queries to sink type
|
2022-03-07 10:35:37 +00:00 |
|
Mathias Vorreiter Pedersen
|
027c8247ae
|
Merge pull request #8310 from jketema/update-stats
C++: Update the DB scheme stats file
|
2022-03-07 09:11:53 +00:00 |
|
Tony Torralba
|
08ce128d64
|
Merge pull request #8325 from JLLeitschuh/feat/JLL/improve_compile_time_constant
[Java] Add CharacterLiteral to CompileTimeConstantExpr.getStringValue
|
2022-03-07 09:32:59 +01:00 |
|
Tiferet Gazit
|
bbc712fdb3
|
Merge pull request #8297 from erik-krogh/atmPerf
JS: Fix ATM timeout on NodeJS
|
2022-03-04 10:41:35 -08:00 |
|
Mathias Vorreiter Pedersen
|
624795cbbf
|
Merge pull request #8059 from rdmarsh2/rdmarsh2/cpp/insufficient-key-strength
C++: new query for insufficient key strength
|
2022-03-04 17:11:44 +00:00 |
|
Robert Marsh
|
280fdbfc1b
|
C++: accept test output from perf improvement
The last commit removed some source nodes from the dataflow graph, which
changed the test expectations slightly. No result changes occurred.
|
2022-03-04 11:39:10 -05:00 |
|
Jonathan Leitschuh
|
38897f2ec1
|
Fixup tests from code review changes
|
2022-03-04 09:33:51 -05:00 |
|
Jonathan Leitschuh
|
17b6e66814
|
Apply suggestions from code review
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2022-03-04 09:29:57 -05:00 |
|
Arthur Baars
|
71e393c6e1
|
Merge pull request #8330 from aibaars/cache-regExpSource
Ruby: cache regExpSource/1 instead of isInterpretedAsRegExp
|
2022-03-04 13:38:11 +01:00 |
|
Mathias Vorreiter Pedersen
|
9a91e66714
|
Merge pull request #8321 from MathiasVP/improve-using-expired-address-query
C++: More TPs from `cpp/using-expired-stack-address`
|
2022-03-04 12:07:55 +00:00 |
|
tombolton
|
2ffa6771ff
|
replace endpoint type name with encoding in mapping query
|
2022-03-04 11:00:31 +00:00 |
|
Rasmus Wriedt Larsen
|
3f48916e95
|
Merge pull request #7915 from yoff/python/promote-xpath-injection
Python: promote XPath injection query
|
2022-03-04 11:59:39 +01:00 |
|
yoff
|
d0a393e8d1
|
Update python/ql/test/library-tests/frameworks/stdlib/XPathExecution.py
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2022-03-04 10:56:53 +01:00 |
|
yoff
|
c514282d4a
|
Merge pull request #8255 from tausbn/python-nomagic-pattern-getcase
Python: Prevent magic/inlining in `getCase`
|
2022-03-04 10:53:20 +01:00 |
|
Tom Hvitved
|
c49ed559d6
|
Update csharp/ql/lib/change-notes/2022-03-03-recursive-qltest-extraction.md
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
|
2022-03-04 10:49:42 +01:00 |
|
Arthur Baars
|
cd5c71e85e
|
Ruby: cache regExpSource/1 instead of isInterpretedAsRegExp
|
2022-03-04 10:15:22 +01:00 |
|
Jonathan Leitschuh
|
04cd0dbfe9
|
[Java] Add CharacterLiteral to CompileTimeConstantExpr.getStringValue
|
2022-03-03 18:08:17 -05:00 |
|
Harry Maclean
|
1181779c10
|
Merge pull request #7920 from github/hmac/string-flow-summaries
Ruby: Add String flow summaries
|
2022-03-04 09:09:19 +13:00 |
|
Robert Marsh
|
60532e631e
|
C++: fix missing paren
|
2022-03-03 14:45:43 -05:00 |
|
Arthur Baars
|
b79d08523c
|
Merge pull request #8293 from aibaars/regex-pattern-source
Ruby: parse more string literals as regular expressions
|
2022-03-03 17:35:40 +01:00 |
|
Arthur Baars
|
22b0697371
|
Update ruby/ql/lib/codeql/ruby/security/performance/ParseRegExp.qll
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
|
2022-03-03 17:13:19 +01:00 |
|
tombolton
|
bd9e845aea
|
update column names and remove encoding value
|
2022-03-03 15:59:10 +00:00 |
|
tombolton
|
f1f1526237
|
add query-sink mapping query
|
2022-03-03 15:20:06 +00:00 |
|
Mathias Vorreiter Pedersen
|
bf10456bf5
|
C++: Add a path explanation to the 'cpp/using-expired-stack-address' query.
|
2022-03-03 13:55:00 +00:00 |
|
Mathias Vorreiter Pedersen
|
9df923a7c8
|
C++: Catch more true positives by stepping into calls in the 'cpp/using-expired-stack-address' query.
|
2022-03-03 13:53:09 +00:00 |
|
Tom Hvitved
|
0c2551079a
|
C#: Add change note about recursive codeql test run extraction
|
2022-03-03 14:32:55 +01:00 |
|
Tom Hvitved
|
9d6d479fba
|
Add missing QL doc
|
2022-03-03 14:17:41 +01:00 |
|
Tom Hvitved
|
ba6ff88d05
|
Sync files
|
2022-03-03 12:30:50 +01:00 |
|
Tom Hvitved
|
b23ab8089a
|
Ruby: Clear call contexts after jump steps in type tracking
|
2022-03-03 12:29:47 +01:00 |
|
Jeroen Ketema
|
f80372b837
|
C++: Update the DB scheme stats file
|
2022-03-03 09:02:37 +01:00 |
|
Jeroen Ketema
|
3fc2f2f3dc
|
Merge pull request #8309 from jketema/taint-join-order
C++: Fix join order in the IR dataflow library
|
2022-03-03 09:00:42 +01:00 |
|
Jeroen Ketema
|
2fd950caad
|
C++: Fix join order in the IR dataflow library
Not having this fixed caused problems when updating the database
scheme stats file.
|
2022-03-03 07:42:52 +01:00 |
|
Harry Maclean
|
4a43731b83
|
Ruby: Use SimpleSummarizedCallable
This simplifies some String flow summaries.
|
2022-03-03 10:49:44 +13:00 |
|
Robert Marsh
|
9fb94d85b4
|
C++: performance tweaks for InsufficientKeySize
|
2022-03-02 15:59:42 -05:00 |
|
Arthur Baars
|
692fc4cb02
|
Update ruby/ql/lib/change-notes/2022-02-28-regex-string-literals.md
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
|
2022-03-02 21:13:23 +01:00 |
|
Rasmus Lerchedahl Petersen
|
6946ae931a
|
python: missed a spot..
|
2022-03-02 17:12:48 +01:00 |
|
Michael Nebel
|
b39f383d45
|
Merge pull request #8230 from michaelnebel/csharp/autobuilder-buildless
C#: Buildless extractor option.
|
2022-03-02 15:53:02 +01:00 |
|
Michael Nebel
|
938902dc89
|
C#: Include example fragment in the release note on, how to invoke the extractor with the optional parameter.
|
2022-03-02 14:28:25 +01:00 |
|
Michael Nebel
|
fc89888c74
|
C#: Add pattern that only accepts 'true' and 'false' as the buildless option.
|
2022-03-02 14:28:21 +01:00 |
|
Michael Nebel
|
c5ddf6110f
|
C#: Address review comments (change description to use true/false instead of yes/no).
|
2022-03-02 14:27:45 +01:00 |
|
Michael Nebel
|
8d9999a8c4
|
C#: Change note describing the buildless extractor option.
|
2022-03-02 14:25:11 +01:00 |
|
Michael Nebel
|
3859b62554
|
C#: Autobuilder should use standalone in case buildless options is provided.
|
2022-03-02 14:25:11 +01:00 |
|
Michael Nebel
|
c973693bee
|
C#: Introduce buildless extractor option.
|
2022-03-02 14:25:06 +01:00 |
|
Michael Nebel
|
fff42501fc
|
Merge pull request #8167 from michaelnebel/csharp/extractor-option-compress
C# Extractor Option for specifying compression.
|
2022-03-02 14:22:52 +01:00 |
|
Michael Nebel
|
a0a2cde6fa
|
C#: Update relase note to include example fragment on, how to invoke the extractor with the optional parameter.
|
2022-03-02 13:17:20 +01:00 |
|