Asger F
|
654f145772
|
JS: Add PrototypePollutionUtility query
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
52cec25035
|
JS: Build access paths for array accesses
|
2020-01-14 10:52:59 +00:00 |
|
Tom Hvitved
|
5a4be67d81
|
Merge pull request #2597 from calumgrant/cs/multiline-alert-suppression
C#: Alert suppression through single-line /* */ style comments
|
2020-01-14 10:35:11 +01:00 |
|
Jonas Jensen
|
b8ee5a63db
|
Merge pull request #2614 from geoffw0/arithun
CPP: Speed up ArithmeticUncontrolled.ql
|
2020-01-13 15:25:12 +01:00 |
|
Jonas Jensen
|
3183893a98
|
Merge pull request #2530 from geoffw0/hiddenqueries2
CPP: Speed up nullCheckAssert in InconsistentCheckReturnNull.ql.
|
2020-01-13 15:23:55 +01:00 |
|
semmle-qlci
|
40de391490
|
Merge pull request #2616 from asger-semmle/promise-missing-await-change-note
Approved by mchammer01
|
2020-01-13 12:03:11 +00:00 |
|
Asger F
|
6c4da30a64
|
Update change-notes/1.24/analysis-javascript.md
Co-Authored-By: mc <42146119+mchammer01@users.noreply.github.com>
|
2020-01-13 11:05:03 +00:00 |
|
Anders Schack-Mulligen
|
183fd91a01
|
Merge pull request #2615 from yo-h/java-add-change-note
Java: add change note for `java/maven/non-https-url`
|
2020-01-13 09:54:48 +01:00 |
|
yo-h
|
bf8ef42c1a
|
Java: add change note for java/maven/non-https-url
|
2020-01-10 11:03:48 -05:00 |
|
Taus
|
cfb84be7b1
|
Merge pull request #2540 from RasmusWL/python-modernise-variables-queries
Python: modernise variables queries
|
2020-01-10 14:45:12 +01:00 |
|
Geoffrey White
|
9176529799
|
Merge pull request #2599 from MathiasVP/assign-where-compare-meant-false-positives
Assign where compare meant false positives
|
2020-01-10 13:39:39 +00:00 |
|
Mathias Vorreiter Pedersen
|
111f1dbd19
|
Merge branch 'assign-where-compare-meant-false-positives' of github.com:MathiasVP/ql into assign-where-compare-meant-false-positives
|
2020-01-10 13:14:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
f80c13abd7
|
C++: Fixed incorrect comments in testcases
|
2020-01-10 12:24:43 +01:00 |
|
Asger Feldthaus
|
18db551e10
|
JS: Add change note for js/missing-await
|
2020-01-10 11:10:57 +00:00 |
|
Mathias Vorreiter Pedersen
|
f181753c35
|
Typo fix
Co-Authored-By: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2020-01-10 11:49:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
21c99d1827
|
Typo fix
Co-Authored-By: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2020-01-10 11:46:14 +01:00 |
|
Anders Schack-Mulligen
|
ad92d6fe0f
|
Merge pull request #2607 from yo-h/java-alert-suppression-block-comment
Java: allow single-line `/* ... */` comments for alert suppression
|
2020-01-10 11:05:23 +01:00 |
|
yo-h
|
7ffa517803
|
Merge pull request #2584 from aschackmull/java/nonnull-final-field
Java: Include non-null final fields in clearlyNotNull.
|
2020-01-09 18:48:45 -05:00 |
|
Geoffrey White
|
1d615d311c
|
CPP: Autoformat.
|
2020-01-09 13:48:58 +00:00 |
|
Geoffrey White
|
f6f7df4e8f
|
CPP: Speed up nullCheckAssert in InconsistentCheckReturnNull.ql.
|
2020-01-09 13:48:13 +00:00 |
|
Geoffrey White
|
50c0ec1cb1
|
CPP: Optimize isRandValue.
|
2020-01-09 12:12:00 +00:00 |
|
semmle-qlci
|
f1f69ef85d
|
Merge pull request #2589 from esbena/js/ignore-duplicate-params-for-empty-functions
Approved by erik-krogh
|
2020-01-09 11:58:04 +00:00 |
|
Robert Marsh
|
9b361f1701
|
Merge pull request #2601 from dbartol/dbartol/OpcodeProperties
C++: Consolidate opcode properties onto `Opcode` class
|
2020-01-08 11:05:41 -08:00 |
|
Geoffrey White
|
cf5dd85944
|
Merge pull request #2577 from MathiasVP/multiplication-overflow-not-possible-due-to-type-width
Multiplication overflow not possible due to type width
|
2020-01-08 17:18:33 +00:00 |
|
shati-patel
|
ad0ad3a3e4
|
Merge pull request #2612 from jf205/recent-changes
CodeQL docs: port recent fixes to rc/1.23
|
2020-01-08 16:36:27 +00:00 |
|
james
|
2407eb103a
|
docs: fix list
(cherry picked from commit 618a3f91d8)
|
2020-01-08 16:16:39 +00:00 |
|
Rasmus Wriedt Larsen
|
cdcca630f3
|
docs: remove extra comma in dataflow articles
(cherry picked from commit e882060839)
|
2020-01-08 16:16:39 +00:00 |
|
Rasmus Wriedt Larsen
|
24e551905e
|
docs: Fix Python taint tracking links
at some point we moved security/TaintTracking.qll to dataflow/TaintTracking.qll
(cherry picked from commit f44ce7d647)
|
2020-01-08 16:16:39 +00:00 |
|
james
|
97d3d1fca3
|
docs: fix ast node link
(cherry picked from commit cff5df0779)
|
2020-01-08 16:16:39 +00:00 |
|
shati-patel
|
3cfc7d2e54
|
Merge pull request #2611 from jf205/mergeback-123
Merge rc/1.23 into master
|
2020-01-08 16:12:47 +00:00 |
|
Dave Bartolomeo
|
6c8de44800
|
Merge pull request #2604 from geoffw0/returnthis
CPP: Exclude template classes from cpp/assignment-does-not-return-this
|
2020-01-08 09:12:22 -07:00 |
|
james
|
490e13060c
|
Merge branch 'rc/1.23' into mergeback-123
|
2020-01-08 16:00:19 +00:00 |
|
shati-patel
|
e103527d32
|
Merge pull request #2610 from jf205/python-link
docs: fix link in Python topic
|
2020-01-08 15:48:37 +00:00 |
|
james
|
cff5df0779
|
docs: fix ast node link
|
2020-01-08 15:30:04 +00:00 |
|
Max Schaefer
|
308da0774d
|
Merge pull request #2525 from asger-semmle/promise-missing-await
JS: New query: missing await
|
2020-01-08 15:29:45 +00:00 |
|
Max Schaefer
|
de15ecf47b
|
Merge pull request #2593 from asger-semmle/regexp-always-matches
JS: Add RegExpAlwaysMatches query
|
2020-01-08 15:21:39 +00:00 |
|
James Fletcher
|
8e700081f1
|
Merge pull request #2609 from RasmusWL/doc-fix-python-taint-links
docs: Fix Python taint tracking links
|
2020-01-08 15:21:07 +00:00 |
|
Rasmus Wriedt Larsen
|
f44ce7d647
|
docs: Fix Python taint tracking links
at some point we moved security/TaintTracking.qll to dataflow/TaintTracking.qll
|
2020-01-08 16:10:27 +01:00 |
|
yo-h
|
1078424f79
|
Java: allow single-line /* ... */ comments for alert suppression
|
2020-01-08 09:19:25 -05:00 |
|
shati-patel
|
9b4f6af007
|
Merge pull request #2605 from RasmusWL/small-doc-fix
docs: remove extra comma in dataflow articles
|
2020-01-08 14:01:41 +00:00 |
|
Rasmus Wriedt Larsen
|
e882060839
|
docs: remove extra comma in dataflow articles
|
2020-01-08 14:53:31 +01:00 |
|
Geoffrey White
|
b6e1f35ff6
|
CPP: Generalize the fix to all template code.
|
2020-01-08 13:36:59 +00:00 |
|
Geoffrey White
|
8044fefb1f
|
CPP: Change note.
|
2020-01-08 13:19:11 +00:00 |
|
Geoffrey White
|
527d29ba23
|
CPP: Exclude template classes from the query.
|
2020-01-08 13:16:38 +00:00 |
|
Geoffrey White
|
d527dbe47a
|
CPP: Add test case.
|
2020-01-08 13:13:06 +00:00 |
|
Asger Feldthaus
|
775e63d9c0
|
JS: Fix qhelp validation error
|
2020-01-08 10:38:10 +00:00 |
|
Asger F
|
ef79023e52
|
Update javascript/ql/src/Expressions/MissingAwait.qhelp
Co-Authored-By: Max Schaefer <54907921+max-schaefer@users.noreply.github.com>
|
2020-01-08 10:23:30 +00:00 |
|
Tom Hvitved
|
85f6e5fe22
|
Merge pull request #2450 from calumgrant/cs/expr-nullability
C#: Expression nullability
|
2020-01-08 09:50:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
100ace532f
|
C++: Fixed handling of false negative. Query now supports global variables
|
2020-01-07 22:57:21 +01:00 |
|
Mathias Vorreiter Pedersen
|
db08076fed
|
C++: Fixed false negative
|
2020-01-07 22:20:04 +01:00 |
|