7616 Commits

Author	SHA1	Message	Date
Chris Smowton	b62e9dc92c	Convert tests to inline expectations and fix one bug revealed doing so ... Specifically Apache sshd defines its sensitive api calls on an inherited interface, and they need to be described that way for us to pick them up.	2022-08-13 14:02:05 +01:00
Chris Smowton	ddb0846e06	Split up hardcoded creds queries, ready for conversion to inline expectations	2022-08-13 12:39:16 +01:00
Chris Smowton	0a6ccbca45	Add stubs and tests for new hardcoded-credential sinks	2022-08-13 12:39:15 +01:00
Daniel Santos	60e0f09586	Additional hardcoded credentials candidates 3rd-party api calls	2022-08-13 12:39:15 +01:00
erik-krogh	3a4a3437b5	fix some QL-for-QL warnings	2022-08-12 20:38:50 +02:00
erik-krogh	b54f037424	Merge branch 'main' into refacReDoS	2022-08-12 20:28:30 +02:00
erik-krogh	b9e96fb078	sync changes to other languages	2022-08-12 20:28:12 +02:00
Ian Lynagh	254c166f93	Java: Add initial downgrades directory	2022-08-12 16:19:31 +01:00
Tamas Vajk	ccef2f7646	Address review comments	2022-08-12 15:25:46 +02:00
Tamas Vajk	451be6c32c	Kotlin: Add explicit CI version number to build script	2022-08-12 14:27:06 +02:00
Tamas Vajk	0bd00ce1db	Kotlin: Change handling of version variants in build script	2022-08-12 13:11:33 +02:00
github-actions[bot]	21d0c78376	Post-release preparation for codeql-cli-2.10.3	2022-08-11 23:20:39 +00:00
Anders Schack-Mulligen	a3fc463d0a	Java: Minor perf improvement.	2022-08-11 14:21:10 +02:00
github-actions[bot]	57c4f9145b	Release preparation for version 2.10.3	2022-08-11 11:12:15 +00:00
Erik Krogh Kristensen	73df8e4c7d	Merge pull request #9832 from erik-krogh/misspellings ... Fix lots of misspellings	2022-08-11 12:43:26 +02:00
Chris Smowton	e9df675f88	Autoformat ql	2022-08-11 09:55:46 +01:00
Anders Schack-Mulligen	74b05d2aa4	Kotlin: Reflection test should not refer to DataFlowPrivate.	2022-08-11 09:48:10 +02:00
Anders Schack-Mulligen	87461fece4	Merge pull request #10006 from aschackmull/java/sensitive-log-dedup ... Java: Remove SensitiveLoggingQuery results that flow through a source.	2022-08-11 09:26:33 +02:00
github-actions[bot]	33ce9552cb	Add changed framework coverage reports	2022-08-11 00:17:52 +00:00
Erik Krogh Kristensen	887f6557ed	fix common misspellings throughout github/codeql	2022-08-10 23:21:41 +02:00
Chris Smowton	cc8e9806c4	Merge pull request #10009 from smowton/smowton/java17-options ... Java: Adapt tests as required by JDK17 extractor upgrade	2022-08-10 18:46:06 +01:00
Chris Smowton	341241cf43	Use SrcFloatingPointLiteral	2022-08-10 17:28:14 +01:00
Anders Schack-Mulligen	abad133ab5	Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow.	2022-08-10 15:02:56 +02:00
Anders Schack-Mulligen	cbd6d24b9c	Merge pull request #9963 from intrigus-lgtm/java/model-set-properties ... Model `java.util.Properties.setProperty`	2022-08-10 14:51:00 +02:00
Anders Schack-Mulligen	ecc15a1f95	Java: Remove SensitiveLoggingQuery results that flow through a source.	2022-08-10 14:28:07 +02:00
Chris Smowton	8c32758ae5	Merge pull request #9829 from smowton/smowton/fix/kotlin-underscore-parameter-names ... Kotlin: Don't extract a name for a '_' parameter	2022-08-10 12:28:26 +01:00
Chris Smowton	09e4c6b66b	Add dataflow path-graph	2022-08-10 10:37:55 +01:00
Chris Smowton	2ca0b0c6b5	Inline qhelp overview ... A <p> at the top isn't allowed, and for some reason the inclusion is required to be a valid qhelp file.	2022-08-10 10:37:48 +01:00
Erik Krogh Kristensen	559ec7ba56	Merge branch 'main' into repeatedWord	2022-08-09 21:22:47 +02:00
smehta23	cf68a11267	Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.qhelp ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-08-09 11:59:28 -07:00
smehta23	4d80fd0b00	Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversal.qhelp ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-08-09 11:59:14 -07:00
smehta23	7da07400ea	Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalFromRemote.qhelp ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-08-09 11:59:03 -07:00
smehta23	c2b670eff8	Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalFromRemote.qhelp ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-08-09 11:58:55 -07:00
Tony Torralba	7f5fe85e2e	Merge pull request #9975 from atorralba/atorralba/asynctask-improvs ... Java: Improve AsyncTask data flow support	2022-08-09 17:10:09 +02:00
Erik Krogh Kristensen	49276b1f38	Merge branch 'main' into refacReDoS	2022-08-09 16:18:46 +02:00
Erik Krogh Kristensen	0abbd50ca1	apply changes based on docs review	2022-08-09 13:51:40 +02:00
Chris Smowton	1c6642f3fb	Format QL	2022-08-09 11:50:54 +01:00
Chris Smowton	80f5b977d6	Use sealed classes released version	2022-08-09 11:50:54 +01:00
yo-h	c46b54b9c2	Java 17: exclude non-source locations in some tests	2022-08-09 11:50:54 +01:00
yo-h	0bf7e075e5	Java 17: adjust expected test output	2022-08-09 11:50:54 +01:00
yo-h	27b699df33	Java: adjust test options for JDK 17 upgrade	2022-08-09 11:50:54 +01:00
Shyam Mehta	af92fc389b	Update PartialPathTraversalFromRemote.qhelp	2022-08-08 17:37:57 -04:00
Shyam Mehta	50b4df52f0	Fixed precision labels	2022-08-08 17:36:04 -04:00
Shyam Mehta	9d3e8ec475	Update PartialPathTraversalFromRemote.qhelp	2022-08-08 17:35:36 -04:00
smehta23	4f1bc3022c	Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalFromRemote.ql ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-08-08 17:09:43 -04:00
Ian Lynagh	b5d6258e54	Merge pull request #9809 from igfoo/igfoo/fakeLabel ... Kotlin: Remove the last uses of fakeLabel	2022-08-08 11:54:53 +01:00
Anders Schack-Mulligen	aa3655678e	Merge pull request #9823 from aschackmull/dataflow/stage-module ... Dataflow: Replace stage duplication with parameterised modules.	2022-08-08 10:56:32 +02:00
Tony Torralba	98b930cd67	Accept test changes in experimental query after AsyncTask improvements	2022-08-08 09:23:12 +02:00
Tony Torralba	03b854a1ed	Add test for initializer method	2022-08-05 15:29:17 +02:00
Joe Farebrother	dd83c17144	Use more precise control flow logic	2022-08-05 12:56:21 +01:00