168 Commits

Author	SHA1	Message	Date
Mathias Vorreiter Pedersen	abc23e038a	Merge branch 'main' into revert-ps-module-extraction	2025-02-26 12:26:17 +00:00
Mathias Vorreiter Pedersen	29c11a4a5e	PS: Add upgrade and downgrade scripts.	2025-02-24 14:23:49 +00:00
Mathias Vorreiter Pedersen	4bfd6fd345	PS: Revert psmodule path file extraction.	2025-02-24 14:23:46 +00:00
Mathias Vorreiter Pedersen	6909792627	PS: Also get rid of an easy-to-fix SSA warning.	2025-02-21 12:22:06 +00:00
Mathias Vorreiter Pedersen	efb43bca3e	PS: Match the changes from #18696.	2025-02-21 12:16:00 +00:00
Mathias Vorreiter Pedersen	6ef09412a9	PS: Add .NET and PowerShell SDK type models.	2025-02-19 00:05:51 +00:00
Mathias Vorreiter Pedersen	c43b682862	PS: Ensure that the PowerShell CFG library compiles with CodeQL version 2.20.4.	2025-02-06 19:55:29 +00:00
Mathias Vorreiter Pedersen	25f8f049c3	Powershell: Update changes to remain in sync with GitHub's shared libraries.	2025-01-23 18:06:22 +00:00
Mathias Vorreiter Pedersen	ba8a37c625	PS: Add more injetion sinks and type models.	2024-11-12 20:12:57 +00:00
Mathias Vorreiter Pedersen	308afb996b	PS: Add common GAC (global assembly cache) assemblies and all automatic varibles.	2024-11-12 20:12:54 +00:00
Mathias Vorreiter Pedersen	f103fed6de	PS: Use ! to mark static members/methods.	2024-11-12 20:12:52 +00:00
Mathias Vorreiter Pedersen	50c05517d2	PS: Include implicit qualifiers.	2024-11-12 20:05:20 +00:00
Mathias Vorreiter Pedersen	a382d08915	PS: Don't raise an alert on all call operator node arguments.	2024-11-11 15:25:18 +00:00
Mathias Vorreiter Pedersen	7fe9cce53f	PS: Avoid CP.	2024-11-11 12:19:46 +00:00
Mathias Vorreiter Pedersen	50188a2175	PS: Drive-by: Fix toString on Cmd.	2024-11-11 12:19:33 +00:00
Mathias Vorreiter Pedersen	86a40b9b0b	Merge pull request #138 from microsoft/powershell-tainted-command-query ... PS: Add the first non-experimental query	2024-11-08 20:44:15 +01:00
Mathias Vorreiter Pedersen	40f50dd472	PS: Ensure the parameter has the right enclosing function.	2024-11-08 19:41:52 +00:00
Mathias Vorreiter Pedersen	299c3e9eed	PS: Add 'powershell/command-injection' query.	2024-11-08 16:07:07 +00:00
Mathias Vorreiter Pedersen	5a715c7d11	PS: Flow through string interpolation.	2024-11-08 16:01:23 +00:00
Mathias Vorreiter Pedersen	4a2fd527ed	PS: Add reads of environment variables as local flow sources.	2024-11-08 15:01:18 +00:00
Mathias Vorreiter Pedersen	9f0f0ca8a4	PS: Add placeholder for speculative flow now that this has been merged on the GitHub side.	2024-11-08 15:00:37 +00:00
Mathias Vorreiter Pedersen	aaa01820e0	PS: Add AST and CFG nodes for operator &.	2024-11-08 14:59:56 +00:00
Mathias Vorreiter Pedersen	a086d63f31	PS: Drive-by fix: Better toString on Cmd.	2024-11-07 12:47:58 +00:00
Mathias Vorreiter Pedersen	7531d88f6d	PS: Allow explicit module qualifiers to be selected with the 'instance' path.	2024-11-07 12:47:23 +00:00
Mathias Vorreiter Pedersen	689a34b823	PS: Add a public dataflow node class for TypeNames.	2024-11-07 12:46:08 +00:00
Mathias Vorreiter Pedersen	938069d5ba	PS: Include more module IPA nodes.	2024-11-07 12:45:06 +00:00
Mathias Vorreiter Pedersen	18d8de1fc8	PS: Add a bunch of source models.	2024-11-06 13:43:18 +00:00
Mathias Vorreiter Pedersen	d02ad25aaa	PS: Add (empty) model-related files.	2024-11-06 13:43:16 +00:00
Mathias Vorreiter Pedersen	4344e70543	PS: Include certain statements as local source nodes.	2024-11-06 13:43:14 +00:00
Mathias Vorreiter Pedersen	4f58b19217	PS: Add wrapper classes for local and remote flow sources.	2024-11-06 13:43:13 +00:00
Mathias Vorreiter Pedersen	2ffbf179d8	PS: Dataflow additions to support api graphs.	2024-11-06 13:43:10 +00:00
Mathias Vorreiter Pedersen	9a03d10eb1	PS: Add API graph files.	2024-11-06 13:43:07 +00:00
Mathias Vorreiter Pedersen	314951779d	PS: Add shared files for API graphs.	2024-11-06 13:43:03 +00:00
Mathias Vorreiter Pedersen	5852fe40d8	PS: Add a concept of 'source call' vs. 'library call' to avoid non-monotonic recursion in the next commits.	2024-11-06 13:43:01 +00:00
Mathias Vorreiter Pedersen	cfde677eb2	PS: AST and control-flow additions required for MaD and Api graphs.	2024-11-06 13:42:58 +00:00
Mathias Vorreiter Pedersen	68c729f8cd	PS: Models-as-data skeleton.	2024-11-06 13:41:05 +00:00
Mathias Vorreiter Pedersen	9fb5711cc6	PS: Drive-by fix: Match Ruby's implementation of 'getAMatchingContent'.	2024-11-06 13:41:04 +00:00
Mathias Vorreiter Pedersen	94220ec26b	PS: Make use of static type information in dataflow dispatch.	2024-11-06 13:41:03 +00:00
Mathias Vorreiter Pedersen	92a8c84ce6	PS: Add predicates for getting the static type of a parameter.	2024-11-06 13:41:02 +00:00
Mathias Vorreiter Pedersen	43f986c8c8	Merge pull request #132 from microsoft/powershell-extract-implicit-models ... PS: Extract source files found via `PSModulePath`	2024-11-06 11:19:20 +01:00
Mathias Vorreiter Pedersen	a56cbfe425	PS: Upgrade and downgrade scripts.	2024-11-06 10:14:33 +00:00
Mathias Vorreiter Pedersen	28ddb9aa5b	PS: Mark which files are from the PSModulePath environment variable.	2024-11-06 10:14:31 +00:00
Mathias Vorreiter Pedersen	38451a8285	PS: Implement conditional splitting in the Powershell CFG.	2024-11-04 14:49:36 +00:00
Dilan Bhalla	4ff362fdb6	commenting out problematic powershell qll code	2024-10-30 11:03:10 -07:00
Mathias Vorreiter Pedersen	d0febd7aae	PS: Add taint flow through all operations.	2024-10-17 16:52:16 +01:00
Mathias Vorreiter Pedersen	c728c7dba5	PS: Add helper predicates and classes to operations.	2024-10-17 16:52:13 +01:00
Mathias Vorreiter Pedersen	9278f03753	PS: Include parameter positions for top levels.	2024-10-17 11:52:31 +01:00
Mathias Vorreiter Pedersen	b426c1fc62	PS: Make top level a function as well.	2024-10-16 20:12:10 +01:00
Mathias Vorreiter Pedersen	56c703ec80	PS: Move a bunch of predicates into ScriptBlock.	2024-10-16 20:11:49 +01:00
Mathias Vorreiter Pedersen	3c18124faf	PS: Add taint-tracking files.	2024-10-16 18:26:34 +01:00