Anders Schack-Mulligen
8c23e21073
Dataflow: Cache compatibleTypes.
2024-06-24 13:35:48 +02:00
Owen Mansel-Chan
f04a85e121
Merge pull request #16753 from owen-mc/go/misc-clean-up
...
Go: a few small clean ups
2024-06-24 10:47:21 +01:00
Owen Mansel-Chan
aa35bd771b
Fix bug removing "vendor/" from package paths
2024-06-20 13:18:21 +01:00
Owen Mansel-Chan
754fd8e84c
Drop leading . from getQualifiedName for built-in functions
...
So it will be "panic" instead of ".panic".
2024-06-19 22:04:21 +01:00
Owen Mansel-Chan
68a661f3c7
Write out whole function names
2024-06-19 21:58:31 +01:00
Owen Mansel-Chan
b79711b17e
Move deprecated notice to top of comment
2024-06-19 21:58:28 +01:00
Ed Minnix
5bbd003dfc
Reword change note
2024-06-18 12:27:21 -04:00
Ed Minnix
b53712cae0
Change note
2024-06-18 12:27:19 -04:00
Ed Minnix
6a0be6ad09
ExternalAPIs
2024-06-18 12:27:18 -04:00
Ed Minnix
46e16b88bb
Refactor experimental queries to use ThreadModelFlowSource
2024-06-18 12:27:17 -04:00
Ed Minnix
cfd5f53eb0
Refactor Customizations libraries to use ThreatModelFlowSource
2024-06-18 12:27:15 -04:00
Edward Minnix III
8997f2cdf2
Merge pull request #16697 from egregius313/egregius313/go/dataflow/threat-modeling
...
Go: Introduce Threat Modeling
2024-06-18 12:25:33 -04:00
Chris Smowton
4da5d6660a
Add change note
2024-06-17 16:49:09 +01:00
Chris Smowton
38ee085782
Adjust test expectation
2024-06-17 16:46:49 +01:00
Chris Smowton
822f6eebfb
Add support for flow through content of global variables
2024-06-17 16:42:23 +01:00
Ed Minnix
b4ecc81145
Fix provenance numbers in tests
2024-06-17 11:33:19 -04:00
Ed Minnix
fa2c50616b
Remove getSourceType definitions
2024-06-17 10:57:11 -04:00
Ed Minnix
b6adff6377
Fix jsoniter test
2024-06-17 10:51:13 -04:00
Ed Minnix
53dd269f9f
Go: Threat model tests
2024-06-17 10:51:11 -04:00
Ed Minnix
7f19f449eb
Change note
2024-06-17 10:51:10 -04:00
Ed Minnix
49fb372eb9
Add getSourceType declarations to existing remote flow sources
2024-06-17 10:51:09 -04:00
Ed Minnix
df6449cfc7
Go: Add the SourceNode and ThreatModelFlowSource classes
2024-06-17 10:51:07 -04:00
Ed Minnix
b697068e9a
Go: Add threat modeling shared library
2024-06-17 10:51:06 -04:00
Owen Mansel-Chan
24c9062b35
Merge pull request #16671 from owen-mc/go/mad-builtin-taint-models-try-2
...
Go: Convert old-style models for built-ins to MaD
2024-06-11 19:45:34 +01:00
Owen Mansel-Chan
2ae7fa4897
Tests: accept expected changes
2024-06-11 16:20:06 +01:00
Owen Mansel-Chan
6fd2ab7cef
Tests: Accept model renumbering in edge provenance
2024-06-11 16:18:18 +01:00
Owen Mansel-Chan
700604a1c2
Convert old-style models for built-ins to MaD
...
These models are to cover the special cases where `append` can be used
with a second argument which is a string followed by `...`, and `copy`
can be used with a second argument which is a string. In this case the
taint is carried by the whole string, rather than in array elements.
2024-06-11 16:16:45 +01:00
github-actions[bot]
8a25081a0e
Post-release preparation for codeql-cli-2.17.5
2024-06-10 15:33:08 +00:00
github-actions[bot]
877bfa2468
Release preparation for version 2.17.5
2024-06-10 13:40:39 +00:00
Anders Schack-Mulligen
9b1e4d7895
Go: Fix test failure.
2024-06-07 13:16:20 +02:00
Anders Schack-Mulligen
a26c01d7c7
Go: Add support for pretty-printed provenace in tests. Convert one test.
2024-06-07 11:47:45 +02:00
Owen Mansel-Chan
44a56c420f
Merge pull request #16558 from owen-mc/go/sync-external-flow
...
Go: sync ExternalFlow.qll
2024-06-05 11:31:34 +01:00
Owen Mansel-Chan
60970ff015
Merge pull request #16571 from owen-mc/go/remove-step-duplication-in-config
...
Go: remove flow step duplication in configs
2024-06-04 12:57:26 +01:00
Owen Mansel-Chan
cbbdd01d5a
Reinstate more descriptive QLDoc
2024-06-04 11:46:05 +01:00
Owen Mansel-Chan
7356e747e4
Add change note
2024-06-04 11:46:04 +01:00
Owen Mansel-Chan
6e67e724b4
Update documentation for receiver instead of -1
2024-06-04 11:46:02 +01:00
Owen Mansel-Chan
5c5949ba5e
Add tests for neutral models
2024-06-04 11:46:01 +01:00
Owen Mansel-Chan
c964fc2dca
Update expected results (only empty predicate names added)
2024-06-04 11:46:00 +01:00
Owen Mansel-Chan
18fa454d33
Replace Argument[-1] with Argument[receiver]
2024-06-04 11:45:59 +01:00
Owen Mansel-Chan
0870946e05
Add model validation to more tests
2024-06-04 11:45:58 +01:00
Owen Mansel-Chan
a8112ec62e
Add neutralModel to empty.model.yml so it is defined somewhere
2024-06-04 11:45:57 +01:00
Owen Mansel-Chan
adfaae02e7
Cache interpretElement
2024-06-04 11:45:55 +01:00
Owen Mansel-Chan
479ea9f82c
Remove unused predicate hasExternalSpecification
2024-06-04 11:45:54 +01:00
Owen Mansel-Chan
174712a472
Delete unused predicate paramsString
...
This is needed for other languages, but in Go you cannot have two
functions which are distinguished only by their parameter types.
2024-06-04 11:45:52 +01:00
Owen Mansel-Chan
40127583fb
Make manual neutral summary models block generated summary models
2024-06-04 11:45:51 +01:00
Owen Mansel-Chan
5b04a71169
Non-trivial implementation of NeutralCallableAdapter
2024-06-04 11:45:49 +01:00
Owen Mansel-Chan
df8e04fcf9
Add predicate neutralElement matching summaryElement
2024-06-04 11:45:48 +01:00
Owen Mansel-Chan
209fe731a6
Change type of c to be more portable
2024-06-04 11:45:47 +01:00
Owen Mansel-Chan
e2008e14e2
Move summaryElement to FlowSummyImpl.qll
2024-06-04 11:45:45 +01:00
Owen Mansel-Chan
7f0f2d3438
Rename interpretSummary to summaryElement
2024-06-04 11:45:44 +01:00
