3745 Commits

Author	SHA1	Message	Date
Michael Nebel	3b62b45ea8	C#: Add generated framework models to ExternalFlow.	2022-05-25 08:28:14 +02:00
Michael Nebel	daace0fe68	Merge pull request #9270 from michaelnebel/csharp/summarized-callable-fix ... C#: Summarized callable	2022-05-24 16:36:44 +02:00
Tom Hvitved	728ccafe2b	Merge pull request #9024 from hvitved/dataflow/content-flow-lib ... Data flow: Introduce `ContentDataFlow.qll`	2022-05-24 15:09:16 +02:00
Tom Hvitved	6345816acf	Rework ContentDataFlow implementation	2022-05-24 10:34:06 +02:00
Michael Nebel	42be60ea57	C#: Address codereview comments.	2022-05-24 08:21:39 +02:00
Michael Nebel	eed02a2a9f	C#: Fix issue with isAutoGenerated predicate and make sure that data flow only use relevant summaries.	2022-05-24 08:21:38 +02:00
Tom Hvitved	9cc9991c74	C#: Update ContentDataFlow test ... Illustrates missing flow when the sink is inside a method that is also part of a `subpath`.	2022-05-23 13:05:28 +02:00
Michael Nebel	bf958ff5bb	Merge pull request #9255 from michaelnebel/csharp/test-clearscontent ... C#: Remove default clears content.	2022-05-23 10:30:30 +02:00
Michael Nebel	c82ab6813f	Merge pull request #9256 from michaelnebel/csharp/test-ranking ... C#: Rank summaries and source code in dataflow callables.	2022-05-23 10:29:52 +02:00
Anders Schack-Mulligen	f2218944f6	Merge pull request #9214 from hvitved/dataflow/lambda-fp-flow ... Data flow: Do not discard call context when computing reverse lambda flow through jumps	2022-05-23 10:02:51 +02:00
Michael Nebel	217c414b6e	C#: Now that SummarizedCallableDefaultClears content has been removed, we need to explicitly say that fields are cleared.	2022-05-23 08:58:09 +02:00
Michael Nebel	ddde1d4607	C#: Remove default clears content.	2022-05-22 15:16:44 +02:00
Michael Nebel	f141336f64	C#: Fake location of methods as we want to use the defined summaries for testing purposes.	2022-05-22 15:14:58 +02:00
Michael Nebel	9f611d79ac	C#: Rank summaries and source code such that only one is used.	2022-05-22 15:14:19 +02:00
Anders Schack-Mulligen	8beef45599	Merge pull request #9195 from aschackmull/java/perf-local-flow ... Java: Performance fixes for local flow relation	2022-05-20 12:38:02 +02:00
Michael Nebel	20af134ff0	Merge pull request #9210 from michaelnebel/dataflow/summarizedcallablerefactor ... DataFlow - SummarizedCallable refactor	2022-05-20 09:32:30 +02:00
Tom Hvitved	3ebd4af24e	C#: Fix another test	2022-05-19 16:23:31 +02:00
Tom Hvitved	909ad2a61a	Address review comment	2022-05-19 15:37:18 +02:00
Tom Hvitved	f83deb6571	Data flow: Sync files	2022-05-19 15:20:43 +02:00
Michael Nebel	575b8376f3	C#: Update Flow summaries QL test code based on refactor.	2022-05-19 14:41:24 +02:00
Tom Hvitved	0a52420581	C#: Add ContentDataFlow test	2022-05-19 13:28:56 +02:00
Tom Hvitved	bd9b6567c7	Data flow: Introduce ContentDataFlow.qll	2022-05-19 13:28:56 +02:00
Michael Nebel	ff1e6637ac	C#: Fix issue with summaryElement predicate.	2022-05-19 13:06:24 +02:00
Anders Schack-Mulligen	0e830f6052	C#/Ruby/Java: Fix pragmas.	2022-05-19 11:26:38 +02:00
Michael Nebel	be79f20ef1	C#: Refactor SummarizedCallable.	2022-05-19 11:03:50 +02:00
Erik Krogh Kristensen	fff70da650	Merge pull request #9182 from erik-krogh/useStringComp ... use string equality instead of regexps to compare constant strings	2022-05-19 10:42:37 +02:00
Tom Hvitved	eef5022e3d	Merge pull request #9014 from michaelnebel/csharp/dataflowcallablerefactor ... C#: Dataflow callable refactoring.	2022-05-19 09:02:38 +02:00
Erik Krogh Kristensen	215a6a72cc	Merge branch 'main' into useStringComp	2022-05-18 10:55:31 +02:00
Anders Schack-Mulligen	af7df79289	Autoformat	2022-05-18 09:38:11 +02:00
Anders Schack-Mulligen	48ab5b2403	C#/Ruby/Java: Fix references.	2022-05-18 09:27:54 +02:00
Anders Schack-Mulligen	829eb7f7a5	C#/Ruby: Sync FlowSummaryImpl.	2022-05-18 09:27:48 +02:00
Tom Hvitved	23ee033a57	C#: Review fixes	2022-05-18 07:48:21 +02:00
Michael Nebel	df6d86b9aa	C#: Use getUnderlyingCallable instead of asCallable.	2022-05-18 07:48:21 +02:00
Michael Nebel	6f7af11517	C#: Needs to be updated as SummaryParameterNodes are printed slightly different.	2022-05-18 07:48:21 +02:00
Michael Nebel	b41bb3fe08	C#: System.Web.HttpResponse.Write is now considered safe (known) and will this not show up as untrusted external API.	2022-05-18 07:48:21 +02:00
Michael Nebel	97c6d7884d	C#: Source and Sink models are now also considered summarized callables and thus considered safe as they are known external APIs.	2022-05-18 07:48:21 +02:00
Michael Nebel	aeadad62be	C#: Improve implementation.	2022-05-18 07:48:21 +02:00
Michael Nebel	26e2cad528	C#: Improve getCallable.	2022-05-18 07:48:21 +02:00
Michael Nebel	f78def5316	C#: Hide SummaryParamterNodes from path explanations.	2022-05-18 07:48:21 +02:00
Michael Nebel	220526f305	C#: Fix issues with summarized callables parameter types and other casting issues.	2022-05-18 07:48:21 +02:00
Michael Nebel	2c414b2201	C#: Add Summary parameter nodes.	2022-05-18 07:48:21 +02:00
Michael Nebel	0e3fc464a3	C#: Use SummarizedCallable external instead of the internal.	2022-05-18 07:48:20 +02:00
Michael Nebel	b578fcb069	C#: Use the external SummarizedCallable implementation.	2022-05-18 07:48:20 +02:00
Michael Nebel	4f7297715d	C#: Also extract callable from FlowSummary SummarizedCallable in DataFlowCallable.	2022-05-18 07:48:20 +02:00
Michael Nebel	3fa990a984	C#: Make sure that all callables with a summary are added to the external SummarizedCallable class.	2022-05-18 07:48:20 +02:00
Michael Nebel	4810419dfd	C#: Extend SummarizedCallable from FlowSummaryImpl.	2022-05-18 07:48:20 +02:00
Michael Nebel	eb022118f3	C#: Fix issue in ExternalApi.	2022-05-18 07:48:20 +02:00
Michael Nebel	68055bc022	C#: Update flow summaries test code.	2022-05-18 07:48:20 +02:00
Michael Nebel	c8a7354086	C#: Refactor to align implementation between languages.	2022-05-18 07:48:20 +02:00
Michael Nebel	0d61a2c797	C#: Add QL doc to SummarizedCallable.	2022-05-18 07:48:20 +02:00