Mathias Vorreiter Pedersen
e845204ec9
C++: Add tests of internal MaD predicates and accept test changes.
2024-06-26 14:10:31 +01:00
Mathias Vorreiter Pedersen
d38ce61e03
C++: Mention in the QLDoc that you cannot instantiate templates in the signature string.
2024-06-26 13:54:28 +01:00
Mathias Vorreiter Pedersen
9a2c7d34af
C++: Simplify 'parseParens'.
2024-06-21 15:45:43 +01:00
Mathias Vorreiter Pedersen
2e74ae448c
C++: Accept more test changes.
2024-06-21 14:04:08 +01:00
Mathias Vorreiter Pedersen
40fb59dc0b
C++: Add gnu iterator models to regain TP.
2024-06-21 14:04:07 +01:00
Mathias Vorreiter Pedersen
c8f3c1a798
C++: Accept test changes. Nothing exciting to see here.
2024-06-21 14:04:06 +01:00
Mathias Vorreiter Pedersen
f507b51170
C++: Fix Code Scanning errors.
2024-06-21 14:04:05 +01:00
Mathias Vorreiter Pedersen
3e9862391b
C++: No need for 'decodeUnknownContent' if we specify the MaD summary rows correctly. This avoids a bad join in a compiler-generated predicate.
2024-06-21 14:04:03 +01:00
Mathias Vorreiter Pedersen
6513c33d26
C++: Accept test changes.
2024-06-21 14:04:02 +01:00
Mathias Vorreiter Pedersen
47309df2a9
C++: Fix 'toString' on parameter and argument positions.
2024-06-21 12:47:46 +01:00
Mathias Vorreiter Pedersen
85da3d2f13
C++: Update MaD models.
2024-06-21 12:47:43 +01:00
Mathias Vorreiter Pedersen
b0bd7a983f
C++: Add MaD syntax for an arbitrary number of dereferences.
2024-06-21 12:47:42 +01:00
Mathias Vorreiter Pedersen
4dc13e850e
C++: Add summaries for std dequence containers.
2024-06-21 12:47:40 +01:00
Mathias Vorreiter Pedersen
716df0c7ce
C++: Support a richer language in MaD summaries for selecting member functions.
2024-06-21 12:47:39 +01:00
Mathias Vorreiter Pedersen
901fac4282
C++: Support 'Element' content in flow summaries.
2024-06-19 13:40:06 +01:00
Mathias Vorreiter Pedersen
013ee9c15e
C++: Add support for 'Element' content in dataflow.
2024-06-19 13:39:39 +01:00
Mathias Vorreiter Pedersen
c158f8054e
C++: Get rid of all the 'StdContainer' taint models.
2024-06-19 13:36:19 +01:00
Mathias Vorreiter Pedersen
e244eef3b5
Merge pull request #16748 from MathiasVP/rc-3.14-mergeback-2
...
Mergeback from `rc/3.14`
2024-06-13 10:44:46 +01:00
Mathias Vorreiter Pedersen
0150269503
Merge branch 'rc/3.14' into rc-3.14-mergeback-2
2024-06-13 09:14:40 +01:00
Mathias Vorreiter Pedersen
9384f6189e
Merge pull request #16740 from MathiasVP/fix-join-in-ssa
...
SSA: Fix bad join in `lastRefRedefExt`
2024-06-13 09:06:20 +01:00
Mathias Vorreiter Pedersen
5b3403c4b1
C++: Fix bad join in 'lastRefRedefExt'.
2024-06-12 15:24:58 +01:00
Tamás Vajk
a756f86847
Merge pull request #16732 from tamasvajk/refactor/extraction-states
...
C#: Refactor extractor state classes and simplify extraction code
2024-06-12 15:20:11 +02:00
Tamas Vajk
0df6a1c4b1
Fix quality issues
2024-06-12 14:48:16 +02:00
Tamas Vajk
e3cbf1479a
Fix quality issue
2024-06-12 13:25:34 +02:00
Arthur Baars
4ee80653e2
Merge pull request #16471 from Sim4n6/ruby-UBV
...
Ruby: Add some method calls as a Source
2024-06-12 12:42:08 +02:00
Tamas Vajk
3551386a1a
Simplify standalone extractor
2024-06-12 12:30:08 +02:00
Owen Mansel-Chan
6af1ed9d75
Merge pull request #16730 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-06-12 11:22:29 +01:00
Tamas Vajk
cdca607828
Rename Extractor to ExtractionContext
2024-06-12 11:43:19 +02:00
Tamas Vajk
af2a78ea4d
Reduce references to Extract class
2024-06-12 11:13:05 +02:00
github-actions[bot]
bbeebfae73
Add changed framework coverage reports
2024-06-12 00:17:31 +00:00
Joe Farebrother
f441c68f7e
Merge pull request #16657 from joefarebrother/python-partial-ssrf-fp
...
Python: Add additional sanitizers to SSRF
2024-06-11 23:20:50 +01:00
Michael B. Gale
e9bd85e0ba
Merge pull request #16704 from github/mbg/go/fix/build-scripts-running-more-than-once
2024-06-11 22:23:15 +01:00
Michael B. Gale
202d77d94f
Merge pull request #16726 from github/mbg/go/log-one-line-for-stray-sources
...
Go: Only log one line for stray .go files
2024-06-11 22:16:21 +01:00
Owen Mansel-Chan
24c9062b35
Merge pull request #16671 from owen-mc/go/mad-builtin-taint-models-try-2
...
Go: Convert old-style models for built-ins to MaD
2024-06-11 19:45:34 +01:00
Michael B. Gale
0f56e408f8
Merge branch 'main' into mbg/go/fix/build-scripts-running-more-than-once
2024-06-11 18:29:41 +01:00
Michael B. Gale
20b7def543
Go: Only log one line for stray .go files
2024-06-11 18:06:08 +01:00
Geoffrey White
cf4736c8f6
Merge pull request #16545 from geoffw0/salvage
...
Swift: Salvage
2024-06-11 17:51:17 +01:00
Mathias Vorreiter Pedersen
67b327a0f7
Merge pull request #16725 from MathiasVP/rc-3.14-mergeback
...
Mergeback from `rc/3.14`
2024-06-11 17:37:40 +01:00
Tony Torralba
a299afaf51
Merge pull request #16712 from mbaluda/main
...
Java: Add `FileUtils` sinks to path injection
2024-06-11 17:50:08 +02:00
Mathias Vorreiter Pedersen
3351b9547d
Merge branch 'rc/3.14' into rc-3.14-mergeback
2024-06-11 16:21:08 +01:00
Owen Mansel-Chan
2ae7fa4897
Tests: accept expected changes
2024-06-11 16:20:06 +01:00
Owen Mansel-Chan
6fd2ab7cef
Tests: Accept model renumbering in edge provenance
2024-06-11 16:18:18 +01:00
Mathias Vorreiter Pedersen
b88a1b2d1e
Merge pull request #16724 from MathiasVP/cache-asexpr
...
C++: Cache `asExpr` (and `asIndirectExpr`) implementation predicates
2024-06-11 16:17:29 +01:00
Owen Mansel-Chan
700604a1c2
Convert old-style models for built-ins to MaD
...
These models are to cover the special cases where `append` can be used
with a second argument which is a string followed by `...`, and `copy`
can be used with a second argument which is a string. In this case the
taint is carried by the whole string, rather than in array elements.
2024-06-11 16:16:45 +01:00
Joe Farebrother
93f10fcf14
Add sanitizers for compiled regexes
2024-06-11 15:44:16 +01:00
Mathias Vorreiter Pedersen
6a6978398a
C++: Add file QLDoc.
2024-06-11 15:39:45 +01:00
Mathias Vorreiter Pedersen
333df03f64
C++: Cache more things.
2024-06-11 15:39:43 +01:00
Mauro Baluda
a464a8e48e
@mbaluda
...
Update provenance in test expectations
2024-06-11 15:15:50 +02:00
Tamas Vajk
11faf08ed0
Remove specific standalone/tracing extractor state classes
2024-06-11 14:16:35 +02:00
Geoffrey White
214db5c20d
Swift: Make CI more happy.
2024-06-11 12:49:58 +01:00
