41969 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Chris Smowton	79bae0caeb	Merge pull request #9999 from github/smowton/feature/golang-channel-flow ... Go: implement conservative cross-thread dataflow	2022-08-15 15:38:15 +01:00
Asger F	eaf3aa7075	Merge pull request #10036 from asgerf/js/exports-handling ... JS: More precise handling of "exports"	2022-08-15 15:32:00 +02:00
Taus	16451654db	Merge pull request #9884 from tausbn/ql-untangle-parsers ... QL: Untangle the various parsers	2022-08-15 15:12:30 +02:00
erik-krogh	459c2a21b4	Merge branch 'main' into ql-untangle-parsers	2022-08-15 14:11:32 +02:00
erik-krogh	c652f3e3dd	update grammar after https://github.com/tree-sitter/tree-sitter-ql/pull/17 has been merged	2022-08-15 14:10:10 +02:00
Jeroen Ketema	6b94cdbd8d	Merge pull request #10047 from jketema/fix-ir-comment ... C++: Fix block assignment evaluation order comment in IR translation	2022-08-15 14:01:48 +02:00
Chris Smowton	774e379eb1	Merge pull request #9742 from smehta23/feat/SM/java_partial_path_traversal_vulnerability ... [JAVA] Partial Path Traversal Vuln Query	2022-08-15 12:56:16 +01:00
Erik Krogh Kristensen	0adb588fe8	Merge pull request #9712 from erik-krogh/badRange ... JS/RB/PY/Java: add suspicious range query	2022-08-15 13:55:44 +02:00
Michael Nebel	15906338dc	Merge pull request #9923 from michaelnebel/csharp/webgoat ... C#: SQL Injection improvements for SQLite.	2022-08-15 13:22:25 +02:00
Asger F	3c41f28519	JS: Use explicit this	2022-08-15 12:49:23 +02:00
Asger F	671573633b	JS: Simplify getMain()	2022-08-15 12:48:41 +02:00
Chris Smowton	9f82088f5d	Remove unnecessary casts	2022-08-15 11:47:58 +01:00
Chris Smowton	1a3dc1d6eb	Remove extra closing tag	2022-08-15 11:31:53 +01:00
Michael Nebel	79a716488b	Merge pull request #10003 from michaelnebel/csharp/stubsenum ... C#: Stub generator improvements.	2022-08-15 12:14:06 +02:00
Asger F	80a37c5863	JS: More precise handling of "exports"	2022-08-15 11:59:40 +02:00
Jeroen Ketema	6c4685e538	C++: Fix block assignment evaluation order comment in IR translation	2022-08-15 11:58:57 +02:00
Erik Krogh Kristensen	51a724315f	Merge pull request #10017 from erik-krogh/forAwait ... JS: support top-level for await statements	2022-08-15 11:58:56 +02:00
Ian Lynagh	09d249e5d8	Merge pull request #10038 from igfoo/igfoo/java-downgrades ... Java: Add initial downgrades directory	2022-08-15 10:57:52 +01:00
Chris Smowton	5677e38994	Style edit	2022-08-15 10:37:55 +01:00
Chris Smowton	3cf871e9e5	Apply docs suggestions ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2022-08-15 10:34:55 +01:00
Mathias Vorreiter Pedersen	dfde5712a3	Merge pull request #10031 from jketema/block-assign ... C++: Handle block assignments	2022-08-15 10:29:23 +01:00
erik-krogh	a28948e836	add change note	2022-08-15 10:53:33 +02:00
Anders Schack-Mulligen	a3fb54c9de	Merge pull request #10007 from aschackmull/dataflow/source-node-identity ... Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow	2022-08-15 10:39:17 +02:00
Jeroen Ketema	40334a21ce	C++: add upgrade and downgrade scripts	2022-08-13 15:09:06 +02:00
Jeroen Ketema	cac6bd57ab	C++: Update DB scheme stats file	2022-08-13 01:01:30 +02:00
Jeroen Ketema	0449d914c4	C++: Add change note	2022-08-12 18:43:24 +02:00
Jeroen Ketema	4d76fd198e	C++: Handle block assignments in the IR	2022-08-12 18:43:23 +02:00
Jeroen Ketema	5c905b76b4	C++: Expose block assignment operations in the QL library	2022-08-12 18:43:23 +02:00
Jeroen Ketema	ebf8161f1b	C++: Add block assignment expression to the database schema ... These can under some circumstances be generated by the frontend as part of compiler generated copy constructors and assignment operators.	2022-08-12 18:43:23 +02:00
Jeroen Ketema	e1b1657cdd	C++: Remove unused abstract predicate	2022-08-12 18:43:23 +02:00
Jeroen Ketema	de142b276d	C++: Add IR test that exposes a gap in the extractor output	2022-08-12 18:43:23 +02:00
Ian Lynagh	254c166f93	Java: Add initial downgrades directory	2022-08-12 16:19:31 +01:00
Michael Nebel	af473db067	C#: Add function pointer test case in stub generation.	2022-08-12 14:56:52 +02:00
Tamás Vajk	1d56330baa	Merge pull request #9782 from tamasvajk/cs/newtonsoft-deserialization ... C#: Fix unsafe deserialization with `JsonConvert.DeserializeObject`	2022-08-12 14:46:41 +02:00
Michael Nebel	e9b184fa4c	C#: Avoid multiple explicit casts in stub generator.	2022-08-12 13:34:50 +02:00
Michael Nebel	eb9057918c	C#: Manual updates to .NET Core stubs to make it compile.	2022-08-12 13:12:33 +02:00
Michael Nebel	b4f7e07cc1	C#: Update .NET Core stubs.	2022-08-12 13:10:08 +02:00
Michael Nebel	0c58764643	C#: Update FunctionPointer expected output with specific CallingConvention printing.	2022-08-12 13:01:15 +02:00
Michael Nebel	d3047f6293	C#: Update calling convetion QL doc to comply with standard.	2022-08-12 13:01:15 +02:00
Michael Nebel	9ae17f93da	C#: Stub generator support for function pointer types.	2022-08-12 13:01:15 +02:00
Michael Nebel	e2882f0706	C#: Re-generate stubs for the ASP.NET Core framework.	2022-08-12 13:01:15 +02:00
Michael Nebel	7c7c335b0e	C#: Update stub generator expected output.	2022-08-12 13:01:15 +02:00
Michael Nebel	b052fbf41c	C#: Add enum long type testcase.	2022-08-12 12:51:31 +02:00
Michael Nebel	f71d684a08	C#: Use explicit typing for enums in the stub generator.	2022-08-12 12:48:50 +02:00
Michael Nebel	9ff94120d8	C#: Update stub generator test(s) expected output.	2022-08-12 12:48:24 +02:00
Michael Nebel	284d88d906	C#: Update stub generator query to explicit include enum constants.	2022-08-12 12:48:24 +02:00
Michael Nebel	d023f840de	C#: Add Enum examples in stub generator test code.	2022-08-12 12:48:24 +02:00
Chris Smowton	50fb6621a9	Create 2022-08-12-cross-thread-flow.md	2022-08-12 09:00:16 +01:00
Tamas Vajk	740265dc38	Add change note	2022-08-11 13:32:49 +02:00
Erik Krogh Kristensen	73df8e4c7d	Merge pull request #9832 from erik-krogh/misspellings ... Fix lots of misspellings	2022-08-11 12:43:26 +02:00