Mathias Vorreiter Pedersen
09ba9a74ce
Merge pull request #12959 from MathiasVP/identity-consistency-check
...
DataFlow: Add an "identity-step" consistency check
2023-05-05 10:03:20 +01:00
Kasper Svendsen
d9f29a85d6
Python: Enable implicit this warnings
2023-05-04 10:16:52 +02:00
Mathias Vorreiter Pedersen
77001a070b
Merge branch 'main' into identity-consistency-check
2023-05-03 22:01:06 +01:00
Mathias Vorreiter Pedersen
e650df810d
Python: Accept consistency changes.
2023-05-03 20:33:00 +01:00
yoff
a905917123
Merge pull request #12937 from RasmusWL/fix-module-variable-node
...
Python: Hide `ModuleVariableNode` in data-flow paths
2023-05-03 17:58:26 +02:00
Erik Krogh Kristensen
f29db40371
Merge pull request #13011 from kaspersv/kaspersv/explicit-this-receivers-shared2
...
JS, Python, Ruby: Make implicit this receivers explicit
2023-05-03 15:34:59 +02:00
Ian Lynagh
b56b843d13
Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1
...
Post-release preparation for codeql-cli-2.13.1
2023-05-03 13:12:10 +01:00
Kasper Svendsen
aca2ace843
JS, Python, Ruby: Make implicit this receivers explicit
2023-05-03 13:51:51 +02:00
Kasper Svendsen
3eb5a95ee3
Python: Make implicit this receivers explicit
2023-05-03 12:16:21 +02:00
github-actions[bot]
18d4af994d
Post-release preparation for codeql-cli-2.13.1
2023-05-02 10:50:20 +00:00
Anders Schack-Mulligen
ca09649679
Dataflow: Forward hasLocationInfo.
2023-05-02 10:48:32 +02:00
Anders Schack-Mulligen
5927bb2030
Dataflow: Replace "extends Node" with "instanceof Node".
2023-05-02 09:48:34 +02:00
Anders Schack-Mulligen
6c8cb0dc5e
Merge pull request #12930 from aschackmull/dataflow/split-typedcontent
...
Dataflow: Refactor access paths to split TypedContent into an explicit pair
2023-05-01 14:58:15 +02:00
yoff
0bc6f10a71
Merge pull request #12220 from amammad/amammad-python-paramiko
...
add some python sinks for paramiko ssh clients
2023-05-01 11:38:50 +02:00
Rasmus Wriedt Larsen
1bba5258d6
Merge pull request #11280 from RasmusWL/dict-dataflow-steps
...
Python: Support more dictionary read/store steps
2023-04-30 16:07:29 +02:00
github-actions[bot]
3bd29171fb
Release preparation for version 2.13.1
2023-04-28 12:14:35 +00:00
amammad
b3669b818b
v1.3 change name according to camelCase
2023-04-28 04:56:47 +02:00
Mathias Vorreiter Pedersen
e506f638fc
DataFlow: Sync identical files.
2023-04-27 18:40:33 +01:00
Anders Schack-Mulligen
71ae0909d8
Dataflow: Enforce type pruning in all forward stages.
2023-04-27 14:55:26 +02:00
Anders Schack-Mulligen
9140cbefc0
Dataflow: Sync.
2023-04-27 14:55:23 +02:00
Anders Schack-Mulligen
246d904712
Merge pull request #12948 from aschackmull/dataflow/pathnode-type-tostring
...
Dataflow: Add type to PathNode.toString.
2023-04-27 14:14:10 +02:00
Rasmus Wriedt Larsen
aa216e6535
Python: Update inline expectations
2023-04-27 12:04:05 +02:00
Rasmus Wriedt Larsen
d73289ac4e
Python: Accept .expected changes
2023-04-27 11:54:39 +02:00
amammad
a541fdf5e5
v1.2 code quality improvements including commnets too
2023-04-27 08:30:46 +02:00
amammad
1bf159e9a9
Merge branch 'github:main' into amammad-python-paramiko
2023-04-26 23:28:29 -07:00
Arthur Baars
128d102bbc
Merge pull request #12871 from aibaars/py-yaml
...
Python: add YAML support
2023-04-26 18:13:26 +02:00
Rasmus Wriedt Larsen
d274fa16a1
Python: Hide ModuleVariableNode in data-flow paths
...
They just add an extra step, and don't actually contribute any good
information for end-users.
2023-04-26 16:04:16 +02:00
Rasmus Wriedt Larsen
0c4bcec39e
Python: Fix ModuleVariableNode.toString
...
In some cases mod.getName() does not have a result, so toString of
ModuleVariableNode would also not have a result, which would cause
data-flow paths that use these as an edge to not be valid :O
2023-04-26 16:03:21 +02:00
Anders Schack-Mulligen
d681671356
Dataflow: Sync.
2023-04-26 14:45:07 +02:00
Rasmus Wriedt Larsen
abc1d658e0
Python: More .expected accepting
2023-04-26 14:10:13 +02:00
Arthur Baars
5b6d3afd89
Python: Yaml printAst and tests
2023-04-26 13:41:57 +02:00
Rasmus Wriedt Larsen
b178c9cfe6
Python: Accept dataflow/basic/*.expected
2023-04-26 13:30:11 +02:00
Rasmus Wriedt Larsen
3f39648065
Python: Remove duplicated test
2023-04-26 13:30:11 +02:00
Rasmus Wriedt Larsen
1a97e8f329
Python: Add flow-step for arg[1] to dict.setdefault
2023-04-26 13:30:11 +02:00
Arthur Baars
c1c2bcf419
Python: rename YAML.qll to Yaml.qll
2023-04-26 12:44:53 +02:00
Rasmus Wriedt Larsen
95b8a22529
Merge pull request #12889 from kaspersv/kaspersv/prevent-python-join-order-regression
...
Prevent Python join order regression
2023-04-25 18:02:13 +02:00
yoff
b35637e1c5
Merge pull request #12858 from RasmusWL/paramiko-modeling
...
Python: Expand modeling of `paramiko`
2023-04-25 14:04:50 +02:00
Kasper Svendsen
361b15b2c7
Merge branch 'main' into kaspersv/prevent-python-join-order-regression
2023-04-24 13:35:07 +02:00
Michael Nebel
8ade7247a1
Merge pull request #12885 from michaelnebel/mergepathgraph3
...
Dataflow: Introduce param module for merging three path graphs.
2023-04-24 12:49:28 +02:00
Rasmus Wriedt Larsen
7453533ba4
Python: Expand setdefault tests
2023-04-24 12:29:58 +02:00
Rasmus Wriedt Larsen
7fa84a3613
Python: Only test UnsafeUnpacking with Python 3
...
Apparently the fixup of .expected in the latest commit was only required
when extracting as Python 3, but not as Python 2... I honestly don't
understand why.
2023-04-24 12:29:58 +02:00
Arthur Baars
b919547e31
Add change note
2023-04-21 17:42:02 +02:00
Arthur Baars
bc44b9e4fb
Python: update stats for YAML tables
2023-04-21 17:42:02 +02:00
Arthur Baars
c4a7353583
Python: upgrade/downgrade scripts
2023-04-21 17:42:02 +02:00
Arthur Baars
f61565cab1
Python: add YAML library
2023-04-21 17:42:02 +02:00
Arthur Baars
9c25c150a3
Python: add YAML dbscheme fragment
2023-04-21 17:42:02 +02:00
Rasmus Wriedt Larsen
b60cab254a
Python: Accept .expected change
2023-04-21 15:25:47 +02:00
Rasmus Wriedt Larsen
4094ec5fcc
Python: Change additional dict store/read steps to not affect taint-tracking
2023-04-21 14:43:24 +02:00
Rasmus Wriedt Larsen
f80a0916ac
Python: Don't report get/setdefault as unresolved calls for dict tests
2023-04-21 14:42:20 +02:00
Rasmus Wriedt Larsen
e0e978bd3e
Python: Fix ql4ql alerts
2023-04-21 14:18:50 +02:00
