Anders Schack-Mulligen
89d9d65755
Java/C#: Remove useless disjuncts.
2023-03-21 14:45:29 +01:00
Asger F
6d665da4dc
Merge pull request #12570 from github/post-release-prep/codeql-cli-2.12.5
...
Post-release preparation for codeql-cli-2.12.5
2023-03-21 13:06:25 +01:00
Chris Smowton
2876b4aa5d
maven-httpo-repository: add Maven wrapper
...
Maven 3.9.1 changes the format of the error message this test is looking for (though it still matches the target regex). Use the Maven wrapper to avoid such sensitivity to the precise version present in the environment.
2023-03-21 09:25:33 +00:00
Tony Torralba
956f991b8d
Merge pull request #12603 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-03-21 10:11:51 +01:00
Tony Torralba
1f991807d4
Merge pull request #12366 from github/java/update-mad-decls-after-triage-2023-03-02T12-08-59
...
Java: Update MaD Declarations after Triage
2023-03-21 09:40:03 +01:00
github-actions[bot]
6598cc44ee
Add changed framework coverage reports
2023-03-21 00:15:33 +00:00
Edward Minnix III
ac58299d9e
Merge pull request #12541 from egregius313/egregius313/refactor-queries-to-new-dataflow-api
...
Java: Refactor more queries to the new DataFlow module API
2023-03-20 12:24:26 -04:00
Tony Torralba
1258812428
Fix Argument[this]
2023-03-20 17:13:44 +01:00
Tony Torralba
f685b93379
Add change note
2023-03-20 17:09:48 +01:00
Tony Torralba
a66b7ed54a
Fix incorrect model, add missing model
2023-03-20 17:09:48 +01:00
Stephan Brandauer
0cab45e4b9
update old data to current standard (stream creation arg is a sink)
2023-03-20 17:09:48 +01:00
Stephan Brandauer
8802fbdfe7
Update java/ql/lib/ext/java.nio.file.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-20 17:09:48 +01:00
Stephan Brandauer
bc227179c7
Update java/ql/lib/ext/org.geogebra.web.full.main.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-20 17:09:48 +01:00
Tony Torralba
bc99a44f3a
Apply suggestions from code review
2023-03-20 17:09:48 +01:00
Stephan Brandauer
12bb0d98c0
move toFile back to its original location
2023-03-20 17:09:48 +01:00
Stephan Brandauer
4761c3a328
remove duplicates
2023-03-20 17:09:48 +01:00
Stephan Brandauer
bd21dc9460
remove nonexploitable sinks
2023-03-20 17:09:48 +01:00
Stephan Brandauer
b7ce0c2d96
fix: taint flow of ctor goes to Argument[-1], instead of ReturnValue
2023-03-20 17:09:48 +01:00
Stephan Brandauer
2236db43ec
sort the changed MaD declarations
2023-03-20 17:09:46 +01:00
Stephan Brandauer
74e261738f
remove predicate
2023-03-20 17:06:40 +01:00
Stephan Brandauer
ec1762e015
Update MaD Declarations after Triage
2023-03-20 17:06:37 +01:00
Tony Torralba
fa60fa0ae2
Merge pull request #12572 from github/java/update-mad-decls-after-triage-2023-03-17T15-01-35
...
Java: Update MaD Declarations after Triage
2023-03-20 17:02:27 +01:00
Anders Schack-Mulligen
3876e4335f
Merge pull request #12420 from kaspersv/kaspersv/dataflow-remove-alias-preds
...
Dataflow: Remove revFlowAlias and revFlowApAlias predicates
2023-03-20 16:30:15 +01:00
Michael Nebel
17b3383043
Merge pull request #12556 from michaelnebel/java/argumentthis
...
Java: Argument[-1] -> Argument[this]
2023-03-20 15:59:59 +01:00
Erik Krogh Kristensen
a9d40d39d9
Merge pull request #12550 from erik-krogh/useNumberUtil
...
Java/Python: use Number.qll to parse hex numbers in regex parsing
2023-03-20 15:50:31 +01:00
Stephan Brandauer
39726a54ec
fix suggestion
2023-03-20 14:12:46 +01:00
Kasper Svendsen
1d2f1b6ae6
Address comments
2023-03-20 13:34:14 +01:00
Ed Minnix
83b0d073f0
Fix typo in QLDoc
2023-03-20 08:11:01 -04:00
Ed Minnix
1c661fd3ac
Add missing QLDocs
2023-03-20 08:10:07 -04:00
Kasper Svendsen
e0e3a1d621
Dataflow: remove revFlowApAlias trick
2023-03-20 13:04:13 +01:00
Ed Minnix
84fd5f7ee0
Fix naming of ZipSlip configuration
2023-03-20 07:55:23 -04:00
Ed Minnix
60a4a79537
Make the Config module of public Flow modules public
...
This is to make things easier for the CodeML/ATM team once these
configurations are moved from `src/` to `lib/`.
2023-03-20 07:47:55 -04:00
Edward Minnix III
1c06afffe5
Merge pull request #12578 from egregius313/egregius313/conform-dataflow-configs-to-config-naming-convention
...
Conform dataflow config modules to follow `*Config` naming convention
2023-03-20 07:25:10 -04:00
Tony Torralba
27fc14236f
Add change note
2023-03-20 10:48:56 +01:00
Tony Torralba
bff8bbfe33
Apply suggestions from code review
2023-03-20 10:43:46 +01:00
Michael Nebel
01ade878ea
Java: Update test comments to use this instead of -1.
2023-03-20 10:14:20 +01:00
Michael Nebel
ba711ab849
Java: Update expected test-output (different sorting).
2023-03-20 10:14:20 +01:00
Michael Nebel
ae12510d8d
Java: Add change-note.
2023-03-20 10:14:20 +01:00
Michael Nebel
9039a468cb
Java: Update models that uses -1 in a range.
2023-03-20 10:14:20 +01:00
Michael Nebel
e86f1e4961
Java: Replace Argument[-1] with Argument[this].
2023-03-20 10:14:20 +01:00
Michael Nebel
0ec56203f9
Java: Introduce index validation.
2023-03-20 09:38:40 +01:00
Michael Nebel
9a3c2d3fbe
Java: Update summary parsing to use this instead of -1 and adjust the model generator.
2023-03-20 09:38:40 +01:00
Michael Nebel
abd9f673e1
Java: Update the java internal documentation for models.
2023-03-20 09:38:39 +01:00
Kasper Svendsen
9630feb5e4
Dataflow: Remove revFlowAlias trick
2023-03-20 09:04:35 +01:00
github-actions[bot]
0d36a5a733
Add changed framework coverage reports
2023-03-20 00:17:11 +00:00
Ed Minnix
c852d3a541
Rename configurations from "Conf" to "Config"
2023-03-19 17:55:53 -04:00
Ed Minnix
2d5944fb0e
Refactor DataFlow configurations to use "Config" naming convention
2023-03-19 17:44:07 -04:00
Ed Minnix
7eb3fd2ff7
Conform queries to Config naming convention
2023-03-17 15:17:18 -04:00
Ed Minnix
d317de14c9
XXE Configuration Deprecation messages
2023-03-17 15:17:18 -04:00
Ed Minnix
310af99843
Refactor Security.CWE.CWE-807.TaintedPermissionsCheck
2023-03-17 15:17:18 -04:00
