Rasmus Wriedt Larsen
c4e674b8d2
Merge pull request #16173 from RasmusWL/remove-lib-stubs
...
Python: Remove deprecated stubs for points-to tests
2024-04-10 17:12:16 +02:00
Erik Krogh Kristensen
d33e8adae4
Merge pull request #16174 from erik-krogh/no-arr-ruby-shell
...
RB: don't mention arrays in the qhelp for rb/shell-command-constructed-from-input
2024-04-10 17:08:24 +02:00
Owen Mansel-Chan
1c0ef90e96
Merge pull request #15865 from owen-mc/go/extractor/no-intermediate-string-values
...
Go: extractor: do not store intermediate values in long string concatenations
2024-04-10 15:31:51 +01:00
Michael Nebel
b79d738f64
Merge pull request #15993 from michaelnebel/csharp/assemblycachefiltering
...
C#: Exclude Semmle.* dlls when using the executing runtime.
2024-04-10 16:22:22 +02:00
Owen Mansel-Chan
dc3ea6c418
Merge pull request #11703 from Kwstubbs/go-taintedpath-additions
...
Go: Add and Modify Sanitizers For TaintedPath
2024-04-10 15:13:13 +01:00
Owen Mansel-Chan
5ec3934ac8
Merge branch 'main' into go/extractor/no-intermediate-string-values
2024-04-10 14:51:22 +01:00
Michael Nebel
ef68e33449
C#: Address review comments.
2024-04-10 14:48:02 +02:00
erik-krogh
4ae25c2d34
don't mention arrays in the qhelp for rb/shell-command-constructed-from-input, because there are no array
2024-04-10 14:26:00 +02:00
Owen Mansel-Chan
0e67aa5baa
Merge pull request #16172 from owen-mc/go/perf/synth-location
...
Go: Avoid magic in `TSynthLocation` definition
2024-04-10 13:02:18 +01:00
Owen Mansel-Chan
f45305ec3f
Merge pull request #16170 from owen-mc/go/add-comments-in-extractor
...
Go: Add comments in extractor with link to online documentation
2024-04-10 12:50:18 +01:00
Michael Nebel
ff498f616a
C#: Some renaming.
2024-04-10 13:20:57 +02:00
Rasmus Wriedt Larsen
9615e2ded9
Python: Remove deprecated stubs for points-to tests
...
I grep'ed through all our options files, and couldn't find any tests
that relies on these anymore 👍
2024-04-10 13:12:36 +02:00
Rasmus Wriedt Larsen
78ca691912
Python: remove deprecated points-to test for zope
2024-04-10 13:12:17 +02:00
Rasmus Wriedt Larsen
3db560158a
Merge pull request #16169 from RasmusWL/mad-remoteflowsource
...
Python: Fix `RemoteFlowSourceFromCsv`
2024-04-10 13:06:42 +02:00
Mathias Vorreiter Pedersen
59936c8642
Merge pull request #16151 from MathiasVP/use-shared-typeflow-lib
...
C++: Use the shared typeflow library
2024-04-10 12:02:03 +01:00
Michael Nebel
3b42dc25a1
C#: Also use AssemblyLookupLocation for framework dlls.
2024-04-10 12:56:48 +02:00
Owen Mansel-Chan
a18a4fb62e
Avoid magic in TSynthLocation definition
...
This improves performance, because in this case magic is not beneficial.
2024-04-10 11:47:13 +01:00
Michael Nebel
99f0ed26e9
C#: Make the assembly lookup case insensitive on the dll file extension and log if no dlls are found in a directory.
2024-04-10 12:45:28 +02:00
Michael Nebel
9eb13833fa
C#: Code quality improvements.
2024-04-10 12:45:18 +02:00
Michael Nebel
2bea927d43
C#: Update expected test output.
2024-04-10 12:41:39 +02:00
Michael Nebel
d04bf6b6d6
C#: Don't include Semmle.* dlls, if the executing runtime is used as framework.
2024-04-10 12:41:39 +02:00
Michael Nebel
646b272b4e
C#: Move the AssemblyPath class to its own file.
2024-04-10 12:41:39 +02:00
Michael Nebel
6299d9cecd
C#: Introduce AssemblyPath and re-factor AssemblyCache to use this instead of strings.
2024-04-10 12:41:29 +02:00
Michael Nebel
bee54e4247
C#: Add desktop runtime dependencies integration test.
2024-04-10 12:35:52 +02:00
Owen Mansel-Chan
b4829addf7
Add comments with link to online doc
2024-04-10 10:48:23 +01:00
Rasmus Wriedt Larsen
4fed3cf12d
Python: Fix RemoteFlowSourceFromCsv
2024-04-10 11:31:34 +02:00
Dave Bartolomeo
996f535f0b
Merge pull request #16103 from github/dbartol/javadoc-record
...
Allow `@param` tags to apply to record parameters
2024-04-09 14:21:45 -04:00
Dave Bartolomeo
b9cfeaf614
Add test case
2024-04-09 12:41:32 -04:00
Taus
3656376cc4
Merge pull request #16064 from github/max-schaefer/fix-unexploitable-types
...
Automodel: Filter unexploitable types in application mode.
2024-04-09 17:14:53 +02:00
Mathias Vorreiter Pedersen
a53ef495ee
C++: Simplify 'hasExactBufferType' and add comments.
2024-04-09 16:04:20 +01:00
Felicity Chapman
5253c96aa2
Merge pull request #16162 from github/felicitymay/threat-models-csharp
...
Make duplicated content clear
2024-04-09 15:47:44 +01:00
Mathias Vorreiter Pedersen
291cc0a671
C++: Anonymous namespaces provide internal linkage.
2024-04-09 15:25:13 +01:00
Owen Mansel-Chan
5e4a5c1571
Merge pull request #16160 from owen-mc/java/delete-jdk-internal-models
...
Java: Delete models for JDK internal packages
2024-04-09 15:01:16 +01:00
Mathias Vorreiter Pedersen
2a7420ce11
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/TypeFlow.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-04-09 15:00:23 +01:00
Max Schaefer
deb78b248b
Apply suggestions from code review
...
Co-authored-by: Taus <tausbn@github.com >
2024-04-09 14:38:17 +01:00
Tom Hvitved
6c9a0e4a9a
Merge pull request #16154 from hvitved/ruby/redundant-implicit-read
...
Ruby: Remove two redundant `allowImplicitRead` predicates
2024-04-09 15:38:05 +02:00
Rasmus Wriedt Larsen
6f1a9d4574
Merge pull request #16159 from RasmusWL/fix-integration-tests
...
Python: Fixup integration tests after no dep inst
2024-04-09 15:08:20 +02:00
Felicity Chapman
e6d63b980d
Make duplicated content clear
2024-04-09 14:05:42 +01:00
Rasmus Wriedt Larsen
6ce38be3cc
Merge pull request #16112 from github/tausbn/python-various-extractor-fixups
...
Python: Various extractor fixups
2024-04-09 14:46:23 +02:00
Michael Nebel
bd1de179b3
Merge pull request #15887 from michaelnebel/csharp/qualifiedname
...
C#: Fully qualified name.
2024-04-09 14:26:36 +02:00
Owen Mansel-Chan
ae8240a695
Delete models for JDK internal packages
2024-04-09 13:23:03 +01:00
Rasmus Wriedt Larsen
e9e7ccddce
Python: delete force-enable-library-extraction integration test
2024-04-09 14:02:34 +02:00
Rasmus Wriedt Larsen
a0d6324f68
Python: Fix ignore-venv integration test
...
Now that we no longer support the fallback option
(https://github.com/github/codeql/pull/16127 )
2024-04-09 14:01:10 +02:00
Rasmus Wriedt Larsen
bb4952f557
Revert "Python: Disable failing integration tests"
...
This reverts commit 8c2455fc11
2024-04-09 14:00:25 +02:00
Paolo Tranquilli
7b2dc325ec
Merge pull request #16153 from github/redsun82/setup-swift-fix
...
CI: apply `setup-swift` workaround
2024-04-09 13:15:39 +02:00
Taus
29b843f772
Merge pull request #16158 from github/tausbn/python-disable-failing-integration-tests
...
Python: Disable failing integration tests
2024-04-09 13:12:48 +02:00
Taus
8c2455fc11
Python: Disable failing integration tests
...
These failures were likely caused by
https://github.com/github/codeql/pull/16127
My guess is that they can probably be deleted altogether, but as the
failures are blocking other development, I have opted to simply disable
them for the time being.
2024-04-09 10:49:30 +00:00
Tamás Vajk
239776ba21
Merge pull request #16124 from tamasvajk/buildless/nuget-feed-precheck
...
C#: Validate all nuget feeds to respond in reasonable time
2024-04-09 12:12:06 +02:00
Tom Hvitved
5f8eb7b138
Merge pull request #16110 from hvitved/dataflow/param-flow-no-expects-content
...
Data flow: Block flow at `expectsContents` nodes in `parameterValueFlow`
2024-04-09 11:26:24 +02:00
yoff
1048cf7c5e
Merge pull request #15711 from RasmusWL/tt-content
...
Python: Add type tracking for content
2024-04-09 10:37:43 +02:00
