Shati Patel
|
6b0f8a4088
|
Mention cookbook queries in 1.24 changenotes
|
2020-02-17 14:38:46 +00:00 |
|
Max Schaefer
|
d3288f19f9
|
Improve data-flow performance.
|
2020-02-17 09:49:13 +00:00 |
|
Max Schaefer
|
ec9ba8aa7f
|
Address review comments.
|
2020-02-17 09:23:08 +00:00 |
|
Max Schaefer
|
f60b5daf94
|
Apply suggestions from code review
Co-Authored-By: Shati Patel <42641846+shati-patel@users.noreply.github.com>
Co-Authored-By: Sauyon Lee <sauyon@github.com>
|
2020-02-17 08:48:16 +00:00 |
|
Max Schaefer
|
65c116538c
|
Write library overview.
|
2020-02-14 12:50:04 +00:00 |
|
Max Schaefer
|
9379f74308
|
Merge pull request #24 from sauyon/runelit
Add a RuneLit alias for CharLit
|
2020-02-13 09:07:38 +00:00 |
|
Max Schaefer
|
c7d29311e6
|
Merge pull request #232 from sauyon/makefile-improvements
Makefile improvements
|
2020-02-13 08:51:51 +00:00 |
|
Max Schaefer
|
69eae987d1
|
Merge pull request #240 from sauyon/rune-literal-string-value
Make rune literal string value its value
|
2020-02-13 08:47:56 +00:00 |
|
Sauyon Lee
|
ed3971af47
|
Makefile: make tools-ARCH no longer build the tokenizer
|
2020-02-12 15:52:43 -08:00 |
|
Sauyon Lee
|
bf2b655586
|
Makefile: make all target build extractor instead of tools
|
2020-02-12 15:52:42 -08:00 |
|
Sauyon Lee
|
dc9d790bd3
|
Makefile: Make better use of built-in variables
|
2020-02-12 15:52:42 -08:00 |
|
Sauyon Lee
|
1262935085
|
Update stats
|
2020-02-12 15:52:41 -08:00 |
|
Sauyon Lee
|
01f4bfe4b8
|
Makefile: Use codeql to create stats database
|
2020-02-12 15:52:40 -08:00 |
|
Sauyon Lee
|
92025ad9bd
|
Add a RuneLit alias for CharLit
Also change the doc comment on CharLit to RuneLit
|
2020-02-12 15:17:14 -08:00 |
|
Sauyon Lee
|
eb990c9de7
|
BadRedirectCheck: Use new rune literal string values
|
2020-02-12 15:14:59 -08:00 |
|
Sauyon Lee
|
74bb4f707d
|
Make rune literal string value its value
|
2020-02-12 15:14:58 -08:00 |
|
Max Schaefer
|
cb1d2935d4
|
Merge pull request #23 from github/sauyon-actions-1
Implement Actions CI
|
2020-02-12 20:41:59 +00:00 |
|
Sauyon Lee
|
1365da2224
|
examples/variable: Select declaration as well as the variable
This makes the test platform-independent
|
2020-02-12 10:41:58 -08:00 |
|
Sauyon Lee
|
fdb7852cf6
|
Force git not to mangle line endings for files relevant to tests
|
2020-02-10 16:11:56 -08:00 |
|
Sauyon Lee
|
22029410f0
|
Create an action workflow for CodeQL tests
|
2020-02-10 16:11:55 -08:00 |
|
Sauyon Lee
|
ae96bd88bc
|
Merge pull request #239 from max/virtual-dispatch
Call-graph API cleanup
|
2020-02-10 15:05:13 -08:00 |
|
Max Schaefer
|
acd27cdee6
|
Merge pull request #238 from sauyon/semmle-to-github
Rename the go module to github.com/github/codeql-go
|
2020-02-10 21:02:05 +00:00 |
|
Max Schaefer
|
6aa0d631dd
|
Address review comments.
|
2020-02-10 20:59:13 +00:00 |
|
Sauyon Lee
|
677ed6ebf4
|
Fix tests to use codeql-go repository name
|
2020-02-10 11:00:01 -08:00 |
|
Sauyon Lee
|
5417102c37
|
Rename the go module to github.com/github/codeql-go
|
2020-02-10 11:00:00 -08:00 |
|
Max Schaefer
|
d6f3005e0e
|
Merge branch '235-head'
|
2020-02-07 20:12:47 +00:00 |
|
Max Schaefer
|
5571f1eac7
|
Rename Comparison to ComparisonExpr.
|
2020-02-07 16:24:42 +00:00 |
|
Max Schaefer
|
ad7dfa258c
|
Rename ParenExpr.getExpression() to getExpr() for consistency with similar predicates in other classes.
|
2020-02-07 16:24:42 +00:00 |
|
Sauyon Lee
|
1a21c14f2f
|
Remove build ignore from HardcodedCredentials example
|
2020-02-07 03:13:14 -08:00 |
|
Sauyon Lee
|
e4d228fa0f
|
Fix CleartextStorage tests
|
2020-02-07 03:13:13 -08:00 |
|
Sauyon Lee
|
6300fdf85e
|
Remove accidentally added CleartextStorage tests
|
2020-02-07 03:13:12 -08:00 |
|
Sauyon Lee
|
559ac8f0d2
|
Fix squirrel test build
|
2020-02-07 03:12:19 -08:00 |
|
Max Schaefer
|
72de4728a2
|
Suppress unhelpful magic.
|
2020-02-07 11:09:33 +00:00 |
|
Max Schaefer
|
69edfe08df
|
Make regular expression for format strings more precise.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
8b0d271717
|
Locally resolve calls to function expressions.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
f6305f019d
|
Minor refactoring.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
46a8f8c8ed
|
Remove Function.getACallExpr.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
39b7272241
|
Teach Function.getACall to take virtual dispatch into account.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
84002f585e
|
Remove CallExpr.getACallee().
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
cf0e38b22c
|
Move virtual dispatch resolution from CallExpr to CallNode and generalise it very slightly.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
253a394ae0
|
Make CallNode.getCalleeName() more robust to missing type information.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
93a84684a5
|
Remove predicate CallExpr.calls.
This sort of reasoning should be done at the data-flow level.
|
2020-02-07 11:05:44 +00:00 |
|
Max Schaefer
|
9400442bea
|
Add call graph test.
This test uses annotations to encode the expected output directly into the source, hence the `.expected` files are trivial.
|
2020-02-07 11:05:41 +00:00 |
|
Sauyon Lee
|
5dbebe44f5
|
Package tests: also select raw database path
|
2020-02-07 02:25:26 -08:00 |
|
Sauyon Lee
|
2cb61911c3
|
Package tests: Limit to specific packages
|
2020-02-07 02:23:28 -08:00 |
|
Sauyon Lee
|
9a9561bb12
|
Remove vendored path prefix of vendored packages
|
2020-02-07 02:17:54 -08:00 |
|
Sauyon Lee
|
c94f5dafb3
|
Merge pull request #237 from Semmle/go-build-env-windows
Fix extractor build on Windows.
|
2020-02-06 09:06:33 -08:00 |
|
Max Schaefer
|
d18eb9717a
|
Fix environment setup on Windows.
|
2020-02-06 14:28:16 +00:00 |
|
Max Schaefer
|
61ee9a45ca
|
Merge pull request #234 from sauyon/reflectedxss-fixes
ReflectedXss: Remove FPs from constant prefix Fprintfs
|
2020-02-06 09:22:44 +00:00 |
|
Sauyon Lee
|
39f5376eed
|
ReflectedXss: Add change note for Fprintf FPs
|
2020-02-05 19:07:42 -08:00 |
|