Rasmus Lerchedahl Petersen
501cda4e8c
Python: model fnmatch.filter
2024-06-25 14:44:39 +02:00
Rasmus Lerchedahl Petersen
2118f233b9
Python: model optparse.OptionParser.parse_arg
2024-06-25 14:40:23 +02:00
Rasmus Lerchedahl Petersen
b80a711b27
python: undo changes to qlpack
2024-06-25 14:13:59 +02:00
Rasmus Lerchedahl Petersen
1e97600c4a
Python: move models
2024-06-25 14:13:56 +02:00
Rasmus Lerchedahl Petersen
d410136852
python: compress models
2024-06-25 14:13:52 +02:00
Rasmus Lerchedahl Petersen
c004ffaca8
python: move model to Stdlib.yml
...
There is already a model there so we add to that one.
We did observe that this existing model was blocked by the external MaD model.
This is concerning and needs to be cleared up.
2024-06-25 14:13:48 +02:00
Rasmus Lerchedahl Petersen
281ac05868
python: add modelling for urlib.parse
...
- `quote` together with `re.compile` recover regex injection alerts on haiwen/seahub
- `quote_plus` recovers the URL redirection alert on DemocracyClub/EveryElection
- `unquote` recovers path injection alerts on `cloudera/hue`
- it was tedious finding justifications for the rest..
2024-06-25 14:13:44 +02:00
Rasmus Lerchedahl Petersen
df406b4fca
python: Start modelling using MaD
...
- empty models for now
- `summaryModel` of `codeql/python-all` will be added to shortly.
2024-06-25 14:13:41 +02:00
Asger F
6a3bb4dd28
Merge pull request #16834 from asgerf/shared/capture-this-location
...
Shared: add location for 'this' CaptureContainer
2024-06-25 13:18:41 +02:00
Mathias Vorreiter Pedersen
17edfdf801
Merge pull request #16833 from MathiasVP/simplify-incorrect-allocation-error-handling
...
C++: Simplify `cpp/incorrect-allocation-error-handling`
2024-06-25 12:16:21 +01:00
Jeroen Ketema
e0e5bdec8a
Merge pull request #16818 from jketema/predef
...
C++: Update expected test results
2024-06-25 11:06:53 +02:00
Mathias Vorreiter Pedersen
921afb71e2
Update cpp/ql/src/Security/CWE/CWE-570/IncorrectAllocationErrorHandling.ql
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-06-25 10:03:53 +01:00
Owen Mansel-Chan
890da5377e
Merge pull request #16819 from owen-mc/go/remove-dataflowtype-optimizer-bug-workaround
...
Go: Make DataFlowType a singleton (remove workaround)
2024-06-25 10:03:08 +01:00
Asger F
551743e000
Shared: add location for 'this' CaptureContainer
...
Only has an effect for debugging purposes
2024-06-25 10:34:28 +02:00
Mathias Vorreiter Pedersen
982f845be7
C++: Accept test changes.
2024-06-25 09:31:00 +01:00
Mathias Vorreiter Pedersen
bb8b0d0bf5
C++: Use the unary version of 'comparesEq' to handle both disjuncts.
2024-06-25 09:30:53 +01:00
Jeroen Ketema
285ed3630b
C++: Update expected test results
2024-06-25 09:16:05 +02:00
Dave Bartolomeo
1e46e431e8
Merge pull request #16823 from smowton/smowton/admin/maven-transfer-failure-test-expectations
...
Java: Adjust and tolerate variability in test expectations
2024-06-24 13:54:25 -04:00
Paolo Tranquilli
d2a00fa773
Merge pull request #16822 from github/redsun82/nodejs-mirror
...
Bazel: add `nodejs` mirror
2024-06-24 17:59:08 +02:00
Chris Smowton
351b908f62
Adjust and tolerate variability in test expectations
2024-06-24 16:38:18 +01:00
Paolo Tranquilli
0669186713
Bazel: remove unneeded upstream rules_nodejs patch
2024-06-24 17:09:40 +02:00
Paolo Tranquilli
a02cf07833
Bazel: add nodejs mirror
...
This patches `rules_nodejs` with the contents of
https://github.com/bazelbuild/rules_nodejs/pull/3763
in order to allow specifying a mirror for nodejs, as nodejs.org has
hit us with intermittent downtimes.
2024-06-24 16:59:25 +02:00
Mathias Vorreiter Pedersen
5b1b60cc92
Merge pull request #16797 from MathiasVP/yml-for-allocation-and-deallocation
...
C++: Add extensible predicates to `Allocation` and `Deallocation`
2024-06-24 15:34:27 +01:00
Anders Schack-Mulligen
25d520a7f1
Merge pull request #16785 from aschackmull/dataflow/stage3-notypes
...
Dataflow: Replace stage 3 type pruning with flow-insensitive type pruning.
2024-06-24 15:21:37 +02:00
Mathias Vorreiter Pedersen
36d59cef7e
C++: Add 'bsl::free' as a deallocation function model.
2024-06-24 13:56:44 +01:00
Mathias Vorreiter Pedersen
82ed1ee671
Update cpp/ql/lib/change-notes/2024-06-20-extensible-allocation-deallocation.md
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-06-24 13:50:24 +01:00
Owen Mansel-Chan
d8df38c683
Make DataFlowType a singleton (remove workaround)
2024-06-24 13:43:10 +01:00
Mathias Vorreiter Pedersen
19b6d24bc2
Merge pull request #16816 from MathiasVP/fix-valuenumber-imports
...
C++: Fix value numbering imports
2024-06-24 13:37:38 +01:00
Anders Schack-Mulligen
fdf6e30888
Dataflow: Handle non-trivial type systems with stores into a top type.
2024-06-24 13:35:50 +02:00
Anders Schack-Mulligen
a26132e818
Dataflow: Replace stage 3 type pruning with flow-insensitive type pruning.
2024-06-24 13:35:50 +02:00
Anders Schack-Mulligen
3ede3af6f2
C#: Fix join-order.
2024-06-24 13:35:49 +02:00
Anders Schack-Mulligen
8c23e21073
Dataflow: Cache compatibleTypes.
2024-06-24 13:35:48 +02:00
Anders Schack-Mulligen
06a7e3f3ee
Dataflow: Cache typeStrongerThan.
2024-06-24 13:35:48 +02:00
Anders Schack-Mulligen
bd99f32a4b
Dataflow: Check types on ParamReturnNode.
2024-06-24 13:35:47 +02:00
Mathias Vorreiter Pedersen
00d772f980
C++: Fix value numbering imports.
2024-06-24 11:53:24 +01:00
Michael Nebel
abc7cc39d4
Merge pull request #16775 from michaelnebel/modelgen/refactorprinting
...
C#/Java: Parameterized module for model printing.
2024-06-24 12:51:07 +02:00
Michael Nebel
9cd16fd9d6
Java: Base the model printing on the shared implementation.
2024-06-24 11:52:50 +02:00
Michael Nebel
8630583856
C#/Java: Exclude the model printing implementation form sync files.
2024-06-24 11:50:57 +02:00
Michael Nebel
b7bc540325
C#: Adjust implementation to use the shared model printer.
2024-06-24 11:50:46 +02:00
Michael Nebel
65e150b416
Add parameterized module for MaD model printing.
2024-06-24 11:48:33 +02:00
Owen Mansel-Chan
f04a85e121
Merge pull request #16753 from owen-mc/go/misc-clean-up
...
Go: a few small clean ups
2024-06-24 10:47:21 +01:00
Michael Nebel
94d12edfdb
Merge pull request #16759 from michaelnebel/modelgen/sourcesinkmodelgen
...
C#/Java: Introduce source and sink model generation sanitisers.
2024-06-24 11:47:11 +02:00
Mathias Vorreiter Pedersen
a1743aa12e
Merge pull request #16805 from MathiasVP/tc-in-temp-materialization
...
C++: Fix missing `asExpr` for temporary materializations with conversions
2024-06-23 13:38:01 +01:00
Owen Mansel-Chan
513ec16691
Merge pull request #16796 from owen-mc/go/fix/package-vendor
...
Go: Fix bug removing "vendor/" from package paths
2024-06-22 07:54:18 +01:00
Mathias Vorreiter Pedersen
1bb762bea9
C++: Accept test changes.
2024-06-21 13:35:10 +01:00
Mathias Vorreiter Pedersen
7d41e8ef73
C++: Perform a TC to skip conversions when special-casing materialization of temporaries.
2024-06-21 13:35:09 +01:00
Mathias Vorreiter Pedersen
3b585b4196
C++: Add test with missing flow.
2024-06-21 13:35:08 +01:00
Taus
4a448f445e
Merge pull request #15715 from am0o0/am0o0-python-codeExec
...
Python: New command execution sinks
2024-06-21 14:26:33 +02:00
Erik Krogh Kristensen
49f74bacf2
Merge pull request #16729 from mbaluda/main
...
JS: Extract SAP XSJS file types as Javascript
2024-06-21 14:23:55 +02:00
Mauro Baluda
b75514c990
Merge branch 'github:main' into main
2024-06-21 13:36:38 +02:00
