Rasmus Wriedt Larsen
|
be2acc00db
|
Python: Add test for tainted f-string
|
2020-08-24 17:14:51 +02:00 |
|
CodeQL CI
|
765c40ef03
|
Merge pull request #4019 from erik-krogh/asyncCalls
Approved by asgerf
|
2020-08-24 11:18:42 +01:00 |
|
Taus
|
b8d6f76749
|
Merge pull request #4056 from yoff/SharedDataflow_ParameterTests
Python: Shared dataflow, parameter routing tests
|
2020-08-24 11:36:30 +02:00 |
|
Erik Krogh Kristensen
|
65a1769d43
|
Merge branch 'main' into asyncCalls
|
2020-08-21 14:58:27 +02:00 |
|
Calum Grant
|
a93a84fb2e
|
Merge pull request #4065 from hvitved/csharp/dataflow-type-restriction
C#: Restrict `DataFlowType` to types belonging to `Node`s
|
2020-08-21 11:57:29 +01:00 |
|
yoff
|
d05954e5cc
|
Merge pull request #4109 from RasmusWL/python-basic-taint-tracking
Python: Basic taint tracking with shared library
|
2020-08-21 12:20:22 +02:00 |
|
Tom Hvitved
|
86b91cec8a
|
Merge pull request #4111 from tamasvajk/feature/nullability-extraction
C#: Fix nullability warning in Semmle.Extraction
|
2020-08-21 09:22:05 +02:00 |
|
Tom Hvitved
|
ea77828a6a
|
Merge pull request #4116 from hvitved/csharp/print-ast-order-top-level
C#: Order top-level elements by location in `PrintAst.qll`
|
2020-08-21 09:09:20 +02:00 |
|
Tom Hvitved
|
b8cde180b9
|
C#: Order top-level elements by location in PrintAst.qll
|
2020-08-21 06:17:37 +02:00 |
|
CodeQL CI
|
29183fa0a1
|
Merge pull request #4067 from erik-krogh/noBin
Approved by esbena
|
2020-08-20 23:07:02 +01:00 |
|
CodeQL CI
|
508ade29f4
|
Merge pull request #4106 from erik-krogh/depTracked
Approved by esbena
|
2020-08-20 21:23:24 +01:00 |
|
Tamas Vajk
|
b9e3b327d6
|
C#: Fix nullability warning in Semmle.Extraction
|
2020-08-20 16:33:02 +02:00 |
|
Erik Krogh Kristensen
|
cef681d009
|
bump extractor version (again)
|
2020-08-20 15:58:44 +02:00 |
|
Erik Krogh Kristensen
|
68f7942820
|
Merge branch 'main' into noBin
|
2020-08-20 15:58:15 +02:00 |
|
Jonas Jensen
|
d56a03389c
|
Merge pull request #4107 from geoffw0/vecmethods
C++: Initial models for std::vector
|
2020-08-20 15:53:35 +02:00 |
|
Erik Krogh Kristensen
|
fa8edeed6a
|
change StoredXss example to use TypeTracking
|
2020-08-20 15:05:38 +02:00 |
|
Erik Krogh Kristensen
|
906705f84c
|
add SourceNode example to the TrackedNode deprecation description
|
2020-08-20 15:01:40 +02:00 |
|
Rasmus Wriedt Larsen
|
7fb8e0e277
|
Python: Add basic shared taint tracking test
|
2020-08-20 14:49:17 +02:00 |
|
Rasmus Wriedt Larsen
|
0baac8fd54
|
Python: Adjust shared taint tracking skeleton
So it fits the setup from Java/Go, with AdditionalTaintStep class.
|
2020-08-20 14:49:09 +02:00 |
|
Geoffrey White
|
3d171f358a
|
Merge remote-tracking branch 'upstream/main' into vecmethods
|
2020-08-20 13:29:28 +01:00 |
|
Tamás Vajk
|
2a8ff8785a
|
C#: Add AST printing (#4038)
|
2020-08-20 14:24:43 +02:00 |
|
Geoffrey White
|
258b61c5f8
|
Update cpp/ql/src/semmle/code/cpp/models/implementations/StdContainer.qll
Co-authored-by: Jonas Jensen <jbj@github.com>
|
2020-08-20 12:53:23 +01:00 |
|
Geoffrey White
|
689c637d48
|
C++: Rename things.
|
2020-08-20 12:52:40 +01:00 |
|
Anders Schack-Mulligen
|
ec7a65777b
|
Merge pull request #3855 from JLLeitschuh/feat/JLL/jOOQ_SQL_injection
Add jOOQ methods as SQL Injection Sinks
|
2020-08-20 13:17:07 +02:00 |
|
Erik Krogh Kristensen
|
bf88c81f78
|
bump extractor version
|
2020-08-20 12:57:48 +02:00 |
|
Erik Krogh Kristensen
|
a347569385
|
inline StandardCharsets.UTF_8
|
2020-08-20 12:57:05 +02:00 |
|
Erik Krogh Kristensen
|
410ef8fe0e
|
exit early if the default encoding is not UTF-8
|
2020-08-20 12:50:43 +02:00 |
|
Erik Krogh Kristensen
|
fe41521e0c
|
add tutorial for how to get around TrackedNodes deprecation
|
2020-08-20 12:46:17 +02:00 |
|
Geoffrey White
|
61158e759b
|
C++: Improve StdContainerConstructor model.
|
2020-08-20 11:04:59 +01:00 |
|
Geoffrey White
|
acd1437103
|
C++: Change note.
|
2020-08-20 10:46:12 +01:00 |
|
Geoffrey White
|
f2ac4fa94a
|
C++: Autoformat.
|
2020-08-20 10:44:54 +01:00 |
|
Geoffrey White
|
cda9fd250b
|
C++: Model vector methods.
|
2020-08-20 10:30:01 +01:00 |
|
Geoffrey White
|
620126d38c
|
C++: Add vector taint cases to test.
|
2020-08-20 10:27:25 +01:00 |
|
Erik Krogh Kristensen
|
8f68f512df
|
deprecate TrackedNodes.qll
|
2020-08-20 11:26:22 +02:00 |
|
Geoffrey White
|
43c8efdf63
|
C++: Repair the range based for test.
|
2020-08-20 10:19:54 +01:00 |
|
CodeQL CI
|
6adedac337
|
Merge pull request #4096 from erik-krogh/qlMod
Approved by esbena
|
2020-08-20 10:05:30 +01:00 |
|
Geoffrey White
|
8afa92d881
|
C++: Add more detail to the vector class in the test stl.h.
|
2020-08-20 09:39:35 +01:00 |
|
Tom Hvitved
|
65b4d35add
|
Merge pull request #4055 from tamasvajk/feature/partial-methods
C#: Add body to partial methods
|
2020-08-20 10:14:56 +02:00 |
|
Tom Hvitved
|
6dc1244410
|
Merge pull request #4064 from hvitved/csharp/gvn-speedup
C#: Speed up `Implements.qll` and `Unification.qll`
|
2020-08-20 10:11:36 +02:00 |
|
Mathias Vorreiter Pedersen
|
aa522b54c1
|
Merge pull request #4098 from jbj/SimpleRangeAnalysis-mul-constant
C++: Support multiplication by constants in range analysis
|
2020-08-20 09:22:05 +02:00 |
|
Erik Krogh Kristensen
|
5b42e242af
|
add change note for supporting ".cjs" files
|
2020-08-20 09:18:26 +02:00 |
|
Jonas Jensen
|
b1c0e6f626
|
Merge remote-tracking branch 'upstream/main' into SimpleRangeAnalysis-mul-constant
|
2020-08-20 08:20:31 +02:00 |
|
Robert Marsh
|
a457d54ad1
|
Merge pull request #4078 from jbj/SimpleRangeAnalysis-AssignMulExpr
C++: Range analysis for unsigned AssignMulExpr
|
2020-08-19 14:42:04 -04:00 |
|
Jonas Jensen
|
b14bc42756
|
Merge pull request #4090 from geoffw0/strmethods
C++: Model taint through many more methods in std::string
|
2020-08-19 16:40:46 +02:00 |
|
Tom Hvitved
|
a23bb6d5ec
|
Merge pull request #4095 from hvitved/csharp/dataflow/ap5
C#: Increase `accessPathLimit` from 3 to 5
|
2020-08-19 16:12:22 +02:00 |
|
Jonas Jensen
|
21d16d13fc
|
Merge remote-tracking branch 'upstream/main' into SimpleRangeAnalysis-AssignMulExpr
|
2020-08-19 14:50:40 +02:00 |
|
Anders Schack-Mulligen
|
e7709f73e9
|
Merge pull request #4099 from hvitved/java/dataflow/unique-encl-callable
Java: Use `unique` aggregate in `Node::getEnclosingCallable()`
|
2020-08-19 13:30:01 +02:00 |
|
Jonas Jensen
|
83884c0dc5
|
Merge pull request #4089 from jbj/jbj/printFloat-precise
C++: Accept float.toString changes in tests
|
2020-08-19 12:58:27 +02:00 |
|
Erik Krogh Kristensen
|
3d5c1560e4
|
basic support for .cjs files
|
2020-08-19 10:53:57 +02:00 |
|
Erik Krogh Kristensen
|
103f739d16
|
add test for types of modules
|
2020-08-19 10:52:38 +02:00 |
|