Owen Mansel-Chan
|
3767348dec
|
Update test expectations
|
2024-01-10 22:25:08 +00:00 |
|
Owen Mansel-Chan
|
370a32da8b
|
Test summary models and neutral models, manual and generated
|
2024-01-10 22:25:02 +00:00 |
|
Tom Hvitved
|
f9dbf676a6
|
Java: Use FlowSummaryImpl from dataflow pack
|
2023-12-10 11:25:45 +01:00 |
|
Anders Schack-Mulligen
|
0d8986cfad
|
Java: Accept test changes.
|
2023-11-10 14:04:45 +01:00 |
|
Anders Schack-Mulligen
|
657c29f409
|
Java/C++: Share valueFlowStep.
|
2023-11-09 20:24:28 +01:00 |
|
Chris Smowton
|
24b4b05be8
|
Add models for new Collections methods
|
2023-11-06 16:44:40 +00:00 |
|
Chris Smowton
|
5b72aee3ae
|
Java: model JDK21 SequencedCollection, Set and Map
|
2023-11-06 16:04:13 +00:00 |
|
Dave Bartolomeo
|
d2afb20f3f
|
Merge remote-tracking branch 'origin/main' into dbartol/threat-models-2
|
2023-10-26 14:05:40 -04:00 |
|
Anders Schack-Mulligen
|
35f6e6ebb4
|
Java: Update tests to new partial flow api
|
2023-10-26 14:09:03 +02:00 |
|
Michael Nebel
|
b3e5b86f0a
|
Java: Cleanup threat models tests.
|
2023-10-25 14:02:31 +02:00 |
|
Chris Smowton
|
e8c9708282
|
Autoformat
|
2023-10-24 11:06:19 +01:00 |
|
Chris Smowton
|
f552a15aae
|
Mass-rename MethodAccess -> MethodCall
|
2023-10-24 10:30:26 +01:00 |
|
Dave Bartolomeo
|
fb1b41b649
|
Fix formatting
|
2023-10-19 17:20:38 -04:00 |
|
Dave Bartolomeo
|
bd7de83aab
|
Use extension packs for threat models
|
2023-10-19 17:07:26 -04:00 |
|
Michael Nebel
|
40e63a63e2
|
Java: Re-factor most queries and tests to use threat models.
|
2023-10-04 14:01:58 +02:00 |
|
Michael Nebel
|
5b949b19f7
|
Java: Cleanup threat model taxanomy to align with the EDR.
|
2023-10-03 09:16:39 +02:00 |
|
Michael Nebel
|
5c700afa27
|
Java: Add some threat model dataflow tests.
|
2023-10-03 09:16:39 +02:00 |
|
Michael Nebel
|
537965c0e8
|
Java: Add some testfiles.
|
2023-10-03 09:16:39 +02:00 |
|
Michael Nebel
|
9a112dde66
|
Java: Introduce a class of dataflow nodes for the threat modeling.
|
2023-10-03 09:16:38 +02:00 |
|
Asger F
|
6792592a15
|
Shared: add late checks for stateful in/out barriers
|
2023-09-27 14:38:28 +02:00 |
|
Asger F
|
6d6cdf89ce
|
Java: add a failing test for stateful in/out barriers
|
2023-09-27 14:38:21 +02:00 |
|
Anders Schack-Mulligen
|
e677c1ffe6
|
Java: Add qltest
|
2023-09-13 15:43:46 +02:00 |
|
Jeroen Ketema
|
9d573e5544
|
Consolidate all InlineFlowTest libraries in the dataflow qlpack
|
2023-08-24 21:38:46 +02:00 |
|
Asger F
|
6c664e93ef
|
Merge pull request #14035 from asgerf/shared/variable-capture-nested
Variable capture: synchronize with aliases in nested scopes
|
2023-08-24 15:39:34 +02:00 |
|
Anders Schack-Mulligen
|
ebe3f61ef6
|
Java: Fix models in qltest.
|
2023-08-24 09:44:43 +02:00 |
|
Asger F
|
ee1b3fd7e9
|
Java: update test after VariableCapture.qll change
|
2023-08-23 14:57:26 +02:00 |
|
Michael Nebel
|
a95aad51bd
|
Merge pull request #13546 from michaelnebel/java/withoutelement
Java: Support for With[out]Element for MaD.
|
2023-08-15 10:03:03 +02:00 |
|
Anders Schack-Mulligen
|
0ca3f3308b
|
Merge pull request #13478 from aschackmull/java/varcapture
Java: Add proper support for variable capture flow.
|
2023-08-08 16:22:56 +02:00 |
|
Michael Nebel
|
0ed724eb13
|
Java: Make a flow summary for Set.clear using WithoutElement and introduce appropriate tests.
|
2023-08-08 11:10:08 +02:00 |
|
Anders Schack-Mulligen
|
cd22bb3505
|
Java: Add another test case.
|
2023-08-08 10:00:55 +02:00 |
|
Michael Nebel
|
9c4d77a925
|
Java: Address review comments.
|
2023-08-04 13:47:30 +02:00 |
|
Anders Schack-Mulligen
|
0ae81eace3
|
Java: update fixed test
|
2023-08-03 10:07:00 +02:00 |
|
Anders Schack-Mulligen
|
c5990311ca
|
Java: Redesign and reimplement variable capture flow.
|
2023-08-03 10:04:06 +02:00 |
|
Anders Schack-Mulligen
|
d1a616a70a
|
Java: Add proper support for variable capture flow.
|
2023-08-03 10:04:02 +02:00 |
|
Michael Nebel
|
4568cccd71
|
Java: Add some unit tests for sourceModelKindConfig.
|
2023-08-01 12:56:13 +02:00 |
|
Michael Nebel
|
fc66b6ef9c
|
Java: Update test comments to reflect the MaD syntax.
|
2023-08-01 12:03:44 +02:00 |
|
Michael Nebel
|
0604a85bb1
|
Java: Add WithoutElement model for List.clear and add appropriate test.
|
2023-08-01 12:03:44 +02:00 |
|
Tony Torralba
|
41f1315da9
|
Merge pull request #13772 from atorralba/atorralba/java/inputstream-wrapper-read-step
Java: Add taint steps for InputStream wrappers
|
2023-07-31 11:12:43 +02:00 |
|
Tony Torralba
|
8685242c16
|
Add tests
|
2023-07-26 14:13:43 +02:00 |
|
Tony Torralba
|
602eb43109
|
Update partial flow test expectations
|
2023-07-26 09:32:13 +02:00 |
|
Tony Torralba
|
d3b3af8ae6
|
Re-adds jump step
Note that this causes FP flow in the call context test cases
|
2023-07-24 08:49:37 +02:00 |
|
Tony Torralba
|
cc5a404149
|
Add more test cases
|
2023-07-24 08:49:36 +02:00 |
|
Tony Torralba
|
226103b246
|
Add local class test
|
2023-07-24 08:49:36 +02:00 |
|
Tony Torralba
|
0156fcc381
|
Apply suggestions from code review
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2023-07-24 08:49:36 +02:00 |
|
Tony Torralba
|
00e0e5a61a
|
Java: Add taint step for InputStream wrappers
|
2023-07-24 08:48:04 +02:00 |
|
Jeroen Ketema
|
9c774ac97f
|
Merge pull request #13426 from jketema/inline-3
Update inline flow tests to use parameterized module
|
2023-06-19 17:39:29 +02:00 |
|
Jeroen Ketema
|
742eb8dd12
|
Java: Rewrite InlineFlowTest as a parameterized module
|
2023-06-15 10:52:10 +02:00 |
|
Tony Torralba
|
5e3d9d8136
|
Java: Model the Stapler framework
|
2023-06-14 12:34:52 +02:00 |
|
Tony Torralba
|
182513a981
|
Merge pull request #13235 from atorralba/atorralba/java/hudson-models
Java: Add Hudson models
|
2023-06-14 12:33:18 +02:00 |
|
Anders Schack-Mulligen
|
1a4fca334f
|
Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
|
2023-06-14 09:38:36 +02:00 |
|