Mathias Vorreiter Pedersen
|
490156d7db
|
C++: Remove the 'isIndirection' predicate on 'SourceVariable' and move the rootdef of 'getIRVariable' into the two subclasses.
|
2021-10-28 17:26:28 +01:00 |
|
Erik Krogh Kristensen
|
cfc5629435
|
apply all doc fixes
Co-authored-by: hubwriter <hubwriter@github.com>
|
2021-10-28 18:19:37 +02:00 |
|
Mathias Vorreiter Pedersen
|
05900cda87
|
C++: Rename 'Ssa' to 'SsaInternals' and move definitions from 'SSaImplSpecific' to 'SsaInternals'. Now we can avoid cyclic imports.
|
2021-10-28 17:10:48 +01:00 |
|
Erik Krogh Kristensen
|
15c90adec5
|
remove redundant cast where the type is enforced by an equality comparison
|
2021-10-28 18:08:20 +02:00 |
|
hubwriter
|
2096c0aab1
|
Merge pull request #6856 from github/hubwriter/typo-fix
Docs: Fix one-word typo
|
2021-10-28 17:05:17 +01:00 |
|
Erik Krogh Kristensen
|
e75448ebb0
|
remove redundant inline casts
|
2021-10-28 16:35:53 +02:00 |
|
Ian Lynagh
|
d425b3782e
|
Merge pull request #6992 from igfoo/igfoo/patterns
Java: instanceof pattern matching is no longer a preview feature
|
2021-10-28 15:05:53 +01:00 |
|
Erik Krogh Kristensen
|
c34b089bc5
|
autoformat
|
2021-10-28 16:02:36 +02:00 |
|
Mathias Vorreiter Pedersen
|
675e284c0e
|
C++: A 'LoadInstruction' in a store chain always sets 'certain = false'.
|
2021-10-28 14:52:57 +01:00 |
|
Ian Lynagh
|
246a515175
|
Java: instanceof pattern matching is no longer a preview feature
|
2021-10-28 14:19:30 +01:00 |
|
Mathias Vorreiter Pedersen
|
ee2541c3bc
|
C++: Fix QLDoc on 'getDestinationAddress'.
|
2021-10-28 14:12:22 +01:00 |
|
Mathias Vorreiter Pedersen
|
cde80ccf83
|
Replace 'hasLocationInfo' with 'getLocation'.
|
2021-10-28 14:09:26 +01:00 |
|
Mathias Vorreiter Pedersen
|
387c96d1e2
|
Rename 'SourceVariable.getVariable' to 'SourceVariable.getIRVariable' and replace 'Def.getVariable' to 'Def.getSourceVariable'.
|
2021-10-28 14:00:50 +01:00 |
|
Rasmus Lerchedahl Petersen
|
8c72cc0cdd
|
Python: update change note
|
2021-10-28 14:53:46 +02:00 |
|
yoff
|
beb0902db5
|
Merge pull request #6989 from RasmusWL/flask-file-sending-fixup
Python: Small fixup for `flask.send_from_directory`
|
2021-10-28 14:24:29 +02:00 |
|
Rasmus Lerchedahl Petersen
|
c92249525b
|
Python: update test expectations
|
2021-10-28 14:03:09 +02:00 |
|
Rasmus Wriedt Larsen
|
a33a8fd518
|
Python: Support flask.blueprints.Blueprint
Thanks to @haby0 who originally proposed this as part of
https://github.com/github/codeql/pull/6977
|
2021-10-28 14:02:03 +02:00 |
|
Nick Rolfe
|
f3977ea3d7
|
Merge pull request #6987 from github/nickrolfe/cleanup-ruby-docs
Ruby: clean up docs
|
2021-10-28 13:00:02 +01:00 |
|
Rasmus Lerchedahl Petersen
|
3abe3e43d0
|
Python: autoformat
|
2021-10-28 13:58:01 +02:00 |
|
Rasmus Wriedt Larsen
|
0acf6aaec8
|
Python: Add change-note
|
2021-10-28 13:45:34 +02:00 |
|
Rasmus Wriedt Larsen
|
8c3349f40f
|
Python: Properly model flask.send_from_directory
To not include `filename` as path-injection sink.
|
2021-10-28 13:41:39 +02:00 |
|
Mathias Vorreiter Pedersen
|
12e0185b0d
|
C++: Sync identical files.
|
2021-10-28 12:36:36 +01:00 |
|
Mathias Vorreiter Pedersen
|
7197216185
|
Add a copy of SsaImplCommon to the identical-files script.
|
2021-10-28 12:36:36 +01:00 |
|
Mathias Vorreiter Pedersen
|
fc3ff41d65
|
Merge branch 'main' into use-shared-ssa-in-ir-dataflow
|
2021-10-28 12:36:36 +01:00 |
|
Mathias Vorreiter Pedersen
|
2cd23e5ee0
|
Accept test changes.
|
2021-10-28 12:36:36 +01:00 |
|
Mathias Vorreiter Pedersen
|
8135dcefdd
|
Merge branch 'main' into use-shared-ssa-in-ir-dataflow
|
2021-10-28 12:36:25 +01:00 |
|
Rasmus Wriedt Larsen
|
228e9e973a
|
Python: Minor flask refactor
|
2021-10-28 13:36:03 +02:00 |
|
Mathias Vorreiter Pedersen
|
521d863429
|
C++: Autoformat.
|
2021-10-28 12:35:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
2547a8d746
|
C++: Fix join orders in 'DataFlowDispatch.qll' and Ssa.qll.
|
2021-10-28 12:35:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
21a1ee7758
|
C++: Add annoying case in SSA.qll related to 'NewExpr' and accept test changes.
|
2021-10-28 12:35:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
3efe60fdd2
|
C++: Accept test changes.
|
2021-10-28 12:35:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
5dbaea8b52
|
C++: Add a special dataflow step from InitializeIndirection instructions.
|
2021-10-28 12:35:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
b1ea00fa85
|
C++: Remove the taintflow edges that gives performance problems.
|
2021-10-28 12:35:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
710d0cfc3d
|
C++: Since we now no longer have flow from exact memory operands to LoadInstructions, we no longer have flow from PhiInstructions to LoadInstructions. We could allow flow in this particular case, but we might as well use the shared SSA library's phi edges.
|
2021-10-28 12:35:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
8caff41138
|
C++: Throw away most of the usage of IR-computed def-use information. Instead, we rely on the shared SSA library's use-use edges.
|
2021-10-28 12:35:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
3a488574e5
|
C++: Rewrite the PartialDefinitionNode classes to match the new StoreNodes.
|
2021-10-28 12:35:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
8bef79502f
|
C++: Similarly to the previous commit, we throw away the old memory-edges based way of doing read steps. Instead, we use the shared SSA library to transfer flow into a new ReadNode IPA branch, perform the necessary read steps, and then use the shared SSA library to transfer flow out of the ReadNode again.
|
2021-10-28 12:35:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
5ebefe2d30
|
C++: Throw away the old way of doing store steps using memory edges. Instead, we introduce a StoreNode IPA branch that does store steps and instead use the shared SSA library to transfer flow into these nodes before a store step, and out of them following a sequence of store steps.
|
2021-10-28 12:35:00 +01:00 |
|
Rasmus Wriedt Larsen
|
6648a695eb
|
Python: Add flask specific path-injection test
|
2021-10-28 13:34:18 +02:00 |
|
Rasmus Lerchedahl Petersen
|
b3ba75a00f
|
Python: Fix tests by managing local sources
`API::Node::getAwaited` is restriced to local sources
|
2021-10-28 13:22:59 +02:00 |
|
Nick Rolfe
|
2059896882
|
Ruby: clean up docs
|
2021-10-28 12:04:48 +01:00 |
|
Rasmus Wriedt Larsen
|
436152a46d
|
Python: Refactor flask file sending tests
|
2021-10-28 12:37:07 +02:00 |
|
Geoffrey White
|
e8895686f8
|
Merge pull request #6980 from geoffw0/unusedqhelp
C++: Remove old and unused qhelp files
|
2021-10-28 10:55:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
1842fed7a2
|
C++: Add shared SSA library and instantiate it with the IR.
|
2021-10-28 10:52:09 +01:00 |
|
Mathias Vorreiter Pedersen
|
13ce2569d7
|
C++/C#: Sync identical IR files·
|
2021-10-28 10:52:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
bccd4e9e93
|
C++: Add 'getReturnAddress' and 'getReturnAddressOperand' predicates to 'ReturnValueInstruction'.
|
2021-10-28 10:51:49 +01:00 |
|
Rasmus Wriedt Larsen
|
6d09334cba
|
Merge pull request #6330 from porcupineyhairs/pyPathTraversal
Python : Add Flask sinks for path injection query
|
2021-10-28 11:39:40 +02:00 |
|
Rasmus Wriedt Larsen
|
3fa66519f5
|
Merge branch 'main' into fastapi
|
2021-10-28 11:37:40 +02:00 |
|
Rasmus Wriedt Larsen
|
d9e5d179d2
|
Python: Minor fix to QLDoc
and auto-formatting
|
2021-10-28 11:15:34 +02:00 |
|
Rasmus Wriedt Larsen
|
358663ffbb
|
Python: Fix tests
|
2021-10-28 11:14:41 +02:00 |
|