Ed Minnix
958c6ff289
Remove credential-other
2023-10-25 14:31:53 -04:00
Ed Minnix
4aec302fb7
Create new sink kinds
2023-10-25 14:31:53 -04:00
Anders Schack-Mulligen
283d6efdf8
Rangeanalysis/Java/C++: Address some ql4ql findings.
2023-10-25 14:06:35 +02:00
Anders Schack-Mulligen
c1c4a5bfcf
Rangeanalysis: Copy qldoc and simplification from Java.
2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen
cd44d67529
Rangeanalysis: Add temporary Java compatibility flag.
2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen
06fe10bbe9
Rangeanalysis: Bugfix division with float representation.
2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen
232c147f6b
Rangeanalysis: Port join-order fix from Java version.
2023-10-25 11:17:02 +02:00
Anders Schack-Mulligen
38274db205
Rangeanalysis: Parameterise library.
2023-10-25 11:17:01 +02:00
Anders Schack-Mulligen
169ba03778
Rangeanalysis: Copy C++ version verbatim.
2023-10-25 11:17:01 +02:00
Anders Schack-Mulligen
aed830cf1b
Rangeanalysis: Make new qlpack
2023-10-25 11:17:01 +02:00
Dave Bartolomeo
33f10d8d19
Better handling of all threat model without too many binding sets
2023-10-24 13:59:15 -04:00
Dave Bartolomeo
5fd56ce866
Alternate threat model implementation
2023-10-24 13:12:37 -04:00
Joe Farebrother
3f11d83b7b
Merge pull request #14500 from joefarebrother/shared-filepath-normalize
...
Shared: Add library for filepath normalization
2023-10-23 16:09:44 +01:00
Dave Bartolomeo
15e9838f16
Add a readme file
2023-10-19 17:27:21 -04:00
Dave Bartolomeo
c268163804
warnOnImplicitThis
2023-10-19 17:18:47 -04:00
Dave Bartolomeo
910b2a98f1
Merge remote-tracking branch 'origin/main' into dbartol/threat-models
2023-10-19 17:07:38 -04:00
Dave Bartolomeo
bd7de83aab
Use extension packs for threat models
2023-10-19 17:07:26 -04:00
github-actions[bot]
8dcd8b9e5b
Post-release preparation for codeql-cli-2.15.1
2023-10-17 20:24:00 +00:00
Joe Farebrother
aa418dc7d0
Add more line breaks in qldoc
2023-10-17 12:51:22 +01:00
github-actions[bot]
3b3c036626
Release preparation for version 2.15.1
2023-10-16 17:49:39 +00:00
Joe Farebrother
05162c68ec
Fix typo
2023-10-16 13:43:06 +01:00
Joe Farebrother
aade79f723
Improve qldoc and fix changenote
2023-10-16 13:02:28 +01:00
Joe Farebrother
9097d93ac7
Add shared library for filepath normalization
2023-10-13 17:07:47 +01:00
erik-krogh
fa1e8ee426
add getACodepoint to the shared Strings library, and use it in NfaUtils
2023-10-12 13:38:19 +02:00
erik-krogh
116025c569
use the new codePointAt and codePointCount methods instead of regex hacks
2023-10-12 13:38:19 +02:00
Henry Mercer
1a370bfbbe
Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0
...
Post-release preparation for codeql-cli-2.15.0
2023-10-11 17:39:04 +01:00
github-actions[bot]
ae6af17c74
Post-release preparation for codeql-cli-2.15.0
2023-10-11 14:19:20 +00:00
Erik Krogh Kristensen
625e889c62
Merge pull request #14339 from erik-krogh/range-printing
...
JS/PY/RB/Java: escape unicode chars in overly-large-range
2023-10-09 14:22:38 +02:00
Edward Minnix III
8e653d01a8
Merge pull request #14127 from egregius313/egregius313/java/mad/localuserinput
...
Java: Convert implementations of `LocalUserInput` to Models-as-Data
2023-10-04 12:55:44 -04:00
github-actions[bot]
9fe993bec3
Release preparation for version 2.15.0
2023-10-04 14:15:27 +00:00
Ed Minnix
e122d81336
Add new source kinds for threat modeling
2023-10-03 22:29:00 -04:00
Henry Mercer
da92da2204
Bump minor versions of packs we regularly release
2023-10-03 16:31:23 +01:00
Henry Mercer
f3847b3f51
Merge branch 'main' into henrymercer/rc-3.11-mergeback
2023-10-03 16:30:23 +01:00
Tom Hvitved
2684a22484
Merge pull request #14255 from hvitved/dataflow/perf-improvements
...
Data flow: Performance improvements
2023-10-02 16:37:24 +02:00
Tom Hvitved
4fa93a077c
Address review comments
2023-10-02 09:03:12 +02:00
erik-krogh
5d4b542995
escape unicode chars in overly-large-range
2023-09-28 20:16:09 +02:00
Asger F
0d96ed8aee
Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers
...
Shared: add in/out barriers with flow state
2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen
80f00bcb0b
FileSystem: Improve regex by only matching once instead of 3x.
2023-09-28 08:58:55 +02:00
Anders Schack-Mulligen
cfd08f23a5
FileSystem: Fix qldoc.
2023-09-28 08:58:55 +02:00
Asger F
ba1f8766aa
Shared: update PartialPathNode accordingly
2023-09-27 14:38:28 +02:00
Asger F
6792592a15
Shared: add late checks for stateful in/out barriers
2023-09-27 14:38:28 +02:00
Taus
ff35f9fb8c
Shared: Clean up NodeInfo in shared extractor
...
I was perusing the shared extractor the other day, when I came across
the `NodeInfo` struct. I noticed that the `fields` and `subtypes` fields
on this struct had two seemingly identical ways of expressing the same
thing: `None` and `Some(empty)` (where `empty` is respectively the empty
map and the empty vector). As far as I can tell, there's no semantic
difference in either case, so we can just elide the option type entirely
and use the empty value directly. This has the nice side-effect of
cleaning up some of the other code.
2023-09-27 12:29:07 +00:00
Tom Hvitved
e7a3dc83bc
Data flow: Performance improvements
2023-09-26 20:42:03 +02:00
Asger F
6e869452b5
Shared: remove pragma[inline] implied by bindingset
2023-09-26 15:42:24 +02:00
Asger F
c7e892fa8e
Shared: change note
2023-09-26 15:24:29 +02:00
Asger F
cfed7e9b6c
Shared: add in/out barriers with flow state
2023-09-25 09:58:49 +02:00
Anders Schack-Mulligen
aa2c7a79d6
Dataflow: Add bindingset
2023-09-25 08:55:09 +02:00
Anders Schack-Mulligen
66da997b7b
Dataflow: Make use of defaults for language-specific hooks.
2023-09-22 14:54:22 +02:00
Anders Schack-Mulligen
7e04ac55b7
Merge pull request #14268 from aschackmull/java/xmlparsers-typetrack
...
Java/Dataflow: Add new light-weight data flow api and use it in XmlParsers
2023-09-21 13:33:21 +02:00
Anders Schack-Mulligen
13f7daf71e
Merge pull request #13982 from aschackmull/dataflow/typeflow-calledge-pruning
...
Dataflow: Add type-based call-edge pruning.
2023-09-21 13:33:08 +02:00
