Commit Graph

46661 Commits

Author SHA1 Message Date
Mauro Baluda
5ea03b1ded Update Hapi.qll
Add `server` definitions in plugin registration and plugin dependency declaration
2022-11-14 22:56:06 +01:00
Mauro Baluda
25ac3499c2 Merge branch 'github:main' into main 2022-11-11 11:20:01 +01:00
Michael Nebel
ef50e57317 Merge pull request #11083 from michaelnebel/csharp/telemetry
C#: Telemetry query updates.
2022-11-11 10:57:54 +01:00
Erik Krogh Kristensen
313f600432 Merge pull request #11214 from erik-krogh/oneFormatToRuleThemAll
CI: remove langauge specific format checks
2022-11-11 10:10:36 +01:00
AlexDenisov
ecd8921dcd Merge pull request #11211 from github/redsun82/swift-drop-impossible-nodes
Swift: fix printing of unextracted entities
2022-11-11 08:06:54 +01:00
Erik Krogh Kristensen
90382c4d1c Merge pull request #11178 from erik-krogh/passcode
JS/RB/PY: Recognize `passcode` as sensitive
2022-11-10 17:58:34 +01:00
erik-krogh
866e92558c broaden the file pattern used in the format check to ensure js-ml is included 2022-11-10 17:57:45 +01:00
erik-krogh
fbb2dcf7a8 remove langauge specific format checks 2022-11-10 17:47:14 +01:00
Tom Hvitved
bda4b52395 Merge pull request #11206 from hvitved/ruby/self-toplevel-def
Ruby: Fix SSA entry definitions for `self` in top-level
2022-11-10 17:01:59 +01:00
Jeroen Ketema
f7c55a3258 Merge pull request #11202 from jketema/fix-accept-prototype
C++: Fix the `accept` prototype in the dataflow taint tests
2022-11-10 17:00:07 +01:00
Paolo Tranquilli
458fb3a4a2 Swift: fix printing of unextracted entities
This was still printing explicitly ignored classes.
2022-11-10 16:49:32 +01:00
Paolo Tranquilli
30bbae3c22 Merge pull request #11209 from github/redsun82/swift-drop-impossible-nodes
Swift: drop impossible nodes from schema
2022-11-10 16:47:23 +01:00
Michael Nebel
2a26c8f340 Merge pull request #10628 from michaelnebel/java/typebasedmodels
Java: Type based summary models.
2022-11-10 16:34:52 +01:00
Jeroen Ketema
62f5d10d03 C++: Fix localTaint expected results 2022-11-10 16:08:07 +01:00
Erik Krogh Kristensen
724a31b746 fix comment that wasn't updated in test
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
2022-11-10 15:56:44 +01:00
Ian Lynagh
a2c0d47e9c Merge pull request #11199 from igfoo/igfoo/kotlin_default
Kotlin: Update docs and tests
2022-11-10 14:53:06 +00:00
Karim Ali
b209cac2e2 Merge pull request #11063 from karimhamdanali/swift-pbe-constant-password
Swift: detect the use of constant passwords for password-based encryption
2022-11-10 16:36:27 +02:00
Karim Ali
e18b2cfa39 Merge pull request #11084 from karimhamdanali/swift-static-iv
Swift: detect the use of static initialization vectors
2022-11-10 16:35:21 +02:00
Paolo Tranquilli
5b9e89acd3 Swift: implement ignoring of removed classes 2022-11-10 15:26:55 +01:00
Paolo Tranquilli
e26e0ec809 Swift: remove imposible nodes from schema
We don't expect these AST types to really appear during an extraction
run, even in an unsuccessful compilation.
2022-11-10 15:26:55 +01:00
Tom Hvitved
e18442069b Ruby: Fix SSA entry definitions for self in top-level 2022-11-10 15:08:17 +01:00
Ian Lynagh
3d17c8f1ab Merge pull request #11200 from igfoo/igfoo/extractor-info
Java/Kotlin: Add ExtractorInformation query
2022-11-10 13:51:13 +00:00
Paolo Tranquilli
7f36f65ab0 Merge pull request #11190 from github/redsun82/swift-exprs
Swift: extract some more `Expr`
2022-11-10 14:36:42 +01:00
Jeroen Ketema
62a0bcddd9 C++: Fix the accept prototype in the dataflow taint tests 2022-11-10 14:23:26 +01:00
Erik Krogh Kristensen
5d2ab8adfb Merge pull request #11191 from erik-krogh/arrJoin
RB: add join(" ") calls as a sink for rb/shell-command-constructed-from-input
2022-11-10 14:20:42 +01:00
Erik Krogh Kristensen
54958fd502 Merge pull request #11201 from erik-krogh/no-set-output
QL-for-QL: don't use the deprecated set-output feature in github-actions
2022-11-10 14:07:40 +01:00
Michael Nebel
8041542f92 Java: Make sure that IterableTypes has a unique iterator. 2022-11-10 14:06:18 +01:00
Karim Ali
7d473fb265 address docs review 2022-11-10 15:01:05 +02:00
Michael Nebel
2f12ccc803 C#: Delete incorrect comment. 2022-11-10 13:59:50 +01:00
erik-krogh
a2ce764c82 update codeql-action version used in QL-for-QL, as the old version still used the deprecated set-output feature 2022-11-10 13:58:07 +01:00
Michael Nebel
9b5318876d Java: Improve tests and allow spurious models. 2022-11-10 13:57:44 +01:00
Michael Nebel
91aa75da0e Java: Rename IterableType to IterableClass. 2022-11-10 13:57:44 +01:00
Michael Nebel
ce8ab0e66e Simplify test predicate implementation.
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
2022-11-10 13:57:44 +01:00
Michael Nebel
0e7179ca85 Simplify functional predicate implementation.
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
2022-11-10 13:57:44 +01:00
Michael Nebel
9d34ce9776 Adjust the co-variant claim comment.
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
2022-11-10 13:57:44 +01:00
Michael Nebel
decfcdd82a Improve IterableType implementation.
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
2022-11-10 13:57:43 +01:00
Michael Nebel
d6ae1ef6f2 Java/C#: Move C# internal implementation for model generation. 2022-11-10 13:57:43 +01:00
Michael Nebel
4cb82ad5a7 Java: Explicit import of needed classes from stream and some improvements to comments. 2022-11-10 13:57:43 +01:00
Michael Nebel
62603dd2bc Java: Inline expectations for type based model test case. 2022-11-10 13:57:43 +01:00
Michael Nebel
2011685e89 Java: Move internal model generator code to another folder. 2022-11-10 13:57:43 +01:00
Michael Nebel
ceef9cf276 C#: Fix spelling error in ql doc. 2022-11-10 13:57:43 +01:00
Michael Nebel
5b9ae5e6db Java: Update ql doc comments. 2022-11-10 13:57:43 +01:00
Michael Nebel
8352925257 Java: Minor re-factorings. 2022-11-10 13:57:43 +01:00
Michael Nebel
9f783b018d Java: Type based summaries are now also for Java. 2022-11-10 13:57:43 +01:00
Michael Nebel
8a0f00a5c9 Java: Update expected test output. 2022-11-10 13:57:43 +01:00
Michael Nebel
0c09f78142 Java: Comment in method for converting stream to Array. 2022-11-10 13:57:43 +01:00
Michael Nebel
84743ec87d Java: Make support for array parameter and return values. 2022-11-10 13:57:43 +01:00
Michael Nebel
5b65f5c185 Java: Change test implementation to avoid failing CFG dead end consistency test. 2022-11-10 13:57:43 +01:00
Michael Nebel
8c1de5958b Java: Make better QL docs and add some missing 'this'. 2022-11-10 13:57:43 +01:00
Michael Nebel
b80c533fb0 Java: Update expected test output. 2022-11-10 13:57:43 +01:00