Anders Schack-Mulligen
cbb58d0041
Dataflow: Add a getLocation rootdef.
2024-08-26 15:05:30 +02:00
Asger F
592e2eafb6
Merge pull request #17262 from asgerf/shared/implicit-read
...
Shared: restrict flow after using implicit read
2024-08-26 11:48:50 +02:00
Tom Hvitved
e5d626f907
Data flow: Only recompute local big step in stage 6
2024-08-26 09:58:29 +02:00
Tom Hvitved
c92c96fa78
Data flow: Compute local big step relation per stage
2024-08-26 09:15:27 +02:00
Anders Schack-Mulligen
65189e09f5
Dataflow: Simplify using a SummaryCtx type.
2024-08-23 14:18:46 +02:00
Asger F
c3b36325b2
Shared: prevent use-use flow through implicit reads (part 1)
2024-08-23 11:02:28 +02:00
Michael Nebel
20d9fd11ac
Merge pull request #17288 from michaelnebel/shared/contentflow
...
Shared: ContentFlow.
2024-08-23 09:52:27 +02:00
Michael Nebel
19c2eb17c4
C#: Remove redundant imports.
2024-08-23 09:04:13 +02:00
Michael Nebel
e6424f0f45
Shared: Make ContentDataFlow reusable.
2024-08-22 15:45:58 +02:00
Michael Nebel
4cd34531c6
Shared: Add a copy of the existing C# Content Dataflow implementation.
2024-08-22 15:07:45 +02:00
github-actions[bot]
0724fd7ce2
Post-release preparation for codeql-cli-2.18.3
2024-08-21 18:25:54 +00:00
github-actions[bot]
17cd9624fb
Release preparation for version 2.18.3
2024-08-21 17:13:52 +00:00
Anders Schack-Mulligen
5fbdd83a23
Dataflow: Rename StagePathNode to PathNode.
2024-08-21 10:51:28 +02:00
Anders Schack-Mulligen
273c0bd121
Dataflow: Delete dead code.
2024-08-21 10:51:28 +02:00
Anders Schack-Mulligen
1787bcb05a
Dataflow: Replace PathNode with Stage implementation.
2024-08-21 10:51:24 +02:00
Anders Schack-Mulligen
74739bedfc
Dataflow: Add Stage 6 instantiation.
2024-08-21 10:44:46 +02:00
Anders Schack-Mulligen
831a66d812
Dataflow: Add getANonHiddenSuccessor to StagePathNodeImpl.
2024-08-21 10:44:45 +02:00
Anders Schack-Mulligen
e594e7283d
Dataflow: Check stateful in/out-barriers in each stage.
2024-08-21 10:44:45 +02:00
Anders Schack-Mulligen
c2b25c7f2b
Dataflow: Check clearsContent on store targets in StagePathGraph.
2024-08-21 10:44:44 +02:00
Anders Schack-Mulligen
b8d0b691da
Dataflow: Introduce sink projection and add successor as member predicate.
2024-08-21 10:44:44 +02:00
Anders Schack-Mulligen
bc1dd45d4f
Dataflow: Make private
2024-08-21 10:44:43 +02:00
Anders Schack-Mulligen
9429e5ccba
Dataflow: Update StagePathNode.toString.
2024-08-21 10:44:43 +02:00
Anders Schack-Mulligen
81a815c343
Dataflow: Add StagePathNode.getState.
2024-08-21 10:44:43 +02:00
Anders Schack-Mulligen
bdcc5e7b67
Dataflow: Refactor getLocation
2024-08-21 10:44:42 +02:00
Anders Schack-Mulligen
bc0ae4cd1e
Dataflow: Replace StagePathNode.getNode with getNodeEx.
2024-08-21 10:44:42 +02:00
Anders Schack-Mulligen
9bd3f3dee0
Dataflow: Rename StagePathNode to StagePathNodeImpl.
2024-08-21 10:44:41 +02:00
Anders Schack-Mulligen
993bfee096
Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
...
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Anders Schack-Mulligen
e73fc94354
Dataflow: Add change note.
2024-08-20 10:12:01 +02:00
Anders Schack-Mulligen
4afdb0927e
Dataflow: Remove src/sink grouping feature.
2024-08-20 10:07:36 +02:00
Rasmus Wriedt Larsen
766dcc4dd6
ThreatModels: Expose knownThreatModel
...
Without, it's impossible to write test showing what threat-models are
active by default... unless I provide a hardcoded list in the test
itself, which is not any fun.
2024-08-19 10:54:47 +02:00
Rasmus Wriedt Larsen
c3d8efc43d
Merge branch 'main' into stdin3
2024-08-16 09:54:45 +02:00
Anders Schack-Mulligen
86708c9ff8
Dataflow: Fix missing subpaths due to type strengthening.
2024-08-15 18:57:10 +02:00
Rasmus Wriedt Larsen
157d0b7f37
ThreatModels: Add stdin kind
...
None of the current local subgroups precisely captures stdin, so
although it's much like both commandargs and file, a separate kind seems
better.
2024-08-15 15:36:28 +02:00
Anders Schack-Mulligen
7d61d9282c
Merge pull request #17233 from aschackmull/dataflow/match-summarylabel
...
Dataflow: Fix missing join on summaryLabel.
2024-08-15 14:55:38 +02:00
Anders Schack-Mulligen
2c591f5420
Dataflow: Fix missing join on summaryLabel.
2024-08-15 11:05:08 +02:00
Michael Nebel
f0817dc07c
C#/Java: Use a parameterized module for making the source and sink callable classes.
2024-08-14 09:50:38 +02:00
Anders Schack-Mulligen
a782952969
Merge pull request #17202 from aschackmull/dataflow/stagepathgraph-strengthen
...
Dataflow: bugfix add missing typeStrengthen in StagePathGraph throughflow.
2024-08-13 14:59:47 +02:00
Tom Hvitved
aeabee3e34
Merge pull request #17179 from hvitved/shared/pretty-print-models
...
Go/Java: Share more `PrettyPrintModels.ql` logic
2024-08-13 14:15:40 +02:00
Tom Hvitved
51077ce2e7
Merge pull request #17173 from hvitved/shared/inline-flow-provenance
...
Shared: Apply `ShowProvenance` in `InlineFlowTest.qll`
2024-08-13 14:15:08 +02:00
Tom Hvitved
f83df76928
Shared: Apply ShowProvenance in InlineFlowTest.qll
2024-08-13 13:34:43 +02:00
Tom Hvitved
d5a0df3f87
Go/Java: Share more PrettyPrintModels.ql logic
2024-08-13 12:48:22 +02:00
Tom Hvitved
fbcb4498fe
Merge pull request #16817 from hvitved/csharp/multi-body-dataflow-dispatch
...
C#: Restrict multi-body dataflow dispatch based on file-system distance
2024-08-13 12:15:22 +02:00
Owen Mansel-Chan
0dfdee775b
Merge pull request #17177 from owen-mc/go/mad/convert-sink-3
...
Go: convert regex-use, url-redirection sinks to use models-as-data
2024-08-12 16:21:48 +01:00
Anders Schack-Mulligen
757fdf567d
Dataflow: bugfix add missing typeStrengthen in StagePathGraph throughflow.
2024-08-12 15:53:58 +02:00
Anders Schack-Mulligen
3d5d270dfb
Dataflow: Reduce duplication, define PathGraphSig only once.
2024-08-12 15:22:17 +02:00
Michael Nebel
4a5c9f0ec4
Merge pull request #17007 from michaelnebel/shared/neutralimplementation
...
C#/Java/Go: Neutrals are split into separate classes.
2024-08-12 13:58:12 +02:00
Anders Schack-Mulligen
3c6459e65a
Merge pull request #17029 from aschackmull/dataflow/stagepathgraph-provenance
...
Dataflow: Add provenance to StagePathGraph.
2024-08-12 13:30:03 +02:00
Anders Schack-Mulligen
f28f42bcba
Merge pull request #17049 from aschackmull/dataflow/bugfix-flowfeature-sinkctx
...
Dataflow: Fix bug causing spurious flow for FeatureHasSinkCallContext
2024-08-12 13:29:42 +02:00
Owen Mansel-Chan
2fe74a8554
Update model validation
2024-08-11 00:29:58 +01:00
github-actions[bot]
cc6d87c276
Post-release preparation for codeql-cli-2.18.2
2024-08-08 12:56:21 +00:00
