Anders Schack-Mulligen
70bef64e2a
Java: Fix ratpack flow.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
f4a05c183b
Shared: Add some qldoc.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
15daa51ee5
Shared: Address review comments and QL4QL alerts.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
a23e77ca58
Java: Disregard heap parameter in any-argument and any-parameter specs.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
9a4de208ef
Java: Fix qltests.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
d1a616a70a
Java: Add proper support for variable capture flow.
2023-08-03 10:04:02 +02:00
Asger F
c38cbe859d
Merge pull request #13737 from asgerf/dynamic/fuzzy-models
...
Dynamic: add Fuzzy token
2023-08-03 09:58:24 +02:00
Mathias Vorreiter Pedersen
89aa86a1d6
Merge pull request #13741 from rdmarsh2/rdmarsh2/swift/array-content-flow
...
Swift: add DataFlow::Content for arrays
2023-08-02 17:37:40 +02:00
Owen Mansel-Chan
ff5409fec7
Merge pull request #13785 from owen-mc/go/change-golangSpecificParamArgFilter
...
Go: Avoid using getTarget() as it may not exist
2023-08-02 15:40:40 +01:00
Anders Schack-Mulligen
7bc8bf616f
Merge pull request #13863 from aschackmull/dataflow/pack4
...
Dataflow: Move the shared library to a properly shared qlpack.
2023-08-02 14:19:49 +02:00
Mathias Vorreiter Pedersen
7bea18773c
Merge pull request #13857 from github/alexdenisov/unresolved-dot-exprs-patterns
...
Swift: SubExpr may yield unresolved nodes in certain cases while MatchedExpr is always resolved
2023-08-02 09:35:06 +02:00
Anders Schack-Mulligen
1ad51e754e
Dataflow: Rename change note to proper format.
2023-08-02 08:50:51 +02:00
Sarita Iyer
0bd87f9f86
Merge pull request #13840 from github/si-10115-docs-update
...
Update supported frameworks
2023-08-01 13:05:32 -04:00
Stephan Brandauer
cb55b10edc
Merge pull request #13788 from github/kaeluka/automodel-telemetry-testing
...
Java: Tests for Automodel Extraction Queries
2023-08-01 15:30:26 +02:00
Alex Denisov
9d643ae1ed
Swift: record CFG incosistency
2023-08-01 15:06:04 +02:00
Anders Schack-Mulligen
405a3a73d1
Java: Remove irrelevant import.
2023-08-01 14:31:30 +02:00
Anders Schack-Mulligen
15da4ee009
Merge pull request #13856 from aschackmull/java/maybebrokencrypto-barrier
...
Java: Make the barrier in java/potentially-weak-cryptographic-algorithm less restrictive
2023-08-01 14:20:44 +02:00
Alex Denisov
6667d9e45c
Swift: SubExpr may yield unresolved nodes in certain cases while MatchedExpr is always resolved
2023-08-01 14:15:33 +02:00
Anders Schack-Mulligen
199d1431d7
Dataflow: Add change note.
2023-08-01 14:02:34 +02:00
Anders Schack-Mulligen
5946d5e806
Dataflow: Remove sync.
2023-08-01 14:02:34 +02:00
Anders Schack-Mulligen
0544205594
Swift: Adjust to use the qlpack data-flow api.
2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen
73d4b126cf
Ruby: Adjust to use the qlpack data-flow api.
2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen
b27a3a81bc
Python: Adjust to use the qlpack data-flow api.
2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen
21eb78ea5e
Go: Adjust to use the qlpack data-flow api.
2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen
fcb482b870
C/C++: Adjust to use the qlpack data-flow api.
2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen
5c9a839ac7
C#: Adjust to use the qlpack data-flow api.
2023-08-01 13:47:09 +02:00
Anders Schack-Mulligen
c34c667e6b
Java: Adjust to use the qlpack data-flow api.
2023-08-01 13:47:09 +02:00
Anders Schack-Mulligen
50e7892498
Dataflow: Autoformat/indent.
2023-08-01 13:47:08 +02:00
Anders Schack-Mulligen
d7ea60e137
Java: Move data flow lib.
2023-08-01 13:47:08 +02:00
Owen Mansel-Chan
dbc6868bc1
Update go/ql/lib/semmle/go/dataflow/internal/DataFlowNodes.qll
...
Co-authored-by: Chris Smowton <smowton@github.com >
2023-08-01 12:23:49 +01:00
Asger F
9326fbd1dd
Merge pull request #13841 from jeongsoolee09/log-injection-mad
...
JS: Add support for log injection in MaD
2023-08-01 13:09:56 +02:00
Alex Ford
2b741448f4
Merge pull request #13309 from maikypedia/maikypedia/ldap-injection
...
Ruby: Add LDAP Injection query
2023-08-01 10:44:46 +01:00
Cornelius Riemenschneider
41487987b5
Merge pull request #13858 from github/criemen-update-bazel
...
Update bazel to 6.3.1
2023-08-01 10:44:36 +02:00
Mathias Vorreiter Pedersen
d111fa7e94
Merge pull request #13862 from jketema/ir-test
...
C++: Add IR test that shows dataflow regression after frontend update
2023-08-01 10:06:49 +02:00
Anders Schack-Mulligen
e73e312e10
Java: Add change note.
2023-08-01 09:28:56 +02:00
Stephan Brandauer
621c05dc4b
Java: format
2023-08-01 09:19:03 +02:00
Stephan Brandauer
bc3e78f034
Java: add automodel framework mode test case for newly supported interface-method parameter extraction
2023-08-01 09:18:58 +02:00
Stephan Brandauer
058236877e
Java: Drive-by: fix oversight in #13823
...
In PR #13823 , we had rewritten the endpoints that are being considered for framework mode. We used to use `DataFlow::ParameterNode` as endpoints.
However, `ParameterNode`s do not exist for the implicit `this` parameter; they also do not exist for bodiless interface-methods.
In PR #13823 , we forgot to model that `this` only exists for non-static methods and to only consider parameters that we have source code for.
2023-08-01 09:18:58 +02:00
Stephan Brandauer
5ad984f22f
Java: update text expectations after merging #13823
2023-08-01 09:18:58 +02:00
Stephan Brandauer
da87d82d08
Java: fix a comment
2023-08-01 09:18:58 +02:00
Stephan Brandauer
be629b27ed
Java: Automodel package private test case
2023-08-01 09:18:57 +02:00
Stephan Brandauer
f5c4155d63
Java: Automodel tests: update after merging #13818
2023-08-01 09:18:57 +02:00
Stephan Brandauer
44b8ec642e
Java: merge framework mode tests into one
2023-08-01 09:18:57 +02:00
Stephan Brandauer
8cc367c45e
Java: merge application mode tests into one
2023-08-01 09:18:57 +02:00
Stephan Brandauer
37b6b46dbf
Java: update extraction query tests after merging PR #13747
2023-08-01 09:18:57 +02:00
Stephan Brandauer
50603102d1
Java: tests for automodel application mode, test that local calls are not candidates
2023-08-01 09:18:57 +02:00
Stephan Brandauer
457604e37e
Java: tests for automodel framework mode negative example extraction
2023-08-01 09:18:57 +02:00
Stephan Brandauer
938a7a788f
Java: tests for automodel application mode negative example extraction
2023-08-01 09:18:57 +02:00
Stephan Brandauer
abed936556
Java: tests for automodel framework mode positive example extraction
2023-08-01 09:18:57 +02:00
Stephan Brandauer
1bc222ec40
Java: tests for automodel application mode positive example extraction
2023-08-01 09:18:57 +02:00
