86 Commits

Author	SHA1	Message	Date
Mark Shannon	261cd36b8c	Merge pull request #781 from kevinbackhouse/HashedButNoHash ... Python: fix false positive result.	2019-01-18 21:56:12 +00:00
Kevin Backhouse	9e79e1bc8c	Simplify the logic with theTypeErrorType().	2019-01-18 16:33:48 +00:00
Taus	bcc65dbad3	Merge pull request #554 from markshannon/python-named-module-utility ... Python: named module utility	2019-01-18 16:01:36 +01:00
Taus	8d99186d74	Merge pull request #795 from markshannon/remove-builtin-class-test ... Python: Remove fragile and unnecessary test.	2019-01-18 15:17:39 +01:00
Taus	92d2e18bf2	Merge pull request #712 from markshannon/python-fix-odasa-7307 ... Python: Detect a wider range of generated files.	2019-01-18 14:38:08 +01:00
Mark Shannon	c1a549ddff	Python. Improve grammar in qldoc comment.	2019-01-18 11:49:59 +00:00
Kevin Backhouse	56efe3adb7	Fix false positive result.	2019-01-17 16:22:48 +00:00
Kevin Backhouse	5fc056beb3	Add regression test for false positive result.	2019-01-17 16:22:19 +00:00
Mark Shannon	801d8cb3a5	Python: Remove fragile and unnecessary test.	2019-01-17 12:31:19 +00:00
Taus Brock-Nannestad	e8c092ad72	Python: Support the dill pickling library.	2019-01-16 14:53:42 +01:00
Mark Shannon	65337ef835	Merge pull request #564 from taus-semmle/python-insecure-ssl-version ... Python: Check for insecure versions of SSL and TLS.	2019-01-16 12:32:30 +00:00
Mark Shannon	c9a929fb23	Python tests: Increase import depth to ensure sre_constants module is imported.	2019-01-14 11:18:36 +00:00
Mark Shannon	33a2315ba0	Python tests: Increase import depth to ensure sre_constants module is imported.	2019-01-11 12:15:56 +00:00
Taus Brock-Nannestad	9ac50186f6	Add a few more insecure versions	2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad	1af503ab84	Address documentation comments.	2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad	46973f4305	Support from ssl import PROTOCOL_....	2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad	e8a41f719c	Add documentation.	2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad	dfe3fc6d5c	Pass pyOpenSSL method as parameter instead of keyword argument.	2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad	d604f5c9c9	Fix insecure_version_name comments.	2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad	a893dca06e	Add support for ssl.SSLContext.	2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad	0a839f8468	Python: Check for insecure versions of SSL and TLS.	2019-01-07 15:24:15 +01:00
Mark Shannon	6b5ad0d928	Python: Detect a wider range of generated files.	2018-12-27 15:01:10 +00:00
Taus	cb93017d98	Merge pull request #606 from markshannon/python-fix-regex-fp ... Python: Fix off-by-one error in regex parsing.	2018-12-06 12:59:44 +01:00
Taus	08b1431fc5	Merge pull request #600 from markshannon/python-fix-performance-refinement-edge ... Python ESSA: Fix performance of PythonSsaSourceVariable.hasRefinementEdge()	2018-12-04 18:07:21 +01:00
Taus	8493518135	Merge pull request #599 from markshannon/python-fix-essa-nonlocal ... Python ESSA: Fix definition of ESSA non-local variables.	2018-12-04 17:06:30 +01:00
Taus	3b6c7d6f2e	Merge pull request #582 from markshannon/python-faster-points-to-2 ... Python points-to: Improve performance of subclass test predicates on large DBs	2018-12-04 16:51:21 +01:00
Taus	5c3ff8aadd	Merge pull request #604 from markshannon/python-faster-essa-computation ... Python : Speed up ESSA computation	2018-12-04 16:20:49 +01:00
Taus	a23f7a6b0e	Merge pull request #592 from markshannon/python-windows-import-root ... Python: Fix up computation of import root path	2018-12-04 11:11:59 +01:00
Mark Shannon	8cd497890a	Merge pull request #546 from adityasharad/python/vs-workspace-settings ... Python: Add QL for VS workspace settings file.	2018-12-04 10:00:09 +00:00
Mark Shannon	a5b79e92a5	Python: Fix off-by-one error in regex parsing.	2018-12-03 16:50:47 +00:00
Mark Shannon	68440f7f77	Python ESSA: Speed up ESSA computation by refactoring ADT to match class hierarchy making it more transparent to the optimizer.	2018-12-03 15:08:56 +00:00
Taus	76b1bbc56a	Merge pull request #565 from markshannon/python-analysis-queries-qhelp ... Python: Delete some misleading qhelp and rename a couple of queries.	2018-12-03 14:42:03 +01:00
Mark Shannon	d32e6b8501	Python tests: Make sure stdlib can be found.	2018-12-03 11:55:57 +00:00
Mark Shannon	fb90d2a5a6	Python points-to: Update test results for fixed ESSA computation.	2018-12-03 11:13:18 +00:00
Mark Shannon	08b99944b1	Python ESSA: Fix definition of Essa non-local variables.	2018-12-03 11:12:35 +00:00
Mark Shannon	8e6c16d59f	Python: Fix import root computation for windows and 3.7	2018-12-01 16:53:41 +00:00
Mark Shannon	f11b5ab42f	Python ESSA: Fix performance of PythonSsaSourceVariable.hasRefinementEdge()	2018-12-01 16:36:49 +00:00
Mark Shannon	9aa59fd419	Fix spelling.	2018-11-29 18:11:57 +00:00
Mark Shannon	931122971d	Python points-to: Improve performance by factoring out handling of tuples in class tests.	2018-11-29 16:27:50 +00:00
Mark Shannon	8414d46a87	Python: Fix accidentally introduced cartesian product.	2018-11-29 14:19:47 +00:00
Mark Shannon	a345727f71	Python fix up tags in qhelp.	2018-11-28 17:14:07 +00:00
Mark Shannon	b3eaa46f14	Python: Use consistent abbreviations in weak-crypto query message.	2018-11-28 16:58:22 +00:00
Mark Shannon	4f0a666a43	Python: Tweak name of new query and add change note.	2018-11-28 16:58:22 +00:00
Mark Shannon	3c4c8cf7d3	Python: Add qhelp for new query.	2018-11-28 16:57:34 +00:00
Mark Shannon	1065ad0ce7	Python: Weak crypto query.	2018-11-28 16:57:34 +00:00
Mark Shannon	2bf98b805d	Python: Delete some misleading qhelp and rename a couple of queries.	2018-11-28 16:53:38 +00:00
Mark Shannon	21246dcbf2	Python: clean up change notes and query help.	2018-11-28 15:02:47 +00:00
Mark Shannon	eefb45c94b	Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.	2018-11-28 10:46:44 +00:00
Mark Shannon	1080525d7d	Python: Add missing test stub.	2018-11-28 10:45:48 +00:00
Mark Shannon	243280dc00	Python: New query to check for use of jinja2 templates without auto-escaping.	2018-11-28 10:45:19 +00:00