Max Schaefer
3ed40d5da1
Merge branch 'master' into range-analysis
2018-11-30 09:36:40 +00:00
semmle-qlci
1c5322274a
Merge pull request #557 from esben-semmle/js/unused-react-variable
...
Approved by xiemaisi
2018-11-30 09:35:36 +00:00
semmle-qlci
adc15cad07
Merge pull request #574 from xiemaisi/js/avoid-materialisation
...
Approved by esben-semmle
2018-11-30 08:30:14 +00:00
Tom Hvitved
8bd8975795
Merge pull request #568 from calumgrant/cs/index-out-of-bounds
...
C#: Fix false-positives in cs/index-out-of-bounds
2018-11-29 18:40:05 +01:00
Mark Shannon
11ca7b74a3
Merge pull request #572 from geoffw0/deprecate-cpython
...
CPP: Delete CPython queries
2018-11-29 14:50:06 +00:00
Jonas Jensen
90ad5cfac5
Merge pull request #569 from geoffw0/deprecate-pointsto-debug
...
CPP: Deprecate the PointsTo debug queries.
2018-11-29 15:28:07 +01:00
calum
6a1ab51d66
C#: Address review comments.
2018-11-29 11:39:10 +00:00
Asger F
d4023fe95a
JS: address review
2018-11-29 11:37:38 +00:00
Asger F
b2a82ae598
JS: add 1.20 change note
2018-11-29 11:26:31 +00:00
Asger F
959776b775
JS: add test case
2018-11-29 11:22:15 +00:00
Asger F
d69e584cc2
JS: fix bug in foldedComparisonEdge
2018-11-29 11:22:15 +00:00
Asger F
8fd3a417c2
JS: address comments
2018-11-29 11:22:15 +00:00
Asger F
2c51f86f1b
JS: avoid joining on =0
2018-11-29 11:22:14 +00:00
Asger F
6d7ac885ec
JS: add to correctness-more suite
2018-11-29 11:22:14 +00:00
Asger F
477be260f3
JS: rename UselessRangeCheck -> UselessComparisonTest
2018-11-29 11:22:14 +00:00
Asger F
2e65f6b660
JS: address some style comments
2018-11-29 11:22:14 +00:00
Asger F
2870209299
JS: fix links in qhelp file
2018-11-29 11:22:14 +00:00
Asger F
76a69f4ff2
JS: address review comments
2018-11-29 11:22:14 +00:00
Asger F
f3020f776e
JS: avoid extending self-edges
2018-11-29 11:22:14 +00:00
Asger F
4a367d3fdb
JS: more efficient encoding of unary constraints
2018-11-29 11:22:14 +00:00
Asger F
5283c6cd48
JS: only warn about dead code
2018-11-29 11:22:14 +00:00
Asger F
2d6bf0aff3
JS: improve join ordering in extendedEdge
2018-11-29 11:22:14 +00:00
Asger F
84ea4cf1d1
JS: manually reorder extendedEdge and negativeEdge
2018-11-29 11:22:14 +00:00
Asger F
344bec3865
JS: Add UselessRangeCheck.ql
2018-11-29 11:22:14 +00:00
Asger F
d813635f3e
JS: Restrict constraint generation to relevant nodes
2018-11-29 11:22:14 +00:00
Asger F
43df9538bf
JS: be conservative in presence of NaN comments
2018-11-29 11:22:14 +00:00
Asger F
feb8a8c4fd
JS: restrict bias to 30-bit range to avoid overflow
2018-11-29 11:22:14 +00:00
Asger F
20aa4e1f6d
JS: handle sharp inequalities directly
2018-11-29 11:22:14 +00:00
Asger F
9d8d953292
JS: perform widening when adding operands of very different magnitude
2018-11-29 11:22:14 +00:00
Asger F
6c53ad80c7
JS: add constant constraints in range analysis
2018-11-29 11:22:13 +00:00
Asger F
064b1099eb
JS: range analysis through phi nodes
2018-11-29 11:22:13 +00:00
Asger F
09ca6652fb
JS: Support return value of x++
2018-11-29 11:22:13 +00:00
Asger F
73cbdee691
JS: Compound assignments and update exprs in range analysis
2018-11-29 11:22:13 +00:00
Asger F
a374540c55
JS: Range analysis library
2018-11-29 11:22:13 +00:00
Jonas Jensen
d991fa84b1
Merge pull request #552 from geoffw0/move-security-tests-add
...
CPP: Add the Semmle security tests.
2018-11-29 10:49:20 +01:00
Geoffrey White
9d95291124
CPP: Delete the CPython queries and libraries.
2018-11-29 09:29:46 +00:00
Geoffrey White
909ff428ac
CPP: Deprecate the CPython queries.
2018-11-29 09:28:29 +00:00
semmle-qlci
d64067aaae
Merge pull request #558 from xiemaisi/js/sanitise-access-paths
...
Approved by asger-semmle
2018-11-29 08:27:58 +00:00
semmle-qlci
d31c9950f9
Merge pull request #566 from ian-semmle/defuse_test
...
Approved by dave-bartolomeo
2018-11-28 20:48:14 +00:00
Geoffrey White
d261f1b6d2
CPP: Deprecate the PointsTo tests.
2018-11-28 20:23:33 +00:00
calum
f2d7b6ebe9
C#: Change notes.
2018-11-28 20:21:34 +00:00
calum
6c6d7e4fff
C#: Fix false-positives in cs/index-out-of-bounds.
2018-11-28 17:42:08 +00:00
Ian Lynagh
6cb6b1c07d
C++: Tweak the defuse test
...
It looks like this is what it was originally intended to do.
2018-11-28 17:11:17 +00:00
Esben Sparre Andreasen
f3889e715e
JS: simplify isReactImportForJSX to isReactForJSX
2018-11-28 15:06:53 +01:00
Max Schaefer
fb78e14db1
JavaScript: Add support for sanitising dynamic property accesses.
...
This generalises our previous handling of sanitisers operating on property accesses to support dynamic property accesses where the property name is an SSA variable by representing them as access paths.
2018-11-28 12:37:53 +00:00
Esben Sparre Andreasen
72092529d1
JS: add change note for js/unused-local-variable
2018-11-28 13:25:26 +01:00
Esben Sparre Andreasen
f3c90114df
JS: add empty 1.20 change note
2018-11-28 13:24:26 +01:00
Esben Sparre Andreasen
54e2215db4
JS: support require in isReactImportForJSX
2018-11-28 13:16:55 +01:00
Esben Sparre Andreasen
737a816e6f
JS: refactor isReactImportForJSX
2018-11-28 13:16:55 +01:00
Max Schaefer
9c98aaf4bd
JavaScript: Refactor a few predicates to avoid materialisations.
2018-11-28 10:51:29 +00:00