47305 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jeroen Ketema	9e4cab74ec	Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-11-23 11:07:03 +01:00
Mathias Vorreiter Pedersen	349c5cd800	Merge pull request #11254 from MathiasVP/fix-ssa-flow ... C++: Fix spurious reference flow	2022-11-23 09:52:28 +00:00
Tony Torralba	92ee0aa7ae	Merge pull request #11367 from atorralba/atorralba/java/add-bitwise-implicit-intents ... Java: Consider taint through bitwise operations on PendingIntent flags	2022-11-22 17:08:52 +01:00
Rasmus Wriedt Larsen	5866af413f	Merge pull request #11347 from tausbn/python-clean-up-import-resolution ... Python: Add change note for module resolution	2022-11-22 15:28:38 +01:00
Rasmus Wriedt Larsen	04a68f8d52	Merge pull request #11372 from RasmusWL/getpass ... Python: Model `getpass.getpass` as source of passwords	2022-11-22 14:49:04 +01:00
Rasmus Wriedt Larsen	b281cc88ff	Merge pull request #11208 from RasmusWL/call-graph-tests ... Python: Test improvements in preparation for new call-graph PR	2022-11-22 14:31:09 +01:00
Rasmus Wriedt Larsen	9195b73d84	Python: Model getpass.getpass as source of passwords	2022-11-22 14:11:52 +01:00
Rasmus Wriedt Larsen	80e71b202a	Python: Cleartext queires: Remove flow from getpass.py	2022-11-22 14:08:00 +01:00
Rasmus Wriedt Larsen	9342e3ba76	Python: Enable new test ... But look at all those elements from getpass.py implementation :(	2022-11-22 13:59:59 +01:00
Rasmus Wriedt Larsen	e01df3ea7c	Python: Prepare for new test ... .expected line changes 😠	2022-11-22 13:52:50 +01:00
Taus	18be30d177	Python: Apply suggestion from review ... Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>	2022-11-22 13:46:45 +01:00
Rasmus Wriedt Larsen	1b30cf8eca	Merge branch 'main' into call-graph-tests	2022-11-22 13:39:27 +01:00
Erik Krogh Kristensen	158ea26dd1	Merge pull request #11362 from erik-krogh/read-only-cache ... CI: use read-only-cache when running on a PR	2022-11-22 13:04:34 +01:00
Erik Krogh Kristensen	f67219965e	Merge pull request #11082 from erik-krogh/shellArr ... JS: treat arrays that gets executed with shell:true as a sink for `js/shell-command-constructed-from-input`	2022-11-22 13:03:50 +01:00
Erik Krogh Kristensen	b2267c0e49	Merge pull request #11343 from erik-krogh/redundantAssignment ... QL: add redundant-assignment query	2022-11-22 13:03:14 +01:00
Erik Krogh Kristensen	06386b2cdd	Merge pull request #11072 from erik-krogh/slicing ... JS: poly-redos: don't sanitize calls through substring calls that just remove the start	2022-11-22 13:02:09 +01:00
Jeroen Ketema	cfb8f282d1	Merge pull request #11369 from jketema/fun-typo ... C++: Fix typo flagged up by QL-for-QL	2022-11-22 12:34:54 +01:00
Jeroen Ketema	6a68e7936f	C++: Fix typo flagged up by QL-for-QL	2022-11-22 11:53:11 +01:00
Tony Torralba	1667fbad88	Add change note	2022-11-22 11:48:21 +01:00
Mathias Vorreiter Pedersen	98285393fe	Merge pull request #11357 from MathiasVP/ignore-more-instructions ... C++: Ignore more instructions in dataflow	2022-11-22 10:47:51 +00:00
Tony Torralba	43f4dd8bc4	Consider taint through bitwise operations on PendingIntent flags	2022-11-22 11:39:30 +01:00
Tom Hvitved	ed841aee30	Merge pull request #11329 from hvitved/csharp/qltest-ci ... C#: Add workflow for running QL tests	2022-11-22 11:36:16 +01:00
Rasmus Wriedt Larsen	84faf49bf0	Python: Add tests for compound arguments field flow	2022-11-22 11:29:00 +01:00
Rasmus Wriedt Larsen	d876acde4c	Python: Fix SINK/SINK_F usage for crosstalk tests ... As discussed in PR review https://github.com/github/codeql/pull/11208#discussion_r1022473421	2022-11-22 11:29:00 +01:00
Anders Peter Fugmann	d799466e9d	Merge pull request #11338 from andersfugmann/update_swift_codeowners ... Swift: set @github/codeql-swift as owner	2022-11-22 11:24:19 +01:00
Erik Krogh Kristensen	ef270232dc	Merge pull request #11358 from erik-krogh/rubyDelPacks ... Ruby: delete the target/packs folder in the `compile-queries` job	2022-11-22 10:56:52 +01:00
Jeroen Ketema	4731f9222c	Merge remote-tracking branch 'upstream/main' into mathiasvp/replace-ast-with-ir-use-usedataflow	2022-11-22 10:53:24 +01:00
Mathias Vorreiter Pedersen	a2ce51fdf7	C++: Accept test changes.	2022-11-22 09:50:45 +00:00
erik-krogh	10c602d9fb	CI: use read-only-cache when running on a PR	2022-11-22 10:20:09 +01:00
Anders Schack-Mulligen	15aa8b62b8	Merge pull request #11359 from github/workflow/coverage/update ... Update CSV framework coverage reports	2022-11-22 09:47:38 +01:00
Tom Hvitved	313767539a	C#: Add workflow for running QL tests	2022-11-22 09:32:44 +01:00
github-actions[bot]	e70eb3a3ee	Add changed framework coverage reports	2022-11-22 00:19:21 +00:00
erik-krogh	29055f7709	delete packs	2022-11-22 00:12:33 +01:00
Mathias Vorreiter Pedersen	320b5ca01a	C++: Ignore more instructions for dataflow.	2022-11-21 21:39:19 +00:00
Mathias Vorreiter Pedersen	fc3d6a1847	Merge branch 'replace-ast-with-ir-use-usedataflow' into fix-ssa-flow	2022-11-21 20:57:24 +00:00
Mathias Vorreiter Pedersen	7658df9ebd	Merge pull request #11355 from MathiasVP/fewer-read-steps ... C++: Reduce `readStep` fan-in	2022-11-21 20:35:34 +00:00
Jami	8a73675483	Merge pull request #11070 from jcogs33/java-regex-injection ... Java: Promote regex injection query from experimental	2022-11-21 15:04:26 -05:00
Mathias Vorreiter Pedersen	23d6eb67c3	C++: Fix comment.	2022-11-21 19:26:04 +00:00
Mathias Vorreiter Pedersen	c2ac60fc34	Merge pull request #11311 from MathiasVP/repair-mustflow ... C++: Repair `MustFlow` library for use-use flow	2022-11-21 19:13:10 +00:00
Jami Cogswell	9e2ec9d12f	apply docs review suggestion	2022-11-21 13:39:46 -05:00
Mathias Vorreiter Pedersen	d1274e2769	C++: Accept more test changes.	2022-11-21 18:33:14 +00:00
Edoardo Pirovano	6c33ddcd47	Merge pull request #11349 from github/edoardo/2.11.4-mergeback ... Merge `rc/3.8` into `main`	2022-11-21 18:08:27 +00:00
Mathias Vorreiter Pedersen	231e2a8df3	C++: Reduce fan-in for 'readStep'.	2022-11-21 17:07:29 +00:00
Erik Krogh Kristensen	af367a5fdf	Merge pull request #11348 from erik-krogh/cache-full-extractor ... Ruby: cache the entire extractor	2022-11-21 18:06:32 +01:00
erik-krogh	76ceb49841	re-introduce the paths requirements in the ruby workflows	2022-11-21 17:55:57 +01:00
Erik Krogh Kristensen	53ba22ab5c	simplify pack creation ... Co-authored-by: Arthur Baars <aibaars@github.com>	2022-11-21 17:55:57 +01:00
erik-krogh	3b7ce0680d	Ruby: build queries on an XL worker, and use all the threads	2022-11-21 17:55:57 +01:00
erik-krogh	999e8ed0d0	Ruby: remove the path on branch pushes, for caching	2022-11-21 17:55:57 +01:00
erik-krogh	b1db390200	Ruby: use compilation cache in the ruby-build workflow	2022-11-21 17:55:57 +01:00
erik-krogh	9c792902c7	Ruby: cache the entire extractor	2022-11-21 17:55:57 +01:00