Tom Hvitved
|
36043d04bd
|
Merge pull request #1729 from xiemaisi/data-flow-nodes-location
Java/C++/C#: Provide path-node locations via `hasLocationInfo`, not `getLocation`.
|
2019-08-13 12:22:59 +02:00 |
|
Max Schaefer
|
eb8087f4ea
|
Java/C++/C#: Provide path-node locations via hasLocationInfo, not getLocation.
|
2019-08-12 12:52:30 +01:00 |
|
Anders Schack-Mulligen
|
20e6f5594f
|
Java: Improve barriers for the CWE-190 Arithmetic* queries.
|
2019-08-07 15:22:23 +02:00 |
|
yh-semmle
|
033879f5a6
|
Merge pull request #1639 from aschackmull/java/in-out-barriers
Java/C++/C# DataFlow: Add support for in/out barriers on sources and sinks.
|
2019-08-07 01:07:19 -04:00 |
|
Anders Schack-Mulligen
|
a80cb262fc
|
Java/C++/C#: Elaborate qldoc.
|
2019-08-05 16:28:25 +02:00 |
|
Anders Schack-Mulligen
|
9ebb83497d
|
Java/C++/C#: Fix small mistake.
|
2019-08-05 15:34:12 +02:00 |
|
Anders Schack-Mulligen
|
2dc83c539c
|
Java/C++/C#: Sync dataflow.
|
2019-08-05 12:07:32 +02:00 |
|
Anders Schack-Mulligen
|
f8804943ee
|
Java: Change in/out barriers to be explicit in the configuration.
|
2019-08-05 12:05:12 +02:00 |
|
Anders Schack-Mulligen
|
4ffc41277a
|
Java: Adjust taint steps for Reader::read.
|
2019-08-02 14:21:06 +02:00 |
|
yh-semmle
|
37395877a7
|
Merge pull request #1633 from aschackmull/java/taint-string-concat
Java: Add taint step for String::concat.
|
2019-07-30 00:21:52 -04:00 |
|
yh-semmle
|
a1b4d09b42
|
Merge pull request #1630 from aschackmull/java/switchexpr-tostring
Java: Add toString override for SwitchExpr.
|
2019-07-26 11:32:24 -04:00 |
|
Anders Schack-Mulligen
|
6d022aa359
|
Java/C++/C#: Sync dataflow.
|
2019-07-26 13:17:12 +02:00 |
|
Anders Schack-Mulligen
|
7c30c1a01c
|
Java: Deprecate isBarrierEdge.
|
2019-07-26 13:16:19 +02:00 |
|
Anders Schack-Mulligen
|
d3c5644229
|
Java: Add support for in/out barriers on sources and sinks.
|
2019-07-26 11:52:55 +02:00 |
|
yh-semmle
|
9fdb964622
|
Merge pull request #1511 from aschackmull/java/typeflow-precision
Java: Minor TypeFlow precision improvement and refactor.
|
2019-07-25 23:06:16 -04:00 |
|
Anders Schack-Mulligen
|
046d4a01de
|
Java: Add taint step for String::concat.
|
2019-07-25 11:38:34 +02:00 |
|
Anders Schack-Mulligen
|
3d340d4fba
|
Java: Delete deprecated dependency DataFlowImplDepr.
|
2019-07-25 11:18:01 +02:00 |
|
Anders Schack-Mulligen
|
e8aae19556
|
Java: Add toString override for SwitchExpr.
|
2019-07-25 10:53:16 +02:00 |
|
yh-semmle
|
a42d9b1f96
|
Merge pull request #1616 from aschackmull/java/dataflow-prunetype-bugfix
Java: Bugfix for flow through methods with taint step and upcast.
|
2019-07-24 22:28:05 -04:00 |
|
Anders Schack-Mulligen
|
a8c10e218c
|
Java: Delete old deprecated code.
|
2019-07-23 10:09:51 +02:00 |
|
Anders Schack-Mulligen
|
cd8d16183c
|
Java/CPP/C#: Sync dataflow.
|
2019-07-22 15:41:37 +02:00 |
|
Anders Schack-Mulligen
|
3024b5cb9e
|
Java: Bugfix for flow through methods with taintstep and upcast.
|
2019-07-22 15:39:30 +02:00 |
|
yh-semmle
|
12c906c9de
|
Merge pull request #1503 from aschackmull/java/object-tostring-dispatch
Java: Restrict Object.toString() dispatch based on a more closed-world assumption.
|
2019-07-19 09:23:21 -04:00 |
|
Anders Schack-Mulligen
|
3588066ba1
|
Java: Add qldoc and change note.
|
2019-07-18 17:53:40 +02:00 |
|
Robin Neatherway
|
204a28df94
|
Java: Add isNotEmpty to NullGuards
|
2019-07-05 12:41:46 +01:00 |
|
Anders Schack-Mulligen
|
93646974a6
|
Java: Add SHA512 to the crypto whitelist.
|
2019-06-27 13:38:04 +02:00 |
|
Anders Schack-Mulligen
|
ff45387ead
|
Java: Minor TypeFlow precision improvement and refactor.
|
2019-06-27 12:42:46 +02:00 |
|
Anders Schack-Mulligen
|
2af3598223
|
Java: Restrict Object.toString dispatch based on a more closed-world assumption.
|
2019-06-26 17:42:40 +02:00 |
|
Esben Sparre Andreasen
|
3f11ae7eaa
|
Merge remote-tracking branch 'rc/1.21' into master
|
2019-06-12 12:57:55 +02:00 |
|
yh-semmle
|
8e6b62a301
|
Java: add QL library for modeling Android components
|
2019-06-10 13:00:03 -04:00 |
|
yh-semmle
|
0fb323b5ff
|
Java: add QL library for modeling AndroidManifest.xml files
|
2019-06-10 12:59:47 -04:00 |
|
Anders Schack-Mulligen
|
5fed6c78fe
|
Java: Include two more base cases in TypeFlow to improve virtual dispatch.
|
2019-06-06 14:45:23 +02:00 |
|
Anders Schack-Mulligen
|
98c5dc194b
|
Java: Rename to selector as per review comment.
|
2019-06-05 09:16:12 +02:00 |
|
Anders Schack-Mulligen
|
0e12df0a15
|
Java: Add SwitchExpr support in Guards.qll
|
2019-06-04 16:03:23 +02:00 |
|
yh-semmle
|
87cbc7e199
|
Merge pull request #1344 from aschackmull/java/validatedvariable
Java: Replace ValidatedVariable with guarded accesses.
|
2019-05-24 11:23:18 -04:00 |
|
yh-semmle
|
64aa111b65
|
Merge pull request #1342 from aschackmull/java/field-annotation-cu
Java: Check compilation unit of the same element in both disjuncts.
|
2019-05-22 16:36:24 -04:00 |
|
Anders Schack-Mulligen
|
3e5bbd96b1
|
Java: Account for non-source annotation on second field in multi-field declarations.
|
2019-05-22 11:33:10 +02:00 |
|
yh-semmle
|
29ae7b5c3c
|
Merge pull request #1322 from aschackmull/java/deprecate-remoteuserinput
Java: Deprecate RemoteUserInput
|
2019-05-20 12:56:51 -04:00 |
|
Anders Schack-Mulligen
|
48b19f1fea
|
Java: Replace ValidatedVariable with guarded accesses.
|
2019-05-20 16:46:11 +02:00 |
|
Anders Schack-Mulligen
|
d0de0254e1
|
Java: Check compilation unit of the same element in both disjuncts.
|
2019-05-20 16:41:08 +02:00 |
|
yh-semmle
|
5466ae619d
|
Merge pull request #1317 from aschackmull/java/domedge
Java: Refactor Guard.controls in terms of dominating edges.
|
2019-05-20 10:40:10 -04:00 |
|
Anders Schack-Mulligen
|
9ebeac25ad
|
Merge pull request #1329 from hvitved/dataflow/performance
Data flow: performance improvements
|
2019-05-20 14:27:03 +02:00 |
|
Tom Hvitved
|
bc00877ff2
|
Data flow: Add nomagic to storeCand()
|
2019-05-20 12:05:20 +02:00 |
|
Tom Hvitved
|
360c7a1ac5
|
Address review comments
|
2019-05-20 09:59:17 +02:00 |
|
yh-semmle
|
6468721f76
|
Merge pull request #1324 from aschackmull/java/switchexpr-nullness
Java: Add SwitchExpr to Nullness::dereference.
|
2019-05-19 22:24:27 -04:00 |
|
yh-semmle
|
e5f4d475d0
|
Merge pull request #1320 from aschackmull/java/guardslogic-perf
Java: Fix join-order for GuardsLogic::conditionalAssign.
|
2019-05-19 22:23:18 -04:00 |
|
Tom Hvitved
|
02ca09aa43
|
Data flow: performance improvements
|
2019-05-16 07:35:10 +02:00 |
|
Anders Schack-Mulligen
|
531d30f048
|
Java: Add SwitchExpr to Nullness::dereference.
|
2019-05-15 13:20:55 +02:00 |
|
Anders Schack-Mulligen
|
3eb3cd345d
|
Java: Update qldoc and add callsImpl convenience wrapper.
|
2019-05-14 16:31:56 +02:00 |
|
Anders Schack-Mulligen
|
f9e4512f32
|
Java: Update polyCalls to use virtual dispatch.
|
2019-05-14 15:36:12 +02:00 |
|