Dilan Bhalla
dfdb5c9c9d
merging 2.16.4, resolving zipslip .expected file conflict
2024-03-11 14:12:21 -07:00
github-actions[bot]
2f058ffb4d
Release preparation for version 2.16.4
2024-03-06 20:56:51 +00:00
Angela P Wen
ce31f8641a
Revert "Release preparation for version 2.16.4"
2024-03-06 12:07:33 -08:00
github-actions[bot]
661e68dab5
Release preparation for version 2.16.4
2024-03-05 18:13:58 +00:00
Angela P Wen
967963a653
Revert "Release preparation for version 2.16.4"
2024-03-05 08:53:33 -08:00
github-actions[bot]
a67218a027
Release preparation for version 2.16.4
2024-03-04 17:42:08 +00:00
Anders Schack-Mulligen
699dddcfbe
Merge pull request #15725 from aschackmull/dataflow/summary-join-fix
...
Dataflow: Prevent bad join in FlowSummaryImpl::Private::Steps::summaryLocalStep.
2024-02-27 10:32:38 +01:00
Tom Hvitved
bbeee8f38d
Merge pull request #15717 from hvitved/csharp/view-cfg
...
Shared `View CFG` implementation
2024-02-27 09:13:18 +01:00
Anders Schack-Mulligen
20bb631456
Dataflow: Prevent bad join.
2024-02-26 13:45:19 +01:00
Tom Hvitved
5b6e76c030
Move View CFG implementation from Ruby/Swift into shared library
2024-02-26 11:23:49 +01:00
Rasmus Wriedt Larsen
07223031e8
Merge branch 'main' into lgtm_index_filter_handling
2024-02-26 09:56:02 +01:00
Tom Hvitved
2683e40038
Merge pull request #15708 from hvitved/share-ide-contextual
...
Share `getFileBySourceArchiveName` implementation
2024-02-23 19:56:33 +01:00
Erik Krogh Kristensen
a0f91fbc15
Merge pull request #15706 from erik-krogh/pol-reg
...
ReDoS: Restrict some edges related to upper/lower-case when constructing possible attack strings for polynomial-redos.
2024-02-23 12:06:17 +01:00
Tom Hvitved
62b16c0fa3
Share getFileBySourceArchiveName implementation
2024-02-23 11:25:49 +01:00
Dilan Bhalla
87fd2fc067
upgrading to 2.16.3, resolving zipslip merge conflict
2024-02-22 15:24:05 -08:00
erik-krogh
e74e5b3613
try to restrict the edges we follow (related to upper/lower-case) when contructing possible attack-strings for polynomial-redos
2024-02-22 13:15:17 +01:00
Tom Hvitved
ebee35b385
Ruby: No fieldFlowBranchLimit for SummarizedCallables
2024-02-22 10:27:25 +01:00
Anders Schack-Mulligen
71f8ccf45f
Merge pull request #15654 from aschackmull/java/static-init-vec-query-perf
...
Java: Switch helper flow from Global to SimpleGlobal in StaticInitializationVectorQuery.
2024-02-21 10:51:16 +01:00
github-actions[bot]
37f8fa3413
Post-release preparation for codeql-cli-2.16.3
2024-02-20 16:50:47 +00:00
github-actions[bot]
6d061fbc35
Release preparation for version 2.16.3
2024-02-20 14:26:23 +00:00
Anders Schack-Mulligen
5a348a5048
Dataflow: SimpleGlobal / Typetracker perf fix.
2024-02-20 14:40:28 +01:00
Tony Torralba
1704bfe2bf
Merge pull request #15585 from atorralba/atorralba/go/promote-jwt-unsafe-verification
...
Go: Promote `go/missing-jwt-signature-check` from experimental
2024-02-19 15:35:44 +01:00
Anders Schack-Mulligen
2fa8c2f992
Merge pull request #15634 from aschackmull/dataflow/simpleglobal-fixreads
...
Dataflow: Bugfix for field reads in SimpleGlobal.
2024-02-19 14:02:38 +01:00
Anders Schack-Mulligen
53801e8efb
Dataflow: Bugfix for field reads in SimpleGlobal.
2024-02-16 14:00:04 +01:00
Anders Schack-Mulligen
03f7968dbf
Dataflow: Fix flow-feature bug.
2024-02-16 11:38:30 +01:00
Tony Torralba
551875cb5a
Add 'jwt' as valid sink kind
2024-02-14 17:25:08 +01:00
Anders Schack-Mulligen
393251dde6
Merge pull request #15582 from hvitved/dataflow/cache-viable-callable-ext
...
Data flow: Cache `viableCallableExt`
2024-02-14 10:31:43 +01:00
Tom Hvitved
bc8761c51b
Data flow: Cache viableCallableExt
2024-02-13 14:12:50 +01:00
Asger F
faefa056eb
Merge pull request #15507 from asgerf/shared/outbarrier-bugfix
...
Shared: fix a bug in stateful outbarriers
2024-02-12 21:44:49 +01:00
Dilan
50dad18134
Merge tag 'codeql-cli/latest'
...
Compatible with the latest released version of the CodeQL CLI
2024-02-12 18:59:04 +00:00
Nick Rolfe
b2ee5808f0
Merge pull request #15496 from github/nickrolfe/loc-fresh-ids
...
Tree-sitter extractors: use fresh IDs for locations
2024-02-12 09:54:09 +00:00
Tom Hvitved
1ea7717714
Capture flow: Take overwrites in nested scopes into account
2024-02-09 14:49:23 +01:00
Anders Schack-Mulligen
4fcb90298d
Dataflow: Add change note.
2024-02-09 11:32:08 +01:00
Anders Schack-Mulligen
b7d4a6926f
Dataflow: Add empty provenance column to PathGraph.
2024-02-09 11:27:30 +01:00
Josh Brown
c92c212ea0
fix syntax errors introduced
2024-02-08 14:17:16 -08:00
Josh Brown
df915dc60c
Merge commit '737dd9d4c1' into jb1/lib/dataflowstack
2024-02-08 08:18:04 -08:00
github-actions[bot]
36f01ff31a
Release preparation for version 2.16.2
2024-02-08 15:25:24 +00:00
Dave Bartolomeo
a58dd45d0b
Revert "Merge pull request #15522 from github/release-prep/2.16.2"
...
This reverts commit c4c8cd6b34525f27173d
2024-02-08 09:28:34 -05:00
Josh Brown
9147b9dd21
Merge branch 'jb1/lib/dataflowstack' of github.com:microsoft/codeql into jb1/lib/dataflowstack
2024-02-07 12:56:08 -08:00
Josh Brown
beed67ad23
Address PR Comments
2024-02-07 12:56:00 -08:00
Josh Brown
c0fd03499a
Update shared/dataflowstack/codeql/dataflowstack/DataFlowStack.qll
2024-02-08 06:15:29 +11:00
github-actions[bot]
b5139078d0
Post-release preparation for codeql-cli-2.16.2
2024-02-06 19:22:35 +00:00
github-actions[bot]
c1b35fbf47
Release preparation for version 2.16.2
2024-02-05 17:58:57 +00:00
Nick Rolfe
514a92d5bd
Tree-sitter extractors: use fresh IDs for locations
...
Since locations for any given source file are never referenced in any
TRAP files besides the one for that particular source file, it's not
necessary to use global IDs. Using fresh IDs will reduce the size of the
ID pool (both on disk and in memory) and the speed of multi-threaded
TRAP import.
The one exception is the empty location, which still uses a global ID.
2024-02-02 15:06:10 +00:00
Josh Brown
39500b1965
getAnArgumentNode
2024-01-26 18:59:41 -08:00
Joe Farebrother
031bd8bd0c
Merge pull request #15281 from joefarebrother/android-sensitive-ui-notif
...
Java: Add query for exposure of sensitive information to android notifiactions
2024-01-26 16:42:55 +00:00
Asger F
f15ead6130
Shared: check stateful outBarrier as part of pathStep SCC
2024-01-26 11:14:23 +01:00
Asger F
d1310c74fc
Shared: remove old stateful outBarrier check
2024-01-26 11:14:23 +01:00
Mathias Vorreiter Pedersen
2db76c7fad
Merge pull request #15434 from MathiasVP/fix-dataflow-join-order
...
DataFlow: Fix join order
2024-01-25 16:32:14 +00:00
Dilan
737dd9d4c1
Merge tag 'codeql-cli/latest'
...
Compatible with the latest released version of the CodeQL CLI
2024-01-25 14:59:06 +00:00
