13867 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Dave Bartolomeo	e00a8f7670	Merge pull request #3815 from jbj/getAPrimaryQlClass ... C++: getCanonicalQLClass -> getAPrimaryQlClass	2020-06-26 13:52:16 -04:00
semmle-qlci	3aefb7fad9	Merge pull request #3613 from erik-krogh/Reassigned ... Approved by asgerf	2020-06-26 17:05:45 +01:00
Jonas Jensen	a22fb7662e	C++: Autoformat fixup	2020-06-26 16:57:06 +02:00
semmle-qlci	b015c735d0	Merge pull request #3809 from max-schaefer/util-deprecate ... Approved by asgerf	2020-06-26 14:20:14 +01:00
semmle-qlci	1b4df57426	Merge pull request #3731 from asger-semmle/js/monorepo-bugfixes ... Approved by erik-krogh	2020-06-26 14:18:35 +01:00
Mathias Vorreiter Pedersen	beb66299e9	Merge pull request #3796 from dbartol/codeql-c-analysis-team/40/2 ... C++: QLDoc for all of `Instruction.qll`	2020-06-26 14:04:48 +02:00
Erik Krogh Kristensen	e4fe236d37	autoformat	2020-06-26 13:59:06 +02:00
Dave Bartolomeo	11c702331a	Merge pull request #3795 from rdmarsh2/rdmarsh/cpp/add-qldoc-3 ... C++: QLDoc for PrintAST and AST-based range analysis	2020-06-26 07:38:10 -04:00
Rasmus Wriedt Larsen	3f0975f5a1	Merge pull request #3770 from tausbn/python-add-a-bunch-of-documentation ... Python: Add a bunch of documentation.	2020-06-26 13:30:45 +02:00
Jonas Jensen	c1b26d71c3	C++: getCanonicalQLClass -> getAPrimaryQlClass ... Also updated the QLDoc for `getAPrimaryQlClass` to match the Go version.	2020-06-26 13:20:36 +02:00
Taus	e5d23b2082	Merge pull request #3801 from RasmusWL/python-3521-revived ... Python: Add support for detecting XSLT Injection (#3521 revived)	2020-06-26 13:05:28 +02:00
Max Schaefer	640c194c92	JavaScript: Model util.deprecate as a pre call-graph step.	2020-06-26 11:47:19 +01:00
Max Schaefer	712a216461	Add self-verifying type-tracking tests.	2020-06-26 11:47:19 +01:00
Rasmus Wriedt Larsen	b164f2695d	Python: One more minor doc fix from review	2020-06-26 12:08:12 +02:00
Rasmus Wriedt Larsen	08384e30af	Python: Minor doc fixes from review	2020-06-26 12:06:31 +02:00
Jonas Jensen	9d8052a434	Merge pull request #3813 from MathiasVP/is-argument-for-parameter-join-order ... C++: Improve join order for AliasAnalysis::isArgumentForParameter	2020-06-26 11:34:33 +02:00
Calum Grant	8725e09053	Merge pull request #3798 from hvitved/csharp/dataflow/async-tests ... C#: Move async data-flow tests from local to global	2020-06-26 10:14:28 +01:00
semmle-qlci	f81fc77e9e	Merge pull request #3782 from erik-krogh/promiseSteps ... Approved by asgerf	2020-06-26 10:11:10 +01:00
Mathias Vorreiter Pedersen	63752dddef	C++/C#: Sync identical files	2020-06-26 09:08:44 +02:00
Mathias Vorreiter Pedersen	3af679e83d	C++: Put unique around getEnclosingFunction, and specialize function argument, to improve join order.	2020-06-26 09:08:35 +02:00
semmle-qlci	92cc59b47b	Merge pull request #3800 from esbena/js/npmlog ... Approved by erik-krogh	2020-06-26 07:54:08 +01:00
Dave Bartolomeo	7e3f2dbe4c	C++: Improve QLDoc for getElementSize()	2020-06-25 17:04:32 -04:00
Erik Krogh Kristensen	7cb6516bc4	make internal predicates within DominatingPaths smaller.	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	1ec2c549d2	autoformat	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	8b3ca73c1c	autoformat	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	081b03c8f4	add tests that access-path domination can happen within a statement	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	47d52870f2	Use a ControlFlowNode based API to determine domination	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	926f2c139f	require that a write must dominate the enclosing stmt of a read	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	55565a51df	don't use getEnclosingStmt	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	34d6a4dcf8	use Rhs of a prop-write ... Co-authored-by: Asger F <asgerf@github.com>	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	cc2e61531e	update expected output	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	f7c42ca1b5	autoformat	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	252f805db4	performance improvement	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	21e5a522b0	give the same rank to all expressions inside a single stmt	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	e467d3ccbf	use dominating write check in js/path-injection	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	6bc821b1ab	add tests for dominating writes	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	2b2d691e45	don't treated a property from a tainted object as tainted when there exists a dominating write	2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen	5e4acfbe19	implement predicate for finding dominating writes to an access-path	2020-06-25 23:00:52 +02:00
Jonas Jensen	d4c5887122	Merge pull request #3807 from geoffw0/qldoc3 ... C++: Even more QLDoc	2020-06-25 19:29:35 +02:00
semmle-qlci	056e1a8c4b	Merge pull request #3599 from asger-semmle/js/nameditem ... Approved by esbena	2020-06-25 17:34:14 +01:00
Robert Marsh	9a1f909129	C++: Fix QLDoc for PrintAST.qll nodes/edges	2020-06-25 09:07:20 -07:00
Robert Marsh	b3072b9544	Apply suggestions from code review ... Co-authored-by: Dave Bartolomeo <dbartol@github.com>	2020-06-25 08:54:17 -07:00
Calum Grant	b759856ccb	Merge pull request #3792 from calumgrant/cs/qldoc-coverage1 ... C#: Improve qldoc coverage	2020-06-25 16:34:52 +01:00
Erik Krogh Kristensen	690bde47aa	remove a .getALocalSource() that isn't needed	2020-06-25 16:51:10 +02:00
Asger Feldthaus	e28284bd01	JS: Fix javadoc	2020-06-25 15:39:00 +01:00
Asger Feldthaus	ad48c4e54d	JS: Always prepare package.json files	2020-06-25 15:38:20 +01:00
Asger Feldthaus	675c64d9d4	JS: Prefer extracting file with tsconfig that included it	2020-06-25 15:38:19 +01:00
Asger Feldthaus	4c4acd50bd	JS: Factor out loading of tsconfig files	2020-06-25 15:38:19 +01:00
Asger Feldthaus	cc3e62f535	JS: Move stack trace limit to top of file	2020-06-25 15:38:19 +01:00
Asger Feldthaus	cf78475799	JS: Only extract included files with a given tsconfig	2020-06-25 15:38:19 +01:00