luchua-bc
2c2aab6ffc
Sensitive broadcast
2020-10-19 16:16:13 +00:00
Anders Schack-Mulligen
4ce41854a4
Merge pull request #4508 from smowton/smowton/fix/droid-webview-test-data
...
Fix test data for WebView experimental query
2020-10-19 16:29:20 +02:00
CodeQL CI
5ead4244fe
Merge pull request #4450 from asgerf/js/angular
...
Approved by erik-krogh
2020-10-19 07:25:59 -07:00
Chris Smowton
4fa2a79b41
Fix test data for WebView experimental query
2020-10-19 14:57:18 +01:00
CodeQL CI
d644a30b19
Merge pull request #4434 from erik-krogh/printAST
...
Approved by asgerf
2020-10-19 04:42:42 -07:00
Erik Krogh Kristensen
ca0870da53
update expected output from InterfaceDefinition -> InterfaceDeclaration change
2020-10-19 12:36:48 +02:00
CodeQL CI
2e52cbeb4a
Merge pull request #4499 from max-schaefer/js/module_compile
...
Approved by asgerf
2020-10-19 03:06:21 -07:00
Erik Krogh Kristensen
8f6165cd5f
print synthetic constructors in PrintAst.ql
2020-10-19 11:10:14 +02:00
Erik Krogh Kristensen
5b1ed97d68
Update javascript/ql/src/semmle/javascript/TypeScript.qll
...
Co-authored-by: Asger F <asgerf@github.com >
2020-10-19 11:01:06 +02:00
Max Schaefer
e1d90e90ad
JavaScript: Add modelling for Module.prototype._compile.
2020-10-19 09:42:17 +01:00
Chris Smowton
3e03db178f
Merge pull request #4483 from smowton/smowton/admin/droid-webview-pr-rebase
...
Rebase of #3706
2020-10-19 09:29:04 +01:00
Mathias Vorreiter Pedersen
7942d7332a
Merge pull request #4501 from dbartol/dbartol/PrintPartialFlow
...
C++: Annotate IR with partial flow info
2020-10-18 17:48:54 +02:00
Dave Bartolomeo
100f13f202
C++: Annotate IR with partial flow info
...
I've added one more property to the annotations provided by `PrintIRLocalFlow.qll`: The `pflow` property will now be emitted for any operand or instruction for which `configuration.hasPartialFlow` determines that there is partial flow to that node. This requires that partial flow be enabled via overriding `Configuration::explorationLimit()` in order to display. Otherwise, you'll still just get the local flow info as before.
2020-10-17 13:17:08 -04:00
Robert Marsh
7f2aa81d0b
Merge pull request #4498 from dbartol/dbartol/PrintCallTargets
...
C++: Print static call target for `Call` instruction in dumps
2020-10-16 16:46:33 -04:00
Asger Feldthaus
f0034138ce
JS: Fix DefaultFlowLabels test
2020-10-16 18:13:13 +01:00
Asger Feldthaus
4137d3f971
JS: Split CWE-079 tests into their own folders
2020-10-16 17:32:36 +01:00
Dave Bartolomeo
6a6eadcf50
C++: Print static call target for Call instruction in dumps
2020-10-16 11:53:27 -04:00
Chris Smowton
5a480bfb13
Give query an id and PathGraph query predicates
2020-10-16 16:19:58 +01:00
Anders Schack-Mulligen
a806a4f086
Merge pull request #4312 from JLLeitschuh/feat/JLL/java/jhipster_CVE-2019-16303
...
Java: QL Query Detector for JHipster Generated CVE-2019-16303
2020-10-16 15:47:09 +02:00
Tom Hvitved
d91ea55f0c
Merge pull request #4440 from aschackmull/dataflow/adaptive-field-precision
...
Dataflow: Adaptive field flow precision
2020-10-16 15:08:56 +02:00
CodeQL CI
1d9b0ce059
Merge pull request #4460 from max-schaefer/js/unsafe-shell-command-construction-infeasible-paths
...
Approved by asgerf
2020-10-16 05:05:29 -07:00
Anders Schack-Mulligen
2b19a48030
Merge pull request #3880 from hvitved/dataflow/precise-aps
...
Data flow: Precise access paths
2020-10-16 13:54:35 +02:00
Anders Schack-Mulligen
b352605d12
Dataflow: Code review fixes.
2020-10-16 13:45:51 +02:00
Anders Schack-Mulligen
664f04020f
Revert "Dataflow: Count callables instead of nodes for fieldFlowBranchLimit."
...
This reverts commit 1501a40de8
2020-10-16 12:51:50 +02:00
Anders Schack-Mulligen
1501a40de8
Dataflow: Count callables instead of nodes for fieldFlowBranchLimit.
2020-10-16 12:51:17 +02:00
Anders Schack-Mulligen
6aae51fa4f
Dataflow: Sync.
2020-10-16 12:51:17 +02:00
Anders Schack-Mulligen
8f055f56b8
Dataflow: Adaptive field flow precision.
2020-10-16 12:51:17 +02:00
Anders Schack-Mulligen
b0f0f89dbc
Dataflow: Minor pruning improvements.
2020-10-16 12:51:17 +02:00
Tom Hvitved
27fc610c0d
Python: Update expected test output
2020-10-16 09:09:06 +02:00
Tom Hvitved
5f01fda1ef
Data flow: Sync files
2020-10-16 09:05:02 +02:00
Tom Hvitved
82e56d4ebb
Data flow: Simplify pathStep and pathIntoCallable
2020-10-16 09:05:02 +02:00
Anders Schack-Mulligen
94f110f739
Sync.
2020-10-16 09:05:01 +02:00
Anders Schack-Mulligen
b4ecfaeda3
Dataflow: Remove inconsistent AccessPath.getType().
2020-10-16 09:05:01 +02:00
Anders Schack-Mulligen
d88c551f64
Dataflow: qldoc fix
2020-10-16 09:05:01 +02:00
Anders Schack-Mulligen
98f10b29b8
Dataflow: Simplify SCC: remove some apa params.
2020-10-16 09:05:01 +02:00
Anders Schack-Mulligen
4e2f786040
Dataflow: Precalculate AccessPath to avoid massive recursion.
2020-10-16 09:05:01 +02:00
Mathias Vorreiter Pedersen
ca534ccb03
C++: Update inline expectation comments
2020-10-16 09:05:01 +02:00
Tom Hvitved
570b624eb7
C++: Update expected test output
2020-10-16 09:05:01 +02:00
Tom Hvitved
d48a6a5555
C#: Update expected test output
2020-10-16 09:04:58 +02:00
Tom Hvitved
d608138c0c
Data flow: Sync files
2020-10-16 09:03:13 +02:00
Tom Hvitved
a35a178080
Data flow: Precise access paths
2020-10-16 09:03:13 +02:00
Tom Hvitved
0dc066c515
Data flow: Rename AccessPath to AccessPathApprox
2020-10-16 09:03:13 +02:00
Asger Feldthaus
287ec0cbbb
JS: Add test for default flow labels
2020-10-16 07:16:02 +01:00
Asger Feldthaus
583f3d7fd9
JS: Also materialize labels in ZipSlip
2020-10-16 07:12:30 +01:00
Asger Feldthaus
4337c5adaf
JS: Workaround ascii PR check
2020-10-16 07:12:29 +01:00
Asger Feldthaus
b3d8b95433
JS: Autoformat
2020-10-16 07:12:29 +01:00
Asger Feldthaus
ca6cd187b7
JS: Change note
2020-10-16 07:12:29 +01:00
Asger Feldthaus
42fc4ff78c
JS: Don't create new flow labels in *Customizations.qll files
2020-10-16 07:12:29 +01:00
Asger Feldthaus
28b449226c
JS: Do not import UrlConcatenation from customizations libraries
2020-10-16 07:12:29 +01:00
Asger Feldthaus
afd82e202d
JS: Add Angular2 model
2020-10-16 07:12:29 +01:00
