Asger F
6c664e93ef
Merge pull request #14035 from asgerf/shared/variable-capture-nested
...
Variable capture: synchronize with aliases in nested scopes
2023-08-24 15:39:34 +02:00
Asger F
1286235773
Address review comments
2023-08-24 13:58:33 +02:00
Erik Krogh Kristensen
59de92ce64
Merge pull request #14027 from erik-krogh/py-reg-app
...
ReDoS: limit concretize to strings of at most length 100
2023-08-24 12:57:42 +02:00
Tom Hvitved
7723dbc6d7
Merge pull request #14026 from hvitved/dataflow/stage3-call-ctx
...
Data flow: Use call contexts in stage 3
2023-08-24 11:52:08 +02:00
Asger F
b424f3fe83
Update a comment to be more accurate
2023-08-24 11:12:39 +02:00
erik-krogh
db2b8d4bcc
remove some test code I accidentially commited
2023-08-24 07:56:05 +02:00
Harry Maclean
b76842ad3d
Shared: Fix clippy lint
2023-08-23 16:24:57 +01:00
Harry Maclean
3680613f2d
Shared: Restrict extractor file globs to filenames
2023-08-23 16:09:56 +01:00
Harry Maclean
cc7ef5dac1
Shared: Fix clippy lint in shared extractor
2023-08-23 14:11:22 +01:00
Harry Maclean
ed40d72e4f
Shared: Bump extractor version
2023-08-23 14:11:22 +01:00
Harry Maclean
7e2abf20c6
Shared: Support glob patterns in shared extractor
...
Replace the `file_extensions` field with `file_globs`, which supports
UNIX style glob patterns powered by the `globset` crate.
This allows files with no extension (e.g. Dockerfiles) to be extracted,
by specifying a glob such as `*Dockerfile`.
One surprising aspect of this change is that the globs match against the
whole path, rather than just the file name.
This is a breaking change.
2023-08-23 14:11:21 +01:00
Asger F
8aec87ea57
Update VariableCapture.qll
2023-08-23 14:57:26 +02:00
erik-krogh
25e4f2c3a2
limit concretize to strings of at most length 100
2023-08-23 10:26:29 +02:00
Tom Hvitved
3810b796a0
Data flow: Use call contexts in stage 3
2023-08-23 10:05:57 +02:00
Tom Hvitved
12d1d04592
Merge pull request #13983 from hvitved/dataflow/reduced-dispatch-early-join
...
Data flow: Earlier call-context based dispatch filtering
2023-08-21 13:20:08 +02:00
Tom Hvitved
1b4520b058
Data flow: Update QL doc
2023-08-21 12:56:37 +02:00
Jeroen Ketema
2d0f73d7c2
Merge pull request #13881 from jketema/shared-taint-tracking
...
Introduce shared taint tracking library
2023-08-21 12:45:49 +02:00
Tom Hvitved
81ed72c96a
Data flow: Revert join order changes
2023-08-18 10:49:33 +02:00
Tom Hvitved
4d951d8df1
Address review comments
2023-08-17 21:04:58 +02:00
Ed Minnix
a36c12ff1f
Add trust-boundary-violation sink kind
2023-08-17 13:05:37 -04:00
Tom Hvitved
7cc01ea8b5
Merge pull request #13595 from hvitved/csharp/use-shared-cfg-pack
...
C#: Adopt shared CFG construction library from shared `controlflow` pack
2023-08-17 10:37:09 +02:00
Jeroen Ketema
33e8310625
Merge branch 'main' into shared-taint-tracking
2023-08-17 00:14:25 +02:00
yoff
7f2f6f14e7
Merge pull request #13729 from yoff/python/model-aws-lambdas
...
Python/JavaScript: Shared module for serverless functions
2023-08-16 15:14:08 +02:00
Tom Hvitved
570654d1f0
Data flow: Earlier call-context based dispatch filtering
2023-08-16 14:24:45 +02:00
yoff
99bc050366
Update shared/yaml/codeql/serverless/ServerLess.qll
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-08-15 15:09:30 +02:00
Erik Krogh Kristensen
6a3b9e10eb
Merge pull request #13914 from erik-krogh/escape-unicode
...
ReDoS: escape unicode chars in the output for the ReDoS queries
2023-08-15 11:21:21 +02:00
Henry Mercer
1213eba630
Merge branch 'main' into post-release-prep/codeql-cli-2.14.2
2023-08-11 13:54:55 +01:00
Tom Hvitved
9b38028e25
Data flow: Fix localWriteStep consistency query
2023-08-10 15:31:04 +02:00
github-actions[bot]
432c21d4fb
Post-release preparation for codeql-cli-2.14.2
2023-08-09 18:45:18 +00:00
erik-krogh
fe542565c3
fix performance
2023-08-09 13:48:07 +02:00
erik-krogh
0bce42410a
support arbitrary codepoints in NfaUtils.qll
2023-08-08 22:14:51 +02:00
erik-krogh
859e1bfabc
add constraint that i should be between 0 and 65535
2023-08-08 21:11:59 +02:00
erik-krogh
0391e063ca
move to4digitHex to Numbers.qll
2023-08-08 21:10:58 +02:00
Anders Schack-Mulligen
0ca3f3308b
Merge pull request #13478 from aschackmull/java/varcapture
...
Java: Add proper support for variable capture flow.
2023-08-08 16:22:56 +02:00
Anders Schack-Mulligen
1cd32722be
Java: More review fixes.
2023-08-08 14:32:48 +02:00
Anders Schack-Mulligen
9d59f50340
Java: Review fixes.
2023-08-08 13:37:40 +02:00
erik-krogh
03fbd387df
way better hex conversion
2023-08-08 09:08:39 +02:00
erik-krogh
92db7b047c
escape unicode chars in the output for the ReDoS queries
2023-08-08 00:15:54 +02:00
github-actions[bot]
79c90fa36a
Release preparation for version 2.14.2
2023-08-07 18:08:52 +00:00
Jeroen Ketema
8b6a7985db
Refactor the traint-tracking library to follow the dataflow library refactoring
2023-08-07 15:23:15 +02:00
Jeroen Ketema
5d2984b7a5
Merge branch 'main' into shared-taint-tracking
2023-08-07 15:22:29 +02:00
Rasmus Lerchedahl Petersen
ef1a5cb0fa
shared: change-note
2023-08-07 11:50:03 +02:00
Tom Hvitved
b926a7ebba
Data flow: Update QL doc
2023-08-07 11:35:21 +02:00
Tom Hvitved
4d14311653
Data flow: Rename DataFlowParameter to InputSig
2023-08-07 11:35:21 +02:00
Tom Hvitved
6208175aa9
Data flow: Move DataFlowParameter into DataFlow.qll
2023-08-07 11:35:21 +02:00
Tom Hvitved
0d33c32d8e
Data flow: Move DataFlowImpl(Common).qll into an internal folder
2023-08-07 11:35:21 +02:00
Rasmus Lerchedahl Petersen
b8717b3046
Python: remove incorrect use of "stem"
2023-08-07 11:25:31 +02:00
Jeroen Ketema
c4a65e58bb
Add change note
2023-08-04 22:53:33 +02:00
Jeroen Ketema
20b792545d
Add missing QLDoc
2023-08-04 22:52:05 +02:00
Jeroen Ketema
7ba2f7a22a
Address review comments
2023-08-04 22:52:05 +02:00
