Commit Graph

13977 Commits

Author SHA1 Message Date
Jonas Jensen
63de58c557 Merge pull request #3819 from dbartol/codeql-c-analysis-team/40/2
C++: More IR QLDoc (including `Opcode.qll`)
2020-06-30 17:09:15 +02:00
yoff
989b57c51d Merge pull request #3822 from tausbn/python-document-internal-ast-classes
Python: Document internal AST classes.
2020-06-30 16:48:14 +02:00
Jonas Jensen
4a5299e368 Merge pull request #3843 from geoffw0/qldoc6
C++: Bit more QLDoc
2020-06-30 16:21:37 +02:00
semmle-qlci
224289c55f Merge pull request #3845 from max-schaefer/js/walk-sync
Approved by asgerf
2020-06-30 14:45:41 +01:00
Geoffrey White
3bdfab8d8c C++: Autoformat. 2020-06-30 14:12:34 +01:00
Matthew Gretton-Dann
ab876b8b78 Merge pull request #3814 from nickrolfe/71-this
C++: add MemberFunction::getTypeOfThis()
2020-06-30 13:31:14 +01:00
semmle-qlci
42bca1a3fa Merge pull request #3824 from asger-semmle/js/static-regexp-capture-group-step
Approved by erik-krogh, esbena
2020-06-30 13:20:14 +01:00
semmle-qlci
c850938af0 Merge pull request #3833 from asger-semmle/js/vue-class-component
Approved by erik-krogh
2020-06-30 13:16:42 +01:00
semmle-qlci
15a0297ca2 Merge pull request #3834 from asger-semmle/js/vue-classification
Approved by erik-krogh
2020-06-30 13:14:25 +01:00
semmle-qlci
4b7d60a217 Merge pull request #3803 from esbena/js/more-fs-promises
Approved by erik-krogh
2020-06-30 12:33:35 +01:00
Geoffrey White
bbb9396300 C++: Improvement in Overflow.qll. 2020-06-30 12:20:19 +01:00
Geoffrey White
0ee73cce51 Update cpp/ql/src/semmle/code/cpp/security/FunctionWithWrappers.qll
Co-authored-by: Jonas Jensen <jbj@github.com>
2020-06-30 12:16:20 +01:00
Geoffrey White
de25bc6c78 C++: Improvement in Synchronization.qll. 2020-06-30 12:14:56 +01:00
Geoffrey White
3a3cc9a60a C++: Autoformat. 2020-06-30 12:06:18 +01:00
Max Schaefer
62d56a3d7c JavaScript: Fix module name for walk-sync package. 2020-06-30 11:57:16 +01:00
Taus Brock-Nannestad
7e97bd1d36 Python: Address review comments. 2020-06-30 11:36:26 +02:00
Mathias Vorreiter Pedersen
c52f68e337 Merge pull request #3808 from geoffw0/qldoc4
C++: Yet more QLDoc
2020-06-30 10:33:29 +02:00
Geoffrey White
5c51bb7979 C++: QLDoc Literal.qll. 2020-06-30 09:32:48 +01:00
Jonas Jensen
f79299883a Merge pull request #3831 from MathiasVP/remove-abstract-decl-var-call
C++: Remove abstractness from DeclarationEntry, AccessHolder and Call
2020-06-30 10:21:55 +02:00
Geoffrey White
40e02bee53 C++: QLDoc Overflow.qll. 2020-06-30 09:19:41 +01:00
Geoffrey White
0102322544 C++: QLDoc FunctionWithWrappers.qll. 2020-06-30 09:10:21 +01:00
Jonas Jensen
47bb007b9a C++: Autoformat fixups 2020-06-30 09:56:39 +02:00
Anders Schack-Mulligen
13cb853af5 Merge pull request #3294 from ggolawski/ognl-injection
CodeQL query to detect OGNL injections
2020-06-30 09:46:02 +02:00
Mathias Vorreiter Pedersen
acee9eb7ab C++: Add comment to pseudo-abstract predicates 2020-06-30 09:19:47 +02:00
Mathias Vorreiter Pedersen
50709b235e C++: Replace implication with disjunction in charpred for Call 2020-06-30 09:18:52 +02:00
Esben Sparre Andreasen
c7f67fafd9 JS: support additional promisification of the fs-module members 2020-06-30 09:10:30 +02:00
Mathias Vorreiter Pedersen
667bb323ac C++: Rename union types to follow the naming convention of IPA types (and make them private) 2020-06-30 08:40:46 +02:00
Tom Hvitved
b57cfc965a Merge pull request #3804 from aschackmull/dataflow/dispatch-refactor
Dataflow: Refactor dispatch with call context.
2020-06-30 08:28:27 +02:00
Dave Bartolomeo
42657dbe3f C++: Miscellaneous IR QLDoc 2020-06-29 14:30:12 -04:00
Dave Bartolomeo
1fa38474e9 C++: Autoformat 2020-06-29 14:09:53 -04:00
Nick Rolfe
4b6908c5bf C++: test template classes with MemberFunction::getTypeOfThis() 2020-06-29 18:05:58 +01:00
Dave Bartolomeo
c52653270e C++: QLDoc for IRConfiguration.qll 2020-06-29 12:43:51 -04:00
Dave Bartolomeo
87f0b0ef97 C++: QLDoc for EdgeKind.qll 2020-06-29 12:43:50 -04:00
Dave Bartolomeo
440ea6a069 C++: QLDoc for PrintIR.qll 2020-06-29 12:43:50 -04:00
Dave Bartolomeo
2043d9c7c4 C++: QLDoc for Operand.qll 2020-06-29 12:43:50 -04:00
Dave Bartolomeo
ead2a143e0 C++: QLDoc for IRVariable
Moved a couple of predicates that were only needed by IR construction into `TranslatedElement.qll`
2020-06-29 12:43:50 -04:00
Dave Bartolomeo
1423ea0591 C++: More IR.qll QLDoc 2020-06-29 12:43:50 -04:00
Dave Bartolomeo
98348a9353 C++: QLDoc for IR.qll 2020-06-29 12:43:50 -04:00
Dave Bartolomeo
88f89b3334 C++: QLDoc for IRFunction.qll 2020-06-29 12:43:49 -04:00
Dave Bartolomeo
d0af9f5808 C++: QLDoc all of IRBlock.qll 2020-06-29 12:43:49 -04:00
Dave Bartolomeo
77bf564136 C++: Finish Instruction.qll QLDoc 2020-06-29 12:43:49 -04:00
Dave Bartolomeo
6de3d5bc3d C++: Change opcode QLDocs to refer to instruction QLDocs
As discussed in today's C++ analysis team meeting. `Opcode` is rarely used directly, so we'll just refer to the documentation for the corresponding `Instruction` class.

I've preserved the script in case we want to do a bulk change of all of the `Opcode` comments, but I don't expect it will be needed if we just add a new `Opcode` or two.
2020-06-29 12:41:36 -04:00
Geoffrey White
a8a7df4e5c C++: QLDoc SensitiveExprs.qll. 2020-06-29 17:08:44 +01:00
Geoffrey White
e2e5e9b2a9 C++: QLDoc Synchronization.qll and improve existing QLDoc. 2020-06-29 16:56:01 +01:00
Asger Feldthaus
cb12d894a6 JS: Add test 2020-06-29 15:54:06 +01:00
Asger Feldthaus
326c7af4eb JS: Fix incorrect classification of Vue files 2020-06-29 15:49:07 +01:00
Anders Schack-Mulligen
d297ce2279 Merge pull request #3436 from artem-smotrakov/revocation-checking
Java: Added a query for disabled certificate revocation checking
2020-06-29 16:42:36 +02:00
Anders Schack-Mulligen
b53b90501b Merge pull request #3550 from luchua-bc/java-unsafe-cert-trust
Java: CWE-273 Unsafe certificate trust
2020-06-29 16:39:39 +02:00
Anders Schack-Mulligen
0bd81eb4b8 Dataflow: Fix reference to viableCallable. 2020-06-29 16:22:58 +02:00
Geoffrey White
55883f60f7 C++: Autoformat. 2020-06-29 14:48:15 +01:00