Kasper Svendsen
ab797065ab
Go: Enable implicit this warnings for remaining packs
2023-06-27 11:49:37 +02:00
Owen Mansel-Chan
b3a19ef7b2
Merge pull request #13461 from owen-mc/go/show-functionmodel-steps-to-path-summaries
...
Go: show FunctionModel steps in path summaries
2023-06-22 10:46:12 +01:00
Jeroen Ketema
277dbdf410
Merge pull request #13498 from jketema/inline-4
...
Rework more inline expectation tests to use the parameterized module
2023-06-22 10:01:07 +02:00
Henry Mercer
5afdaf8fe1
Merge pull request #13525 from github/rc/3.10
...
Merge `rc/3.10` back to `main`
2023-06-21 17:13:36 +01:00
Jami
5259a6ecfc
Merge pull request #13324 from jcogs33/jcogs33/shared-sink-kind-validation
...
Shared: share MaD kind validation across languages
2023-06-20 11:56:12 -04:00
Owen Mansel-Chan
0baf78f8fa
Add change note
2023-06-20 14:33:29 +01:00
Owen Mansel-Chan
cdc1c2c1aa
Merge pull request #13454 from owen-mc/go/add-mad-content-for-pointer-content
...
Go: Add models-as-data content for pointer content
2023-06-20 14:26:07 +01:00
Owen Mansel-Chan
c0fea85380
Accept test changes
2023-06-20 13:25:49 +01:00
Owen Mansel-Chan
cc320c5e9c
Never skip functionmodel inputs and outputs in path summaries
2023-06-20 13:25:47 +01:00
Owen Mansel-Chan
d7c97f8759
Merge pull request #13455 from owen-mc/dataflow/add-flowCheckNodeSpecific
...
Dataflow: add language-specific hook for breaking up big step relation
2023-06-20 13:24:26 +01:00
github-actions[bot]
18b678e69e
Post-release preparation for codeql-cli-2.13.4
2023-06-20 10:20:05 +00:00
Owen Mansel-Chan
04ff89e1fe
Update access path documentation
2023-06-20 11:05:05 +01:00
Owen Mansel-Chan
732b14ee38
Update pretty printing predicates
2023-06-20 11:04:03 +01:00
Owen Mansel-Chan
a01169eec2
add "Dereference" content for PointerContent
2023-06-20 10:49:37 +01:00
Owen Mansel-Chan
d28c4203db
Merge pull request #13453 from owen-mc/go/test-mad-pointer-content
...
Go: Add failing tests for MaD with pointer content
2023-06-20 09:55:06 +01:00
Jeroen Ketema
d6d21e3928
Go: Update remaining inline expectation tests to use the paramterized module
2023-06-20 10:15:46 +02:00
Jeroen Ketema
9c774ac97f
Merge pull request #13426 from jketema/inline-3
...
Update inline flow tests to use parameterized module
2023-06-19 17:39:29 +02:00
Jeroen Ketema
6a84e6cbfd
Add the merged PathGraph to all copies of the InlineFlowTest library
2023-06-19 10:28:10 +02:00
Tony Torralba
8f6d2ed2f9
Adjust ZipSlip query description according to review suggestions.
2023-06-19 10:27:41 +02:00
Tony Torralba
3c4d938cf1
Apply code review suggestions.
...
Co-authored-by: Asger F <asgerf@github.com >
2023-06-19 10:20:19 +02:00
Tony Torralba
433fc680ec
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2023-06-19 10:17:40 +02:00
Tony Torralba
c97868f774
Add change notes
2023-06-16 09:01:02 +02:00
Tony Torralba
3e96fe60c5
Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query
...
All filesystem operations, not just writes, with paths built from untrusted archive entry names are dangerous
2023-06-16 08:52:44 +02:00
Jeroen Ketema
eb62df6ece
Go: Rewrite InlineFlowTest as a parameterized module
2023-06-15 10:51:29 +02:00
Owen Mansel-Chan
74b39b42a1
Accept test changes
2023-06-14 15:47:25 +01:00
Owen Mansel-Chan
3ff6d033d3
Rename to neverSkipInPathGraph
2023-06-14 15:29:54 +01:00
Owen Mansel-Chan
5f72ce0935
Add stub implementations of flowCheckNodeSpecific
2023-06-14 14:46:35 +01:00
Owen Mansel-Chan
dd57d9fd55
Add flowCheckNodeSpecific
...
This allows individual languages to specify `FlowCheckNode`s, which
break up the big step relation and make sure that those nodes appear in
path summaries.
2023-06-14 14:27:58 +01:00
Owen Mansel-Chan
d071b463a3
Add failing tests for MaD with pointer content
2023-06-14 14:14:37 +01:00
Jami
35591113c2
Merge branch 'main' into jcogs33/shared-sink-kind-validation
2023-06-14 08:06:34 -04:00
Michael Nebel
afec9b05e9
Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor
...
C#: Use synthetic global in the EntityFramework code instead of jump steps.
2023-06-14 13:47:56 +02:00
Anders Schack-Mulligen
1a4fca334f
Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor
...
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
2023-06-14 09:38:36 +02:00
Anders Schack-Mulligen
2d616d494e
C#/Ruby: Add fields as per review comments.
2023-06-13 11:26:30 +02:00
Jeroen Ketema
d035491c6f
Go: Remove commented out code from test
2023-06-13 10:13:42 +02:00
Jeroen Ketema
c3ba206b6a
Merge pull request #13346 from jketema/inline-2
...
Update inline expectation tests to use parameterized module
2023-06-13 10:10:55 +02:00
Jami Cogswell
9abe3e3da4
Shared: use a module as input to 'KindValidation'
2023-06-09 14:35:37 -04:00
Anders Schack-Mulligen
5062442982
Go/Python/Ruby/Swift: Add stub.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
98f51d7f29
Dataflow: Sync.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
5eb278095c
Go: Fix tests.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
6020e4d0e3
C#/Go/Python/Ruby/Swift: Fix some more references.
2023-06-09 15:30:38 +02:00
Anders Schack-Mulligen
e6e4cef35e
Go: Adjust to FlowSummaryImpl changes.
2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen
2cc5bde925
Dataflow: Sync.
2023-06-09 15:27:17 +02:00
Jeroen Ketema
97c4f497bc
Go: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:41:21 +02:00
Anders Schack-Mulligen
d230509905
Dataflow: Address review comments.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
4399138c82
Dataflow: Fix QL4QL alert.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
53f2b8aab0
Dataflow: Sync.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
fd832416d8
Dataflow: Add empty type strengthening predicate for languages without type pruning.
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
e8cea79f1d
Dataflow: Sync.
2023-06-09 08:37:35 +02:00
Jami Cogswell
da58b2afc8
Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'
2023-06-08 20:05:27 -04:00
github-actions[bot]
e4be303a23
Release preparation for version 2.13.4
2023-06-08 19:57:37 +00:00
