Robert Marsh
4fdc992cd9
C++: IRGuards uses Operand; fix CP in SignAnalysis
2018-11-08 14:43:51 -08:00
Robert Marsh
72bb7c9c42
C++: remove double backtick in qldoc
2018-11-08 11:39:47 -08:00
Robert Marsh
0d9e2098f2
C++: test for bounded bounds in sign analysis
2018-11-08 11:38:34 -08:00
Robert Marsh
1d7e802157
C++: move sign analysis to new Operand type
2018-11-07 16:07:37 -08:00
Robert Marsh
9d2d381e68
C++: test fixes for sign analysis
2018-11-06 12:02:39 -08:00
Robert Marsh
2d04d9ea04
C++: sync NegateInstruction between IR passes
2018-11-06 12:02:39 -08:00
Robert Marsh
6d06db7989
C++: fix comments
2018-11-06 12:02:39 -08:00
Robert Marsh
d9e6a6ea24
Move cached predicates to cached module
2018-11-06 12:02:38 -08:00
Robert Marsh
bf946c3ec3
C++: remove comments about Java implies predicates
...
The Java guards library includes a set of "implies" predicates to handle
short-circuiting conditionals. C++ handles those in IR generation, so
dominance on the IR produces correct results for controlling blocks.
2018-11-06 12:02:38 -08:00
Robert Marsh
554fea46c7
C++: Sign analysis for casts and unsigned integers
2018-11-06 12:02:38 -08:00
Robert Marsh
d1ae939c9c
C++: use guards and operands in sign analysis
2018-11-06 12:02:38 -08:00
Robert Marsh
08e9eea1f2
Add NegateInstruction
2018-11-06 12:02:38 -08:00
Robert Marsh
a3c6b8e575
C++: port sign analysis library from Java
2018-11-06 12:02:38 -08:00
semmle-qlci
b130335adb
Merge pull request #398 from aschackmull/java/autoformat
...
Approved by yh-semmle
2018-11-01 16:57:30 +00:00
Anders Schack-Mulligen
41c89475fe
Java: Rerun autoformat.
2018-11-01 17:01:12 +01:00
semmle-qlci
08833465a0
Merge pull request #386 from xiemaisi/js/lodash_partial
...
Approved by esben-semmle
2018-11-01 09:44:14 +00:00
semmle-qlci
86b3f0156b
Merge pull request #387 from xiemaisi/js/amd-fixes
...
Approved by esben-semmle
2018-11-01 09:42:17 +00:00
semmle-qlci
a22aa3524e
Merge pull request #388 from asger-semmle/revert-useless-conditional
...
Approved by esben-semmle
2018-11-01 09:23:19 +00:00
Jonas Jensen
ea601b2dc0
Merge pull request #352 from dave-bartolomeo/dave/Operands
...
C++: Operands as IPA types
2018-11-01 10:12:38 +01:00
semmle-qlci
fa81084d79
Merge pull request #330 from aschackmull/java/zipslip
...
Approved by yh-semmle
2018-10-31 14:40:43 +00:00
Max Schaefer
3d2a27b039
JavaScript: Make a useful member predicate public.
2018-10-31 06:46:09 -04:00
semmle-qlci
f00863fb58
Merge pull request #383 from esben-semmle/js/unused-eval-variable
...
Approved by xiemaisi
2018-10-31 10:42:55 +00:00
Asger F
2c11844c5b
Revert "Merge pull request #380 from asger-semmle/generalize-useless-conditional"
...
This reverts commit 28f3b686a7dc3c5a684c
2018-10-31 10:38:38 +00:00
Anders Schack-Mulligen
c3f71c2d42
Java: Change main ZipSlip location to the source.
2018-10-31 11:38:28 +01:00
Anders Schack-Mulligen
36f41a3e16
Java: Fix performance issue, and add Path.resolve as taint step.
2018-10-31 11:38:27 +01:00
Anders Schack-Mulligen
4953e4923a
Java: Add test for sanitization using toAbsolutePath().
2018-10-31 11:38:27 +01:00
Anders Schack-Mulligen
bf6b7c4734
Java: Add ZipSlip query.
2018-10-31 11:38:27 +01:00
Max Schaefer
c75d785684
JavaScript: Fix modelling of _.partial.
...
Like `Function.prototype.bind` (but unlike `ramda.partial`) it takes the curried arguments as rest arguments, not as an array;
cf. https://lodash.com/docs/4.17.10#partial and https://underscorejs.org/#partial .
2018-10-31 06:31:59 -04:00
semmle-qlci
28f3b686a7
Merge pull request #380 from asger-semmle/generalize-useless-conditional
...
Approved by esben-semmle
2018-10-31 07:31:06 +00:00
Robert Marsh
dc3c5a684c
Merge pull request #272 from Semmle/rdmarsh/cpp/memset-decltype-changenote
...
C++/Doc: change note for PR #269
2018-10-30 09:53:44 -07:00
Asger F
1568d5dadd
JS: add change note
2018-10-30 14:25:05 +00:00
Asger F
44d10cb74c
JS: add test cases
2018-10-30 14:24:33 +00:00
Asger F
7e5e5aea11
JS: use guard nodes instead of synactic isConditional check
2018-10-30 14:22:31 +00:00
Jonas Jensen
784b2749e6
Merge branch 'master' into rdmarsh/cpp/memset-decltype-changenote
2018-10-30 14:05:26 +01:00
Arthur Baars
336f605153
Merge pull request #384 from adityasharad/merge/1.18-master-301018
...
Merge rc/1.18 into master.
2018-10-30 13:09:19 +01:00
Esben Sparre Andreasen
eb7add6f15
JS: change note for js/unused-local-variable eval whitelisting
2018-10-30 13:08:24 +01:00
Esben Sparre Andreasen
74642b9b81
JS: whitelist js/unused-local-variable near direct eval calls
2018-10-30 13:08:24 +01:00
Esben Sparre Andreasen
ce3b4a6400
JS: add additional js/unused-local-variable tests
2018-10-30 13:07:23 +01:00
Aditya Sharad
256b829201
Merge rc/1.18 into master.
2018-10-30 11:21:50 +00:00
semmle-qlci
8b866ade0e
Merge pull request #373 from asger-semmle/jsx-factory-import
...
Approved by xiemaisi
2018-10-30 10:35:49 +00:00
semmle-qlci
1509752df6
Merge pull request #345 from esben-semmle/js/intro-getUnderlying
...
Approved by xiemaisi
2018-10-30 10:34:00 +00:00
Geoffrey White
e609a95f30
Merge pull request #357 from jbj/cpp-codeowners
...
C++: Add C++ analysis team to CODEOWNERS
2018-10-30 10:21:10 +00:00
semmle-qlci
79794612fe
Merge pull request #379 from hvitved/csharp/assert-forward
...
Approved by calumgrant
2018-10-30 09:16:20 +00:00
Robert Marsh
fda75abcd7
Merge pull request #381 from geoffw0/comments
...
CPP: Fix false positive in EmptyBlock.ql
2018-10-29 15:35:08 -07:00
Arthur Baars
778a484ce0
Merge pull request #382 from adityasharad/version/1.18.1-release
...
Version: Bump to 1.18.1 release.
2018-10-29 21:30:54 +01:00
Aditya Sharad
5e7b7818df
Version: Bump to 1.18.1 release.
2018-10-29 18:02:58 +00:00
semmle-qlci
a4371ca824
Merge pull request #338 from geoffw0/hresult
...
Approved by dave-bartolomeo
2018-10-29 17:04:54 +00:00
Geoffrey White
e7f2d7fb45
CPP: Change note.
2018-10-29 16:54:31 +00:00
Geoffrey White
fc6b791f58
CPP: Speed it up.
2018-10-29 16:52:44 +00:00
Geoffrey White
55465c3eae
CPP: Add some comments to the QL.
2018-10-29 16:39:49 +00:00
