Erik Krogh Kristensen
67c4320287
make JumpStmt non abstract
2020-08-05 10:03:46 +02:00
Erik Krogh Kristensen
016bdc1614
make ControlStmt non abstract
2020-08-05 09:59:30 +02:00
Anders Schack-Mulligen
32d9d270fc
Merge pull request #3948 from aibaars/java-3941
...
Java: stack trace exposure: address false positives
2020-08-05 09:31:01 +02:00
Jonas Jensen
ea0896c78b
Merge pull request #3999 from MathiasVP/mathiasvp/range-based-for-loop-taint-tests
...
C++: Add tests for taint through range-based for loops
2020-08-05 09:11:53 +02:00
Raul Garcia (MSFT)
aa27eaf7e0
Addrssing the comments from https://github.com/github/codeql/pull/3951#discussion_r464894547 that I missed previously
2020-08-04 15:50:58 -07:00
Geoffrey White
9f5c37ccaa
Merge branch 'master' into copymove
2020-08-04 15:41:27 +01:00
Erik Krogh Kristensen
5727e6f9f8
make CompoundAssignExpr non-abstract
2020-08-04 16:17:08 +02:00
Erik Krogh Kristensen
cf3f275aa1
make DestructuringPattern non-abstract
2020-08-04 16:02:32 +02:00
Tom Hvitved
63115a36f7
Merge pull request #3994 from hvitved/csharp/dataflow/library-aps-adjust
...
C#: More type-based adjustment of library-flow access paths
2020-08-04 14:33:54 +02:00
Anders Schack-Mulligen
68441bdf99
Merge pull request #3987 from Marcono1234/patch-1
...
[Java] Improve InsecureJavaMail.qhelp references
2020-08-04 12:12:38 +02:00
Anders Schack-Mulligen
cdea0f05b0
Merge pull request #3946 from aibaars/util-collections-2
...
Java: Clean up ContainerFlow: address outstanding comments
2020-08-04 10:27:22 +02:00
Raul Garcia (MSFT)
c52064af78
Fixing problems based on CR feedback.
...
https://github.com/github/codeql/pull/3951#pullrequestreview-458987208
2020-08-03 16:39:41 -07:00
Tom Hvitved
71933a4d8a
Merge pull request #4009 from hvitved/csharp/extractor-pack-files
...
C#: Add CodeQL extractor pack files
2020-08-03 19:33:26 +02:00
CodeQL CI
8855ab8c8c
Merge pull request #3835 from Raz0r/js/xss-protocol-sinks
...
Approved by erik-krogh
2020-08-03 15:40:05 +01:00
CodeQL CI
a4f8b19ae4
Merge pull request #3876 from erik-krogh/CWE078-Correctness
...
Approved by esbena
2020-08-03 15:38:51 +01:00
Tom Hvitved
d1db7b350f
C#: Add CodeQL extractor pack files
2020-08-03 14:36:06 +02:00
CodeQL CI
c8e5db189a
Merge pull request #3913 from erik-krogh/topmost
...
Approved by asgerf
2020-08-03 13:18:22 +01:00
Erik Krogh Kristensen
f5cc14f980
fix typo
2020-08-03 13:49:21 +02:00
CodeQL CI
0bbdc70cdb
Merge pull request #3864 from erik-krogh/exprString
...
Approved by asgerf, esbena
2020-08-03 09:25:17 +01:00
Tamás Vajk
dd1a8e9b28
Merge pull request #3991 from tamasvajk/feature/vscode
...
Add VS Code tasks to build and test the C# bits
2020-08-03 09:52:46 +02:00
luchua-bc
ff0dacf1d7
Optimize the TaintTracking
2020-08-03 00:52:47 +00:00
luchua-bc
b65a033302
Shorten the regex private domain match
2020-08-01 03:42:13 +00:00
luchua-bc
ff58abb7d3
Revamp the sink code
2020-08-01 03:25:02 +00:00
Calum Grant
595ab442e6
Merge pull request #3996 from yoff/SharedDataflow_Syntax
...
Python: Test all expressions that incur dataflow
2020-07-31 17:45:00 +01:00
Rasmus Lerchedahl Petersen
3e13056140
Python: Address most review comments
2020-07-31 17:20:58 +02:00
Tamás Vajk
c8dc2ee611
Merge pull request #3993 from tamasvajk/remove-noise
...
Turn off C# auto-compile on topmost folder
2020-07-31 16:59:36 +02:00
Tamas Vajk
17e256b2c7
C#: Add VS Code tasks to build and test the C# bits
2020-07-31 16:56:51 +02:00
Rasmus Lerchedahl Petersen
e8ce62e211
Python: Fix missing flow annotation
2020-07-31 15:28:27 +02:00
Rasmus Lerchedahl Petersen
e13cf2e126
Python: fix formatting
2020-07-31 14:25:09 +02:00
Tom Hvitved
54ce73b40e
Merge pull request #3995 from hvitved/csharp/fix-alerts
...
C#: Fix a few alerts
2020-07-31 14:07:35 +02:00
Rasmus Lerchedahl Petersen
29493f5bd7
Python: Make the coverage test a path query
2020-07-31 12:38:57 +02:00
CodeQL CI
18fa6b613d
Merge pull request #3998 from ceh-forks/ceh-fix-typos
...
Approved by shati-patel
2020-07-31 11:08:58 +01:00
Mathias Vorreiter Pedersen
4990d00498
C++: Add taint tests demonstrating lack of taint through range based for loops
2020-07-31 09:57:35 +02:00
Mathias Vorreiter Pedersen
b88ef56cb4
C++: Add basic iterator definition that matches STL
2020-07-31 09:45:32 +02:00
Emil Hessman
246ae575be
Fix typos
2020-07-31 06:59:55 +02:00
Raul Garcia (MSFT)
a5dab4e768
removing a redundant line
2020-07-30 17:05:42 -07:00
luchua-bc
81de1b14d9
Revamp the source of path query
2020-07-30 19:16:48 +00:00
Raul Garcia (MSFT)
64f4613a3f
Removing the options file as requested
2020-07-30 10:25:15 -07:00
Raul Garcia (MSFT)
9e74c183fe
Fixing expected results after adding comments to the unit test .cs file
2020-07-30 10:24:24 -07:00
Arthur Baars
7e72ef350e
Merge pull request #3975 from aibaars/lgtm-suites
...
CodeQL: complete LGTM suites
2020-07-30 18:39:01 +02:00
Rasmus Lerchedahl Petersen
133e18edd9
Python: Annotate missing flow
2020-07-30 18:13:39 +02:00
Rasmus Lerchedahl Petersen
1467d6b419
Python: Test all expressions that incur dataflow
2020-07-30 17:51:17 +02:00
semmle-qlci
5b1d25591e
Merge pull request #3979 from max-schaefer/js/more-comand-injection-models
...
Approved by asgerf
2020-07-30 15:10:46 +01:00
Tom Hvitved
e08e7cdf34
C#: Fix a few alerts
2020-07-30 16:03:36 +02:00
Tom Hvitved
07f1e133f3
C#: More type-based adjustment of library-flow access paths
...
This change removes the restriction that only access paths of length 1 can
have the head adjusted, based on type information from the call to the relevant
library-code callable.
2020-07-30 15:48:41 +02:00
Shati Patel
437baf160e
Merge pull request #3973 from shati-patel/sd-189
...
Add basic LGTM tutorials to CodeQL sphinx project
2020-07-30 14:37:48 +01:00
Tamas Vajk
0ea5f347f7
Turn off C# auto-compile on topmost folder
...
If the C# extension is installed, then it reports 25k+ errors on the C# extractor until it is properly built. This is pure noise because the solution would be opened and built from the correct subdirectory. This commit disables the C# compilation altogether.
2020-07-30 15:26:16 +02:00
Tom Hvitved
632713c475
Merge pull request #3986 from hvitved/csharp/null-maybe-null-coalescing-assignment
...
C#: Fix false-positives in `cs/dereferenced-value-may-be-null`
2020-07-30 14:20:00 +02:00
Tom Hvitved
05307b8757
C#: Remove more FPs in cs/dereferenced-value-may-be-null
2020-07-30 12:16:59 +02:00
Tom Hvitved
4f4d9d35be
C#: Add more nullness tests
2020-07-30 12:15:49 +02:00
