hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-03 04:40:14 +02:00
Code Issues Packages Projects Releases Wiki Activity
46,643 Commits 1,773 Branches 168 Tags
abcc09cbb8325aaefdc452ef4372625c7730c50f
Commit Graph

46643 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tiferet
abcc09cbb8 ATM model for a DCA experiment 
New features: Shipping model. 9 new features, remove the old ones that have been replaced by new ones. The codeql PR has been rebased on top of main. #3 (with a fixed package version)

https://ml.azure.com/experiments/id/85e6e910-7301-4441-9079-01a1e42fd45b/runs/classification_1662479795_acd730eb?wsid=/subscriptions/91095667-e119-4555-acea-1826488492f0/resourceGroups/atm-codeml/providers/Microsoft.MachineLearningServices/workspaces/ATM-workspace&tid=398a6654-997b-47e9-b12b-9515b896b4de
 2022-11-22 14:35:56 +01:00
Jean Helie
8334618545 Merge branch 'main' into jhelie/add-xss-through-dom 2022-11-10 17:13:30 +01:00
Tom Hvitved
bda4b52395 Merge pull request #11206 from hvitved/ruby/self-toplevel-def 
Ruby: Fix SSA entry definitions for `self` in top-level
 2022-11-10 17:01:59 +01:00
Jeroen Ketema
f7c55a3258 Merge pull request #11202 from jketema/fix-accept-prototype 
C++: Fix the `accept` prototype in the dataflow taint tests
 2022-11-10 17:00:07 +01:00
Jean Helie
227d6fffa7 Merge branch 'jhelie/add-xss-through-dom' of github.com:github/codeql into jhelie/add-xss-through-dom 2022-11-10 16:51:52 +01:00
Jean Helie
38430c57a2 ATM: update query sink mapping 2022-11-10 16:51:40 +01:00
Paolo Tranquilli
30bbae3c22 Merge pull request #11209 from github/redsun82/swift-drop-impossible-nodes 
Swift: drop impossible nodes from schema
 2022-11-10 16:47:23 +01:00
Michael Nebel
2a26c8f340 Merge pull request #10628 from michaelnebel/java/typebasedmodels 
Java: Type based summary models.
 2022-11-10 16:34:52 +01:00
Jean Helie
98379d3c12 Merge branch 'main' into jhelie/add-xss-through-dom 2022-11-10 16:13:36 +01:00
Jeroen Ketema
62f5d10d03 C++: Fix localTaint expected results 2022-11-10 16:08:07 +01:00
Ian Lynagh
a2c0d47e9c Merge pull request #11199 from igfoo/igfoo/kotlin_default 
Kotlin: Update docs and tests
 2022-11-10 14:53:06 +00:00
Karim Ali
b209cac2e2 Merge pull request #11063 from karimhamdanali/swift-pbe-constant-password 
Swift: detect the use of constant passwords for password-based encryption
 2022-11-10 16:36:27 +02:00
Karim Ali
e18b2cfa39 Merge pull request #11084 from karimhamdanali/swift-static-iv 
Swift: detect the use of static initialization vectors
 2022-11-10 16:35:21 +02:00
Paolo Tranquilli
5b9e89acd3 Swift: implement ignoring of removed classes 2022-11-10 15:26:55 +01:00
Paolo Tranquilli
e26e0ec809 Swift: remove imposible nodes from schema 
We don't expect these AST types to really appear during an extraction
run, even in an unsuccessful compilation.
 2022-11-10 15:26:55 +01:00
Tom Hvitved
e18442069b Ruby: Fix SSA entry definitions for self in top-level 2022-11-10 15:08:17 +01:00
Ian Lynagh
3d17c8f1ab Merge pull request #11200 from igfoo/igfoo/extractor-info 
Java/Kotlin: Add ExtractorInformation query
 2022-11-10 13:51:13 +00:00
Paolo Tranquilli
7f36f65ab0 Merge pull request #11190 from github/redsun82/swift-exprs 
Swift: extract some more `Expr`
 2022-11-10 14:36:42 +01:00
Jean Helie
01163bc618 ATM: add XSSThroughDOM boosted query 2022-11-10 14:29:55 +01:00
Jeroen Ketema
62a0bcddd9 C++: Fix the accept prototype in the dataflow taint tests 2022-11-10 14:23:26 +01:00
Erik Krogh Kristensen
5d2ab8adfb Merge pull request #11191 from erik-krogh/arrJoin 
RB: add join(" ") calls as a sink for rb/shell-command-constructed-from-input
 2022-11-10 14:20:42 +01:00
Erik Krogh Kristensen
54958fd502 Merge pull request #11201 from erik-krogh/no-set-output 
QL-for-QL: don't use the deprecated set-output feature in github-actions
 2022-11-10 14:07:40 +01:00
Michael Nebel
8041542f92 Java: Make sure that IterableTypes has a unique iterator. 2022-11-10 14:06:18 +01:00
Karim Ali
7d473fb265 address docs review 2022-11-10 15:01:05 +02:00
Michael Nebel
2f12ccc803 C#: Delete incorrect comment. 2022-11-10 13:59:50 +01:00
erik-krogh
a2ce764c82 update codeql-action version used in QL-for-QL, as the old version still used the deprecated set-output feature 2022-11-10 13:58:07 +01:00
Michael Nebel
9b5318876d Java: Improve tests and allow spurious models. 2022-11-10 13:57:44 +01:00
Michael Nebel
91aa75da0e Java: Rename IterableType to IterableClass. 2022-11-10 13:57:44 +01:00
Michael Nebel
ce8ab0e66e Simplify test predicate implementation. 
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
 2022-11-10 13:57:44 +01:00
Michael Nebel
0e7179ca85 Simplify functional predicate implementation. 
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
 2022-11-10 13:57:44 +01:00
Michael Nebel
9d34ce9776 Adjust the co-variant claim comment. 
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
 2022-11-10 13:57:44 +01:00
Michael Nebel
decfcdd82a Improve IterableType implementation. 
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
 2022-11-10 13:57:43 +01:00
Michael Nebel
d6ae1ef6f2 Java/C#: Move C# internal implementation for model generation. 2022-11-10 13:57:43 +01:00
Michael Nebel
4cb82ad5a7 Java: Explicit import of needed classes from stream and some improvements to comments. 2022-11-10 13:57:43 +01:00
Michael Nebel
62603dd2bc Java: Inline expectations for type based model test case. 2022-11-10 13:57:43 +01:00
Michael Nebel
2011685e89 Java: Move internal model generator code to another folder. 2022-11-10 13:57:43 +01:00
Michael Nebel
ceef9cf276 C#: Fix spelling error in ql doc. 2022-11-10 13:57:43 +01:00
Michael Nebel
5b9ae5e6db Java: Update ql doc comments. 2022-11-10 13:57:43 +01:00
Michael Nebel
8352925257 Java: Minor re-factorings. 2022-11-10 13:57:43 +01:00
Michael Nebel
9f783b018d Java: Type based summaries are now also for Java. 2022-11-10 13:57:43 +01:00
Michael Nebel
8a0f00a5c9 Java: Update expected test output. 2022-11-10 13:57:43 +01:00
Michael Nebel
0c09f78142 Java: Comment in method for converting stream to Array. 2022-11-10 13:57:43 +01:00
Michael Nebel
84743ec87d Java: Make support for array parameter and return values. 2022-11-10 13:57:43 +01:00
Michael Nebel
5b65f5c185 Java: Change test implementation to avoid failing CFG dead end consistency test. 2022-11-10 13:57:43 +01:00
Michael Nebel
8c1de5958b Java: Make better QL docs and add some missing 'this'. 2022-11-10 13:57:43 +01:00
Michael Nebel
b80c533fb0 Java: Update expected test output. 2022-11-10 13:57:43 +01:00
Michael Nebel
937404892f Java: Add further examples that are now supported. 2022-11-10 13:57:42 +01:00
Michael Nebel
39ee1e28cf Java: Get the correct type of the instantiated iterator type. 2022-11-10 13:57:42 +01:00
Michael Nebel
dc79ed8192 Java: Update expected test output. 2022-11-10 13:57:42 +01:00
Michael Nebel
d1b8bef248 Java: Add more stream functions. Comment methods out, where we are not happy with the generated result. 2022-11-10 13:57:42 +01:00