Ed Minnix
c1ee2dce61
Refactor CWE-078/ExecTaintedLocal
2023-03-20 12:26:54 -04:00
Edward Minnix III
ac58299d9e
Merge pull request #12541 from egregius313/egregius313/refactor-queries-to-new-dataflow-api
...
Java: Refactor more queries to the new DataFlow module API
2023-03-20 12:24:26 -04:00
Tony Torralba
fa60fa0ae2
Merge pull request #12572 from github/java/update-mad-decls-after-triage-2023-03-17T15-01-35
...
Java: Update MaD Declarations after Triage
2023-03-20 17:02:27 +01:00
Anders Schack-Mulligen
3876e4335f
Merge pull request #12420 from kaspersv/kaspersv/dataflow-remove-alias-preds
...
Dataflow: Remove revFlowAlias and revFlowApAlias predicates
2023-03-20 16:30:15 +01:00
Michael Nebel
17b3383043
Merge pull request #12556 from michaelnebel/java/argumentthis
...
Java: Argument[-1] -> Argument[this]
2023-03-20 15:59:59 +01:00
Erik Krogh Kristensen
a9d40d39d9
Merge pull request #12550 from erik-krogh/useNumberUtil
...
Java/Python: use Number.qll to parse hex numbers in regex parsing
2023-03-20 15:50:31 +01:00
Stephan Brandauer
39726a54ec
fix suggestion
2023-03-20 14:12:46 +01:00
Kasper Svendsen
1d2f1b6ae6
Address comments
2023-03-20 13:34:14 +01:00
Ed Minnix
83b0d073f0
Fix typo in QLDoc
2023-03-20 08:11:01 -04:00
Ed Minnix
1c661fd3ac
Add missing QLDocs
2023-03-20 08:10:07 -04:00
Kasper Svendsen
e0e3a1d621
Dataflow: remove revFlowApAlias trick
2023-03-20 13:04:13 +01:00
Ed Minnix
84fd5f7ee0
Fix naming of ZipSlip configuration
2023-03-20 07:55:23 -04:00
Ed Minnix
60a4a79537
Make the Config module of public Flow modules public
...
This is to make things easier for the CodeML/ATM team once these
configurations are moved from `src/` to `lib/`.
2023-03-20 07:47:55 -04:00
Edward Minnix III
1c06afffe5
Merge pull request #12578 from egregius313/egregius313/conform-dataflow-configs-to-config-naming-convention
...
Conform dataflow config modules to follow `*Config` naming convention
2023-03-20 07:25:10 -04:00
Tony Torralba
27fc14236f
Add change note
2023-03-20 10:48:56 +01:00
Tony Torralba
bff8bbfe33
Apply suggestions from code review
2023-03-20 10:43:46 +01:00
Michael Nebel
01ade878ea
Java: Update test comments to use this instead of -1.
2023-03-20 10:14:20 +01:00
Michael Nebel
ba711ab849
Java: Update expected test-output (different sorting).
2023-03-20 10:14:20 +01:00
Michael Nebel
ae12510d8d
Java: Add change-note.
2023-03-20 10:14:20 +01:00
Michael Nebel
9039a468cb
Java: Update models that uses -1 in a range.
2023-03-20 10:14:20 +01:00
Michael Nebel
e86f1e4961
Java: Replace Argument[-1] with Argument[this].
2023-03-20 10:14:20 +01:00
Michael Nebel
0ec56203f9
Java: Introduce index validation.
2023-03-20 09:38:40 +01:00
Michael Nebel
9a3c2d3fbe
Java: Update summary parsing to use this instead of -1 and adjust the model generator.
2023-03-20 09:38:40 +01:00
Michael Nebel
abd9f673e1
Java: Update the java internal documentation for models.
2023-03-20 09:38:39 +01:00
Kasper Svendsen
9630feb5e4
Dataflow: Remove revFlowAlias trick
2023-03-20 09:04:35 +01:00
github-actions[bot]
0d36a5a733
Add changed framework coverage reports
2023-03-20 00:17:11 +00:00
Ed Minnix
c852d3a541
Rename configurations from "Conf" to "Config"
2023-03-19 17:55:53 -04:00
Ed Minnix
2d5944fb0e
Refactor DataFlow configurations to use "Config" naming convention
2023-03-19 17:44:07 -04:00
Ed Minnix
7eb3fd2ff7
Conform queries to Config naming convention
2023-03-17 15:17:18 -04:00
Ed Minnix
d317de14c9
XXE Configuration Deprecation messages
2023-03-17 15:17:18 -04:00
Ed Minnix
310af99843
Refactor Security.CWE.CWE-807.TaintedPermissionsCheck
2023-03-17 15:17:18 -04:00
Ed Minnix
a9561a97c3
Refactor Security.CWE.CWE-643.XPathInjection
2023-03-17 15:17:18 -04:00
Ed Minnix
271d50ba99
Refactor Security.CWE.CWE-611 Xxe queries
2023-03-17 15:17:18 -04:00
Ed Minnix
80012b190d
Refactor Security.CWE.CWE-601.UrlRedirect
2023-03-17 15:17:18 -04:00
Ed Minnix
481d1f9b15
Refactor Security.CWE.CWE-297.UnsafeHostnameVerification
2023-03-17 15:17:18 -04:00
Ed Minnix
7bd7ecd9e6
Refactor Security.CWE.CWE-190 Arithmetic queries
2023-03-17 15:17:18 -04:00
Ed Minnix
4a202b430f
Security.CWE.CWE-200.AndroidWebViewSettingsAllowsContentAccess
2023-03-17 15:17:18 -04:00
Ed Minnix
d34dbbc96f
Refactor Security.CWE.CWE-134.ExternallyControlledFormatString
2023-03-17 15:17:18 -04:00
Ed Minnix
ac223ea57f
Refactor Security.CWE.CWE-094.InsecureBeanValidation
2023-03-17 15:17:18 -04:00
Ed Minnix
7aecefc4aa
Refactor Security.CWE.CWE-090.LdapInjectionLib
2023-03-17 15:17:18 -04:00
Ed Minnix
07fdcf2d04
Refactor Security.CWE.CWE-022.ZipSlip
2023-03-17 15:17:18 -04:00
Ed Minnix
e60e1a2ba9
Refactor Security.CWE.CWE-022.TaintedPathLocal
2023-03-17 15:17:18 -04:00
Stephan Brandauer
dce81cf0ae
Merge pull request #12463 from github/java/update-mad-decls-after-triage-2023-03-09T10-41-58
...
Java: Add MaD declarations after triage
2023-03-17 17:02:42 +01:00
Stephan Brandauer
8f565f5023
Update MaD Declarations after Triage
2023-03-17 16:01:36 +01:00
Ian Lynagh
b8fb4b9b0f
Merge pull request #12521 from igfoo/igfoo/printast_sig
...
Java: PrintAst: Improve the ranking of callables
2023-03-17 11:43:40 +00:00
Ian Lynagh
f9bb0df6a2
Kotlin: Update expected PrintAst output
2023-03-16 15:20:07 +00:00
Ian Lynagh
13c2ef8c20
Java: PrintAst: Improve the ranking or callables
...
We now look not only at how many parameters each callable has, but what
its full signature is. This allows us to give a consistent order to
Test(Throwable) { ... }
Test(String) { ... }
2023-03-16 15:20:07 +00:00
erik-krogh
880632f536
use Number.qll to parse hex numbers in regex parsing for Python/Java
2023-03-16 14:25:53 +01:00
Michael Nebel
2e86bbd6cd
Java: Introduce helper predicate to avoid empty predicate in IPA branch.
2023-03-16 14:11:53 +01:00
Tom Hvitved
9f798902bd
Data flow: Add consistency check for DataFlowCall::getEnclosingCallable
2023-03-16 08:40:53 +01:00
