Tony Torralba
1d745a6365
Merge pull request #10774 from atorralba/atorralba/swift/url-field-summaries
...
Swift: Add summaries for tainted URL fields
2022-10-18 15:32:23 +02:00
Paolo Tranquilli
fd46592dfb
Merge pull request #10869 from github/redsun82/swift-no-base-suffix
...
Swift: replace `Base` suffix with `Generated::` module
2022-10-18 14:28:08 +02:00
Paolo Tranquilli
8a839c8b96
Swift: remove obsolete schema.yml
2022-10-18 12:51:56 +02:00
Paolo Tranquilli
9c7eec5e44
Swift: remove debug print from qlgen.py
2022-10-18 12:48:18 +02:00
Tony Torralba
0eeaf71716
Simplify models by introducing TaintInheritingContent
2022-10-18 12:36:18 +02:00
Paolo Tranquilli
e29fe54b3c
Swift: remove redudant import
2022-10-18 12:35:35 +02:00
Paolo Tranquilli
f4f5e3e382
Swift: remove redundant module namespace
2022-10-18 12:32:31 +02:00
Paolo Tranquilli
af3f782ad5
Swift: fix TypeDecl.qll
2022-10-18 12:21:06 +02:00
Paolo Tranquilli
581939d139
Swift: replace non-genereated Base suffixes
...
This is the effect of running
```
find swift/ql/lib/codeql/swift/elements -type f | xargs sed -ri 's/\b([A-Z]\w+)Base\b/Generated::\1/g'
```
followed by reformatting.
2022-10-18 12:21:06 +02:00
Paolo Tranquilli
307c885c1f
Swift: use Generated:: instead of Base suffix
...
This commit changes `codegen` and the generated classes.
2022-10-18 12:21:06 +02:00
Geoffrey White
040d72e7f1
Merge pull request #10857 from geoffw0/locationstring
...
Swift: Give Location a useful toString
2022-10-17 18:10:51 +01:00
Paolo Tranquilli
3a99b9845e
Merge pull request #10856 from github/redsun82/swift-show-ql-class-in-collapsed-hierarchy-tests
...
Swift: show QL class in generated tests on collapsed hierarchies
2022-10-17 16:38:24 +02:00
Geoffrey White
dcf254a9e3
Swift: Make QL-for-QL happy.
2022-10-17 14:23:28 +01:00
Geoffrey White
0281bfedda
Merge pull request #10689 from d10c/swift/cleartext-storage-nsuserdefaults
...
Swift: Query for CWE-312: Exposure of sensitive information using NSUserDefaults
2022-10-17 14:05:17 +01:00
Geoffrey White
13f9834fde
Merge pull request #10780 from karimhamdanali/swift-hardcoded-key
...
Swift: detect hardcoded encryption keys
2022-10-17 14:02:31 +01:00
Geoffrey White
85e164d4f6
Swift: QLDoc some stuff while we're here.
2022-10-17 13:22:44 +01:00
Geoffrey White
3b9151cb24
Swift: Restore UnknownLocation.toString(), it seems helpful.
2022-10-17 13:11:22 +01:00
Paolo Tranquilli
e49268d036
Swift: show QL class in generated tests on collapsed hierarchies
...
In those kinds of tests the results may have different final classes
that are not necessarily visible (or tested) solely through the string
representation. For better testing and reading of expected results,
`getQlPrimaryClasses` is added in these cases.
2022-10-17 14:08:04 +02:00
Geoffrey White
9c8bbe384b
Swift: Add Location.toString.
2022-10-17 12:48:17 +01:00
Geoffrey White
4d0c23c4da
Swift: Add a test of Location.qll.
2022-10-17 12:45:26 +01:00
Paolo Tranquilli
789be9a1ad
Swift: add ImplicitConversionExpr test
2022-10-17 12:57:44 +02:00
Karim Ali
bbc03a1578
add false negatives to the test case
2022-10-17 12:54:34 +02:00
Karim Ali
bb3bf64364
update example with both AES and Blowfish for better clarity
2022-10-17 12:54:34 +02:00
Karim Ali
b840a41222
fix typo in doc
2022-10-17 12:54:34 +02:00
Karim Ali
e942cfb98e
fix typos in docs and in-code comments
2022-10-17 12:54:34 +02:00
Karim Ali
aef9645bd6
change use of toString() to getName()
2022-10-17 12:54:34 +02:00
Karim Ali
81e027f225
address QLDoc style comments
2022-10-17 12:54:34 +02:00
Karim Ali
d56c82ff75
add a query that detects hardcoded keys
2022-10-17 12:54:34 +02:00
Paolo Tranquilli
e4bcea708e
Swift: extract all ImplicitConversionExpr
...
In order to do so, `VisitorBase` was changed to allow writing one
`translate` function for an abstract class like
`ImplicitConversionExpr`.
2022-10-17 12:47:05 +02:00
Tony Torralba
81d38132cf
Fix test expectations
2022-10-17 12:00:51 +02:00
Tony Torralba
1e4850044c
Increase precision of the URL(string:relativeTo:) models
2022-10-17 11:29:30 +02:00
Anders Schack-Mulligen
6ef5fac239
Merge pull request #10814 from aschackmull/dataflow/synth-global
...
Dataflow: Add support for synthetic global fields in MaD.
2022-10-17 08:34:26 +02:00
Paolo Tranquilli
a20fdad7c3
Swift: update README.md with IDE setup
2022-10-14 11:12:53 +02:00
Paolo Tranquilli
0ae70fda37
Bazel/CMake: make generated inclusion explicit
2022-10-14 10:57:40 +02:00
Paolo Tranquilli
7ad3d8776b
Merge branch 'main' into redsun82/cmake-generator-prototype
2022-10-14 10:13:12 +02:00
Paolo Tranquilli
14f2d3995a
Swift: make generate_cmake public
2022-10-14 10:01:10 +02:00
Josh Soref
480f1e24af
spelling: unsupported
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 19:43:27 -04:00
Josh Soref
eaa8ca0752
spelling: parameter
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 19:42:46 -04:00
Josh Soref
6d8074e3c6
spelling: observer
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 19:42:46 -04:00
Josh Soref
9b9b54a905
spelling: implementation
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 19:42:46 -04:00
Josh Soref
50ed25098b
spelling: hierarchy
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 19:42:46 -04:00
Josh Soref
243991fae7
spelling: constants
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 19:42:46 -04:00
Josh Soref
0a508726e0
spelling: canonicalization
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 19:42:46 -04:00
Josh Soref
893c5457a8
spelling: disambiguation
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-13 10:56:40 -04:00
Paolo Tranquilli
81628f595c
Merge branch 'main' into redsun82/cmake-generator-prototype
2022-10-13 15:55:50 +02:00
Paolo Tranquilli
b8b6b254bb
Swift: cmake generator for better IDE support
...
A cmake generator in bazel is introduced allowing to import the Swift
extractor as a CMake project while keeping Bazel files as the source of
truth for the build.
Using the CMake project:
* requires bazel and clang to be installed and available on the command
line
* does not require a previous bazel build, however
* will require a CMake reconfiguration for changes to generated code
(like changes to the schema)
2022-10-13 15:25:24 +02:00
Anders Schack-Mulligen
f1634d3dca
Dataflow: Add support for C#/Python/Ruby/Swift.
2022-10-13 14:29:27 +02:00
Anders Schack-Mulligen
69bf13b1d4
Dataflow: Sync.
2022-10-13 14:19:12 +02:00
Anders Schack-Mulligen
036724ce8d
Dataflow: Sync.
2022-10-13 11:03:30 +02:00
Tony Torralba
4b2aa93a05
Update test expectations after rebase
2022-10-11 17:54:59 +02:00
