Mathias Vorreiter Pedersen
|
e0263a719e
|
Merge pull request #13218 from MathiasVP/c18-to-c17
C++: Replace `C18` with `C17` in documentation
|
2023-05-18 16:42:15 +01:00 |
|
Mathias Vorreiter Pedersen
|
70b08a093c
|
C++: Replace 'C18' with 'C17'.
|
2023-05-18 15:55:21 +01:00 |
|
Mathias Vorreiter Pedersen
|
8f7bb8b11f
|
Merge pull request #13217 from MathiasVP/cleanup-overrun-write-product-flow
C++: Small cleanup of `cpp/overrun-write`
|
2023-05-18 13:59:44 +01:00 |
|
Tony Torralba
|
a8afa4785e
|
Merge pull request #13140 from atorralba/atorralba/java/spring-jdbc-namedparam-models
Java: Add SQLi sinks for Spring JDBC
|
2023-05-18 14:49:28 +02:00 |
|
Mathias Vorreiter Pedersen
|
a77c62473e
|
C++: Reduce code-duplication in 'cpp/overrun-write'.
|
2023-05-18 13:23:15 +01:00 |
|
Mathias Vorreiter Pedersen
|
8cf25ba421
|
Merge pull request #13191 from MathiasVP/fix-pointer-pointee-conflation
C++: Fix pointer/pointee conflation
|
2023-05-18 13:09:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
2e734755fb
|
Merge pull request #13215 from MathiasVP/update-qldoc-on-typemention
C++: Update documentation for `TypeMention`
|
2023-05-18 10:24:13 +01:00 |
|
Jeroen Ketema
|
34fdeb4e6b
|
Merge pull request #13203 from jketema/deref-size
C++: Use range analysis-based `hasSize` predicate in `cpp/invalid-pointer-deref`
|
2023-05-18 11:03:09 +02:00 |
|
Mathias Vorreiter Pedersen
|
a475efbe39
|
Update cpp/ql/lib/semmle/code/cpp/Type.qll
|
2023-05-18 09:37:20 +01:00 |
|
Mathias Vorreiter Pedersen
|
f3b6b470f4
|
C++: Update documentation for 'TypeMention'.
|
2023-05-18 09:32:31 +01:00 |
|
Tony Torralba
|
2c54996499
|
Apply @jcogs33's suggestions from code review
|
2023-05-18 08:51:19 +02:00 |
|
Tony Torralba
|
1b06bf132c
|
Merge pull request #12932 from atorralba/atorralba/java/promote-xxe-experimental-sinks
Java: Promote experimental XXE sinks
|
2023-05-17 17:39:31 +02:00 |
|
Óscar San José
|
cc36e3c809
|
Merge pull request #13192 from github/post-release-prep/codeql-cli-2.13.2-fix-release-notes-check
Change regexp to include released change-notes pattern in check-change-note CI check
|
2023-05-17 17:28:59 +02:00 |
|
Jeroen Ketema
|
d1efffe492
|
Merge branch 'main' into deref-size
|
2023-05-17 17:13:49 +02:00 |
|
Jeroen Ketema
|
e3aecd3f1f
|
Merge pull request #13200 from jketema/deref-subpath
C++: Implement the `subpaths` query predicate for `cpp/invalid-pointer-deref`
|
2023-05-17 17:13:28 +02:00 |
|
Óscar San José
|
f72afd0727
|
fixing typo
|
2023-05-17 17:08:37 +02:00 |
|
Michael Nebel
|
5a1c001f07
|
Merge pull request #13204 from michaelnebel/csharp/madextensionmethodtest
C#: Add extension method testcase for Models as Data.
|
2023-05-17 16:14:13 +02:00 |
|
Mathias Vorreiter Pedersen
|
f1530aa4b4
|
Merge pull request #12977 from RasmusWL/accept-expected-changes-from-ci-script
Misc: Add script to accept `.expected` changes from CI
|
2023-05-17 14:55:23 +01:00 |
|
yoff
|
1c6d643b53
|
Merge pull request #13146 from yoff/python/container-summaries-1
Python: Container summaries, part 1
|
2023-05-17 15:45:37 +02:00 |
|
Óscar San José
|
baddfc4357
|
Suggestion from CR
|
2023-05-17 14:47:28 +02:00 |
|
Mathias Vorreiter Pedersen
|
06d5a7f0ef
|
Merge pull request #13139 from MathiasVP/faster-product-flow
C++: Speedup product dataflow
|
2023-05-17 13:40:39 +01:00 |
|
Asger F
|
13a989b390
|
Merge pull request #13194 from asgerf/js/remove-mention-of-tracked-node
JS: remove mention of TrackedNode from docs
|
2023-05-17 13:44:07 +02:00 |
|
Michael Nebel
|
c2ec1b0a81
|
C#: Add extension method testcase for Models as Data.
|
2023-05-17 13:11:32 +02:00 |
|
AlexDenisov
|
6a8855e1e5
|
Merge pull request #13201 from github/alexdenisov/make-swift-versions-more-reasonable
Swift: bump all versions to 0.1.0
|
2023-05-17 11:43:14 +01:00 |
|
Jeroen Ketema
|
8ad11595cb
|
Merge pull request #13199 from jketema/private-prod-flow
C++: Add forgotten `private` specifiers in product flow
|
2023-05-17 12:33:26 +02:00 |
|
Jeroen Ketema
|
e143002ae5
|
Merge pull request #13197 from jketema/test-annotation
C++: Add forgotten test annotation for `cpp/invalid-pointer-deref` test
|
2023-05-17 12:32:58 +02:00 |
|
Stephan Brandauer
|
7c02a9b6ea
|
Merge pull request #13185 from github/fix-automodel-extraction-parameterName
Java: Automodel Extraction Parameter Name Fix
|
2023-05-17 12:16:44 +02:00 |
|
Jeroen Ketema
|
014eb255bb
|
C++: Update expected test results
|
2023-05-17 12:09:22 +02:00 |
|
Jeroen Ketema
|
b83aaf9594
|
C++: Use range analysis-based hasSize predicate in cpp/invalid-pointer-deref
This is copied from `cpp/overrun-write`.
|
2023-05-17 11:39:41 +02:00 |
|
Alex Denisov
|
7e15386376
|
Swift: bump all versions to 0.1.0
|
2023-05-17 11:28:28 +02:00 |
|
Jeroen Ketema
|
31ae513f8c
|
C++: Implement the subpaths query predicate for cpp/invalid-pointer-deref
|
2023-05-17 11:27:37 +02:00 |
|
Jeroen Ketema
|
883ec7a0e9
|
C++: Add forgotten private specifiers in product flow
|
2023-05-17 11:24:46 +02:00 |
|
Jeroen Ketema
|
b1c1513a10
|
C++: Add forgotten test annotation in for cpp/invalid-pointer-deref test
|
2023-05-17 11:21:09 +02:00 |
|
Tom Hvitved
|
b46983a381
|
Merge pull request #13068 from hvitved/ruby/type-tracking-flow-through
Ruby: Include `self` parameters in type tracking flow-through logic
|
2023-05-17 10:59:01 +02:00 |
|
Asger F
|
f47acfb083
|
JS: Trim whitespace
|
2023-05-17 10:37:19 +02:00 |
|
Stephan Brandauer
|
a5ef738bb0
|
add extra parameters in query-messages
|
2023-05-17 08:37:18 +00:00 |
|
Asger F
|
f94fdc6348
|
JS: Remove mention of TrackedNode in docs
|
2023-05-17 10:37:12 +02:00 |
|
Tom Hvitved
|
867bdcf74d
|
Merge pull request #13183 from hvitved/csharp/ilogger-extension-methods
C#: Include arguments to `ILogger` extension method calls in `LogMessageSink`
|
2023-05-17 08:20:57 +02:00 |
|
Óscar San José
|
c599460a52
|
Change regexp to include released change-notes pattern
|
2023-05-16 21:53:09 +02:00 |
|
Jeroen Ketema
|
2dcdc71e45
|
Merge pull request #13142 from MathiasVP/precompute-states-in-overrun-write
C++: Restrict flow-state space of `cpp/overrun-write`
|
2023-05-16 21:31:56 +02:00 |
|
Michael B. Gale
|
f5b04ab859
|
Merge pull request #13187 from github/mbg/java/fix-java-version-too-old-more
Java: Use empty toolchains.xml for the `java-version-too-old` test
|
2023-05-16 19:26:07 +01:00 |
|
Mathias Vorreiter Pedersen
|
402212bab9
|
C++: Accept query test changes.
|
2023-05-16 18:35:05 +01:00 |
|
Mathias Vorreiter Pedersen
|
a5632a21d1
|
Merge branch 'main' into precompute-states-in-overrun-write
|
2023-05-16 18:09:16 +01:00 |
|
Mathias Vorreiter Pedersen
|
99545420d5
|
Merge pull request #13177 from MathiasVP/recommend-secure-randomness
Swift: Recommend a proper source of randomness in `swift/hardcoded-key`
|
2023-05-16 18:04:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
9def3dd440
|
Update swift/ql/src/queries/Security/CWE-321/HardcodedEncryptionKey.swift
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2023-05-16 17:42:34 +01:00 |
|
Geoffrey White
|
3bd16fa1d8
|
Merge pull request #13184 from geoffw0/docconsistency
Swift: Mirror changes made in the tutorial docs.
|
2023-05-16 17:42:03 +01:00 |
|
Mathias Vorreiter Pedersen
|
c93a051243
|
C++: Accept test changes.
|
2023-05-16 17:41:41 +01:00 |
|
Mathias Vorreiter Pedersen
|
150d4f341a
|
C++: Fix looping flow that goes from the output argument node and back into the function argument.
|
2023-05-16 17:39:59 +01:00 |
|
Mathias Vorreiter Pedersen
|
35e91bafa7
|
C++: Introduce 'indirect_sink' in dataflow tests.
|
2023-05-16 17:39:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
f5be8cfe58
|
Merge pull request #13167 from geoffw0/sensitivefps
Swift: Fix some FPs from the sensitive data library
|
2023-05-16 17:12:47 +01:00 |
|