Stephan Brandauer
08f5774d13
Java: Automodel extraction fix for application mode
2023-07-25 17:11:07 +02:00
Stephan Brandauer
13027a1094
Java: review suggestions from @atorralba
2023-07-24 14:09:10 +02:00
Stephan Brandauer
2f2f507a5d
Java: drive-by change: remove obsolete custom queries from application mode characteristics
2023-07-24 13:55:53 +02:00
Stephan Brandauer
79da723878
Java: only assume that _manual_ MaD sinks have been fully modeled
2023-07-21 10:43:07 +02:00
Taus
6b425f1395
Java: Revert definition of isNeutral
...
Reverts the change made in
daf2743143
2023-07-14 14:45:22 +02:00
Taus
6793bc6c6b
Java: Exclude qualifier argument for existing models
...
Excludes candadites for `Argument[this]` where we already have a model that covers a
different argument of the containing call.
2023-07-14 14:26:21 +02:00
Jean Helie
baf6b74945
use new sink mad kinds and simplify isKnownKind predicate
2023-06-16 13:58:23 +02:00
Jean Helie
daf2743143
only use neutral models of kind "sink"
2023-06-16 13:58:23 +02:00
Stephan Brandauer
b38bc52019
Java: fix bug in ExcludedFromModeling Characteristic
2023-06-09 14:57:56 +02:00
Stephan Brandauer
ec3a7e39ad
Java: qldoc style
2023-06-07 14:57:38 +02:00
Stephan Brandauer
715b1351f3
Java: share considerSubtypes predicate between Java modes
2023-06-07 14:55:00 +02:00
Stephan Brandauer
7e77e2ea82
Java: comment why we're using erased types in MaD
2023-06-07 14:42:20 +02:00
Stephan Brandauer
a8799fe981
Java: share getCallable interface between automodel extraction modes
2023-06-07 14:38:52 +02:00
Stephan Brandauer
92ad02a752
Java: update getRelatedLocation qldoc
2023-06-07 14:09:07 +02:00
Stephan Brandauer
be6b1d8aaf
Java: remove SkipFrameworkModeling characteristic in favour of later evaluation
2023-06-07 13:58:56 +02:00
Stephan Brandauer
2e16b71215
Java: update qldoc of ClassQualifierCharacteristic
2023-06-07 13:52:57 +02:00
Stephan Brandauer
03051dde7f
Java: spelling
2023-05-31 14:13:14 +02:00
Stephan Brandauer
12ea5e0e90
Java: fix sanitizer bug
2023-05-31 11:53:02 +02:00
Stephan Brandauer
86559317d7
Java: update comments
2023-05-31 11:52:26 +02:00
Stephan Brandauer
96bae2d5ec
Java: avoid downcasting to DollarAtString
2023-05-31 10:41:52 +02:00
Stephan Brandauer
d4b964c849
add support for sanitizers
2023-05-30 10:25:52 +02:00
Stephan Brandauer
a89378d86d
Java: add extra known frameworks and sample negative samples to manage sarif file sizes
2023-05-26 13:20:04 +02:00
Stephan Brandauer
5ca2221097
remove some of the biggest frameworks from application mode consideration
2023-05-25 17:06:02 +02:00
Stephan Brandauer
db77c6b9a3
Java: mark functional expressions as likely not sinks
2023-05-25 16:39:27 +02:00
Stephan Brandauer
76d731a61d
improve CannotBeTaintedCharacteristic
2023-05-25 16:28:07 +02:00
Stephan Brandauer
9a041243ff
Java: fine-tune characteristics
2023-05-25 14:16:32 +02:00
Stephan Brandauer
f224a40dec
Java: use containing call as call context, not argument
2023-05-25 14:16:23 +02:00
Stephan Brandauer
33fdb0fc52
Java: remove superfluous characteristic
2023-05-25 14:16:23 +02:00
Taus
2000f22533
Java: Port over characteristics from codex branch
2023-05-25 14:16:23 +02:00
Taus
11ab7e2e71
Java: Share argument indexing logic
...
Adds a utility predicate for turning integer indices into the desired string representation.
2023-05-25 14:16:23 +02:00
Stephan Brandauer
db61a2d099
Java: share isKnownKind between modes
2023-05-25 14:16:16 +02:00
Stephan Brandauer
d93ad9b398
Java: remove unneeded abstract metadata extractor classes and fix some names
2023-05-25 14:16:11 +02:00
Stephan Brandauer
7c3bc26c41
Java: make input an actual string, not an integer
2023-05-25 14:15:59 +02:00
Taus
9b30f9a476
Java: Add negative characteristic for static calls
2023-05-25 14:15:49 +02:00
Taus
6fc16574b3
Java: Add QL support for automodel application mode
2023-05-25 14:15:49 +02:00
