Rasmus Wriedt Larsen
2b997ec94a
Python: Add Python 3 Imports tests from internal repo
2020-02-24 15:36:45 +01:00
Asger Feldthaus
6360073da4
JS: Rephrase change note
2020-02-24 14:35:17 +00:00
Rasmus Wriedt Larsen
9d629aef95
Python: Highlight py/use-of-input is for Python 2
2020-02-24 15:13:19 +01:00
Erik Krogh Kristensen
b20e8520f6
add default message if not pretty printed call can be created
2020-02-24 14:52:08 +01:00
semmle-qlci
317356e591
Merge pull request #2898 from asger-semmle/js/prototype-pollution-isobject-sanitizers
...
Approved by erik-krogh
2020-02-24 13:35:32 +00:00
Erik Krogh Kristensen
b72404dc99
add change note
2020-02-24 14:07:49 +01:00
Erik Krogh Kristensen
a779ae58a8
add qhelp
2020-02-24 14:03:41 +01:00
Jonas Jensen
2d9df70abc
Merge pull request #2887 from MathiasVP/fix-ir-gen-switch
...
C++: Fix IR generation for switch statements
2020-02-24 13:29:27 +01:00
Erik Krogh Kristensen
fb94af9764
remove the last dependency on PrettyPrinting
2020-02-24 13:18:15 +01:00
Erik Krogh Kristensen
051de247b0
change regexpMatch to regexpFind
2020-02-24 13:11:30 +01:00
Erik Krogh Kristensen
a768e937f0
complete qldoc
2020-02-24 13:08:50 +01:00
Jonas Jensen
ae68878476
C++: Cache DefaultTaintTracking
...
This should speed up the overall suite, where `DefaultTaintTracking` is
used in several queries.
2020-02-24 13:03:34 +01:00
Erik Krogh Kristensen
473787a426
refactor the getOptionsArg predicate into the SystemCommandExecution class
2020-02-24 12:59:20 +01:00
Asger Feldthaus
01309d7c2e
TS: Add test for named re-export and exportsAs
2020-02-24 11:40:28 +00:00
Asger Feldthaus
78954489fb
TS: Fix expected output
2020-02-24 11:40:28 +00:00
Asger Feldthaus
4e1bd9056c
TS: Fix javadoc
2020-02-24 11:40:28 +00:00
Asger Feldthaus
05d9e64dab
TS: Add change note
2020-02-24 11:40:27 +00:00
Asger Feldthaus
18974bad1c
TS: Add upgrade script and stats
2020-02-24 11:40:27 +00:00
Asger Feldthaus
47673c6e21
TS: Disable export analysis for type-only exports
2020-02-24 11:40:27 +00:00
Asger Feldthaus
16c909b433
TS: Add test case for import type * as ns
2020-02-24 11:40:27 +00:00
Asger Feldthaus
260b243c28
TS: Add test case to DeclBeforeUse
2020-02-24 11:40:27 +00:00
Asger Feldthaus
8d58aad0f2
TS: Support type-only import/export
2020-02-24 11:40:27 +00:00
Asger Feldthaus
0351f0b775
TS: Add test and documentation for private fields
2020-02-24 11:40:27 +00:00
Asger Feldthaus
8531c113a1
TS: Fix imports
2020-02-24 11:40:27 +00:00
Asger Feldthaus
9b52acc62a
TS: Handle export * as ns
2020-02-24 11:40:27 +00:00
Asger Feldthaus
7f939fe1e4
TS: Update to TypeScript 3.8.2
2020-02-24 11:40:27 +00:00
semmle-qlci
94aa77748d
Merge pull request #2810 from erik-krogh/CVE74
...
Approved by asgerf
2020-02-24 11:32:42 +00:00
Asger Feldthaus
f923b24bc5
JS: Fix test
2020-02-24 11:19:23 +00:00
Erik Krogh Kristensen
75c1852ee4
doc changes from review
...
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com >
2020-02-24 11:58:59 +01:00
Mathias Vorreiter Pedersen
ed430ce855
C++/C#: Bind parameter in new case.
2020-02-24 09:12:14 +01:00
Mathias Vorreiter Pedersen
af364e66fc
C++/C#: Move sanity check inside InstructionSanity module and accept tests
2020-02-23 20:53:49 +01:00
Dave Bartolomeo
170331b105
C++: Better fix for void type on buffer access
...
Fixes issue https://github.com/github/codeql-c-analysis-team/issues/20
This change undoes the workaround in https://github.com/Semmle/ql/pull/2736 , and replaces it with a fix for the underlying cause. The problem was that the IR construction code for side effects incorrectly assumed that `BufferAccessOpcode` included `SizedBufferAccessOpcode`. I think that was actually a perfectly reasonable assumption to make, so I changed the `Opcode` hierarchy to make it true.
2020-02-21 18:46:32 -07:00
Taus
285be2893c
Merge pull request #2893 from BekaValentine/python-objectapi-to-valueapi-unnecessarylambda
...
Python: ObjectAPI to ValueAPI: UnnecessaryLambda
2020-02-21 22:23:02 +01:00
Taus
e444fb8bfa
Merge pull request #2818 from BekaValentine/objectapi-to-valueapi-hashedbutnohash
...
Python: ObjectAPI to ValueAPI: HashedButNoHash
2020-02-21 22:19:58 +01:00
Rebecca Valentine
14273fc677
Adds missing result to expected file
2020-02-21 11:25:03 -08:00
Rasmus Wriedt Larsen
bfa7553095
Python: urlsplit sanitizer handles in [KNOWN_VALUE]
2020-02-21 16:03:29 +01:00
Rasmus Wriedt Larsen
798db91f71
Python: Add more urlsplit tests
2020-02-21 15:51:33 +01:00
Erik Krogh Kristensen
44db0f4e5d
better printing of the options arg
2020-02-21 15:39:49 +01:00
Asger Feldthaus
d1df251b92
JS: Proto pollution: Add is-plain-object sanitizer
2020-02-21 14:38:33 +00:00
Erik Krogh Kristensen
90e5671d98
Merge branch 'master' of git.semmle.com:Semmle/ql into CVE481
2020-02-21 15:25:07 +01:00
Rasmus Wriedt Larsen
31ff652cb3
Python: Make Sanitizer available for urlsplit taint
...
It isn't used by default, it has to *actively* be enabled.
2020-02-21 15:18:53 +01:00
Mathias Vorreiter Pedersen
d9753b0ca5
C++/C#: Accept test output after adding sanity check to Instruction.qll
2020-02-21 15:09:53 +01:00
Asger Feldthaus
1ee112a341
JS: Add change note
2020-02-21 13:55:27 +00:00
Asger Feldthaus
a673539c98
JS: Update expected output
2020-02-21 13:51:23 +00:00
Asger Feldthaus
b780bc4d59
JS: Also track into callbacks
2020-02-21 13:51:22 +00:00
Asger Feldthaus
e8e649102f
JS: Also propagate out of returns
2020-02-21 13:51:22 +00:00
Asger Feldthaus
8c36b999cc
JS: Track flow into calls to bound functions
2020-02-21 13:51:20 +00:00
semmle-qlci
ee5cf95f5b
Merge pull request #2892 from asger-semmle/js/field-methods
...
Approved by esbena
2020-02-21 13:49:42 +00:00
semmle-qlci
e163d8d8c8
Merge pull request #2796 from asger-semmle/js/partial-invoke-receiver
...
Approved by esbena
2020-02-21 13:48:43 +00:00
Erik Krogh Kristensen
75410e5760
big refactor of UselessUseOfCal
2020-02-21 14:26:42 +01:00
