Commit Graph

1244 Commits

Author SHA1 Message Date
Max Schaefer
a441bfb751 JavaScript: Add a convenience method to AMDModuleDefinition. 2018-11-14 11:36:40 +00:00
semmle-qlci
b130335adb Merge pull request #398 from aschackmull/java/autoformat
Approved by yh-semmle
2018-11-01 16:57:30 +00:00
Anders Schack-Mulligen
41c89475fe Java: Rerun autoformat. 2018-11-01 17:01:12 +01:00
semmle-qlci
08833465a0 Merge pull request #386 from xiemaisi/js/lodash_partial
Approved by esben-semmle
2018-11-01 09:44:14 +00:00
semmle-qlci
86b3f0156b Merge pull request #387 from xiemaisi/js/amd-fixes
Approved by esben-semmle
2018-11-01 09:42:17 +00:00
semmle-qlci
a22aa3524e Merge pull request #388 from asger-semmle/revert-useless-conditional
Approved by esben-semmle
2018-11-01 09:23:19 +00:00
Jonas Jensen
ea601b2dc0 Merge pull request #352 from dave-bartolomeo/dave/Operands
C++: Operands as IPA types
2018-11-01 10:12:38 +01:00
semmle-qlci
fa81084d79 Merge pull request #330 from aschackmull/java/zipslip
Approved by yh-semmle
2018-10-31 14:40:43 +00:00
Max Schaefer
3d2a27b039 JavaScript: Make a useful member predicate public. 2018-10-31 06:46:09 -04:00
semmle-qlci
f00863fb58 Merge pull request #383 from esben-semmle/js/unused-eval-variable
Approved by xiemaisi
2018-10-31 10:42:55 +00:00
Asger F
2c11844c5b Revert "Merge pull request #380 from asger-semmle/generalize-useless-conditional"
This reverts commit 28f3b686a7, reversing
changes made to dc3c5a684c.
2018-10-31 10:38:38 +00:00
Anders Schack-Mulligen
c3f71c2d42 Java: Change main ZipSlip location to the source. 2018-10-31 11:38:28 +01:00
Anders Schack-Mulligen
36f41a3e16 Java: Fix performance issue, and add Path.resolve as taint step. 2018-10-31 11:38:27 +01:00
Anders Schack-Mulligen
4953e4923a Java: Add test for sanitization using toAbsolutePath(). 2018-10-31 11:38:27 +01:00
Anders Schack-Mulligen
bf6b7c4734 Java: Add ZipSlip query. 2018-10-31 11:38:27 +01:00
Max Schaefer
c75d785684 JavaScript: Fix modelling of _.partial.
Like `Function.prototype.bind` (but unlike `ramda.partial`) it takes the curried arguments as rest arguments, not as an array;
cf. https://lodash.com/docs/4.17.10#partial and https://underscorejs.org/#partial.
2018-10-31 06:31:59 -04:00
semmle-qlci
28f3b686a7 Merge pull request #380 from asger-semmle/generalize-useless-conditional
Approved by esben-semmle
2018-10-31 07:31:06 +00:00
Robert Marsh
dc3c5a684c Merge pull request #272 from Semmle/rdmarsh/cpp/memset-decltype-changenote
C++/Doc: change note for PR #269
2018-10-30 09:53:44 -07:00
Asger F
1568d5dadd JS: add change note 2018-10-30 14:25:05 +00:00
Asger F
44d10cb74c JS: add test cases 2018-10-30 14:24:33 +00:00
Asger F
7e5e5aea11 JS: use guard nodes instead of synactic isConditional check 2018-10-30 14:22:31 +00:00
Jonas Jensen
784b2749e6 Merge branch 'master' into rdmarsh/cpp/memset-decltype-changenote 2018-10-30 14:05:26 +01:00
Arthur Baars
336f605153 Merge pull request #384 from adityasharad/merge/1.18-master-301018
Merge rc/1.18 into master.
2018-10-30 13:09:19 +01:00
Esben Sparre Andreasen
eb7add6f15 JS: change note for js/unused-local-variable eval whitelisting 2018-10-30 13:08:24 +01:00
Esben Sparre Andreasen
74642b9b81 JS: whitelist js/unused-local-variable near direct eval calls 2018-10-30 13:08:24 +01:00
Esben Sparre Andreasen
ce3b4a6400 JS: add additional js/unused-local-variable tests 2018-10-30 13:07:23 +01:00
Aditya Sharad
256b829201 Merge rc/1.18 into master. 2018-10-30 11:21:50 +00:00
semmle-qlci
8b866ade0e Merge pull request #373 from asger-semmle/jsx-factory-import
Approved by xiemaisi
2018-10-30 10:35:49 +00:00
semmle-qlci
1509752df6 Merge pull request #345 from esben-semmle/js/intro-getUnderlying
Approved by xiemaisi
2018-10-30 10:34:00 +00:00
Geoffrey White
e609a95f30 Merge pull request #357 from jbj/cpp-codeowners
C++: Add C++ analysis team to CODEOWNERS
2018-10-30 10:21:10 +00:00
semmle-qlci
79794612fe Merge pull request #379 from hvitved/csharp/assert-forward
Approved by calumgrant
2018-10-30 09:16:20 +00:00
Robert Marsh
fda75abcd7 Merge pull request #381 from geoffw0/comments
CPP: Fix false positive in EmptyBlock.ql
2018-10-29 15:35:08 -07:00
Arthur Baars
778a484ce0 Merge pull request #382 from adityasharad/version/1.18.1-release
Version: Bump to 1.18.1 release.
v1.18.1
2018-10-29 21:30:54 +01:00
Aditya Sharad
5e7b7818df Version: Bump to 1.18.1 release. 2018-10-29 18:02:58 +00:00
semmle-qlci
a4371ca824 Merge pull request #338 from geoffw0/hresult
Approved by dave-bartolomeo
2018-10-29 17:04:54 +00:00
Geoffrey White
e7f2d7fb45 CPP: Change note. 2018-10-29 16:54:31 +00:00
Geoffrey White
fc6b791f58 CPP: Speed it up. 2018-10-29 16:52:44 +00:00
Geoffrey White
55465c3eae CPP: Add some comments to the QL. 2018-10-29 16:39:49 +00:00
Geoffrey White
3ccbeb0c65 CPP: Fix issue. 2018-10-29 16:34:57 +00:00
Geoffrey White
630233fc3e CPP: Additional test cases. 2018-10-29 16:34:43 +00:00
Tom Hvitved
cddc519546 C#: Improve performance in ForwarderAssertMethod 2018-10-29 15:49:42 +01:00
semmle-qlci
7b84f5b1fd Merge pull request #372 from aschackmull/java/rangeanalysis-array-phinodes
Approved by yh-semmle
2018-10-29 13:02:58 +00:00
semmle-qlci
7d37cf4bb3 Merge pull request #374 from jbj/range-analysis-rounding
Approved by kevinbackhouse
2018-10-29 10:28:15 +00:00
Tom Hvitved
3f6fb0f573 Merge pull request #364 from calumgrant/cs/extractor/fix-violations
C#: Remove results from cs/local-shadows-member
2018-10-29 11:25:23 +01:00
semmle-qlci
72012a93cb Merge pull request #375 from esben-semmle/js/limit-directive-sizes
Approved by xiemaisi
2018-10-29 09:59:03 +00:00
Esben Sparre Andreasen
c9890fee1e JS: address review comments 2018-10-29 09:22:53 +01:00
Esben Sparre Andreasen
90c77134af JS: make use of getUnderlyingValue in js/useless-assignment-to-local 2018-10-29 09:22:53 +01:00
Esben Sparre Andreasen
ec1722c4db JS: add utility SyntacticConstants::isNullOrUndefined 2018-10-29 09:22:53 +01:00
Esben Sparre Andreasen
7c7cd7c213 JS: make use of getUnderlyingValue 2018-10-29 09:22:53 +01:00
Esben Sparre Andreasen
376245da06 JS: introduce Expr::getUnderlyingReference 2018-10-29 09:22:53 +01:00