Michael Nebel
77bfe39ca7
Shared: Address review comments.
2024-08-26 15:24:56 +02:00
Michael Nebel
4381bae5d1
Shared: Fix bad join.
2024-08-26 15:24:54 +02:00
Anders Schack-Mulligen
d8c8bcd386
Dataflow: Tweak qldoc.
2024-08-26 15:12:37 +02:00
Anders Schack-Mulligen
cbb58d0041
Dataflow: Add a getLocation rootdef.
2024-08-26 15:05:30 +02:00
Michael Nebel
34d83a6b0d
C#/Java: Address review comments.
2024-08-26 15:02:27 +02:00
Simon Friis Vindum
d9dbcdba34
C++: Fix imports
2024-08-26 12:42:44 +02:00
Asger F
4e3440aad0
Merge pull request #17275 from asgerf/cpp/taint-test-case-false-negative
...
C++: Reveal false negative in test case
2024-08-26 12:36:03 +02:00
Asger F
16c2cf24b3
C++: use inline annotation for missing flow
2024-08-26 11:53:31 +02:00
Asger F
592e2eafb6
Merge pull request #17262 from asgerf/shared/implicit-read
...
Shared: restrict flow after using implicit read
2024-08-26 11:48:50 +02:00
Tom Hvitved
e5d626f907
Data flow: Only recompute local big step in stage 6
2024-08-26 09:58:29 +02:00
Simon Friis Vindum
128053e214
C++: Add basic modeling of functions that don't throw
2024-08-26 09:37:44 +02:00
Tom Hvitved
c92c96fa78
Data flow: Compute local big step relation per stage
2024-08-26 09:15:27 +02:00
Chris Smowton
92910f961a
Merge pull request #17296 from smowton/smowton/admin/revert-mad-sink-conversion
...
Go: Revert problematic conversion from QL-specified sink nodes to models-as-data; add change note for one correct but undocumented fix
2024-08-25 15:10:49 +01:00
Chris Smowton
7cb67a50be
Add change note for ioutil fix
2024-08-24 17:49:26 +01:00
Chris Smowton
a832730a11
Revert "Convert squirrel sql-injection sinks to MaD (non-existent methods removed)"
...
This reverts commit 06f86dd22f
2024-08-24 17:44:40 +01:00
Chris Smowton
ab88b9b136
Revert "Upgrade and convert gorqlite sql-injection sinks to MaD"
...
This reverts commit ce0cb12c29
2024-08-24 17:43:15 +01:00
Chris Smowton
8fc3b00fb9
Revert "Convert gogf/gf sql-injection sinks to MaD"
...
This reverts commit db559f75b6
2024-08-24 17:43:12 +01:00
Chris Smowton
e7f788ae35
Revert "Convert sqlx sql-injection sinks to MaD"
...
This reverts commit 7ad63fc3e6
2024-08-24 17:43:09 +01:00
Chris Smowton
4e6d7fcb29
Revert "Convert Gorm sql-injection sinks to MaD"
...
This reverts commit ba310417a8
2024-08-24 17:43:06 +01:00
Chris Smowton
d8a2c08f12
Revert "Convert Xorm sql-injection sinks to MaD"
...
This reverts commit 3b2b7d7d1c
2024-08-24 17:43:03 +01:00
Chris Smowton
59bb142e8b
Revert "Convert Bun sql-injection sinks to MaD"
...
This reverts commit 3eb5b2669b
2024-08-24 17:43:00 +01:00
Chris Smowton
ec59492866
Revert "Convert Beego orm sql-injection sinks to MaD"
...
This reverts commit ad213579a1
2024-08-24 17:42:57 +01:00
Chris Smowton
fa07f16bcc
Revert "Convert database/sql sql-injection sinks to MaD"
...
This reverts commit 501bb3eb56
2024-08-24 17:42:55 +01:00
Chris Smowton
b3326babba
Revert "Convert database/sql/driver sql-injection sinks to MaD"
...
This reverts commit 652dd88c36
2024-08-24 17:42:52 +01:00
Chris Smowton
c33568b602
Revert "Convert mongodb nosql-injection sinks to MaD"
...
This reverts commit ec9d88b364
2024-08-24 17:42:49 +01:00
Chris Smowton
437df5c2a5
Revert "Convert gocb nosql-injection sinks to MaD"
...
This reverts commit 2d2afb17ad
2024-08-24 17:42:45 +01:00
Chris Smowton
a6e3b913d0
Revert "Convert logging sinks to use MaD"
...
This reverts commit fa472f5e18
2024-08-24 17:39:24 +01:00
Chris Smowton
686f47af98
Revert "Fix typo in package path"
...
This reverts commit 6f5a045437
2024-08-24 17:34:34 +01:00
Paolo Tranquilli
c4c8c9ddc1
Merge pull request #17291 from github/criemen/ripunzip
...
Make ripunzip installer accessible from outside this repo.
2024-08-23 20:14:44 +02:00
Cornelius Riemenschneider
3ac8108c4a
Address review.
2024-08-23 17:26:05 +02:00
Ian Lynagh
6a7d8b5301
Kotlin: Restrict some TrapWriter types to DiagnosticTrapWriter
...
We never use the greater generality, so this makes it easier to see
what's happening.
2024-08-23 15:41:21 +01:00
Ian Lynagh
7d500cf58c
Kotlin: Remove a redundant 'open'
2024-08-23 15:08:10 +01:00
Tom Hvitved
b6f1024114
Merge pull request #17290 from hvitved/csharp/revert-hotfix
...
Revert "C#: Add support for flow through side-effects on static fields"
2024-08-23 15:00:00 +02:00
Tamás Vajk
d710c1e89d
Merge pull request #17287 from tamasvajk/message-count-telemetry
...
C#: Add aggregated compiler and extractor message counts to extractio…
2024-08-23 14:41:27 +02:00
Cornelius Riemenschneider
d84e745ce9
Make ripunzip installer accessible from outside this repo.
...
* The relative path to misc doesn't work when running from another repo
* The buildifier dependency is not available from other repos,
therefore we can't pull in //misc/bazel without further refactoring.
Therefore, inline the runfiles snippet here.
2024-08-23 14:24:51 +02:00
Anders Schack-Mulligen
65189e09f5
Dataflow: Simplify using a SummaryCtx type.
2024-08-23 14:18:46 +02:00
Tom Hvitved
ea6092ad3f
Revert "C#: Add support for flow through side-effects on static fields"
...
This reverts commit 1bcac50db1
2024-08-23 14:10:56 +02:00
Asger F
8df7fbf6d6
Swift: update test output
...
The 'first' field is seen as a TaintInheritingContent, which means any read step for 'first' becomes a taint step too.
This type of taint step does not permit an implicit read before it, because it wasn't contributed by a configuration.
So there is no way for the taint to get out of the collection content before the taint step through '.first'.
The test previously passed because an implicit read at once of the earlier sinks could follow use-use flow down to the receiver of .first,
allowing it to escape the collection content.
2024-08-23 11:30:50 +02:00
Asger F
d27b28d371
C++: update test output
...
This reveals that some tests were passing for the wrong reasons.
See https://github.com/github/codeql/pull/17275
2024-08-23 11:29:24 +02:00
Asger F
9703f67794
Test output updates that only affect nodes/edges
2024-08-23 11:03:26 +02:00
Asger F
6bc8407bd6
Java: Update test output
2024-08-23 11:02:29 +02:00
Asger F
c3b36325b2
Shared: prevent use-use flow through implicit reads (part 1)
2024-08-23 11:02:28 +02:00
Michael Nebel
20d9fd11ac
Merge pull request #17288 from michaelnebel/shared/contentflow
...
Shared: ContentFlow.
2024-08-23 09:52:27 +02:00
Michael Nebel
19c2eb17c4
C#: Remove redundant imports.
2024-08-23 09:04:13 +02:00
Chris Smowton
67d94376e8
Merge pull request #17227 from smowton/smowton/fix/baseline-vs-nonroot-vendor-dirs
...
Go / configure-baseline: account for multiple vendor directories and the `CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS` setting
2024-08-22 15:00:51 +01:00
Michael Nebel
d935c47231
C#: Use the shared content flow implementation.
2024-08-22 15:46:01 +02:00
Michael Nebel
e6424f0f45
Shared: Make ContentDataFlow reusable.
2024-08-22 15:45:58 +02:00
Owen Mansel-Chan
18b99ffecc
Merge pull request #17284 from owen-mc/go/fix-frameworks-coverage
...
Go: Try to fix packages in frameworks coverage
2024-08-22 14:43:52 +01:00
Tamas Vajk
6827bedaa7
C#: Add aggregated compiler and extractor message counts to extraction telemetry query
2024-08-22 15:14:33 +02:00
Tamás Vajk
3dce56b0b1
Merge pull request #17276 from tamasvajk/impr/change-partial-method-location
...
C#: Change reporting location of partial methods
2024-08-22 15:10:21 +02:00
