Anders Schack-Mulligen
|
abad133ab5
|
Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow.
|
2022-08-10 15:02:56 +02:00 |
|
Anders Schack-Mulligen
|
cbd6d24b9c
|
Merge pull request #9963 from intrigus-lgtm/java/model-set-properties
Model `java.util.Properties.setProperty`
|
2022-08-10 14:51:00 +02:00 |
|
Chris Smowton
|
8c32758ae5
|
Merge pull request #9829 from smowton/smowton/fix/kotlin-underscore-parameter-names
Kotlin: Don't extract a name for a '_' parameter
|
2022-08-10 12:28:26 +01:00 |
|
Erik Krogh Kristensen
|
559ec7ba56
|
Merge branch 'main' into repeatedWord
|
2022-08-09 21:22:47 +02:00 |
|
Tony Torralba
|
7f5fe85e2e
|
Merge pull request #9975 from atorralba/atorralba/asynctask-improvs
Java: Improve AsyncTask data flow support
|
2022-08-09 17:10:09 +02:00 |
|
Ian Lynagh
|
b5d6258e54
|
Merge pull request #9809 from igfoo/igfoo/fakeLabel
Kotlin: Remove the last uses of fakeLabel
|
2022-08-08 11:54:53 +01:00 |
|
Anders Schack-Mulligen
|
aa3655678e
|
Merge pull request #9823 from aschackmull/dataflow/stage-module
Dataflow: Replace stage duplication with parameterised modules.
|
2022-08-08 10:56:32 +02:00 |
|
Tony Torralba
|
98b930cd67
|
Accept test changes in experimental query after AsyncTask improvements
|
2022-08-08 09:23:12 +02:00 |
|
Tony Torralba
|
03b854a1ed
|
Add test for initializer method
|
2022-08-05 15:29:17 +02:00 |
|
Joe Farebrother
|
dd83c17144
|
Use more precise control flow logic
|
2022-08-05 12:56:21 +01:00 |
|
Joe Farebrother
|
e9f9e681ef
|
Change man-in-the-middle back to machine-in-the-middle
(gender-neutral language)
This reverts commit d5ab330450d3f5c1d36d0d9b6a8f1dc32bc908e3.
|
2022-08-05 12:56:21 +01:00 |
|
Joe Farebrother
|
79b1f24133
|
Change machine-in-the-middle to man-in-the-middle
|
2022-08-05 12:56:20 +01:00 |
|
Joe Farebrother
|
04df556861
|
Add suggested reference
|
2022-08-05 12:56:20 +01:00 |
|
Joe Farebrother
|
abf894a64c
|
Fix typos
|
2022-08-05 12:56:20 +01:00 |
|
Joe Farebrother
|
03c2a0e818
|
Add missing qldoc
|
2022-08-05 12:56:20 +01:00 |
|
Joe Farebrother
|
0d09484efc
|
Add change note
|
2022-08-05 12:56:19 +01:00 |
|
Joe Farebrother
|
f8ccbcba70
|
Add qhelp
|
2022-08-05 12:56:19 +01:00 |
|
Joe Farebrother
|
a2245bb858
|
Fix test
|
2022-08-05 12:56:19 +01:00 |
|
Joe Farebrother
|
498ad230c2
|
Update stubs
|
2022-08-05 12:56:19 +01:00 |
|
Joe Farebrother
|
c4de158e0d
|
Add tests
|
2022-08-05 12:56:18 +01:00 |
|
Joe Farebrother
|
16e16f08dc
|
Add webview cert validation query
|
2022-08-05 12:56:18 +01:00 |
|
Tony Torralba
|
b75b073dae
|
Remove unused class member
|
2022-08-05 12:21:22 +02:00 |
|
Tony Torralba
|
9ee90f8022
|
Remove unnecessary import from test
|
2022-08-05 11:11:13 +02:00 |
|
Tony Torralba
|
792d34c3a1
|
Add change note
|
2022-08-05 11:10:09 +02:00 |
|
Anders Schack-Mulligen
|
3d47875b60
|
Dataflow: Generate shorter RA/DIL names.
|
2022-08-05 11:00:56 +02:00 |
|
Anders Schack-Mulligen
|
d3dcc3ce3a
|
Dataflow: Sync.
|
2022-08-05 11:00:56 +02:00 |
|
Anders Schack-Mulligen
|
09d0f8e0ce
|
Dataflow: Replace stage duplication with parameterised modules.
|
2022-08-05 11:00:56 +02:00 |
|
Tony Torralba
|
5ebce6ee4f
|
Improve AsyncTask data flow support
Model the life-cycle described here: https://developer.android.com/reference/android/os/AsyncTask\#the-4-steps
|
2022-08-05 10:29:49 +02:00 |
|
intrigus
|
b7d94906bf
|
Add change note
|
2022-08-04 16:21:55 +02:00 |
|
intrigus
|
88ded4679a
|
Accept test changes
|
2022-08-04 16:21:53 +02:00 |
|
intrigus
|
c867a1a146
|
Test setProperty/put with taint stored earlier
|
2022-08-04 16:21:51 +02:00 |
|
intrigus
|
0b7f0fbe54
|
Accept test changes
|
2022-08-04 16:21:50 +02:00 |
|
intrigus
|
55618adf6a
|
Model java.util.Properties.setProperty
|
2022-08-04 16:21:48 +02:00 |
|
Anders Schack-Mulligen
|
43d4324f65
|
Java: Improve performance of ConfusingOverloading.
|
2022-08-04 16:05:30 +02:00 |
|
Anders Schack-Mulligen
|
a5a58f46eb
|
Merge pull request #9945 from aschackmull/java/wrappedinvocation-joinorder
Java: Improve join-order.
|
2022-08-04 11:12:23 +02:00 |
|
Anders Schack-Mulligen
|
c2b99747d4
|
Merge pull request #9951 from aschackmull/java/notintersect-perf
Java: Improve join-order for `not haveIntersection`.
|
2022-08-04 11:08:02 +02:00 |
|
Chris Smowton
|
af274354a0
|
Merge pull request #9956 from github/smowton/feature/tainted-path-query-mad
Make java/path-injection recognise create-file MaD sinks
|
2022-08-04 08:59:59 +01:00 |
|
Chris Smowton
|
977823bd76
|
Create 2022-08-03-tainted-path-mad.md
|
2022-08-03 10:54:35 +01:00 |
|
Chris Smowton
|
84a4b6a866
|
Make reporting locations consistent with PathCreation; add test
|
2022-08-03 10:42:09 +01:00 |
|
Rasmus Wriedt Larsen
|
8fb85a98d8
|
Merge branch 'main' into post-release-prep/codeql-cli-2.10.2
|
2022-08-03 10:42:02 +02:00 |
|
Chris Smowton
|
83498f58db
|
Add missing import
|
2022-08-03 08:53:43 +01:00 |
|
Chris Smowton
|
81f3bcd802
|
Don't require a PathCreation for every tainted-path sink
|
2022-08-02 21:30:06 +01:00 |
|
Chris Smowton
|
c95f17fdf2
|
Make java/path-injection recognise create-file MaD sinks
|
2022-08-02 21:28:00 +01:00 |
|
Alex Ford
|
8e3548efb3
|
Merge branch 'main' into post-release-prep/codeql-cli-2.10.2
|
2022-08-02 20:29:26 +01:00 |
|
Anders Schack-Mulligen
|
aabdf84300
|
Java: Improve join-order for not haveIntersection.
|
2022-08-02 14:29:03 +02:00 |
|
Anders Schack-Mulligen
|
80bba605e3
|
Java: Fix join-order in SameNameAsSuper.
|
2022-08-02 12:49:21 +02:00 |
|
Anders Schack-Mulligen
|
cd356a5ac1
|
Java: Improve join-order.
|
2022-08-02 08:49:58 +02:00 |
|
Tony Torralba
|
593ce01362
|
Merge pull request #9908 from atorralba/atorralba/xml-inline-exp-test
Java: Add support for XML InlineExpectationsTest
|
2022-07-29 14:49:19 +02:00 |
|
Tony Torralba
|
ec03ebbbfc
|
Add spurious and missing test cases
|
2022-07-29 13:44:25 +02:00 |
|
Tony Torralba
|
6091f0dbce
|
Use camelCase for XML acronym
|
2022-07-29 13:44:11 +02:00 |
|