Michael Nebel
c07bf65eb6
Update java/ql/lib/semmle/code/java/dataflow/FlowSources.qll
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-05-03 11:13:05 +02:00
Michael Nebel
8def1c2c13
Java: Address review comments and some other code quality improvements.
2024-05-03 11:11:52 +02:00
Michael Nebel
f95b33049e
Java: Improve the Api sources and sinks implementation.
2024-04-26 14:12:41 +02:00
Michael Nebel
9db32f4d26
Java: Identify more APIs as supported in the telemetry queries (as QL defined sinks).
2024-04-26 12:39:46 +02:00
Michael Nebel
acb2bbb2a3
Java: Identify more APIs as supported in the telemetry queries (as QL defined sources).
2024-04-26 12:39:46 +02:00
Anders Schack-Mulligen
3c69f8f607
Java: Count second level scopes for fieldFlowBranchLimit.
2024-04-15 15:17:43 +02:00
Anders Schack-Mulligen
2f0987e980
Dataflow: Add dummy DataFlowSecondLevelScope implementations.
...
These could be an empty type, but Unit was available and it probably
doesn't matter.
2024-04-15 15:16:30 +02:00
Anders Schack-Mulligen
eafc0075fd
Legacy dataflow: Sync.
2024-04-12 09:19:54 +02:00
Anders Schack-Mulligen
2925e45434
Java/Dataflow: Propagate MaD-id/model-id to PathGraph.
2024-04-12 09:19:51 +02:00
Mathias Vorreiter Pedersen
2256c4c008
Merge pull request #15728 from MathiasVP/shared-typeflow-library
...
Java/Shared: Refactor `TypeFlow.qll` into a shared library
2024-04-05 16:24:17 +01:00
Mathias Vorreiter Pedersen
1775bdee5f
Java: Remove redundant qualifiers.
2024-04-05 12:52:04 +01:00
Mathias Vorreiter Pedersen
26cf8df8d6
Update java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2024-04-05 12:50:26 +01:00
Mathias Vorreiter Pedersen
3f63d3a865
Update java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2024-04-05 12:49:40 +01:00
Mathias Vorreiter Pedersen
1acbb84444
Shared/Java: Make the 'isNull' interface slightly prettier.
2024-04-05 11:58:43 +01:00
Chris Smowton
17193ac11b
Distinguish record patterns that do or don't declare identifiers
2024-03-25 16:31:40 +00:00
Chris Smowton
29e93edf90
Dataflow: restrict pattern-case flow to unique patterns.
2024-03-25 16:31:37 +00:00
Michael Nebel
6619be3137
Merge pull request #15940 from michaelnebel/csharp/sourcesinktests
...
C#: Source- and sink tests.
2024-03-21 08:12:16 +01:00
Mathias Vorreiter Pedersen
ebac171b2b
Java/Shared: Rename 'joinStep0' to 'joinStep'.
2024-03-20 14:40:16 +00:00
Mathias Vorreiter Pedersen
6a65c46b2e
Java/Shared: Share more 'isNull' computations.
2024-03-20 14:36:12 +00:00
Mathias Vorreiter Pedersen
90fbacc7bf
Java/Shared: Use getLocation instead of hasLocationInfo.
2024-03-20 14:29:48 +00:00
Michael Nebel
70c6744944
Java/Go/Swift: Sync changes.
2024-03-19 14:20:43 +01:00
Tom Hvitved
fc55567d90
Merge pull request #15853 from hvitved/dataflow/get-location
...
Data flow: Replace `hasLocationInfo` with `getLocation`
2024-03-18 20:21:46 +01:00
Tom Hvitved
02ae2d1520
Java: Implement new data flow interface
2024-03-13 14:41:57 +01:00
Tom Hvitved
da66281fef
Sync files
2024-03-11 13:02:04 +01:00
Owen Mansel-Chan
114c17ad57
Add more methods of java.util.Comparator
2024-03-02 20:55:30 +00:00
Owen Mansel-Chan
bb97df1d71
do not generate models for lambda flow methods
2024-03-01 12:11:40 +00:00
Owen Mansel-Chan
bbf3fa7506
do not generate models for toString
2024-03-01 09:59:27 +00:00
Tony Torralba
47bf556223
Merge pull request #15709 from atorralba/atorralba/java/enable-widget-taint-steps
...
Java: Re-enable Widget.qll flow steps
2024-02-29 17:33:05 +01:00
Anders Schack-Mulligen
df5e753ee0
Merge pull request #15570 from aschackmull/java/cache-interpretelement
...
Java: Cache interpretElement.
2024-02-27 13:39:56 +01:00
Mathias Vorreiter Pedersen
1d4c889ab8
Java: Use the shared type-flow library.
2024-02-26 17:13:32 +00:00
Tony Torralba
759b74791c
Java: Re-enable Widget.qll flow steps
...
The library Widget.qll was accidentally removed from the global context when its sources were migrated to models-as-data in #13136 . This re-adds it so that its flow steps are enabled again.
2024-02-23 13:07:35 +01:00
Tom Hvitved
1ea7717714
Capture flow: Take overwrites in nested scopes into account
2024-02-09 14:49:23 +01:00
Anders Schack-Mulligen
8fc4fae7d2
Java: Cache interpretElement.
2024-02-09 14:43:36 +01:00
erik-krogh
8be7eadace
delete outdated deprecations
2024-01-22 09:11:35 +01:00
Owen Mansel-Chan
6945289afc
Merge pull request #15246 from owen-mc/java/manual-neutral-overrides-generated
...
C#/Java: Manual neutral summaries should block generated summaries
2024-01-12 10:05:18 +00:00
Owen Mansel-Chan
7824e60acd
Manual neutral summaries should block generated summaries
2024-01-10 22:25:06 +00:00
Tom Hvitved
f90201eb56
Data flow: Remove column from mayBenefitFromCallContext
2024-01-09 11:34:43 +01:00
Anders Schack-Mulligen
a1068ce2f9
Dataflow: deprecate references
2023-12-14 15:05:33 +01:00
Tom Hvitved
098afb935b
Address more review comments
2023-12-14 09:48:45 +01:00
Tom Hvitved
f9dbf676a6
Java: Use FlowSummaryImpl from dataflow pack
2023-12-10 11:25:45 +01:00
Anders Schack-Mulligen
0618568cdc
Merge pull request #15045 from aschackmull/java/fix-cp
...
Java: Fix accidental cartesian product.
2023-12-08 15:43:01 +01:00
Anders Schack-Mulligen
64eb4ff753
Merge pull request #14983 from aschackmull/dataflow/deprecate-old-api
...
Data Flow: Deprecate old data flow api.
2023-12-08 14:27:25 +01:00
Anders Schack-Mulligen
7ee3068fe7
Java: Fix accidental cartesian product.
2023-12-08 13:27:05 +01:00
Ian Lynagh
fc11a87882
Kotlin: Fix dataflow with Array.set wrappers
2023-12-06 12:19:46 +00:00
Ian Lynagh
2c625e34b5
Merge pull request #15008 from igfoo/igfoo/kot-arr-taint
...
Kotlin: Track taint through Array.get/set
2023-12-05 18:30:21 +00:00
Ian Lynagh
babf1d6648
Kotlin: Track Kotlin's Array.set when tracking taint
2023-12-05 14:42:45 +00:00
Ian Lynagh
821b4c727e
Kotlin: Add Array.get(_) support to taint tracking
2023-12-05 14:41:32 +00:00
Anders Schack-Mulligen
67f0529cda
Dataflow: Sync.
2023-12-04 12:36:57 +01:00
Anders Schack-Mulligen
fd920b8585
Java: Deprecate old data flow api.
2023-12-04 12:36:57 +01:00
Chris Smowton
77b1721542
Move TypeTestGuard's logic into Guard.appliesTypeTest
2023-11-30 11:24:06 +00:00
