Alex Ford
6f08447427
Ruby: add a change note for rb/sensitive-get-query flow path removal
2023-03-27 09:45:23 +01:00
Alex Ford
24aa16c919
Ruby: update rb/sensitive-get-query test output
2023-03-27 09:44:55 +01:00
Alex Ford
15c9e7666a
Ruby: convert rb/sensitive-get-query into a @kind problem
2023-03-27 09:42:10 +01:00
Paolo Tranquilli
329684c2b0
Merge pull request #12634 from github/redsun82/swift-successuful-extractions
...
Swift: add a query showing successfully extracted files
2023-03-23 12:52:13 +01:00
Paolo Tranquilli
ccb816ed84
Java: autoformat
2023-03-23 10:22:18 +01:00
Alex Denisov
635564531c
Swift: add a query showing successfully extracted files
...
(cherry picked from commit 7c15527300
2023-03-22 13:52:09 +01:00
Chris Smowton
218ed8ad37
Merge pull request #12614 from smowton/smowton/admin/backport-integration-test-fix
...
Java: Backport https://github.com/github/codeql/pull/12609 to rc/3.9
2023-03-21 14:30:17 +00:00
Felicity Chapman
5c607b81fd
Merge pull request #12613 from github/fix-missing-docs-link
...
Minor update: Add new article to manual TOC
2023-03-21 14:14:12 +00:00
Chris Smowton
a865f1666d
maven-httpo-repository: add Maven wrapper
...
Maven 3.9.1 changes the format of the error message this test is looking for (though it still matches the target regex). Use the Maven wrapper to avoid such sensitivity to the precise version present in the environment.
2023-03-21 12:19:52 +00:00
Felicity Chapman
719708cb89
Fix typo
2023-03-21 12:00:55 +00:00
Felicity Chapman
da96ed1ff9
A few tweaks
2023-03-21 12:00:55 +00:00
Felicity Chapman
41becfe2ba
Add new article to manual TOC
2023-03-21 12:00:55 +00:00
Henry Mercer
d824695da2
Merge pull request #12561 from github/henrymercer/cli-prepare-diagnostics-rename
...
JS: Update for renamed `com.semmle.util.diagnostics` package
2023-03-17 10:31:27 +00:00
Henry Mercer
74cc1a42d0
JS: Update for renamed com.semmle.util.diagnostics package
2023-03-16 18:19:10 +00:00
Jeroen Ketema
8aa9207281
Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2023-03-16 10:28:44 +01:00
Tom Hvitved
a13b6ed230
Merge pull request #12536 from hvitved/dataflow/call-enclosing-callable-consistency-check
...
Data flow: Add consistency check for `DataFlowCall::getEnclosingCallable`
2023-03-16 10:19:42 +01:00
Rasmus Wriedt Larsen
b3a49ab143
Merge pull request #12467 from RasmusWL/kwargs-parameter-position-fixup
...
Python/Ruby: Use new parameter position for synthetic hash-splat instead
2023-03-16 09:52:46 +01:00
Mathias Vorreiter Pedersen
eec1e9ffcd
C++: Fix change note.
2023-03-16 08:01:07 +00:00
Mathias Vorreiter Pedersen
7585a3862f
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2023-03-16 07:57:20 +00:00
Mathias Vorreiter Pedersen
58602927bd
C++: Add change note.
2023-03-16 07:57:03 +00:00
Tom Hvitved
404ead8a18
Python: Update expected test output
2023-03-16 08:40:53 +01:00
Tom Hvitved
b3ef1e9372
C++: Update expected test output
2023-03-16 08:40:53 +01:00
Tom Hvitved
64f13fa08f
C#: Exclude call inside static field initializers from consistency check
2023-03-16 08:40:53 +01:00
Tom Hvitved
9f798902bd
Data flow: Add consistency check for DataFlowCall::getEnclosingCallable
2023-03-16 08:40:53 +01:00
Henry Mercer
720eed398b
Merge pull request #12523 from github/henrymercer/polish-diagnostics
...
Polish diagnostic messages
2023-03-15 15:06:52 +00:00
Mathias Vorreiter Pedersen
3376d2aa12
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2023-03-15 14:12:01 +00:00
Mathias Vorreiter Pedersen
dffde8f8b8
Merge pull request #12532 from MathiasVP/local-flow-for-getAdditionalFlowIntoCallNodeTerm
...
C++: Use local flow instead of GVN in `getAdditionalFlowIntoCallNodeTerm`
2023-03-15 14:10:49 +00:00
Mathias Vorreiter Pedersen
08419b77af
C++: Respond to PR reviews.
2023-03-15 14:07:04 +00:00
Anders Schack-Mulligen
bc9942eb75
Merge pull request #12530 from aschackmull/java/refactor-dataflow-queries-3
...
Java: Refactor more dataflow queries to the new API (take 3)
2023-03-15 14:57:29 +01:00
Tom Hvitved
a6e9d111a5
Merge pull request #12534 from hvitved/swift/summary-call-encl-callable
...
Swift: Fix `SummaryCall::getEnclosingCallable`
2023-03-15 14:35:00 +01:00
Tom Hvitved
96639c594f
Swift: Fix SummaryCall::getEnclosingCallable
2023-03-15 13:58:12 +01:00
Arthur Baars
fe34ec1378
Ruby: fix formatting errors
2023-03-15 13:45:06 +01:00
Henry Mercer
5de0eae992
Ruby: Update diagnostic source names for consistency
2023-03-15 12:05:09 +00:00
Henry Mercer
a90f4915a7
C#: Add new lines before call to action
2023-03-15 12:00:47 +00:00
Henry Mercer
0de4259bff
Revert "Ruby: Use rb prefix in diagnostic IDs for consistency with queries"
...
This reverts commit a6509c7a37
2023-03-15 12:00:47 +00:00
Anders Schack-Mulligen
ecf5591bc6
Merge pull request #12527 from aschackmull/java/remove-dataflow-for-serializability
...
Java: Delete `DataFlowForSerializability` and `DataFlowForOnActivityResult`
2023-03-15 12:37:17 +01:00
Mathias Vorreiter Pedersen
913ff201f1
Merge branch 'mathiasvp/replace-ast-with-ir-use-usedataflow' into local-flow-for-getAdditionalFlowIntoCallNodeTerm
2023-03-15 11:15:16 +00:00
Mathias Vorreiter Pedersen
11932a54e8
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2023-03-15 11:13:49 +00:00
Mathias Vorreiter Pedersen
9bd3347a3c
C++: Remove import.
2023-03-15 10:33:47 +00:00
Mathias Vorreiter Pedersen
623f6ff701
C++: Move things around so that 'getAdditionalFlowIntoCallNodeTerm' is in the same stage as 'DataFlowImplCommon'.
2023-03-15 10:01:47 +00:00
Mathias Vorreiter Pedersen
deb43c21e6
C++: Use local flow instead of GVN to find parameters that are used in switch statements.
2023-03-15 10:00:47 +00:00
Anders Schack-Mulligen
6408d7cbbe
Java: Refactor RsaWithoutOaep.
2023-03-15 10:37:54 +01:00
Anders Schack-Mulligen
b3b5c2c767
Java: Refactor UnsafeContentUriResolution.
2023-03-15 10:32:58 +01:00
Anders Schack-Mulligen
4b814ec71c
Java: Refactor SensitiveCommunication.ql.
2023-03-15 10:32:35 +01:00
Anders Schack-Mulligen
ca8e013618
Java: Refactor FragmentInjection.
2023-03-15 10:23:21 +01:00
Anders Schack-Mulligen
5bd530f570
Java: Refactor IntentUriPermissionManipulation.
2023-03-15 10:13:28 +01:00
Anders Schack-Mulligen
b14b95cd79
Java: Refactor LogInjection
2023-03-15 10:10:02 +01:00
Anders Schack-Mulligen
abf3abdc65
Java: Delete DataFlowForOnActivityResult.
2023-03-15 09:47:21 +01:00
Anders Schack-Mulligen
bea7c43584
Java: Delete DataFlowForSerializability
2023-03-15 09:42:02 +01:00
Anders Schack-Mulligen
e8a7139020
Merge pull request #12476 from aschackmull/java/refactor-dataflow-queries-2
...
Java: Refactor more dataflow queries to the new API
2023-03-15 09:40:32 +01:00
