Asger F
4a367d3fdb
JS: more efficient encoding of unary constraints
2018-11-29 11:22:14 +00:00
Asger F
5283c6cd48
JS: only warn about dead code
2018-11-29 11:22:14 +00:00
Asger F
2d6bf0aff3
JS: improve join ordering in extendedEdge
2018-11-29 11:22:14 +00:00
Asger F
84ea4cf1d1
JS: manually reorder extendedEdge and negativeEdge
2018-11-29 11:22:14 +00:00
Asger F
344bec3865
JS: Add UselessRangeCheck.ql
2018-11-29 11:22:14 +00:00
Asger F
d813635f3e
JS: Restrict constraint generation to relevant nodes
2018-11-29 11:22:14 +00:00
Asger F
43df9538bf
JS: be conservative in presence of NaN comments
2018-11-29 11:22:14 +00:00
Asger F
feb8a8c4fd
JS: restrict bias to 30-bit range to avoid overflow
2018-11-29 11:22:14 +00:00
Asger F
20aa4e1f6d
JS: handle sharp inequalities directly
2018-11-29 11:22:14 +00:00
Asger F
9d8d953292
JS: perform widening when adding operands of very different magnitude
2018-11-29 11:22:14 +00:00
Asger F
6c53ad80c7
JS: add constant constraints in range analysis
2018-11-29 11:22:13 +00:00
Asger F
064b1099eb
JS: range analysis through phi nodes
2018-11-29 11:22:13 +00:00
Asger F
09ca6652fb
JS: Support return value of x++
2018-11-29 11:22:13 +00:00
Asger F
73cbdee691
JS: Compound assignments and update exprs in range analysis
2018-11-29 11:22:13 +00:00
Asger F
a374540c55
JS: Range analysis library
2018-11-29 11:22:13 +00:00
Jonas Jensen
d991fa84b1
Merge pull request #552 from geoffw0/move-security-tests-add
...
CPP: Add the Semmle security tests.
2018-11-29 10:49:20 +01:00
semmle-qlci
d64067aaae
Merge pull request #558 from xiemaisi/js/sanitise-access-paths
...
Approved by asger-semmle
2018-11-29 08:27:58 +00:00
semmle-qlci
d31c9950f9
Merge pull request #566 from ian-semmle/defuse_test
...
Approved by dave-bartolomeo
2018-11-28 20:48:14 +00:00
Ian Lynagh
6cb6b1c07d
C++: Tweak the defuse test
...
It looks like this is what it was originally intended to do.
2018-11-28 17:11:17 +00:00
Max Schaefer
fb78e14db1
JavaScript: Add support for sanitising dynamic property accesses.
...
This generalises our previous handling of sanitisers operating on property accesses to support dynamic property accesses where the property name is an SSA variable by representing them as access paths.
2018-11-28 12:37:53 +00:00
Tom Hvitved
41edd61e2e
Merge pull request #545 from calumgrant/cs/typemention-constraints
...
C#: Fix for type mentions of type parameter constraints
2018-11-27 14:25:48 +01:00
Jonas Jensen
c403bb1cad
Merge pull request #541 from kevinbackhouse/CppPostDominators
...
Add post-dominators
2018-11-27 08:23:43 +01:00
calumgrant
d1f7eef7eb
Merge pull request #537 from hvitved/csharp/guards-splitting
...
C#: Make guards library work with CFG splitting
2018-11-26 18:19:37 +00:00
Geoffrey White
f034abc275
CPP: Add the Semmle security tests.
2018-11-26 17:52:34 +00:00
Kevin Backhouse
4877659578
Fix names.
2018-11-26 14:56:35 +00:00
Tom Hvitved
e069041bd5
Merge pull request #431 from calumgrant/cs/extractor/fsharp-core
...
C#: Fix extraction of method signatures
2018-11-26 15:07:33 +01:00
Jonas Jensen
fcd53ae631
Merge pull request #540 from geoffw0/cpp-296
...
CPP: Fix false positive from AutoGeneratedFile.qll.
2018-11-26 15:03:21 +01:00
calum
de36151c4a
C#: Add regression test and fix for type mentions of type parameter constraints.
2018-11-26 13:51:02 +00:00
semmle-qlci
03fd5498d9
Merge pull request #542 from xiemaisi/js/move-project-file-back-to-code
...
Approved by esben-semmle
2018-11-26 11:41:39 +00:00
Max Schaefer
93f4ee8813
JavaScript: Remove Eclipse metadata files for extractor.
2018-11-26 08:24:33 +00:00
Kevin Backhouse
bc752e1a98
Add post-dominators.
2018-11-24 18:23:27 +00:00
Geoffrey White
f338a4f0d6
CPP: Fix false positive from AutoGeneratedFile.qll.
2018-11-23 17:34:18 +00:00
yh-semmle
f4ec168666
Merge pull request #533 from aschackmull/java/inherit-bugfix-changenote
...
Java: Add change note for #459 .
2018-11-23 10:53:44 -05:00
Tom Hvitved
03e69e9945
C#: Make guards library work with CFG splitting
2018-11-23 15:20:33 +01:00
Tom Hvitved
228189db5a
C#: Add tests for guards inside split CFG blocks
2018-11-23 15:20:27 +01:00
Anders Schack-Mulligen
d24145831b
Java: Add change note for #459 .
2018-11-23 14:21:30 +01:00
Aditya Sharad
10dc183495
Merge pull request #512 from hvitved/csharp/autobuilder/dirs-proj
...
C#: Recognize `.proj` files in autobuilder
2018-11-23 13:18:04 +00:00
semmle-qlci
04c2b23abd
Merge pull request #520 from esben-semmle/js/clear-text-logging-taint-kinds
...
Approved by asger-semmle
2018-11-23 12:40:40 +00:00
calum
b67bc7b612
C#: Fix id generation of constructed methods, by avoid id clashes by ensuring that method type parameters are qualified where necessary. Add a qltest.
2018-11-23 12:11:10 +00:00
calum
051dd191ac
C#: Change notes.
2018-11-23 12:11:10 +00:00
calum
e00807d66b
C#: Fix decoding method type parameters in FSharp.Core.
2018-11-23 12:09:52 +00:00
semmle-qlci
817456ee9f
Merge pull request #529 from asger-semmle/js-line-map
...
Approved by xiemaisi
2018-11-23 12:00:17 +00:00
Anders Schack-Mulligen
a0d8888224
Merge pull request #531 from yh-semmle/java/deprecate-vcs
...
Java: deprecate queries that use `VCS.qll`
2018-11-23 11:59:17 +01:00
Geoffrey White
0a27022dd4
Merge pull request #523 from jbj/placement-new-never-freed
...
C++: Detect non-allocating placement new in cpp/memory-never-freed
2018-11-23 09:40:11 +00:00
Tom Hvitved
1939773684
C#: Address review comments
2018-11-23 09:32:12 +01:00
Tom Hvitved
c3ccdfa7f9
C#: Guard against cyclic inclusions in project files
2018-11-23 09:32:12 +01:00
Tom Hvitved
e4f68ae324
C#: Address review comments
2018-11-23 09:32:12 +01:00
Tom Hvitved
836daaf07b
C#: Recognize .proj files in autobuilder
...
When determining the target of `msbuild` or `dotnet build`, first look for `.proj`
files, then `.sln` files, and finally `.csproj`/`.vcxproj` files. In all three cases,
choose the project/solution file closest to the root.
2018-11-23 09:32:12 +01:00
Tom Hvitved
b95d7e5302
C#: Move autobuilder into separate folder
2018-11-23 09:32:12 +01:00
Jonas Jensen
4ad59235d8
Merge pull request #524 from geoffw0/cpp-299
...
CPP: Add (partial) dataflow to OverflowStatic.ql
2018-11-23 08:46:07 +01:00