34 Commits

Author	SHA1	Message	Date
Erik Krogh Kristensen	a49b99b18c	autoformat	2020-11-13 20:06:17 +01:00
Erik Krogh Kristensen	affb11b0e3	changes based on review	2020-11-13 19:46:37 +01:00
Erik Krogh Kristensen	2f4fcc2f5e	Apply suggestions from code review ... Co-authored-by: Asger F <asgerf@github.com>	2020-11-13 18:03:07 +01:00
Erik Krogh Kristensen	17a687b344	testing many possible intersections, instead of a single intersection	2020-11-08 23:24:36 +01:00
Erik Krogh Kristensen	34fd0d89f5	finding the minimum that is not an FP - instead of finding the minimum and then checking if it was an FP. And detecting more FPs by finding when a witness pass through the accept state	2020-11-08 23:24:27 +01:00
Erik Krogh Kristensen	ac514b1739	remove false positives where the analysis would wrongly conclude that the accept state could not be reached	2020-11-08 23:24:03 +01:00
Erik Krogh Kristensen	5f199e8b1a	improve performance by removing bindingset[char]	2020-11-08 23:24:03 +01:00
Erik Krogh Kristensen	d038e9c658	small performance improvements	2020-11-08 23:24:03 +01:00
Erik Krogh Kristensen	a5e75f53ff	add support for escape char classes inside char classes	2020-11-08 23:22:49 +01:00
Erik Krogh Kristensen	0063cb140c	add support for \W, \S, \D	2020-11-08 23:16:56 +01:00
Erik Krogh Kristensen	2dd8b6ffef	support \f and \v in the \s class	2020-11-08 23:16:56 +01:00
Erik Krogh Kristensen	68fe03060d	support \d \s and \w in ReDoS.ql	2020-11-08 23:16:56 +01:00
Erik Krogh Kristensen	fa54ad1a5e	refactor character class implementation in ReDoS.ql - preparing support for RegExpCharacterClassEscape	2020-11-08 23:16:55 +01:00
Erik Krogh Kristensen	a09ffd5cda	expand getAOverlapBetweenCharacterClasses to support overlap between more char classes	2020-11-08 23:16:37 +01:00
Erik Krogh Kristensen	4ede04f4d1	improve performance by pruning based on shared root	2020-11-08 23:16:37 +01:00
Erik Krogh Kristensen	82252c0f1c	detect redos between charclass and inverted charclass	2020-11-08 23:16:34 +01:00
Erik Krogh Kristensen	16473fc2a4	matching a inverted char class with a char	2020-11-06 10:18:57 +01:00
Erik Krogh Kristensen	804aaf36f0	support inverted char class and dot	2020-11-06 10:18:57 +01:00
Erik Krogh Kristensen	64d680e2d3	support that an inverted char class can intersect with itself	2020-11-06 10:18:57 +01:00
Erik Krogh Kristensen	321cf09bd8	add redos support for the simplest possible inverted char class	2020-11-06 10:18:57 +01:00
Erik Krogh Kristensen	d04f3df1cd	remove rendundant check	2020-11-06 10:18:57 +01:00
Erik Krogh Kristensen	b02004430c	prune results that end with newline, where the input cannot contain newlines	2020-11-03 14:48:39 +01:00
Asger Feldthaus	fefcf1a7a6	JS: Autoformat everything	2020-02-27 09:41:01 +00:00
Esben Sparre Andreasen	1b73cee692	JS: add js/exploitable-polynomial-redos	2020-02-27 08:42:43 +01:00
Asger F	9928762769	JS: Add RegExpAlwaysMatches query	2020-01-06 13:48:02 +00:00
Asger F	4680e3a89a	JS: Simplify charpred of Match	2019-11-15 09:27:20 +00:00
Asger F	c01005a610	JS: Remove outdated comment	2019-11-15 09:27:20 +00:00
Asger F	c21d095d38	JS: Restrict RegExp queries to actual regular expressions	2019-11-15 09:27:19 +00:00
Asger F	b8711fc642	JS: Extend RegExpTerm in ReDoS	2019-11-15 09:27:19 +00:00
Asger F	e0bdc777b9	JS: Make ReDoS check string-based regexes	2019-11-15 09:27:19 +00:00
Asger F	97e5da1046	JS: Update ReDoS query	2019-11-15 09:27:19 +00:00
Anders Schack-Mulligen	ca45fb5a60	JavaScript: Autoformat.	2019-09-06 09:04:51 +02:00
Max Schaefer	31bb39a810	JavaScript: Autoformat all QL files.	2019-01-07 10:15:45 +00:00
Pavel Avgustinov	b55526aa58	QL code and tests for C#/C++/JavaScript.	2018-08-02 17:53:23 +01:00