erik-krogh
3cde11efc8
use StrConst instead of Bytes and Unicode
2023-05-01 10:42:14 +02:00
erik-krogh
ffa3425195
rename away from deprecated alias in test-files
2023-05-01 10:42:14 +02:00
erik-krogh
f2adc4f958
add missing qldoc
2023-05-01 10:42:14 +02:00
erik-krogh
59cc90e547
move Regex into a ParseRegExp file, and rename the class to RegExp
2023-05-01 10:42:14 +02:00
erik-krogh
556bb41999
move all code to find Regex flag into a module
2023-05-01 10:42:14 +02:00
erik-krogh
f0254fc089
introduce RegExpInterpretation instead of RegexString, and move RegexTreeView.qll into a regexp folder
2023-05-01 10:42:13 +02:00
erik-krogh
e677b62241
use type-tracking instead of global dataflow for tracking regular expressions
2023-05-01 10:41:53 +02:00
Rasmus Wriedt Larsen
1bba5258d6
Merge pull request #11280 from RasmusWL/dict-dataflow-steps
...
Python: Support more dictionary read/store steps
2023-04-30 16:07:29 +02:00
Anders Schack-Mulligen
246d904712
Merge pull request #12948 from aschackmull/dataflow/pathnode-type-tostring
...
Dataflow: Add type to PathNode.toString.
2023-04-27 14:14:10 +02:00
Arthur Baars
128d102bbc
Merge pull request #12871 from aibaars/py-yaml
...
Python: add YAML support
2023-04-26 18:13:26 +02:00
Anders Schack-Mulligen
d681671356
Dataflow: Sync.
2023-04-26 14:45:07 +02:00
Rasmus Wriedt Larsen
abc1d658e0
Python: More .expected accepting
2023-04-26 14:10:13 +02:00
Arthur Baars
5b6d3afd89
Python: Yaml printAst and tests
2023-04-26 13:41:57 +02:00
Rasmus Wriedt Larsen
b178c9cfe6
Python: Accept dataflow/basic/*.expected
2023-04-26 13:30:11 +02:00
Rasmus Wriedt Larsen
3f39648065
Python: Remove duplicated test
2023-04-26 13:30:11 +02:00
Rasmus Wriedt Larsen
1a97e8f329
Python: Add flow-step for arg[1] to dict.setdefault
2023-04-26 13:30:11 +02:00
Arthur Baars
c1c2bcf419
Python: rename YAML.qll to Yaml.qll
2023-04-26 12:44:53 +02:00
Rasmus Wriedt Larsen
95b8a22529
Merge pull request #12889 from kaspersv/kaspersv/prevent-python-join-order-regression
...
Prevent Python join order regression
2023-04-25 18:02:13 +02:00
yoff
b35637e1c5
Merge pull request #12858 from RasmusWL/paramiko-modeling
...
Python: Expand modeling of `paramiko`
2023-04-25 14:04:50 +02:00
Kasper Svendsen
361b15b2c7
Merge branch 'main' into kaspersv/prevent-python-join-order-regression
2023-04-24 13:35:07 +02:00
Michael Nebel
8ade7247a1
Merge pull request #12885 from michaelnebel/mergepathgraph3
...
Dataflow: Introduce param module for merging three path graphs.
2023-04-24 12:49:28 +02:00
Rasmus Wriedt Larsen
7453533ba4
Python: Expand setdefault tests
2023-04-24 12:29:58 +02:00
Rasmus Wriedt Larsen
7fa84a3613
Python: Only test UnsafeUnpacking with Python 3
...
Apparently the fixup of .expected in the latest commit was only required
when extracting as Python 3, but not as Python 2... I honestly don't
understand why.
2023-04-24 12:29:58 +02:00
Arthur Baars
b919547e31
Add change note
2023-04-21 17:42:02 +02:00
Arthur Baars
bc44b9e4fb
Python: update stats for YAML tables
2023-04-21 17:42:02 +02:00
Arthur Baars
c4a7353583
Python: upgrade/downgrade scripts
2023-04-21 17:42:02 +02:00
Arthur Baars
f61565cab1
Python: add YAML library
2023-04-21 17:42:02 +02:00
Arthur Baars
9c25c150a3
Python: add YAML dbscheme fragment
2023-04-21 17:42:02 +02:00
Rasmus Wriedt Larsen
b60cab254a
Python: Accept .expected change
2023-04-21 15:25:47 +02:00
Rasmus Wriedt Larsen
4094ec5fcc
Python: Change additional dict store/read steps to not affect taint-tracking
2023-04-21 14:43:24 +02:00
Rasmus Wriedt Larsen
f80a0916ac
Python: Don't report get/setdefault as unresolved calls for dict tests
2023-04-21 14:42:20 +02:00
Rasmus Wriedt Larsen
e0e978bd3e
Python: Fix ql4ql alerts
2023-04-21 14:18:50 +02:00
Rasmus Wriedt Larsen
b56869551d
Python: Support more dictionary read/store steps
...
The `setdefault` behavior is kinda strange, but no reason not to support
it.
2023-04-21 14:18:50 +02:00
Rasmus Wriedt Larsen
6e31f64aaa
Python: Add test for dictionary flow
2023-04-21 14:18:46 +02:00
Kasper Svendsen
603a97faf9
Prevent Python join order regression
2023-04-20 13:44:30 +02:00
Luke Cartey
a47778c22e
Update SimpleXmlRpcServer.ql to avoid av detection
...
This file was being flagged by McAfee as an `Exploit-Generic.src`
trojan. We have attempted to report this to Mcafee without success so
far. This commit therefore adjusts the file to avoid detection.
2023-04-20 11:59:18 +01:00
Michael Nebel
656d8d2451
Sync files.
2023-04-20 11:29:51 +02:00
Alex Ford
924ce250dd
Merge pull request #12847 from github/post-release-prep/codeql-cli-2.13.0
...
Post-release preparation for codeql-cli-2.13.0
2023-04-18 14:40:40 +01:00
Rasmus Wriedt Larsen
a168af349e
Python: Expand modeling of paramiko
2023-04-18 11:57:20 +02:00
Rasmus Wriedt Larsen
a5a0861be0
Python: Expand test of py/paramiko-missing-host-key-validation
2023-04-18 11:56:07 +02:00
Tom Hvitved
f6d000eb20
Merge pull request #12805 from hvitved/remove-queries-xml
...
Remove all `queries.xml` files
2023-04-18 10:52:14 +02:00
github-actions[bot]
648f0e19ec
Post-release preparation for codeql-cli-2.13.0
2023-04-17 15:39:24 +00:00
Jeroen Ketema
0c7346707b
Fix minor issues with change notes
2023-04-14 15:37:04 +02:00
github-actions[bot]
075d063370
Release preparation for version 2.13.0
2023-04-14 13:31:30 +00:00
Alex Eyers-Taylor
c6a482819a
Bump all qlpacks major versions
2023-04-13 19:15:27 +01:00
Michael Nebel
52bc43b22b
Merge pull request #12595 from michaelnebel/enhanceprovenance
...
Java/C# : Enhance provenance.
2023-04-13 14:27:53 +02:00
Alex Ford
8c46bfd051
Merge pull request #12816 from github/rc/3.9
...
Merge `rc/3.9` into `main`
2023-04-13 12:35:41 +01:00
Taus
6968de2ccc
Merge pull request #12796 from github/tausbn/python-clarify-version-data
...
Python: Clarify version data
2023-04-13 13:05:10 +02:00
Tom Hvitved
3cc9dec9c8
Remove all queries.xml files
2023-04-13 11:18:58 +02:00
Michael Nebel
1d82b09ec1
Sync files.
2023-04-13 09:21:05 +02:00
