Geoffrey White
f62ad75048
C++: Taint through std::string operator+=.
2020-08-11 17:03:02 +01:00
Geoffrey White
cf6f530823
C++: Taint through std::string operator+.
2020-08-11 16:58:55 +01:00
Geoffrey White
a57dfd6b67
C++: Taint through std::string append.
2020-08-11 16:54:39 +01:00
Geoffrey White
f824a893ca
C++: Add test cases for appending strings.
2020-08-11 16:50:52 +01:00
Geoffrey White
030ab4f626
C++: Add string append operators to the test (changes layout).
2020-08-11 16:47:56 +01:00
Jonas Jensen
2ea25b9d90
C++: Precise printing of integer bounds
...
The pretty-printing of a QL `float` didn't include enough digits to tell
whether a large number had accurate bounds. The `toString` value of a
float appears to be more precise.
2020-08-11 16:48:01 +02:00
lcartey@github.com
e1d4b98923
Java: Add further missing </p> to qhelp
2020-08-11 15:28:55 +01:00
lcartey@github.com
8a65dd2cd6
Java: Address review comments
2020-08-11 15:28:06 +01:00
Erik Krogh Kristensen
656ff9c441
autoformat
2020-08-11 15:40:30 +02:00
Anders Schack-Mulligen
21246624b4
Java: Add PrintWriter.format as XSS sink.
2020-08-11 15:15:39 +02:00
Rasmus Lerchedahl Petersen
dd4d00293d
Python: remaining class tests
2020-08-11 14:16:02 +02:00
Rasmus Lerchedahl Petersen
394991164f
Python: Update test expectations
2020-08-11 13:05:35 +02:00
Rasmus Lerchedahl Petersen
f834d71bab
Python: split out data model tests
2020-08-11 11:22:11 +02:00
Rasmus Lerchedahl Petersen
2c5de7f50e
Python: fix r/l confusion
2020-08-11 10:48:23 +02:00
Jonas Jensen
0476b97f63
Merge pull request #3789 from dilanbhalla/cpp
...
C++ Memory Unsafe Functions
2020-08-11 10:09:37 +02:00
Rasmus Lerchedahl Petersen
12dfc4afd9
Python: clean up validity check code
2020-08-11 08:16:49 +02:00
Rasmus Lerchedahl Petersen
3929e01350
Python: tests for async iterators/context managers
2020-08-11 08:10:46 +02:00
Rasmus Lerchedahl Petersen
681657f070
Merge branch 'master' of github.com:github/codeql into SharedDataflow_Classes
2020-08-11 07:24:17 +02:00
intrigus-lgtm
5a3acc231e
Fix typo
2020-08-11 01:01:53 +02:00
dilanbhalla
7bd5464b01
Update cpp/ql/src/experimental/Security/CWE/CWE-120/MemoryUnsafeFunctionScan.qhelp
...
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2020-08-10 15:43:16 -07:00
dilanbhalla
4dcaa7be57
pr fixes
2020-08-10 15:30:09 -07:00
dilanbhalla
dcfbb86674
pr fixes
2020-08-10 15:14:12 -07:00
Rasmus Lerchedahl Petersen
5da37f5cf4
Python: Update test expectations
2020-08-10 17:07:00 +02:00
Erik Krogh Kristensen
dc5167bbe7
autoformat
2020-08-10 11:52:45 +00:00
Jonas Jensen
1f432dc45f
Merge pull request #4023 from geoffw0/loopdir
...
C++: Exclude decrementing unsigned counters from inconsistentLoopDirection.ql
2020-08-10 12:10:29 +02:00
Rasmus Lerchedahl Petersen
a963f15100
Python: format strings are unnecessary and mess up
...
For some reason, we got no results when format strings were present.
2020-08-10 11:54:24 +02:00
Erik Krogh Kristensen
85de5aa16b
add deprecated modifier
...
Co-authored-by: Asger F <asgerf@github.com >
2020-08-10 10:51:21 +02:00
Rasmus Lerchedahl Petersen
959c6315c4
Python: update reference to fix tests
2020-08-10 09:24:45 +02:00
Erik Krogh Kristensen
410b696562
add deprecated aliases getId() forwarding to getIdentifier()
2020-08-10 09:11:38 +02:00
Rasmus Lerchedahl Petersen
639d914a47
Python: test Awaitable, framework for async test
2020-08-10 09:03:28 +02:00
CodeQL CI
7c4e10df17
Merge pull request #4014 from erik-krogh/stringify
...
Approved by esbena
2020-08-10 07:50:21 +01:00
Rasmus Lerchedahl Petersen
02478774c3
Python: tests for context managers
2020-08-10 08:11:25 +02:00
Rasmus Lerchedahl Petersen
5b7c7f933c
Python: tests for numeric classes
2020-08-08 00:31:29 +02:00
Rasmus Lerchedahl Petersen
f6d6f91a42
Python: tests for containers
2020-08-07 23:39:42 +02:00
Rasmus Lerchedahl Petersen
aff4535965
Python: fix tests for descriptors
2020-08-07 23:07:58 +02:00
Arthur Baars
5874ecc28b
Merge pull request #3976 from luchua-bc/java-unsecure-basic-auth
...
Java: Insecure basic authentication
2020-08-07 21:39:23 +02:00
Rasmus Lerchedahl Petersen
d84294df3d
Python: Check that tests are valid
2020-08-07 20:07:02 +02:00
Geoffrey White
3cf11eca2a
C++: And more test cases.
2020-08-07 17:30:07 +01:00
Erik Krogh Kristensen
aab2e6f803
update name of test file
2020-08-07 18:20:22 +02:00
Erik Krogh Kristensen
7670e7da97
retarget change-note for 1.26
2020-08-07 18:17:46 +02:00
Geoffrey White
7d491afaeb
C++: More test cases.
2020-08-07 17:05:13 +01:00
Geoffrey White
b7d2e0ca63
C++: Make all the tests meaningful.
2020-08-07 14:18:28 +01:00
CodeQL CI
1b0cfc96b3
Merge pull request #4015 from erik-krogh/nonAbstract
...
Approved by asgerf
2020-08-07 13:44:23 +01:00
Geoffrey White
0ba59210fc
Merge pull request #4020 from jbj/taint-range-based-for-ast
...
C++: Taint through RangeBasedForStmt (AST only)
2020-08-07 13:41:49 +01:00
Anders Schack-Mulligen
e3a12c5fea
Merge pull request #4004 from Marcono1234/patch-2
...
[Java] Clarify Wildcard.hasUpperBound() doc
2020-08-07 13:06:13 +02:00
Tom Hvitved
c20d763490
Merge pull request #3951 from raulgarciamsft/users/raulgarciamsft/dataset_serialization
...
C#: DataSet serialization
2020-08-07 12:54:10 +02:00
Jonas Jensen
c8911ab973
C++: Test range-based-for with std::vector too
2020-08-07 12:40:00 +02:00
Anders Schack-Mulligen
77db87efb7
Merge pull request #3968 from rvermeulen/java-importable-cwe-090
...
Java: Move LDAP injection sinks, sanitizers, and additional taint steps to importable location
2020-08-07 11:57:51 +02:00
Arthur Baars
c177eff3d8
Merge pull request #4027 from aschackmull/java/weak-crypto-precision
...
Java: Update precision of java/weak-cryptographic-algorithm.
2020-08-07 10:31:38 +02:00
Anders Schack-Mulligen
f9de8eb3b4
Java: Update precision of java/weak-cryptographic-algorithm.
2020-08-07 09:40:21 +02:00
