Ed Minnix
4aec302fb7
Create new sink kinds
2023-10-25 14:31:53 -04:00
Jami
c7b9e405b7
Merge pull request #14517 from jcogs33/jcogs33/update-framework-cov-diff-workflow
...
CI: Update framework coverage difference commenter
2023-10-25 14:31:00 -04:00
Jeroen Ketema
990d7161b2
Merge pull request #14337 from aschackmull/cpp/container-not-locatable
...
C++: Remove getLocation from Container.
2023-10-25 15:37:57 +02:00
Jeroen Ketema
75a1173d63
C++: Add change note
2023-10-25 14:05:38 +02:00
Jeroen Ketema
dc512728fa
C++: Make File extend Locatable
2023-10-25 14:05:38 +02:00
Jeroen Ketema
4ea5c13390
C++: Add back getLocation in File
2023-10-25 14:05:38 +02:00
Anders Schack-Mulligen
7124a53c9c
C++: Remove getLocation from Container.
2023-10-25 14:05:38 +02:00
Jami
53d92d58fc
Merge pull request #14581 from jcogs33/jcogs33/add-internal-to-model-exclusions
...
Java: exclude internal packages globally from MaD models
2023-10-25 08:04:03 -04:00
Mathias Vorreiter Pedersen
05385eb704
Merge pull request #14587 from MathiasVP/fix-indirect-strtok-model
...
C++: Fix `strtok` model for indirections
2023-10-25 12:09:13 +01:00
Owen Mansel-Chan
27646ce971
Merge pull request #14547 from owen-mc/go/enable-data-flow-consistency-checks
...
Go: make data flow consistency checks available (and fix some)
2023-10-25 11:15:44 +01:00
Geoffrey White
a3d53ba9ec
Merge pull request #14574 from github/geoffw0-patch-2
...
Swift: Update README.md
2023-10-25 10:56:01 +01:00
Geoffrey White
7029f14651
Merge pull request #14511 from geoffw0/substring
...
Swift: Model Substring
2023-10-25 10:46:47 +01:00
Mathias Vorreiter Pedersen
032572b924
C++: Fix 'strtok' model.
2023-10-25 09:39:36 +01:00
Mathias Vorreiter Pedersen
f54379d096
C++: Add failing test.
2023-10-25 09:38:49 +01:00
Tony Torralba
4920c7f8b0
Merge pull request #14585 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-10-25 10:02:50 +02:00
github-actions[bot]
6cbadece0e
Add changed framework coverage reports
2023-10-25 00:15:35 +00:00
Jami
7c053ed428
CI: add .strip() to comment/ID file read
...
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com >
2023-10-24 17:48:38 -04:00
Chris Smowton
12d0f1a84b
Merge pull request #14575 from github/smowton/feature/more-intuitive-java-class-names
...
Java: Replace MethodAccess, LValue, RValue with more intuitive names. Introduce NewClassExpr.
2023-10-24 19:01:37 +01:00
Cornelius Riemenschneider
790615fbc2
Merge pull request #14552 from github/criemen/bazel-js
...
Javascript extractor: Bazel-based build
2023-10-24 19:36:39 +02:00
Jami Cogswell
121fd0896b
Java: exclude internal packages in general from models
2023-10-24 12:49:49 -04:00
Geoffrey White
42a2ec9891
Merge branch 'main' into substring
2023-10-24 17:03:00 +01:00
Geoffrey White
06b1cd939c
Merge pull request #14502 from geoffw0/xmlquery
...
Swift: Model RawRepresentable
2023-10-24 16:25:15 +01:00
Chris Smowton
30610c9a3f
Temporarily de-deprecate SuperMethodAccess to accommodate private tests
2023-10-24 16:05:52 +01:00
Geoffrey White
3bcee63980
Update README.md
...
Change the Warning to a Note and rephrase.
2023-10-24 15:46:32 +01:00
Mathias Vorreiter Pedersen
9652679c6f
Merge pull request #14568 from alexet/alexet/add-fn-tests
...
CPP: Add test demonstrating use-after-free false negatives.
2023-10-24 15:38:01 +01:00
Cornelius Riemenschneider
42c343e820
Address review
2023-10-24 16:03:35 +02:00
Chris Smowton
92d3d9d83f
Update integration test expectations
2023-10-24 14:47:19 +01:00
Chris Smowton
4205f1bd03
Temporarily un-deprecate MethodAccess to decouple from private tests
2023-10-24 14:03:26 +01:00
Chris Smowton
b849a66c97
Update test expectations
2023-10-24 14:02:30 +01:00
Jeroen Ketema
ba67217b44
Merge pull request #14571 from MathiasVP/fix-indirect-taint
...
C++: Fix indirect taint
2023-10-24 14:47:43 +02:00
Chris Smowton
06238dd5f6
Improve reflective class names
2023-10-24 13:29:32 +01:00
Chris Smowton
011666b48c
Fix description and improve predicate name of VarWrite.
2023-10-24 12:59:57 +01:00
Chris Smowton
ede17585a6
Amend NewClassExpr description
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2023-10-24 12:51:42 +01:00
Chris Smowton
e3edea2a5f
Apply simple suggestions from code review
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2023-10-24 12:51:03 +01:00
Chris Smowton
efb63aada3
Add change note
2023-10-24 11:45:41 +01:00
Chris Smowton
3627eb2bcf
Add missing qldoc
2023-10-24 11:15:08 +01:00
Chris Smowton
e8c9708282
Autoformat
2023-10-24 11:06:19 +01:00
Chris Smowton
09e83d1173
Fix isEnclosingMethodAccess wrapper
2023-10-24 11:03:57 +01:00
Chris Smowton
ac38d4c9c6
Mass rename L/RValue -> VarWrite/Read
2023-10-24 10:58:29 +01:00
Chris Smowton
59a49eef0b
Add aliases for public, importable renamed classes and predicates.
...
Also rename and aliases a couple of uses of Access noted along the way.
2023-10-24 10:54:35 +01:00
Chris Smowton
f552a15aae
Mass-rename MethodAccess -> MethodCall
2023-10-24 10:30:26 +01:00
Geoffrey White
f597f0272a
Update README.md
...
Turned the warning at the top into a warning box.
Made the section headers consistent.
I was going to add a section, but I realized it belongs somewhere else. :)
2023-10-24 10:12:20 +01:00
Michael Nebel
26f767073d
Merge pull request #14363 from michaelnebel/csharp/sunsetqlstubgen
...
C#: Sunset QL based stub generator.
2023-10-24 11:05:56 +02:00
Chris Smowton
a10731c591
Java: introduce more-intuitive names for ClassInstanceExpr, L/RValue and MethodAccess.
2023-10-24 09:38:49 +01:00
Mathias Vorreiter Pedersen
1fce26534f
C++: Remove implied conjunct.
2023-10-24 09:25:32 +01:00
Tony Torralba
4e823b4306
Merge pull request #14566 from atorralba/atorralba/java/springframework-6-models
...
Java: Added up to date models for Spring's ResponseEntity
2023-10-24 09:11:37 +02:00
Mathias Vorreiter Pedersen
67ed12c916
C++: Correctly model that 'operator->', and 'get'
...
on smart pointers perform a load.
2023-10-23 20:11:23 +01:00
Mathias Vorreiter Pedersen
b107c4c641
C++: Fix missing result in 'ModelUtil'. The problem was that 'n.asInstruction()' on line 81 wasn't necessarily a 'CallInstruction' (it could be a conversion).
2023-10-23 19:34:25 +01:00
Mathias Vorreiter Pedersen
c0b04eac7c
C++: Add failing test.
2023-10-23 19:29:28 +01:00
Alex Eyers-Taylor
26b0363707
CPP: Add test demonstrating use-after-free false negatives.
2023-10-23 17:01:52 +01:00
