Commit Graph

348 Commits

Author SHA1 Message Date
Chanel Young
e91912e30d cleanup 2025-04-21 16:50:36 -07:00
Chanel Young
7359f912c5 added initial psscriptanalyzer rules, docs, tests 2025-04-21 16:44:52 -07:00
Mathias Vorreiter Pedersen
396a283da9 PS: Add tests for flow sources. 2025-04-15 22:43:21 +01:00
Mathias Vorreiter Pedersen
826e6a9ee8 PS: Add an inline expectations test library for flow sources. 2025-04-15 22:43:19 +01:00
Mathias Vorreiter Pedersen
dcc127832e PS: Make remote flow sources flow sources. 2025-04-15 22:43:18 +01:00
Mathias Vorreiter Pedersen
fa3fc4a0c3 PS: Fix more problems in MaD rows for sources. 2025-04-15 22:43:16 +01:00
Mathias Vorreiter Pedersen
a146630a09 PS: Delete redundant files. 2025-04-15 22:43:14 +01:00
Mathias Vorreiter Pedersen
43d9c701f8 PS: Rename Field and Property to Member. 2025-04-15 22:43:03 +01:00
Mathias Vorreiter Pedersen
f38948764c PS: Make type names lower case. 2025-04-15 22:36:31 +01:00
Mathias Vorreiter Pedersen
993511735a PS: Make method names lower case. 2025-04-15 22:02:46 +01:00
Mathias Vorreiter Pedersen
6455992402 PS: Add two more flow sources. 2025-04-10 20:44:11 +01:00
Mathias Vorreiter Pedersen
3d18175885 PS: Make it possible to specify a named argument that must be present in MaD. 2025-04-10 20:42:50 +01:00
Mathias Vorreiter Pedersen
43de3a131b PS: Use the existing MaD rows to model file reads as flow sources. 2025-04-10 20:25:17 +01:00
Mathias Vorreiter Pedersen
4aa9f85b5d PS: Accept test changes. 2025-04-10 19:02:54 +01:00
Mathias Vorreiter Pedersen
9adf028d41 PS: Fix environment variables. 2025-04-10 19:02:07 +01:00
Mathias Vorreiter Pedersen
bf9ed3bcb7 PS: Accept test changes. 2025-04-10 18:52:27 +01:00
Mathias Vorreiter Pedersen
6084789f09 PS: Fix the top level arguments after the AST cleanup. 2025-04-10 18:50:06 +01:00
Mathias Vorreiter Pedersen
793fd5eb7e PS: Delete a redundant file. 2025-04-10 18:49:45 +01:00
Mathias Vorreiter Pedersen
f8207fa92a PS: Add a testcase to demonstrate flow through Join-String. 2025-04-09 15:20:41 +01:00
Mathias Vorreiter Pedersen
ebb91dceb7 PS: Add a few more models after fixing MaD for Element content. 2025-04-09 15:20:39 +01:00
Mathias Vorreiter Pedersen
6de4765fe6 PS: Support implicit imports in API graphs. 2025-04-09 15:20:38 +01:00
Mathias Vorreiter Pedersen
a5afc3c582 PS: Flow through pipelines. 2025-04-09 15:20:36 +01:00
Mathias Vorreiter Pedersen
5f12d7c970 PS: Taint flow through all calls to 'toString'. 2025-04-09 15:20:35 +01:00
Mathias Vorreiter Pedersen
763effb50d PS: Add more models and support pipeline parameters in MaD. 2025-04-09 15:20:33 +01:00
Mathias Vorreiter Pedersen
f38c5f5b4f PS: Add lots of models. 2025-04-09 15:20:32 +01:00
Chanel
a2d4296329 Merge branch 'main' into powershell-automatic-variables-as-member-edges 2025-04-04 09:03:09 -07:00
Mathias Vorreiter Pedersen
8a58af8f84 PS: Add a model for 'EscapeSingleQuotedStringContent' and add a test. 2025-04-04 15:48:19 +01:00
Mathias Vorreiter Pedersen
65abf48ad6 PS: Add missing taint-flow and dataflow dispatch from models. 2025-04-04 15:40:35 +01:00
Mathias Vorreiter Pedersen
f482c9dba7 PS: Make the implementation of 'getExtraNodeFromType' more complete. This is still not good enough, but it's enough to get the flow we need for now. 2025-04-04 15:39:56 +01:00
Mathias Vorreiter Pedersen
03f356188b PS: Accept test changes. 2025-04-04 12:33:15 +01:00
Mathias Vorreiter Pedersen
cdd68b3951 PS: Improve the location of synthesized variables. 2025-04-04 12:33:13 +01:00
Mathias Vorreiter Pedersen
ebc732756f PS: Get rid of the pipelineVARIABLE and only have pipelinePARAMETER (and similarly for the by-propertyname versions). 2025-04-04 12:33:12 +01:00
Mathias Vorreiter Pedersen
16348b5484 PS: Consistently use the pipeline parameter as the parameter when it supplied in the program. 2025-04-04 12:33:11 +01:00
Mathias Vorreiter Pedersen
22bdcf0af2 PS: Force lower casing on method edges. 2025-04-03 20:33:04 +01:00
Mathias Vorreiter Pedersen
4df449d4b0 PS: Add an edge from the root node to automatic variables, and from a member read qualifier to a read. 2025-04-03 20:30:52 +01:00
Mathias Vorreiter Pedersen
4b14e5e7ec PS: Lift automatic variables to the cfg and dataflow layers. 2025-04-03 20:30:15 +01:00
Mathias Vorreiter Pedersen
50c57c2cb2 PS: Drive-by: Assign a location to top-level functions. 2025-04-03 20:29:44 +01:00
Mathias Vorreiter Pedersen
2f215c1e0f PS: Accept test changes. 2025-04-03 19:48:13 +01:00
Mathias Vorreiter Pedersen
403c182dc9 PS: Fixup SSA after GitHub's recent changes. 2025-04-03 19:48:06 +01:00
Mathias Vorreiter Pedersen
38536a9e38 PS: Accept test changes. 2025-04-03 18:46:12 +01:00
Mathias Vorreiter Pedersen
5151eb3b64 PS: Add dataflow for pipeline-by-property-name variables. 2025-04-03 18:46:11 +01:00
Mathias Vorreiter Pedersen
86ec291145 PS: Improve toString on phi nodes. 2025-04-03 18:46:10 +01:00
Mathias Vorreiter Pedersen
3acbd83297 PS: Drive-by fix: The variable access in a foreach loop implicitly writes to the variable. 2025-04-03 18:46:09 +01:00
Mathias Vorreiter Pedersen
4d04b11468 PS: Add some implicit reads at process blocks, and fix CFG for process blocks so that these reads appear in the CFG. 2025-04-03 18:46:08 +01:00
Mathias Vorreiter Pedersen
cd8e5e6d8d PS: Subclass AnyElement into positional or key-ional. 2025-04-03 18:46:06 +01:00
Mathias Vorreiter Pedersen
5fa3beb13d PS: Normalize parameter keywords and accept test changes. 2025-04-01 19:21:42 +01:00
Mathias Vorreiter Pedersen
1c380fb7fb PS: Add another missing flow found by Chanel. 2025-04-01 19:21:41 +01:00
Mathias Vorreiter Pedersen
8ae92a5cdb PS: Accept test changes. 2025-04-01 15:08:36 +01:00
Mathias Vorreiter Pedersen
129b7876d7 PS: Allow shadowing of automatic variables. 2025-04-01 15:08:35 +01:00
Mathias Vorreiter Pedersen
08dc8183e0 PS: Add Chanel's missing flow example. 2025-04-01 15:08:33 +01:00