Michael Nebel
96f93cefba
UNDO AGAIN: Add local threat models.
2023-10-05 16:16:00 +02:00
Michael Nebel
40e63a63e2
Java: Re-factor most queries and tests to use threat models.
2023-10-04 14:01:58 +02:00
Michael Nebel
f0fb065446
Java: Opt-in the SQL injection query to use threat model flow sources.
2023-10-04 10:51:07 +02:00
Michael Nebel
5fd6dc3b87
Java: Opt-in the XSS query to use threat model flow sources.
2023-10-04 10:48:09 +02:00
Michael Nebel
8224f172b2
Merge pull request #14257 from michaelnebel/java/threatmodelsources
...
Java: Introduce a class of dataflow nodes for the threat modeling.
2023-10-03 16:10:49 +02:00
Ian Lynagh
c365f459fd
Merge pull request #14355 from igfoo/igfoo/lang-vers
...
Kotlin: Specify language version when compiling for old compilers
2023-10-03 11:33:23 +01:00
Michael Nebel
fcbd301de8
Java: Address review comments.
2023-10-03 10:36:45 +02:00
Michael Nebel
5b949b19f7
Java: Cleanup threat model taxanomy to align with the EDR.
2023-10-03 09:16:39 +02:00
Michael Nebel
5c700afa27
Java: Add some threat model dataflow tests.
2023-10-03 09:16:39 +02:00
Michael Nebel
537965c0e8
Java: Add some testfiles.
2023-10-03 09:16:39 +02:00
Michael Nebel
2055d5492c
Java: Let RemoteFlowSource and LocalUserInput extends SourceNode and fine grain the LocalUserInput threat models.
2023-10-03 09:16:38 +02:00
Michael Nebel
9a112dde66
Java: Introduce a class of dataflow nodes for the threat modeling.
2023-10-03 09:16:38 +02:00
Ian Lynagh
513a39f0b4
Kotlin: Specify language versino when compiling for old compilers
...
Otherwise builds with Kotlin 2 won't work with older compilers.
2023-10-02 18:14:01 +01:00
Ian Lynagh
f3c5c01ec5
Kotlin: Drop support for 1.4.32
...
We never claimed to support anything < 1.5.0, and compiling with
-language-version 1.4 fails as it's not meant to support sealed classes.
If we build 1.4.32 with -language-version 1.5 using a 2.0 compiler,
then the resulting plugin also fails.
2023-10-02 17:29:10 +01:00
Anders Schack-Mulligen
efb49fcd3e
Merge pull request #14336 from aschackmull/java/switch-rule-stmt-cfg
...
Java: Fix CFG for case rule statements.
2023-09-29 12:02:48 +02:00
Stephan Brandauer
d7beda79ab
Merge pull request #14197 from github/kaeluka/framework-mode-source-candidates
...
Java: Framework mode source candidates
2023-09-28 21:09:54 +02:00
Ian Lynagh
30d7f0cf0a
Merge pull request #14334 from igfoo/igfoo/ext-frag
...
Kotlin: Handle IrExternalPackageFragment properly for more external entities
2023-09-28 20:01:52 +01:00
Ian Lynagh
7f5f25c362
Merge pull request #14338 from igfoo/igfoo/dedupe
...
Kotlin: Differentiate 2 error messages
2023-09-28 17:56:53 +01:00
Stephan Brandauer
fdbc553029
Java: Automodel Framework mode: no longer skip non-public methods
2023-09-28 16:17:44 +02:00
Ian Lynagh
e9482fb096
Kotlin: Differentiate 2 error messages
2023-09-28 14:59:21 +01:00
Ian Lynagh
5db283e86a
Kotlin: Fix comment
2023-09-28 14:26:02 +01:00
Anders Schack-Mulligen
15e1098791
Java: Add change note.
2023-09-28 14:28:24 +02:00
Anders Schack-Mulligen
94556078f1
Java: Add guards logic for SwitchExpr default cases.
2023-09-28 14:21:04 +02:00
Anders Schack-Mulligen
917a15647e
Java: Fix CFG for rule statements.
2023-09-28 14:19:36 +02:00
Anders Schack-Mulligen
922a4e8ddf
Java: Add failing test
2023-09-28 14:15:56 +02:00
Ian Lynagh
261ae4ea4d
Kotlin: Handle IrExternalPackageFragment properly for more external entities
2023-09-28 12:12:18 +01:00
Asger F
0d96ed8aee
Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers
...
Shared: add in/out barriers with flow state
2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen
5feb2f7622
Merge pull request #14321 from aschackmull/shared/filesystem
...
All languages: Use shared FileSystem library and minor regex performance improvement.
2023-09-28 10:51:05 +02:00
Koen Vlaswinkel
10231e99ce
Merge pull request #14199 from github/koesie10/add-java-model-editor-queries
...
Java: Add VS Code model editor queries
2023-09-28 10:13:13 +02:00
Anders Schack-Mulligen
653844cc46
Java: Use shared FileSystem library.
2023-09-28 08:58:55 +02:00
Asger F
6792592a15
Shared: add late checks for stateful in/out barriers
2023-09-27 14:38:28 +02:00
Asger F
6d6cdf89ce
Java: add a failing test for stateful in/out barriers
2023-09-27 14:38:21 +02:00
Ian Lynagh
497d48bd63
Kotlin: Claim to support Kotlin 2
...
We don't fully support it yet, but if we don't claim to support it then
Kotlin fails early.
2023-09-26 17:24:11 +01:00
Anders Schack-Mulligen
e6d832c7e5
Merge pull request #14297 from aschackmull/java/additional-steps-and-nodes
...
Java: Add support for additional nodes, read steps, and store steps for QL models and model ThreadLocal.initialValue
2023-09-26 14:50:37 +02:00
Stephan Brandauer
26267b72d4
driveby: bug fix in automodel alert sink util
2023-09-26 10:46:56 +02:00
Stephan Brandauer
53b3755e50
remove now-unused getIndex predicate
...
Co-authored-by: @tausbn <tausbn@github.com >
2023-09-26 10:46:42 +02:00
Stephan Brandauer
9f7f2ab70e
remove redundant fromSource calls
...
Co-authored-by: @tausbn <tausbn@github.com >
2023-09-26 10:45:54 +02:00
Stephan Brandauer
32502d5e2c
Java: Automodel, remove erroneousEndpoints predicate from production queries
2023-09-26 10:45:54 +02:00
Stephan Brandauer
5d608acd0b
Java: Automodel framework mode, fix query string
2023-09-26 10:45:54 +02:00
Stephan Brandauer
e71563e540
Java: Automodel fr mode: remove superfluous module
2023-09-26 10:45:54 +02:00
Stephan Brandauer
2be5b1955f
Java: Automodel fr mode: add support for qualifier source candidates
2023-09-26 10:45:53 +02:00
Stephan Brandauer
dee387622e
Java: Automodel: rename overloadable -> overridable
2023-09-26 10:45:53 +02:00
Stephan Brandauer
6121faf671
Java: Automodel: fr mode: connect new endpoints with MaD models
2023-09-26 10:45:53 +02:00
Stephan Brandauer
7f084c90c5
Java: automodel fr mode: add overloadable parameter candidates
2023-09-26 10:45:53 +02:00
Stephan Brandauer
8ea8123bd5
Java: Automodel ql-for-ql
2023-09-26 10:45:53 +02:00
Stephan Brandauer
86e50699dc
Java: Automodel format
2023-09-26 10:45:53 +02:00
Stephan Brandauer
9e6eebb926
Java: Automodel: drive-by: remove unused message logic for candidate extraction
2023-09-26 10:45:53 +02:00
Stephan Brandauer
0d53600b12
Java: automodel fr mode: update test expectations
2023-09-26 10:45:53 +02:00
Stephan Brandauer
32a538b64c
Java: automodel fr mode: add mad output to extraction metadata
2023-09-26 10:45:53 +02:00
Stephan Brandauer
b2578f0e30
Java: Automodel Fr Mode: add return value endpoint type
2023-09-26 10:45:52 +02:00
