Ian Lynagh
3a864d3de2
Merge pull request #17292 from igfoo/igfoo/open
...
Kotlin: Remove a redundant 'open'
2024-08-27 12:14:04 +01:00
Ian Lynagh
085bf2f662
Merge pull request #17293 from igfoo/igfoo/dtw
...
Kotlin: Restrict some TrapWriter types to DiagnosticTrapWriter
2024-08-27 12:13:59 +01:00
Michael Nebel
e81fdc951a
Merge pull request #17246 from michaelnebel/modelgendebug
...
C#/Java: Add some model generator summary debugging queries.
2024-08-26 16:13:03 +02:00
Michael Nebel
34d83a6b0d
C#/Java: Address review comments.
2024-08-26 15:02:27 +02:00
Ian Lynagh
6a7d8b5301
Kotlin: Restrict some TrapWriter types to DiagnosticTrapWriter
...
We never use the greater generality, so this makes it easier to see
what's happening.
2024-08-23 15:41:21 +01:00
Ian Lynagh
7d500cf58c
Kotlin: Remove a redundant 'open'
2024-08-23 15:08:10 +01:00
Asger F
9703f67794
Test output updates that only affect nodes/edges
2024-08-23 11:03:26 +02:00
Asger F
6bc8407bd6
Java: Update test output
2024-08-23 11:02:29 +02:00
Asger F
81239dcd95
Java: add test case
2024-08-22 11:26:05 +02:00
Asger F
43f54db4db
Merge pull request #17274 from asgerf/java/implicit-pending-intents-implicit-read
...
Java: Reveal false negative in test
2024-08-22 11:00:07 +02:00
Tom Hvitved
d41d7c8246
Merge pull request #17207 from hvitved/csharp/content-set
...
C#: Implement `ContentSet`
2024-08-22 10:55:11 +02:00
Anders Schack-Mulligen
d97a301fef
Merge pull request #17105 from aschackmull/dataflow/stage6
...
Dataflow: Refactor stage 6 to use shared stage code.
2024-08-22 09:46:49 +02:00
github-actions[bot]
0724fd7ce2
Post-release preparation for codeql-cli-2.18.3
2024-08-21 18:25:54 +00:00
github-actions[bot]
17cd9624fb
Release preparation for version 2.18.3
2024-08-21 17:13:52 +00:00
Chris Smowton
15989ce213
Merge pull request #14089 from am0o0/amammad-java-JWT
...
Java: JWT decoding without verification
2024-08-21 14:14:08 +01:00
Asger F
3aa32e4aff
Java: use MISSING inline annotation
2024-08-21 13:40:40 +02:00
Asger F
f7ea8a1563
Java: trivial result set re-order
2024-08-21 13:37:38 +02:00
Asger F
5751fc2d3a
Java: Reveal false negative in test
...
One of the sinks was flagged for the wrong reason in the test case.
The flow into the 'startActivities' sink isn't working properly, but this was not revealed by the test since an alternate, spurious path exists. The spurious path goes through the implicit read at the prior sink and takes a use-use step to the 'startActivities' sink. Swapping the order of the two sinks reveals the false negative.
2024-08-21 13:36:47 +02:00
Anders Schack-Mulligen
525b6f30e3
C++/C#/Java: Accept test changes.
2024-08-21 10:51:28 +02:00
am0o0
b001c24dfc
update tests to pass the github actions
2024-08-20 20:57:11 +02:00
Michael Nebel
fd311d5143
Java: Add some summary debugging queries.
2024-08-20 16:28:15 +02:00
Anders Schack-Mulligen
993bfee096
Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
...
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Chris Smowton
f0327732ef
Merge pull request #17247 from smowton/smowton/admin/add-spring-component-scan-test
...
Java: add a test exercising Spring component liveness detection
2024-08-20 12:56:26 +01:00
Cornelius Riemenschneider
932c07a0f4
Address review.
2024-08-20 11:46:28 +02:00
Anders Schack-Mulligen
8470e91c16
Legacy Dataflow: Sync.
2024-08-20 10:07:57 +02:00
Chris Smowton
80e03c3c51
Improve ql/doc style
2024-08-19 16:25:06 +01:00
Chris Smowton
27522a2781
Remove redundant imports
2024-08-19 16:23:06 +01:00
Cornelius Riemenschneider
33f87c0c46
Port linux/kotlin tests to pytest.
2024-08-19 11:33:25 +02:00
Cornelius Riemenschneider
ccd90f25ba
Port posix/kotlin tests to pytest.
2024-08-19 11:33:24 +02:00
Cornelius Riemenschneider
c2aff1ea97
Port all-platforms/kotlin tests to pytest.
2024-08-19 11:33:23 +02:00
Cornelius Riemenschneider
ed7f3305d9
Move legacy marker only to java tests.
2024-08-19 10:47:15 +02:00
Chris Smowton
9c0bdbb20a
Java: add a test exercising Spring component liveness detection
...
The existing Spring stubs are expanded sufficiently to support the needed annotations and a few referenced classes and exceptions.
2024-08-16 16:36:08 +01:00
am0o0
f4764378c9
update tests to contain the new source, delete query with local sources
2024-08-16 16:15:46 +02:00
am0o0
d88b310b0e
add getCredentials method of AuthenticationToken as a remote source
2024-08-16 15:41:19 +02:00
Anders Schack-Mulligen
3a9610795b
Merge pull request #16808 from JLLeitschuh/patch-8
...
Align Java CommandInjectionRuntimeExec.ql Severity
2024-08-16 15:14:48 +02:00
Chris Smowton
f7d8c210e5
Merge pull request #17239 from smowton/smowton/admin/camel-test
...
Java: add test for Apache Camel dead-code analysis
2024-08-16 11:00:30 +01:00
Rasmus Wriedt Larsen
c3d8efc43d
Merge branch 'main' into stdin3
2024-08-16 09:54:45 +02:00
Anders Schack-Mulligen
51c43a7440
Java: Accept expected changes.
2024-08-16 07:01:35 +02:00
Anders Schack-Mulligen
86708c9ff8
Dataflow: Fix missing subpaths due to type strengthening.
2024-08-15 18:57:10 +02:00
Chris Smowton
0b56bf98f3
Java: add test for Apache Camel dead-code analysis
...
This exercises code that detects Camel entry-points and marks them as live.
2024-08-15 17:26:38 +01:00
Anders Schack-Mulligen
e77c3dfda1
Java: Fix expected files following https://github.com/github/codeql/pull/17233 and https://github.com/github/codeql/pull/17224 .
2024-08-15 15:45:37 +02:00
Rasmus Wriedt Larsen
1e7eae58f4
Java: Add change-note
2024-08-15 15:45:20 +02:00
Rasmus Wriedt Larsen
fee38b3781
Java: Fixup test
2024-08-15 15:37:35 +02:00
Rasmus Wriedt Larsen
1e12c11adc
Java: Model System.in as stdin threat-model
2024-08-15 15:37:35 +02:00
Anders Schack-Mulligen
7d61d9282c
Merge pull request #17233 from aschackmull/dataflow/match-summarylabel
...
Dataflow: Fix missing join on summaryLabel.
2024-08-15 14:55:38 +02:00
Anders Schack-Mulligen
6f23e8dcf3
Merge pull request #17224 from aschackmull/java/inlineflow-pathgraph
...
Java: Add PathGraph to test output for default inline flow tests.
2024-08-15 13:35:24 +02:00
Anders Schack-Mulligen
a85f8a2fbd
Java/C#: Accept expected changes.
2024-08-15 13:24:31 +02:00
Paolo Tranquilli
f0de9f9276
Merge pull request #17232 from github/redsun82/kotlin
...
Kotlin: fix wrapper on windows and use `os.execv` on POSIX
2024-08-15 12:50:46 +02:00
Chris Smowton
3450e509fe
Merge pull request #17228 from smowton/smowton/admin/missing-change-notes
...
Java: add change notes for three recent buildless fixes
2024-08-15 10:56:22 +01:00
Michael Nebel
4b3cc5bd0e
Merge pull request #17219 from michaelnebel/shared/neutralsourcesink
...
C#/Java: Fix source- and sink callable provenance overlap.
2024-08-15 11:02:18 +02:00
