Anders Schack-Mulligen
0ca3f3308b
Merge pull request #13478 from aschackmull/java/varcapture
...
Java: Add proper support for variable capture flow.
2023-08-08 16:22:56 +02:00
Anders Starcke Henriksen
7da6da1c93
Merge pull request #13852 from github/starcke/automodel-package-filter
...
Add option to filter automodel queries
2023-08-08 14:59:00 +02:00
Anders Schack-Mulligen
9d59f50340
Java: Review fixes.
2023-08-08 13:37:40 +02:00
Anders Schack-Mulligen
ab334f6c1b
Java: Always apply heuristic query regardless of existing models.
2023-08-08 10:01:43 +02:00
Anders Schack-Mulligen
cd22bb3505
Java: Add another test case.
2023-08-08 10:00:55 +02:00
Jami
5862cd2378
Merge pull request #13889 from jcogs33/jcogs33/fix-some-models
...
Java: remove duplicate models
2023-08-07 08:46:18 -04:00
Edward Minnix III
58d8a2d77f
Merge pull request #13899 from egregius313/egregius313/random-nextbytes-typo-fix
...
Java: Fix typo in `StdlibRandomSource::getOutput`
2023-08-07 07:36:44 -04:00
Tom Hvitved
2126ab0dde
Merge pull request #13901 from hvitved/dataflow/refactor
...
Data flow: Refactor shared library
2023-08-07 13:22:53 +02:00
Michael Nebel
e62ec888c0
Merge pull request #13506 from michaelnebel/java/threatmodels
...
Java: Threat Models
2023-08-07 12:50:01 +02:00
Tom Hvitved
693970f243
Java: Adjust to data flow refactor
2023-08-07 11:35:23 +02:00
Ed Minnix
23e2eb11dd
Change note
2023-08-07 00:23:58 -04:00
Ed Minnix
fe4eef0bcb
Fix typo, replace getBytes with nextBytes
2023-08-07 00:16:47 -04:00
Jami Cogswell
19622aec49
Java: remove duplicate 'Files.newOutputStream' ai model
2023-08-04 14:06:57 -04:00
Jami Cogswell
e64d581f7a
Java: remove duplicate 'Files.newInputStream' ai model
2023-08-04 14:05:05 -04:00
Jami Cogswell
d2a24dee7f
Java: remove duplicate 'Files.delete' ai model
2023-08-04 14:02:59 -04:00
Jami Cogswell
516831aa41
Java: remove duplicate 'Files.move' ai model
2023-08-04 14:01:27 -04:00
Jami Cogswell
c510d33fbf
Java: remove duplicate 'Files.deleteIfExists' ai model
2023-08-04 13:52:18 -04:00
Mathias Vorreiter Pedersen
abe3a816ce
Merge pull request #13851 from MathiasVP/sink-without-states
...
DataFlow: Support stateless `isSink` in `StateConfigSig`s
2023-08-04 18:01:42 +02:00
Michael Nebel
9c4d77a925
Java: Address review comments.
2023-08-04 13:47:30 +02:00
Tony Torralba
586c8803c5
Move the sources back the .ql files
...
Otherwise they would both apply at the same time, making both versions of the query identical.
2023-08-04 10:02:56 +02:00
Tony Torralba
e9bad321b6
Apply suggestions from code review
2023-08-04 09:21:45 +02:00
Paul Hodgkinson
fba37aa7c9
Merge branch 'main' into java/experimental/command-injection
2023-08-03 14:12:38 +01:00
aegilops
fc7f8409be
Fix up for code review
2023-08-03 13:50:40 +01:00
aegilops
3658710578
Fixed formatting, committed expected test results
2023-08-03 13:50:40 +01:00
Anders Schack-Mulligen
0ae81eace3
Java: update fixed test
2023-08-03 10:07:00 +02:00
Anders Schack-Mulligen
84316c41a3
Java: Add more qldoc.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
90052a3ca2
Java: Add proper types for capture nodes.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
37455ec29e
Java: Replace ratpack test fix with general heuristic summary.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
c5990311ca
Java: Redesign and reimplement variable capture flow.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
70bef64e2a
Java: Fix ratpack flow.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
a23e77ca58
Java: Disregard heap parameter in any-argument and any-parameter specs.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
9a4de208ef
Java: Fix qltests.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
d1a616a70a
Java: Add proper support for variable capture flow.
2023-08-03 10:04:02 +02:00
Anders Starcke Henriksen
131ae1aae9
Fix name in predicate.
2023-08-03 09:53:40 +02:00
Anders Starcke Henriksen
1c425a5602
Change from package to endpoint.
2023-08-03 09:50:23 +02:00
Anders Starcke Henriksen
9b8d7df370
Add option to filter automodel queries by package.
2023-08-03 09:50:23 +02:00
Mathias Vorreiter Pedersen
3007fdab5e
Sync identical files.
2023-08-02 14:33:33 +02:00
Anders Schack-Mulligen
7bc8bf616f
Merge pull request #13863 from aschackmull/dataflow/pack4
...
Dataflow: Move the shared library to a properly shared qlpack.
2023-08-02 14:19:49 +02:00
Stephan Brandauer
cb55b10edc
Merge pull request #13788 from github/kaeluka/automodel-telemetry-testing
...
Java: Tests for Automodel Extraction Queries
2023-08-01 15:30:26 +02:00
Anders Schack-Mulligen
405a3a73d1
Java: Remove irrelevant import.
2023-08-01 14:31:30 +02:00
Anders Schack-Mulligen
c34c667e6b
Java: Adjust to use the qlpack data-flow api.
2023-08-01 13:47:09 +02:00
Anders Schack-Mulligen
d7ea60e137
Java: Move data flow lib.
2023-08-01 13:47:08 +02:00
Michael Nebel
4568cccd71
Java: Add some unit tests for sourceModelKindConfig.
2023-08-01 12:56:13 +02:00
Michael Nebel
a9bc23fa3e
Java: Add threat model configuration related extensible predicates and some initial tuples.
2023-08-01 12:56:13 +02:00
Tony Torralba
b5d08ade59
Formatting
2023-08-01 09:35:25 +02:00
Anders Schack-Mulligen
e73e312e10
Java: Add change note.
2023-08-01 09:28:56 +02:00
Stephan Brandauer
621c05dc4b
Java: format
2023-08-01 09:19:03 +02:00
Stephan Brandauer
bc3e78f034
Java: add automodel framework mode test case for newly supported interface-method parameter extraction
2023-08-01 09:18:58 +02:00
Stephan Brandauer
058236877e
Java: Drive-by: fix oversight in #13823
...
In PR #13823 , we had rewritten the endpoints that are being considered for framework mode. We used to use `DataFlow::ParameterNode` as endpoints.
However, `ParameterNode`s do not exist for the implicit `this` parameter; they also do not exist for bodiless interface-methods.
In PR #13823 , we forgot to model that `this` only exists for non-static methods and to only consider parameters that we have source code for.
2023-08-01 09:18:58 +02:00
Stephan Brandauer
5ad984f22f
Java: update text expectations after merging #13823
2023-08-01 09:18:58 +02:00
