Calum Grant
6cce0de9b2
Merge pull request #3124 from hvitved/csharp/dataflow/sources-and-sinks
...
C#: Introduce `RemoteFlowSink` class
2020-04-06 12:36:14 +01:00
Asger Feldthaus
7da0345c6a
JS: Autoformat
2020-04-06 12:30:04 +01:00
Asger Feldthaus
2c6beadf68
JS: Recognize more forms of scheme checks
2020-04-06 12:30:03 +01:00
Mathias Vorreiter Pedersen
3aa293210d
C++: Ensure that only non-conflated chi instructions are used everywhere
2020-04-06 12:02:56 +02:00
James Fletcher
5034d40e64
Merge pull request #3203 from jf205/sd-55
...
CodeQL support docs: combine table and footnotes into single snippet
2020-04-06 09:52:02 +01:00
james
d2b0599b63
docs: combine table and footnotes
2020-04-06 09:27:30 +01:00
Robert
1096e5d947
Merge pull request #3163 from robertbrignull/code_scanning_suites
...
Add code-scanning suites
2020-04-06 08:45:40 +01:00
Rasmus Wriedt Larsen
4ce3d5b748
Merge pull request #3040 from BekaValentine/python-objectapi-to-valueapi-iterreturnsnonself
...
Python: ObjectAPI to ValueAPI: IterReturnsNonSelf
2020-04-06 09:37:40 +02:00
Tom Hvitved
c8c706a0ba
C#: Un-deprecate PublicCallableParameterFlowSource
2020-04-06 09:01:44 +02:00
Mathias Vorreiter Pedersen
317734f41e
C++: Attach PostUpdateNodes to Chi nodes following aschackmull's suggestion
2020-04-05 22:35:26 +02:00
Jonas Jensen
530d4294b0
Merge remote-tracking branch 'upstream/master' into DefaultTaintTracking-Configuration
2020-04-05 07:27:07 +02:00
Jonas Jensen
58366b19e9
C++: Path explanations in the last two queries
...
For some reason I thought that these two queries were special because
they manipulate `SecurityOptions` to change the taint-tracking sources.
It turns out it was just the opposite: the queries used to be special
because they invalidated the cache for the `tainted` predicate, but that
predicate is no longer used, so these queries are no longer special.
2020-04-04 16:47:06 +02:00
Jonas Jensen
54a23a486a
C++: Accept test changes for 108d5177b8
2020-04-04 16:46:59 +02:00
Jonas Jensen
d7332644f0
C++: Fix DefinitionByReferenceNode.toString
...
This predicate now has a value also for calls to function pointers.
2020-04-04 15:31:01 +02:00
Jonas Jensen
108d5177b8
C++: Fix two bugs found by @rdmarsh2
...
Co-Authored-By: Robert Marsh <rdmarsh2@gmail.com >
2020-04-04 15:24:44 +02:00
Rebecca Valentine
be86c9c066
Python: ObjectAPI to ValueAPI: IterReturnsNonSelf: ObjectAPI.qll: Explains why getAnInferredReturnType is weird for builtins
2020-04-03 15:16:16 -07:00
Rebecca Valentine
64b17888e5
Python: ObjectAPI to ValueAPI: IterReturnsNonSelf: ObjectAPI.qll: Reorganizes getAnInferredReturnType()
2020-04-03 15:14:25 -07:00
Robert Marsh
316d932829
Merge pull request #3198 from MathiasVP/valuenumbering-provider-new-file
...
C++/C#: Prevent accidental import of ValueNumberPropertyProvider
2020-04-03 13:31:11 -07:00
Jonas Jensen
bb3616e4c4
C++: Add example for globalVarFromId
2020-04-03 17:51:35 +02:00
semmle-qlci
a8098a2b2d
Merge pull request #3197 from erik-krogh/NormalPathSanitizer
...
Approved by asgerf
2020-04-03 16:33:18 +01:00
Jonas Jensen
5822cd7b84
C++: Put paths in the remaining LGTM-suite queries
2020-04-03 17:10:47 +02:00
Jonas Jensen
3ec1f691c2
C++: First query with flow-paths through globals
2020-04-03 16:45:00 +02:00
Jonas Jensen
aaebe3687e
C++: Fix copy-paste error in convertedExprNode
2020-04-03 16:37:23 +02:00
Jonas Jensen
469bdae9b2
C++: More helpful toString for def. by ref. node
2020-04-03 16:37:23 +02:00
Jonas Jensen
36da2d1dae
C++: Manipulate the source end of paths too
...
Without this, we get duplicate alerts in some cases and
unnatural-looking source nodes in other cases. The source nodes were
often `Conversion`s.
2020-04-03 16:37:23 +02:00
Jonas Jensen
e916f07a8e
C++: Formatting fixups
2020-04-03 15:52:13 +02:00
Jonas Jensen
427815d3d1
C++: taintedWithPath QLDoc + simplification
2020-04-03 15:52:13 +02:00
Jonas Jensen
3653627650
C++: Let configuration class extend singleton
2020-04-03 15:52:13 +02:00
Erik Krogh Kristensen
9c2053168b
writing out the truth table for DotDotSlashPrefixRemovingReplace
2020-04-03 15:46:47 +02:00
semmle-qlci
676da02118
Merge pull request #3192 from asger-semmle/js/missing-await-not-delete
...
Approved by esbena
2020-04-03 13:21:48 +01:00
Shati Patel
a93aafcab5
Merge pull request #3194 from shati-patel/50-intro-to-ql
...
Docs: Include "Introduction to QL" in tutorial topic
2020-04-03 12:12:00 +01:00
Tom Hvitved
4e2d6c0250
C#: Add missing QL doc
2020-04-03 12:45:56 +02:00
Mathias Vorreiter Pedersen
c54cddead1
C++: Include PrintValueNumbering in testcase
2020-04-03 12:42:06 +02:00
Calum Grant
adde52d33c
C#: Add missing files
2020-04-03 11:22:50 +01:00
Jonas Jensen
16c7a35b1c
Merge pull request #3195 from geoffw0/taintstring
...
C++: Model taint flow through std::string constructor and c_str()
2020-04-03 12:05:07 +02:00
Erik Krogh Kristensen
94751c1b31
dst can be relative for "../" replace call
2020-04-03 11:08:31 +02:00
Calum Grant
6a26a6542a
C#: Remove a function.
2020-04-03 09:42:25 +01:00
semmle-qlci
dc774e0eac
Merge pull request #3166 from erik-krogh/DeadLocal
...
Approved by asgerf
2020-04-03 09:36:20 +01:00
Tom Hvitved
08fbd1d2ad
C#: Update change notes
2020-04-03 10:25:46 +02:00
Geoffrey White
73bfd819d9
C++: Rename classes.
2020-04-03 09:23:31 +01:00
Geoffrey White
1bcf187c3e
C++: Rename Strings.qll -> StdString.qll.
2020-04-03 09:17:33 +01:00
Mathias Vorreiter Pedersen
1e73528102
C++/C#: Add synchronization
2020-04-03 10:08:00 +02:00
Mathias Vorreiter Pedersen
0b12c1519b
C++/C#: Sync identical files
2020-04-03 10:06:37 +02:00
Mathias Vorreiter Pedersen
0f70944a5b
C++: Move ValueNumberPropertyProvider into its own file to prevent accidental imports
2020-04-03 09:55:41 +02:00
Erik Krogh Kristensen
e46cde17a1
add a "../" removing taint-step for js/path-injection
2020-04-03 09:42:05 +02:00
Shati Patel
b267df0077
Address review comments + make article intro consistent with map topic
2020-04-03 00:02:14 +01:00
Robert Marsh
a8e191248e
Merge branch 'master' into rdmarsh/cpp/ir-flow-through-outparams
...
Merge IR SSA test additions
2020-04-02 15:30:20 -07:00
Asger Feldthaus
ffbbdd7779
JS: Autoformat
2020-04-02 23:04:24 +01:00
Asger Feldthaus
93971e9433
JS: Make local flow not depend on SourceNode
2020-04-02 23:03:29 +01:00
Asger Feldthaus
346867f425
JS: Remove Import->SourceNode dependency from AMD
2020-04-02 23:03:29 +01:00
