Jeroen Ketema
|
da3fcda4fc
|
C++: Address review comments
|
2024-12-16 14:25:41 +01:00 |
|
Jeroen Ketema
|
d6964ff755
|
C++: Add word missing from change note
|
2024-12-13 10:48:46 +01:00 |
|
Jeroen Ketema
|
792504434a
|
Merge pull request #18277 from jketema/printast
C++: Fix small PrintAST and PrintIR issue
|
2024-12-12 19:17:43 +01:00 |
|
Jeroen Ketema
|
8e458f4651
|
C++: Simplify local variable names
|
2024-12-12 17:13:02 +01:00 |
|
Jeroen Ketema
|
f9bfd969a9
|
C++: Address review comments
|
2024-12-12 16:49:24 +01:00 |
|
Tom Hvitved
|
20db548fef
|
Merge pull request #18263 from hvitved/dataflow/remove-column
Data flow: Remove unused column from `flowThroughOutOfCall`
|
2024-12-12 15:41:20 +01:00 |
|
Geoffrey White
|
03f962ed86
|
Merge pull request #18226 from geoffw0/badcrypto
Rust: Weak encryption algorithm query.
|
2024-12-12 14:21:16 +00:00 |
|
Michael Nebel
|
a52a549945
|
Merge pull request #18246 from michaelnebel/csharp/fixwarnings
C#: Fix some new compiler warnings
|
2024-12-12 15:07:23 +01:00 |
|
Tom Hvitved
|
5d18e23979
|
Merge pull request #18269 from hvitved/csharp/dataflow-reflection-call
C#: Remove false-positive reflection calls in dataflow
|
2024-12-12 14:43:13 +01:00 |
|
Owen Mansel-Chan
|
8703e21f62
|
Merge pull request #17996 from owen-mc/java/lightweight-IR-layer-classes
Java: Make separate classes for different control flow node kinds
|
2024-12-12 13:36:54 +00:00 |
|
Geoffrey White
|
44a0ad2942
|
Update data-flow -> data flow in all versions of ConceptsShared.qll.
|
2024-12-12 13:36:26 +00:00 |
|
Michael Nebel
|
9c0dddb4d8
|
Merge pull request #18267 from michaelnebel/csharp/updateglobaljson
C#: Update global.json for cshtml_standalone_flowsteps.
|
2024-12-12 13:55:03 +01:00 |
|
Jeroen Ketema
|
35403d4299
|
C++: Fix IR printing when multiple edges point to the same block
|
2024-12-12 13:46:45 +01:00 |
|
Jeroen Ketema
|
e43f7fbb48
|
C++: Fix AST printing for OverloadedArrayExpr
|
2024-12-12 13:44:24 +01:00 |
|
Jeroen Ketema
|
0a7ed159a4
|
C++: Add test that show that PrintAST is broekn for OverloadedArrayExpr
|
2024-12-12 13:40:22 +01:00 |
|
Owen Mansel-Chan
|
8e11789186
|
Restore asStmt, asExpr and asCall to Node
It doesn't really make sense to define them in terms of dispatch.
|
2024-12-12 12:30:01 +00:00 |
|
Geoffrey White
|
611d04e221
|
Rust: Revert stylistic change in shared file.
|
2024-12-12 11:30:23 +00:00 |
|
Geoffrey White
|
1d72b750b7
|
Rust: data-flow -> data flow.
|
2024-12-12 11:29:23 +00:00 |
|
Geoffrey White
|
d2cfcb4c9e
|
Update rust/ql/lib/codeql/rust/internal/ConceptsShared.qll
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
|
2024-12-12 11:28:04 +00:00 |
|
Geoffrey White
|
591db05610
|
Rust: Formatting.
|
2024-12-11 16:49:29 +00:00 |
|
Geoffrey White
|
ad75906672
|
Apply suggestions from code review
Co-authored-by: Tom Hvitved <hvitved@github.com>
|
2024-12-11 16:44:00 +00:00 |
|
Owen Mansel-Chan
|
066db766ef
|
Merge pull request #18153 from owen-mc/java/resttemplate-getforobject
Java: add SSRF sink model for the third parameter of `RestTemplate.getForObject`
|
2024-12-11 16:37:35 +00:00 |
|
Jami
|
538dee81b6
|
Merge pull request #18214 from jcogs33/jcogs33/java/file-getname-path-sanitizer
Java: add File.getName as a path injection sanitizer
|
2024-12-11 10:18:02 -05:00 |
|
Owen Mansel-Chan
|
1420bce36a
|
Move import statement in SpringWebClient.qll
|
2024-12-11 14:19:24 +00:00 |
|
Tom Hvitved
|
40d9460698
|
Data flow: Remove unused column from flowThroughOutOfCall
|
2024-12-11 14:35:32 +01:00 |
|
Anders Schack-Mulligen
|
066cfa31d2
|
Merge pull request #18258 from aschackmull/dataflow/simplify-apapprox3
Dataflow: Simplify references to access paths from prior stage.
|
2024-12-11 14:23:31 +01:00 |
|
Owen Mansel-Chan
|
4f8645b4dd
|
Merge pull request #18235 from owen-mc/go/varargs-out-param
Go: Improve data flow out of variadic parameter
|
2024-12-11 13:18:29 +00:00 |
|
Tom Hvitved
|
fc70024f52
|
C#: Remove false-positive reflection calls in dataflow
|
2024-12-11 14:15:58 +01:00 |
|
Tom Hvitved
|
22aaf74184
|
Merge pull request #18231 from hvitved/rust/models-as-data-summaries
Rust: Models-as-data for flow summaries
|
2024-12-11 13:37:09 +01:00 |
|
Ian Lynagh
|
34aefb4bc5
|
Merge pull request #18268 from igfoo/igfoo/kot-tests-ignore
Kotlin: git-ignore .testproj directories in tests
|
2024-12-11 12:08:44 +00:00 |
|
Ian Lynagh
|
699734611e
|
Kotlin: git-ignore .testproj directories in tests
|
2024-12-11 12:00:23 +00:00 |
|
Michael Nebel
|
f7ad150636
|
C#: Update global.json for cshtml_standalone_flowsteps.
|
2024-12-11 12:57:42 +01:00 |
|
Owen Mansel-Chan
|
aaa4361120
|
Rearrange member predicates in ControlFlow::Node
Put all the ones which might need to be overrridden by subclasses
together for ease of reading.
|
2024-12-11 10:34:18 +00:00 |
|
Owen Mansel-Chan
|
79f4f78fc2
|
Make separate classes for control flow node kinds
This puts all the logic of a particular control flow node kind into one
place and makes it easier to add new kinds.
|
2024-12-11 10:34:16 +00:00 |
|
Anders Schack-Mulligen
|
cac131df37
|
Dataflow: Rename a couple of predicates.
|
2024-12-11 11:22:42 +01:00 |
|
Anders Schack-Mulligen
|
d6a4080baf
|
Dataflow: Address review comment.
|
2024-12-11 11:18:57 +01:00 |
|
Cornelius Riemenschneider
|
f0971684e3
|
Merge pull request #18257 from github/criemen/bazel-8-00
Upgrade bazel to 8.0.0.
|
2024-12-11 11:14:41 +01:00 |
|
Paolo Tranquilli
|
a36d226d0c
|
Merge pull request #18247 from github/redsun82/executable-scripts
Make scripts executable
|
2024-12-11 10:42:57 +01:00 |
|
Tom Hvitved
|
baf186fed7
|
Address review comments
|
2024-12-11 10:28:32 +01:00 |
|
Owen Mansel-Chan
|
ba9d21ec98
|
Merge pull request #17970 from owen-mc/java/lightweight-IR-layer
Java: IPA the CFG (second try)
|
2024-12-10 23:57:52 +00:00 |
|
Owen Mansel-Chan
|
5b575113c3
|
Update test-kotlin2
|
2024-12-10 15:56:15 +00:00 |
|
Owen Mansel-Chan
|
4978a6eb37
|
Fix getasuccessor kotlin
The change in results shows that there are now fewer control flow nodes.
We have removed precisely those with no successor or predecessor.
|
2024-12-10 15:26:20 +00:00 |
|
Owen Mansel-Chan
|
5e0c3ab715
|
Fix kotlin tests
|
2024-12-10 15:26:19 +00:00 |
|
Owen Mansel-Chan
|
3f5886ef7a
|
Accept another review suggestion
|
2024-12-10 15:26:17 +00:00 |
|
Owen Mansel-Chan
|
2da9bfb1a6
|
Finish renaming getCFGNode to getCfgNode
|
2024-12-10 15:26:16 +00:00 |
|
Owen Mansel-Chan
|
274281f61e
|
Apply all suggestions from code review
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2024-12-10 15:26:14 +00:00 |
|
Owen Mansel-Chan
|
d06dfe0ca3
|
Add change note
|
2024-12-10 15:26:13 +00:00 |
|
Owen Mansel-Chan
|
0f3dd6d8f1
|
Java: IPA the CFG
|
2024-12-10 15:26:11 +00:00 |
|
Anders Schack-Mulligen
|
da179705c3
|
Java: Accept expected file changes.
|
2024-12-10 14:52:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
0f5786e4e6
|
Merge pull request #18251 from MathiasVP/fix-uncertain-array-writes
C++: Consider writes to arrays as uncertain
|
2024-12-10 12:38:47 +00:00 |
|