Cornelius Riemenschneider
ed7f3305d9
Move legacy marker only to java tests.
2024-08-19 10:47:15 +02:00
Geoffrey White
a25d9c7397
Merge pull request #17220 from paldepind/reuse-unbounded-in-tainted-allocation-size
...
C++: Reuse bounded predicate in TaintedAllocationSize query
2024-08-19 09:37:55 +01:00
Cornelius Riemenschneider
2933a3be9c
Merge pull request #17088 from github/criemen/modext-isolation
...
`crate_universe`: Enable modext isolation.
2024-08-19 10:22:55 +02:00
Cornelius Riemenschneider
675e920667
Fix formatting.
2024-08-19 09:00:08 +02:00
Cornelius Riemenschneider
1faad979ad
Address review.
2024-08-19 08:54:56 +02:00
Michael Nebel
ec9f533325
Merge pull request #17248 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-08-19 08:26:47 +02:00
Simon Friis Vindum
1665badc83
C++: Add change note for cpp/uncontrolled-allocation-size
2024-08-19 08:23:40 +02:00
Simon Friis Vindum
1959e1929e
C++: Reuse bounded predicate in TaintedAllocationSize query
2024-08-19 08:23:32 +02:00
github-actions[bot]
9279bebf07
Add changed framework coverage reports
2024-08-19 00:19:04 +00:00
Cornelius Riemenschneider
f9bc97b2a1
crate_universe: Enable modext isolation.
...
This should allow us to build our python and ruby
code independently - in particular, we can now do shallow
checkouts of one without the other.
Previously, the modext introduced cross-dependency.
This also reduces the amount of work we do in the
crate universe processing for the other language, even
though it's unused.
This does need renaming the module, as otherwise
the generated paths from rules_rust get too long
for Windows :(
2024-08-18 21:00:30 +02:00
Geoffrey White
b001f47c17
Merge pull request #17211 from paldepind/uncontrolled-allocation-size-docs
...
C++: Update documentation for cpp/uncontrolled-allocation-size to clarify its scope
2024-08-16 16:36:22 +01:00
Geoffrey White
e3b9b0a9bd
Merge pull request #17210 from geoffw0/mailto
...
Swift: Fix false positives in the swift/cleartext-transmission query
2024-08-16 16:23:09 +01:00
Simon Friis Vindum
5504799d44
Merge branch 'main' into uncontrolled-allocation-size-docs
2024-08-16 16:15:14 +02:00
Anders Schack-Mulligen
3a9610795b
Merge pull request #16808 from JLLeitschuh/patch-8
...
Align Java CommandInjectionRuntimeExec.ql Severity
2024-08-16 15:14:48 +02:00
Simon Friis Vindum
07800ea7ef
Merge branch 'main' into uncontrolled-allocation-size-docs
2024-08-16 13:10:08 +02:00
Simon Friis Vindum
5548304432
C++: Grammar improvements to query help text
2024-08-16 13:08:34 +02:00
Chris Smowton
f7d8c210e5
Merge pull request #17239 from smowton/smowton/admin/camel-test
...
Java: add test for Apache Camel dead-code analysis
2024-08-16 11:00:30 +01:00
Rasmus Wriedt Larsen
d6af999c2d
Merge pull request #17234 from github/felicitymay-patch-1
...
Update CookieInjection.ql to remove period from @name
2024-08-16 11:26:16 +02:00
Rasmus Wriedt Larsen
25fc5f3803
Merge pull request #17209 from RasmusWL/threat-models-stdin
...
ThreatModels: Add `stdin` kind
2024-08-16 11:01:33 +02:00
Rasmus Wriedt Larsen
c3d8efc43d
Merge branch 'main' into stdin3
2024-08-16 09:54:45 +02:00
Anders Schack-Mulligen
ae013ba01a
Merge pull request #17235 from aschackmull/dataflow/fix-missing-subpaths
...
Dataflow: Fix missing subpaths due to type strengthening.
2024-08-16 08:41:35 +02:00
Anders Schack-Mulligen
51c43a7440
Java: Accept expected changes.
2024-08-16 07:01:35 +02:00
Anders Schack-Mulligen
86708c9ff8
Dataflow: Fix missing subpaths due to type strengthening.
2024-08-15 18:57:10 +02:00
Chris Smowton
0b56bf98f3
Java: add test for Apache Camel dead-code analysis
...
This exercises code that detects Camel entry-points and marks them as live.
2024-08-15 17:26:38 +01:00
Tom Hvitved
fb7b89f309
Merge pull request #17237 from aschackmull/java/fix-merge-conflict
...
Java: Fix expected files following semantic merge conflict.
2024-08-15 17:25:03 +02:00
Rasmus Wriedt Larsen
7a446231b6
C#: Accept benign test changes
2024-08-15 16:20:00 +02:00
Anders Schack-Mulligen
e77c3dfda1
Java: Fix expected files following https://github.com/github/codeql/pull/17233 and https://github.com/github/codeql/pull/17224 .
2024-08-15 15:45:37 +02:00
Rasmus Wriedt Larsen
78770bcd1b
Docs: Mention new stdin threat-model
2024-08-15 15:45:21 +02:00
Rasmus Wriedt Larsen
1e7eae58f4
Java: Add change-note
2024-08-15 15:45:20 +02:00
Rasmus Wriedt Larsen
ebafe65ac2
C#: Fixup test expectations from using stdin
2024-08-15 15:45:20 +02:00
Rasmus Wriedt Larsen
43b61dd2aa
C#: Support stdin in LocalFlowSource
2024-08-15 15:45:20 +02:00
Rasmus Wriedt Larsen
fee38b3781
Java: Fixup test
2024-08-15 15:37:35 +02:00
Rasmus Wriedt Larsen
1e12c11adc
Java: Model System.in as stdin threat-model
2024-08-15 15:37:35 +02:00
Rasmus Wriedt Larsen
7395223410
C#: Model System.Console reads as stdin threat-model
2024-08-15 15:36:28 +02:00
Rasmus Wriedt Larsen
157d0b7f37
ThreatModels: Add stdin kind
...
None of the current local subgroups precisely captures stdin, so
although it's much like both commandargs and file, a separate kind seems
better.
2024-08-15 15:36:28 +02:00
Anders Schack-Mulligen
7d61d9282c
Merge pull request #17233 from aschackmull/dataflow/match-summarylabel
...
Dataflow: Fix missing join on summaryLabel.
2024-08-15 14:55:38 +02:00
Felicity Chapman
fcb2b5730f
Update CookieInjection.ql to remove period
2024-08-15 13:17:13 +01:00
Anders Schack-Mulligen
6f23e8dcf3
Merge pull request #17224 from aschackmull/java/inlineflow-pathgraph
...
Java: Add PathGraph to test output for default inline flow tests.
2024-08-15 13:35:24 +02:00
Anders Schack-Mulligen
a85f8a2fbd
Java/C#: Accept expected changes.
2024-08-15 13:24:31 +02:00
Paolo Tranquilli
f0de9f9276
Merge pull request #17232 from github/redsun82/kotlin
...
Kotlin: fix wrapper on windows and use `os.execv` on POSIX
2024-08-15 12:50:46 +02:00
Chris Smowton
3450e509fe
Merge pull request #17228 from smowton/smowton/admin/missing-change-notes
...
Java: add change notes for three recent buildless fixes
2024-08-15 10:56:22 +01:00
Anders Schack-Mulligen
2c591f5420
Dataflow: Fix missing join on summaryLabel.
2024-08-15 11:05:08 +02:00
Michael Nebel
4b3cc5bd0e
Merge pull request #17219 from michaelnebel/shared/neutralsourcesink
...
C#/Java: Fix source- and sink callable provenance overlap.
2024-08-15 11:02:18 +02:00
Anders Schack-Mulligen
fb1dfd4217
Java: Accept test changes.
2024-08-15 10:32:12 +02:00
Paolo Tranquilli
beba032ba5
Kotlin: fix wrapper on windows
2024-08-15 10:31:32 +02:00
Anders Schack-Mulligen
3cdc8d5eca
Java: Add PathGraph to test output for default inline flow tests.
2024-08-15 10:17:31 +02:00
Michael Nebel
b16dc20bbd
Merge pull request #17230 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-08-15 09:31:16 +02:00
github-actions[bot]
4c0f31d77b
Add changed framework coverage reports
2024-08-15 00:18:12 +00:00
Chris Smowton
b4a42de7f4
Java: add change notes for three recent buildless fixes
2024-08-14 18:34:25 +01:00
Anders Schack-Mulligen
c1d03acd45
Merge pull request #17221 from aschackmull/dataflow/qltest-missing-subpath
...
Dataflow: Add test highlighting missing subpath.
2024-08-14 15:46:32 +02:00
