Esben Sparre Andreasen
|
7c006d4530
|
Merge pull request #222 from xiemaisi/js/identity-replacement
JavaScript: Add new query flagging identity replacements.
|
2018-09-26 09:25:19 +02:00 |
|
Geoffrey White
|
9c219b958c
|
Merge pull request #225 from sauyon/sizeofcheck
Allow void* pointer arithmetic with sizeof
|
2018-09-25 22:53:07 +01:00 |
|
Max Schaefer
|
0e63ea1b51
|
JavaScript: Update tests.
|
2018-09-25 11:27:12 +01:00 |
|
Max Schaefer
|
659c67c715
|
JavaScript: Produce friendlier message for empty-string replacements.
|
2018-09-25 11:27:12 +01:00 |
|
Max Schaefer
|
5fb22ba021
|
JavaScript: Handle zero-width assertions and sequences.
|
2018-09-25 11:27:12 +01:00 |
|
Max Schaefer
|
ec9a3c87a7
|
JavaScript: Do not flag case-insensitive replace.
|
2018-09-25 11:27:11 +01:00 |
|
Max Schaefer
|
1ab11109f9
|
JavaScript: Add new query flagging identity replacements.
|
2018-09-25 11:27:11 +01:00 |
|
Jonas Jensen
|
8f19efe2e8
|
Merge pull request #211 from raulgarciamsft/users/raulga/HESULT
Cast between semantically different integer types: HRESULT to/from bool
|
2018-09-25 09:01:35 +02:00 |
|
Sauyon Lee
|
614a8ef091
|
Allow void* pointer arithmetic with sizeof
Technically this isn't allowed by the C spec, but it's been seen in the wild:
see 3763c7b338/files/src/csp_buffer.c\#x1d04047d2bb68c21:1
|
2018-09-24 11:05:40 -07:00 |
|
Geoffrey White
|
473252632c
|
Merge pull request #221 from jbj/IntMultToLong-char
C++: Suppress IntMultToLong alert on char-typed numbers
|
2018-09-24 18:42:41 +01:00 |
|
Raul Garcia
|
c3b523cdc4
|
Fixing a missed reference to renamed file.
|
2018-09-24 10:02:52 -07:00 |
|
Jonas Jensen
|
a56376a2df
|
C++: rename effectivelyConstant to likelySmall
This reflects the existing QLDoc better and makes it more clear why it
includes char-typed expressions.
|
2018-09-24 14:37:11 +02:00 |
|
Jonas Jensen
|
4d2e4c53f1
|
C++: Suppress IntMultToLong alert on char
|
2018-09-24 14:37:09 +02:00 |
|
Jonas Jensen
|
2b5d150829
|
C++: Test for IntMultToLong on char-typed numbers
|
2018-09-24 14:36:36 +02:00 |
|
semmle-qlci
|
7f56be6fe2
|
Merge pull request #216 from asger-semmle/lusca-csrf
Approved by esben-semmle
|
2018-09-24 11:34:24 +01:00 |
|
semmle-qlci
|
46178271d1
|
Merge pull request #213 from asger-semmle/sendfile
Approved by xiemaisi
|
2018-09-24 11:32:46 +01:00 |
|
Jonas Jensen
|
d2f11dc18c
|
Merge pull request #209 from dave-bartolomeo/dave/CNewLines
LF all the things
|
2018-09-24 09:02:54 +02:00 |
|
Dave Bartolomeo
|
396d7ea928
|
Mark several known binary extensions as -text
|
2018-09-23 16:24:32 -07:00 |
|
Dave Bartolomeo
|
1f36f5552f
|
Normalize all text files to LF
Use `* text=auto eol=lf`
|
2018-09-23 16:24:31 -07:00 |
|
Dave Bartolomeo
|
26abf5d4a2
|
Force LF for basically everything.
|
2018-09-23 16:24:31 -07:00 |
|
Dave Bartolomeo
|
aa267c8302
|
C++: Force LF for .c,.cpp,.h,.hpp
|
2018-09-23 16:23:52 -07:00 |
|
Jonas Jensen
|
caf4a767ad
|
Merge pull request #219 from geoffw0/resource-not-released
C++: Exclude placement new from AV Rule 79.ql
|
2018-09-22 17:41:36 +02:00 |
|
Raul Garcia
|
242ee10806
|
Major change in order to support the rule for C as well as cpp
|
2018-09-21 16:47:31 -07:00 |
|
Geoffrey White
|
492d79ea53
|
CPP: Change note.
|
2018-09-21 21:13:37 +01:00 |
|
Geoffrey White
|
3922082e7d
|
CPP: Tidy and simplify AV Rule 79.ql.
|
2018-09-21 19:35:23 +01:00 |
|
Raul Garcia
|
94f752c59c
|
Merge branch 'users/raulga/HESULT' of https://github.com/raulgarciamsft/ql into users/raulga/HESULT
|
2018-09-21 11:14:49 -07:00 |
|
Raul Garcia
|
783be15a45
|
Fixing typos & ID.
NOTE: There is an ongoing discussion on the proper CWE we should use
|
2018-09-21 11:14:14 -07:00 |
|
Nick Rolfe
|
e21a5e4b4c
|
Merge pull request #214 from jbj/mergeback-20180921_104253
Mergeback rc/1.18 -> master
|
2018-09-21 17:54:28 +01:00 |
|
semmle-qlci
|
d281558fb1
|
Merge pull request #218 from yh-semmle/java/query-severities
Approved by aschackmull
|
2018-09-21 16:59:03 +01:00 |
|
Geoffrey White
|
d5a48ad63e
|
CPP: Additional test cases.
|
2018-09-21 15:55:29 +01:00 |
|
Asger F
|
4797924bea
|
JS: review comments
|
2018-09-21 14:46:21 +01:00 |
|
Asger F
|
d2a04d32be
|
JS: add change note
|
2018-09-21 13:20:02 +01:00 |
|
Asger F
|
5f467d2fc5
|
JS: recognize CSRF middleware from lusca package
|
2018-09-21 13:15:40 +01:00 |
|
Asger F
|
6f109a742f
|
JS: add a test case for res.sendfile
|
2018-09-21 11:04:33 +01:00 |
|
Geoffrey White
|
84f9900c8c
|
CPP: Exclude placement new.
|
2018-09-21 10:53:42 +01:00 |
|
Geoffrey White
|
c7aa5c169b
|
CPP: Add a test of placement new for AV Rule 79.ql.
|
2018-09-21 10:47:00 +01:00 |
|
Jonas Jensen
|
e2a17e9740
|
Merge remote-tracking branch 'upstream/rc/1.18' into mergeback-20180921_104253
|
2018-09-21 10:45:54 +02:00 |
|
Raul Garcia
|
64b8a5ba01
|
Merge branch 'master' into users/raulga/HESULT
|
2018-09-20 16:20:26 -07:00 |
|
Raul Garcia
|
b0ec929aad
|
Cast between semantically different integer types: HRESULT to/from a Boolean type.
Closing the gap between Semmle and PreFast.
Covers C6214, C6215, C6216, C6217, C6230
|
2018-09-20 16:16:32 -07:00 |
|
Robert Marsh
|
69962bd06c
|
Merge pull request #203 from dave-bartolomeo/dave/GVN
C++: Initial attempt at IR-based value numbering
|
2018-09-20 10:00:45 -07:00 |
|
Dave Bartolomeo
|
5a25602c28
|
C++: Move GVN out of "internal" directory
|
2018-09-20 08:21:15 -07:00 |
|
Dave Bartolomeo
|
27cee9bd80
|
C++: Handle inheritance conversions in IR GVN
|
2018-09-20 08:00:38 -07:00 |
|
semmle-qlci
|
f146e34e26
|
Merge pull request #207 from dave-bartolomeo/dave/JSNewlines
Approved by esben-semmle
|
2018-09-20 14:49:54 +01:00 |
|
Anders Schack-Mulligen
|
4d46385c51
|
Merge pull request #206 from yh-semmle/java/codeowners
Java: add Semmle/java team to `CODEOWNERS`
|
2018-09-20 09:24:14 +02:00 |
|
Dave Bartolomeo
|
e06969ddb4
|
JavaScript: Normalize .mjs files to LF
|
2018-09-19 21:33:39 -07:00 |
|
Dave Bartolomeo
|
524c67c3fb
|
JavaScript: Normalize .ts line endings to LF
|
2018-09-19 21:33:35 -07:00 |
|
Dave Bartolomeo
|
2b9f42b308
|
JavaScript: Force LF for .json and .yml
|
2018-09-19 21:33:32 -07:00 |
|
Dave Bartolomeo
|
b12c739915
|
JavaScript: Normalize line endings of .js and .html files
Added .gitattributes files for the two directories where we intentionally have line endings other than LF
|
2018-09-19 21:33:27 -07:00 |
|
Dave Bartolomeo
|
bd156757d3
|
C++: Remove accidental add of IR.md
|
2018-09-19 14:26:17 -07:00 |
|
semmle-qlci
|
4aca8f4fd3
|
Merge pull request #201 from asger-semmle/string-concatenation-squashed
Approved by esben-semmle
|
2018-09-19 21:59:17 +01:00 |
|