Anders Schack-Mulligen
52a232e91c
Dataflow: Make CallContext type private to DataFlowImplCommon.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
947c2bf722
Dataflow: Move two declarations.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
1dd1f12919
Dataflow: Move Level1CallContext to DataFlowImplCommon
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
e1e6cd9b3d
Dataflow: Simplify: remove Level1CallContextInput module
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
f6eb82ee15
Dataflow: Simplify.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
5ac96d009a
Dataflow: Move viableImplNotCallContextReducedReverse to DataFlowImplCommon::CallContextSensitivity.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
740bb84423
Dataflow: Rename prunedViableImplInCallContextReverse to viableImplCallContextReducedReverse.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
0561c65b61
Dataflow: Rename noPrunedViableImplInCallContext to viableImplNotCallContextReduced.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
aa87243e3a
Dataflow: Rename prunedViableImplInCallContext to viableImplCallContextReduced
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
ace369faa8
Dataflow: Share getCallContextCall in DataFlowImplCommon::CallContextSensitivity.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
b2e3d784f6
Dataflow: Share getCallContextReturn in DataFlowImplCommon::CallContextSensitivity.
2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen
79b1cd7d3d
Dataflow: Refactor getLocalCc to avoid reference to NodeEx.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
eb0b92350a
Dataflow: Switch column order in viableImplCallContextReducedReverse.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
86e6d0b1e1
Dataflow: Switch local call contexts to use canonical representative.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
012e1b498d
Dataflow: Remove duplicate definitions
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
bc8ca1af86
Dataflow: Introduce NodeRegions for use in isUnreachableInCall.
2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen
486eaad566
Shared: Add MakeSets module.
2024-05-27 11:01:51 +02:00
Cornelius Riemenschneider
44f666c90a
Merge pull request #16585 from github/criemen/ruby-codeql-extractor-hack
...
Ruby: Change how we pull in `shared/tree-sitter-extractor` dependency
2024-05-27 10:32:16 +02:00
Cornelius Riemenschneider
b09f3c1c0d
Don't build with cross any longer.
...
We've removed cross from the internal build when converting to bazel,
mirror that here.
2024-05-24 16:17:37 +02:00
Cornelius Riemenschneider
8c46b61e85
Ruby: Change how we pull in shared/tree-sitter-extractor dependency
...
Previously, we pulled in the shared tree-sitter extractor via a `git`
dependency in `Cargo.toml` to address a `rules_rust` limitation (no `path`
dependencies outside of the cargo workspace)). This was a problem,
as that means we're cloning `github/codeql` _again_ for the build, which is
quite slow.
I found another way that is faster, and still produces correct builds
for both `cargo`` and `rules_rust`:
* Cargo depends on a fake crate that has the same dependencies as the real crate (thanks to `sync-files.py`). Therefore, cargo pulls in the right dependencies into the lockfile, which bazel targets
* For local builds, we override the path to that dependency in a cargo config, so we're pulling in the correct code
* rules_rust only uses `path` dependencies for collecting transitive dependencies, it never pulls in the code from there. So far that, we manually provide a `BUILD.bazel` file for the shared extractor, and depend on that.
2024-05-24 15:37:35 +02:00
Cornelius Riemenschneider
5fa1b57aaa
Merge pull request #16586 from hvitved/rust-bump
...
Python: Use Rust 1.74
2024-05-24 15:30:15 +02:00
Tom Hvitved
386bc1eb03
Bazel: repin
2024-05-24 13:53:55 +02:00
Tom Hvitved
7490472772
Update Python to use Rust 1.74
2024-05-24 13:05:39 +02:00
Michael Nebel
95473c06fc
Merge pull request #16520 from michaelnebel/csharp/fixsummarizedcallabledataflow
...
C#: Make the flow summary filtering in the adapter.
2024-05-24 12:48:03 +02:00
Tom Hvitved
0dbce3d077
Merge pull request #16451 from hvitved/treesitter/codeql-verbosity
...
Tree-sitter: Respect verbosity defined in `CODEQL_VERBOSITY`
2024-05-24 11:24:01 +02:00
Tamás Vajk
8ae607cdce
Merge pull request #16577 from tamasvajk/fix/adjust-compiler-arg-test
...
C#: Adjust compiler argument integration test
2024-05-24 09:24:21 +02:00
Erik Krogh Kristensen
c743abad54
Merge pull request #14294 from am0o0/amammad-js-CodeInjection_execa
...
JS: provide command execution sinks for execa package
2024-05-24 09:20:19 +02:00
Anders Schack-Mulligen
5a7174dcbb
Merge pull request #16500 from aschackmull/java/static-field-side-effect
...
Java: Add support for flow through side-effects on static fields.
2024-05-24 09:19:31 +02:00
Michael Nebel
78d4745722
Merge pull request #16578 from michaelnebel/java/dontliftneutral
...
Java: Do not lift neutrals in Model generation.
2024-05-24 09:19:20 +02:00
Tamas Vajk
9aee2dc002
C#: Adjust compiler argument integration test
2024-05-24 08:39:08 +02:00
Michael Nebel
f5c654b669
Merge pull request #16579 from tamasvajk/fix/integration-test-2
...
C#: Fix integration test expected file
2024-05-24 08:16:37 +02:00
Dave Bartolomeo
6f67f9e887
Merge pull request #16564 from github/dbartol/v1
...
Update all pack versions to `1.0.0`
2024-05-23 17:32:27 -04:00
Dave Bartolomeo
f498e05099
Merge branch 'main' into dbartol/v1
2024-05-23 14:37:28 -04:00
Dave Bartolomeo
613ccaac1d
Add change note to all v1.0.0 packs
2024-05-23 13:01:22 -04:00
Arthur Baars
b2c64eabd4
Merge pull request #16572 from github/aibaars-patch-2
...
Java: include link to `remote source` in TrustBoundaryViolation.ql
2024-05-23 18:16:11 +02:00
Philip Ginsbach
4fbbda508b
Merge pull request #16580 from github/ginsbach/MonotonicAggregateModules
...
`monotonicAggregates` can apply to modules (see language spec)
2024-05-23 16:40:29 +01:00
Philip Ginsbach
1129df9cb7
'monotonicAggregates' can apply to modules (see language spec)
2024-05-23 16:20:54 +01:00
Tamas Vajk
5928ede324
C#: Fix integration test expected file
2024-05-23 16:47:35 +02:00
Michael Nebel
9cf0995720
Java: Update test expected output.
2024-05-23 16:33:04 +02:00
Michael Nebel
6f5bdfba65
Java: Do not lift neutrals and only generate for public endpoints.
2024-05-23 16:32:45 +02:00
Arthur Baars
b5b5fef642
Switch source and sink in TrustBoundaryViolation.ql
2024-05-23 15:53:12 +02:00
Arthur Baars
5c4eb3c943
Java: add change note
2024-05-23 13:06:01 +00:00
Michael Nebel
1e54422662
Java: Add neutral implementations.
2024-05-23 15:00:23 +02:00
Tamás Vajk
c0d623c056
Merge pull request #16567 from tamasvajk/refactor/static-extraction-state
...
C#: Refactor static compilation state
2024-05-23 14:49:33 +02:00
Anders Schack-Mulligen
4905612905
Merge pull request #16573 from aschackmull/java/dispatch-joinorder
...
Java: Fix join-order in viableImplInCallContext.
2024-05-23 14:48:25 +02:00
Arthur Baars
d540675b9e
Update TrustBoundaryViolation.ql
2024-05-23 12:04:47 +00:00
Tom Hvitved
e4cd9d86f6
Tree-sitter: Respect verbosity defined in CODEQL_VERBOSITY
2024-05-23 13:38:35 +02:00
Anders Schack-Mulligen
1bc3f6b0e7
Java: Add change note.
2024-05-23 13:03:06 +02:00
Tom Hvitved
a523be4d0a
Tree-sitter: Add set_tracing_level to shared extractor module
2024-05-23 12:58:53 +02:00
Anders Schack-Mulligen
bf3dbc24de
Java: Add support for flow through side-effects on static fields.
2024-05-23 12:57:57 +02:00
