1170 Commits

Author	SHA1	Message	Date
Joe Farebrother	7989ba3391	Replace a tainttracking instance with local flow	2022-08-17 10:35:16 +01:00
Joe Farebrother	bf32b5a8fd	Reiview suggestions - add doc comment, reword description, simplify a part	2022-08-17 10:35:15 +01:00
Joe Farebrother	4d0957711b	Reduce FPs from empty arrays	2022-08-17 10:35:14 +01:00
Joe Farebrother	c0a1300955	Improve initializedWthConstants to no longer need a workaround	2022-08-17 10:35:13 +01:00
Joe Farebrother	f8f21c7ee6	Move static init vector query and tests from experimental to main	2022-08-17 10:35:13 +01:00
Jami	dd23d48ad2	Merge pull request #9939 from jcogs33/android-debug-query-inline-tests ... Java: query to detect android:debuggable attribute enabled	2022-08-16 10:07:13 -04:00
erik-krogh	8e6a36256c	import the non-deprecated NfaUtils in the overly-large-range query	2022-08-16 11:21:43 +02:00
Anders Schack-Mulligen	28e4224ab1	Merge pull request #10023 from aschackmull/java/numbertype-perf ... Java: Minor perf improvement.	2022-08-16 09:52:55 +02:00
Erik Krogh Kristensen	f106e064fa	Merge pull request #9422 from erik-krogh/refacReDoS ... Refactorizations of the ReDoS libraries	2022-08-16 09:32:08 +02:00
Jami Cogswell	4986cc8458	update isDebuggable predicate	2022-08-15 15:50:00 -04:00
Jami Cogswell	c010f92811	simplified predicates, removed overridden getFile predicate	2022-08-15 15:50:00 -04:00
Jami Cogswell	6e10fcf519	added predicates in the AndroidManifest library and adjusted tests	2022-08-15 15:50:00 -04:00
Chris Smowton	774e379eb1	Merge pull request #9742 from smehta23/feat/SM/java_partial_path_traversal_vulnerability ... [JAVA] Partial Path Traversal Vuln Query	2022-08-15 12:56:16 +01:00
Erik Krogh Kristensen	0adb588fe8	Merge pull request #9712 from erik-krogh/badRange ... JS/RB/PY/Java: add suspicious range query	2022-08-15 13:55:44 +02:00
Anders Schack-Mulligen	a3fb54c9de	Merge pull request #10007 from aschackmull/dataflow/source-node-identity ... Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow	2022-08-15 10:39:17 +02:00
erik-krogh	3a4a3437b5	fix some QL-for-QL warnings	2022-08-12 20:38:50 +02:00
erik-krogh	b54f037424	Merge branch 'main' into refacReDoS	2022-08-12 20:28:30 +02:00
erik-krogh	b9e96fb078	sync changes to other languages	2022-08-12 20:28:12 +02:00
Anders Schack-Mulligen	a3fc463d0a	Java: Minor perf improvement.	2022-08-11 14:21:10 +02:00
Erik Krogh Kristensen	73df8e4c7d	Merge pull request #9832 from erik-krogh/misspellings ... Fix lots of misspellings	2022-08-11 12:43:26 +02:00
Chris Smowton	e9df675f88	Autoformat ql	2022-08-11 09:55:46 +01:00
Anders Schack-Mulligen	87461fece4	Merge pull request #10006 from aschackmull/java/sensitive-log-dedup ... Java: Remove SensitiveLoggingQuery results that flow through a source.	2022-08-11 09:26:33 +02:00
Erik Krogh Kristensen	887f6557ed	fix common misspellings throughout github/codeql	2022-08-10 23:21:41 +02:00
Anders Schack-Mulligen	abad133ab5	Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow.	2022-08-10 15:02:56 +02:00
Anders Schack-Mulligen	cbd6d24b9c	Merge pull request #9963 from intrigus-lgtm/java/model-set-properties ... Model `java.util.Properties.setProperty`	2022-08-10 14:51:00 +02:00
Anders Schack-Mulligen	ecc15a1f95	Java: Remove SensitiveLoggingQuery results that flow through a source.	2022-08-10 14:28:07 +02:00
Tony Torralba	7f5fe85e2e	Merge pull request #9975 from atorralba/atorralba/asynctask-improvs ... Java: Improve AsyncTask data flow support	2022-08-09 17:10:09 +02:00
Erik Krogh Kristensen	49276b1f38	Merge branch 'main' into refacReDoS	2022-08-09 16:18:46 +02:00
Anders Schack-Mulligen	aa3655678e	Merge pull request #9823 from aschackmull/dataflow/stage-module ... Dataflow: Replace stage duplication with parameterised modules.	2022-08-08 10:56:32 +02:00
Joe Farebrother	dd83c17144	Use more precise control flow logic	2022-08-05 12:56:21 +01:00
Joe Farebrother	abf894a64c	Fix typos	2022-08-05 12:56:20 +01:00
Joe Farebrother	03c2a0e818	Add missing qldoc	2022-08-05 12:56:20 +01:00
Joe Farebrother	a2245bb858	Fix test	2022-08-05 12:56:19 +01:00
Joe Farebrother	16e16f08dc	Add webview cert validation query	2022-08-05 12:56:18 +01:00
Tony Torralba	b75b073dae	Remove unused class member	2022-08-05 12:21:22 +02:00
Anders Schack-Mulligen	3d47875b60	Dataflow: Generate shorter RA/DIL names.	2022-08-05 11:00:56 +02:00
Anders Schack-Mulligen	d3dcc3ce3a	Dataflow: Sync.	2022-08-05 11:00:56 +02:00
Anders Schack-Mulligen	09d0f8e0ce	Dataflow: Replace stage duplication with parameterised modules.	2022-08-05 11:00:56 +02:00
Tony Torralba	5ebce6ee4f	Improve AsyncTask data flow support ... Model the life-cycle described here: https://developer.android.com/reference/android/os/AsyncTask\#the-4-steps	2022-08-05 10:29:49 +02:00
intrigus	55618adf6a	Model java.util.Properties.setProperty	2022-08-04 16:21:48 +02:00
Anders Schack-Mulligen	a5a58f46eb	Merge pull request #9945 from aschackmull/java/wrappedinvocation-joinorder ... Java: Improve join-order.	2022-08-04 11:12:23 +02:00
Shyam Mehta	76cecc170e	Fix documentation	2022-08-03 14:30:17 -04:00
Anders Schack-Mulligen	aabdf84300	Java: Improve join-order for not haveIntersection.	2022-08-02 14:29:03 +02:00
Anders Schack-Mulligen	cd356a5ac1	Java: Improve join-order.	2022-08-02 08:49:58 +02:00
Anders Schack-Mulligen	70e6db3ce1	Merge pull request #9902 from aschackmull/java/junit5-assertnotnull ... Java: Add support for JUnit5 assertions in the nullness queries.	2022-07-27 13:52:01 +02:00
Tony Torralba	e179126abb	Merge pull request #9129 from atorralba/atorralba/get-underlying-expr ... Java: Add Expr::getUnderlyingExpr predicate	2022-07-27 11:42:28 +02:00
Anders Schack-Mulligen	cc423af8f1	Java: Add support for JUnit5 assertions in the nullness queries.	2022-07-27 10:20:47 +02:00
Tony Torralba	33f5620782	Add more models	2022-07-26 11:06:11 +02:00
Tony Torralba	95db81658b	Add CSV models for java.util.Scanner	2022-07-26 10:42:24 +02:00
Shyam Mehta	09ec37943c	Partial Path Traversal split into 2 queries	2022-07-20 17:53:26 -04:00