Mathias Vorreiter Pedersen
|
ff53e53e8c
|
Merge pull request #12236 from MathiasVP/language-specific-field-flow-branch-limit-term
Dataflow: Add a language specific term to `join` and `branch`
|
2023-03-06 16:59:09 +00:00 |
|
Mathias Vorreiter Pedersen
|
92ad099c1b
|
DataFlow: Remove bindingsets, remove the call column, and swap parameter and argument columns.
|
2023-03-06 13:47:59 +00:00 |
|
Mathias Vorreiter Pedersen
|
3bf28cc752
|
DataFlow: Sync identical files.
|
2023-03-06 13:46:21 +00:00 |
|
Mathias Vorreiter Pedersen
|
9647b6a3f5
|
Swift: Add stub.
|
2023-03-06 13:45:04 +00:00 |
|
Geoffrey White
|
56b6441ef5
|
Merge pull request #12391 from geoffw0/ptrout
Swift: Permit data flow out through pointer arguments
|
2023-03-06 13:37:22 +00:00 |
|
Anders Schack-Mulligen
|
5c7f2ac7f7
|
Merge pull request #12186 from aschackmull/dataflow/refactor-configuration
Data flow: Refactor configuration
|
2023-03-06 13:38:59 +01:00 |
|
Anders Schack-Mulligen
|
557cb17f4d
|
Dataflow: Minor perf fix for single config wrapper.
|
2023-03-06 10:24:33 +01:00 |
|
Geoffrey White
|
6f120a66d0
|
Merge pull request #12368 from geoffw0/taintarith3
Swift: Fill some gaps in arithmetic / bitwise operations modelling
|
2023-03-03 18:20:54 +00:00 |
|
Geoffrey White
|
9aaf30691c
|
Merge pull request #12307 from geoffw0/stringconflationtaint
Swift: Update swift/string-length-conflation to taint tracking
|
2023-03-03 17:27:15 +00:00 |
|
Geoffrey White
|
c29dcefcf2
|
Swift: Fix .expected file. Locations had changed after the formatting fix.
|
2023-03-03 17:24:07 +00:00 |
|
Geoffrey White
|
395bf675fe
|
Swift: Make the test work on Linux.
|
2023-03-03 17:14:57 +00:00 |
|
Geoffrey White
|
2d889304bb
|
Swift: Some cases in the SqlInjection test are fixed by this.
|
2023-03-03 16:49:13 +00:00 |
|
Geoffrey White
|
b2bcb2d378
|
Swift: Fix formatting.
|
2023-03-03 16:32:21 +00:00 |
|
Geoffrey White
|
6e3040987a
|
Swift: Autoformat.
|
2023-03-03 16:24:28 +00:00 |
|
Geoffrey White
|
234f17b578
|
Swift: Use PointerType in data flow's 'modifiable' predicate.
|
2023-03-03 16:23:49 +00:00 |
|
Geoffrey White
|
3249cee1c9
|
Swift: Add an overall PointerType.
|
2023-03-03 16:23:46 +00:00 |
|
Geoffrey White
|
589e0af20a
|
Swift: Test for pointer types.
|
2023-03-03 16:23:29 +00:00 |
|
Geoffrey White
|
9423c21d46
|
Swift: Add simple model for pointer types.
|
2023-03-03 16:23:27 +00:00 |
|
Geoffrey White
|
9f86bcb1b8
|
Swift: Proof of concept fix.
|
2023-03-03 15:04:47 +00:00 |
|
Geoffrey White
|
15227d3c09
|
Swift: Add tests where a user-defined (non-modelled) function taints the pointee of a pointer argument.
|
2023-03-03 15:00:22 +00:00 |
|
Anders Schack-Mulligen
|
0addcfa7c5
|
Dataflow: Fix some perf issues.
|
2023-03-03 11:45:32 +01:00 |
|
Geoffrey White
|
27ec36298f
|
Swift: Understand binary pointwise operations.
|
2023-03-02 12:42:34 +00:00 |
|
Geoffrey White
|
ec2c58b416
|
Swift: Understand overflow binary bitwise operations.
|
2023-03-02 12:11:25 +00:00 |
|
Geoffrey White
|
1206b73d87
|
Swift: Understand overflow binary arithmetic operations.
|
2023-03-02 12:11:15 +00:00 |
|
Geoffrey White
|
53f52df809
|
Swift: Add taint test cases for overflow, bitwise and pointwise arithmetic operations.
|
2023-03-02 11:41:31 +00:00 |
|
Geoffrey White
|
c42add2191
|
Swift: Add test cases for overflow and pointwise binary arithmetic operations.
|
2023-03-02 11:28:59 +00:00 |
|
Geoffrey White
|
730532f96a
|
Swift: Add some (limited) test coverage for NSString <-> Data conversion.
|
2023-03-02 10:33:57 +00:00 |
|
Geoffrey White
|
1332309f59
|
Swift: Add some (limited) test coverage for String <-> NSString conversions.
|
2023-03-02 10:33:57 +00:00 |
|
Geoffrey White
|
8e069b7686
|
Swift: Split the taint flow test.
|
2023-03-01 20:45:46 +00:00 |
|
Geoffrey White
|
bf6f6eec34
|
Merge pull request #12225 from geoffw0/nsstring
Swift: Taint models for NSString
|
2023-03-01 16:30:06 +00:00 |
|
Tony Torralba
|
59bd1e5ab1
|
Merge pull request #12228 from github/java/mad-decls-triage-request-2276
Java: Update MaD sink decls after triage
|
2023-03-01 17:08:38 +01:00 |
|
Geoffrey White
|
f8079056ec
|
Swift: Fix test on Linux.
|
2023-03-01 15:47:30 +00:00 |
|
Geoffrey White
|
b6db0de437
|
Swift: Add inline expectation results.
|
2023-03-01 09:26:30 +00:00 |
|
Geoffrey White
|
228c0e221d
|
Merge branch 'main' into nsstring
|
2023-03-01 09:12:36 +00:00 |
|
Geoffrey White
|
11e0efee68
|
Merge pull request #12308 from geoffw0/taintplusequals2
Swift: Model assignment operators (+= etc)
|
2023-03-01 09:02:29 +00:00 |
|
Geoffrey White
|
5110cf1e02
|
Swift: Convert some fiddly GRDB database sinks to CSV.
|
2023-02-27 23:31:48 +00:00 |
|
Geoffrey White
|
f289811473
|
Swift: Fix and autoformat.
|
2023-02-27 23:01:05 +00:00 |
|
Geoffrey White
|
ea4c2e4321
|
Swift: Add CSV extension points.
|
2023-02-27 23:01:05 +00:00 |
|
Geoffrey White
|
c533334470
|
Swift: Implementation classes should be private.
|
2023-02-27 23:01:04 +00:00 |
|
Geoffrey White
|
c21ec1c3f5
|
Swift: Standardize the taint sources, sinks, sanitizers.
|
2023-02-27 23:01:04 +00:00 |
|
Geoffrey White
|
6928e62d8b
|
Swift: Split the three sensitive exprs queries into separate QL and QLL files.
|
2023-02-27 23:01:04 +00:00 |
|
Geoffrey White
|
bb55456885
|
Merge branch 'main' into taintplusequals2
|
2023-02-27 22:33:26 +00:00 |
|
Geoffrey White
|
36a33bc718
|
Swift: Delete file that was resurrected by the merge.
|
2023-02-27 17:33:21 +00:00 |
|
Geoffrey White
|
296093ded6
|
Merge branch 'main' into nsstring
|
2023-02-27 17:26:57 +00:00 |
|
Anders Schack-Mulligen
|
bf650c755c
|
Dataflow: Sync changes to all languages.
|
2023-02-27 14:30:05 +01:00 |
|
Geoffrey White
|
8ef6521cc9
|
Swift: Undo toString changes.
|
2023-02-27 12:01:02 +00:00 |
|
Paolo Tranquilli
|
feb4e60c4b
|
Swift: make all ql generation language agnostic
|
2023-02-27 09:46:48 +01:00 |
|
Geoffrey White
|
e71c7e7842
|
Swift: Autoformat.
|
2023-02-24 19:09:14 +00:00 |
|
Geoffrey White
|
a5943603ea
|
Swift: 'Any' -> 'An' (make QL-for-QL happy)
|
2023-02-24 19:08:11 +00:00 |
|
Geoffrey White
|
1a7e7481b2
|
Swift: Add flow thtaint flow through assignments other than =.
|
2023-02-23 16:25:32 +00:00 |
|