Asger F
ed80e4e284
JS: Change note
2024-04-17 08:41:27 +02:00
Asger F
c4eeda1560
JS: Bump EXTRACTOR_VERSION
2024-04-17 08:34:26 +02:00
Rasmus Wriedt Larsen
d5160927f5
Merge branch 'main' into js/strict-mode
2024-04-10 17:33:01 +02:00
Rasmus Wriedt Larsen
c4e674b8d2
Merge pull request #16173 from RasmusWL/remove-lib-stubs
...
Python: Remove deprecated stubs for points-to tests
2024-04-10 17:12:16 +02:00
Erik Krogh Kristensen
d33e8adae4
Merge pull request #16174 from erik-krogh/no-arr-ruby-shell
...
RB: don't mention arrays in the qhelp for rb/shell-command-constructed-from-input
2024-04-10 17:08:24 +02:00
Owen Mansel-Chan
1c0ef90e96
Merge pull request #15865 from owen-mc/go/extractor/no-intermediate-string-values
...
Go: extractor: do not store intermediate values in long string concatenations
2024-04-10 15:31:51 +01:00
Michael Nebel
b79d738f64
Merge pull request #15993 from michaelnebel/csharp/assemblycachefiltering
...
C#: Exclude Semmle.* dlls when using the executing runtime.
2024-04-10 16:22:22 +02:00
Owen Mansel-Chan
dc3ea6c418
Merge pull request #11703 from Kwstubbs/go-taintedpath-additions
...
Go: Add and Modify Sanitizers For TaintedPath
2024-04-10 15:13:13 +01:00
Owen Mansel-Chan
5ec3934ac8
Merge branch 'main' into go/extractor/no-intermediate-string-values
2024-04-10 14:51:22 +01:00
Michael Nebel
ef68e33449
C#: Address review comments.
2024-04-10 14:48:02 +02:00
erik-krogh
4ae25c2d34
don't mention arrays in the qhelp for rb/shell-command-constructed-from-input, because there are no array
2024-04-10 14:26:00 +02:00
Owen Mansel-Chan
0e67aa5baa
Merge pull request #16172 from owen-mc/go/perf/synth-location
...
Go: Avoid magic in `TSynthLocation` definition
2024-04-10 13:02:18 +01:00
Owen Mansel-Chan
f45305ec3f
Merge pull request #16170 from owen-mc/go/add-comments-in-extractor
...
Go: Add comments in extractor with link to online documentation
2024-04-10 12:50:18 +01:00
Michael Nebel
ff498f616a
C#: Some renaming.
2024-04-10 13:20:57 +02:00
Rasmus Wriedt Larsen
9615e2ded9
Python: Remove deprecated stubs for points-to tests
...
I grep'ed through all our options files, and couldn't find any tests
that relies on these anymore 👍
2024-04-10 13:12:36 +02:00
Rasmus Wriedt Larsen
78ca691912
Python: remove deprecated points-to test for zope
2024-04-10 13:12:17 +02:00
Rasmus Wriedt Larsen
3db560158a
Merge pull request #16169 from RasmusWL/mad-remoteflowsource
...
Python: Fix `RemoteFlowSourceFromCsv`
2024-04-10 13:06:42 +02:00
Mathias Vorreiter Pedersen
59936c8642
Merge pull request #16151 from MathiasVP/use-shared-typeflow-lib
...
C++: Use the shared typeflow library
2024-04-10 12:02:03 +01:00
Michael Nebel
3b42dc25a1
C#: Also use AssemblyLookupLocation for framework dlls.
2024-04-10 12:56:48 +02:00
Owen Mansel-Chan
a18a4fb62e
Avoid magic in TSynthLocation definition
...
This improves performance, because in this case magic is not beneficial.
2024-04-10 11:47:13 +01:00
Michael Nebel
99f0ed26e9
C#: Make the assembly lookup case insensitive on the dll file extension and log if no dlls are found in a directory.
2024-04-10 12:45:28 +02:00
Michael Nebel
9eb13833fa
C#: Code quality improvements.
2024-04-10 12:45:18 +02:00
Michael Nebel
2bea927d43
C#: Update expected test output.
2024-04-10 12:41:39 +02:00
Michael Nebel
d04bf6b6d6
C#: Don't include Semmle.* dlls, if the executing runtime is used as framework.
2024-04-10 12:41:39 +02:00
Michael Nebel
646b272b4e
C#: Move the AssemblyPath class to its own file.
2024-04-10 12:41:39 +02:00
Michael Nebel
6299d9cecd
C#: Introduce AssemblyPath and re-factor AssemblyCache to use this instead of strings.
2024-04-10 12:41:29 +02:00
Michael Nebel
bee54e4247
C#: Add desktop runtime dependencies integration test.
2024-04-10 12:35:52 +02:00
Owen Mansel-Chan
b4829addf7
Add comments with link to online doc
2024-04-10 10:48:23 +01:00
Rasmus Wriedt Larsen
4fed3cf12d
Python: Fix RemoteFlowSourceFromCsv
2024-04-10 11:31:34 +02:00
Dave Bartolomeo
996f535f0b
Merge pull request #16103 from github/dbartol/javadoc-record
...
Allow `@param` tags to apply to record parameters
2024-04-09 14:21:45 -04:00
Dave Bartolomeo
b9cfeaf614
Add test case
2024-04-09 12:41:32 -04:00
Taus
3656376cc4
Merge pull request #16064 from github/max-schaefer/fix-unexploitable-types
...
Automodel: Filter unexploitable types in application mode.
2024-04-09 17:14:53 +02:00
Mathias Vorreiter Pedersen
a53ef495ee
C++: Simplify 'hasExactBufferType' and add comments.
2024-04-09 16:04:20 +01:00
Felicity Chapman
5253c96aa2
Merge pull request #16162 from github/felicitymay/threat-models-csharp
...
Make duplicated content clear
2024-04-09 15:47:44 +01:00
Mathias Vorreiter Pedersen
291cc0a671
C++: Anonymous namespaces provide internal linkage.
2024-04-09 15:25:13 +01:00
Owen Mansel-Chan
5e4a5c1571
Merge pull request #16160 from owen-mc/java/delete-jdk-internal-models
...
Java: Delete models for JDK internal packages
2024-04-09 15:01:16 +01:00
Mathias Vorreiter Pedersen
2a7420ce11
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/TypeFlow.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-04-09 15:00:23 +01:00
Max Schaefer
deb78b248b
Apply suggestions from code review
...
Co-authored-by: Taus <tausbn@github.com >
2024-04-09 14:38:17 +01:00
Tom Hvitved
6c9a0e4a9a
Merge pull request #16154 from hvitved/ruby/redundant-implicit-read
...
Ruby: Remove two redundant `allowImplicitRead` predicates
2024-04-09 15:38:05 +02:00
Rasmus Wriedt Larsen
6f1a9d4574
Merge pull request #16159 from RasmusWL/fix-integration-tests
...
Python: Fixup integration tests after no dep inst
2024-04-09 15:08:20 +02:00
Felicity Chapman
e6d63b980d
Make duplicated content clear
2024-04-09 14:05:42 +01:00
Rasmus Wriedt Larsen
16e2ac898f
JS: Parser: Remove direct this.strict assignment
2024-04-09 14:58:14 +02:00
Rasmus Wriedt Larsen
6ce38be3cc
Merge pull request #16112 from github/tausbn/python-various-extractor-fixups
...
Python: Various extractor fixups
2024-04-09 14:46:23 +02:00
Rasmus Wriedt Larsen
1985dd629d
JS: Parser: Never run in strict mode
...
This initial change is a bit of a hacky way to achieve our goals (since
it doesn't rewrite all the uses of this.strict), but it is easy to
understand is correct. Let's accept test changes NOW, and ensure that
later changes don't change things further.
2024-04-09 14:37:07 +02:00
Michael Nebel
bd1de179b3
Merge pull request #15887 from michaelnebel/csharp/qualifiedname
...
C#: Fully qualified name.
2024-04-09 14:26:36 +02:00
Owen Mansel-Chan
ae8240a695
Delete models for JDK internal packages
2024-04-09 13:23:03 +01:00
Rasmus Wriedt Larsen
e9e7ccddce
Python: delete force-enable-library-extraction integration test
2024-04-09 14:02:34 +02:00
Rasmus Wriedt Larsen
a0d6324f68
Python: Fix ignore-venv integration test
...
Now that we no longer support the fallback option
(https://github.com/github/codeql/pull/16127 )
2024-04-09 14:01:10 +02:00
Rasmus Wriedt Larsen
bb4952f557
Revert "Python: Disable failing integration tests"
...
This reverts commit 8c2455fc11
2024-04-09 14:00:25 +02:00
Paolo Tranquilli
7b2dc325ec
Merge pull request #16153 from github/redsun82/setup-swift-fix
...
CI: apply `setup-swift` workaround
2024-04-09 13:15:39 +02:00
