Commit Graph

40697 Commits

Author SHA1 Message Date
luchua-bc
b6a6ed5ba3 Add a recommendation category query for local user input and check Apache file upload 2021-11-19 04:23:19 +00:00
Erik Krogh Kristensen
62730e7a4b Merge pull request #7174 from erik-krogh/fixCSharpImport
C#: move Linq/Helpers.qll to the lib folder
2021-11-18 19:40:53 +01:00
Tom Hvitved
a4538de3a3 Shared CFG: Rename TNode to TCfgNode
This is in order to avoid name clash with the often so-named IPA type for data-
flow nodes. The name clash is not problematic because they are both in scope,
but because (cached) IPA types with overlapping names are known to sometimes
result in re-evaluation of cached stages, when one of the IPA types gets an
internal `#2` suffix in one query run, and the other IPA type gets the suffix
in another run.
2021-11-18 19:15:36 +01:00
Tom Hvitved
2f7250a0b3 Merge pull request #7160 from hvitved/csharp/cfg/static-scope
C#: Extend `(Annotated)ExitNode` to also cover static fields
2021-11-18 19:15:06 +01:00
Erik Krogh Kristensen
1a0379a894 introduce type resolution consistency checks 2021-11-18 18:44:34 +01:00
Erik Krogh Kristensen
d89e430db2 QL: introduce type resolution consistency checks 2021-11-18 18:44:34 +01:00
Erik Krogh Kristensen
15b56585f9 update inefficientStringComparison, to avoid underscores 2021-11-18 18:43:54 +01:00
Erik Krogh Kristensen
37c2db240c QL: update inefficientStringComparison, to avoid underscores 2021-11-18 18:43:54 +01:00
Erik Krogh Kristensen
63ecae5426 update imports 2021-11-18 17:31:17 +01:00
Erik Krogh Kristensen
2d78cce7a5 move Linq/Helpers to the lib folder 2021-11-18 16:59:34 +01:00
Erik Krogh Kristensen
ee858d840e get ReDoSUtil in sync for ruby 2021-11-18 16:49:34 +01:00
Tom Hvitved
2218516685 Ruby: Remove CP in EnsureSplitImpl::exit/3 2021-11-18 16:05:09 +01:00
Henry Mercer
46958e5bff Merge pull request #7168 from erik-krogh/useMinInsteadofRank1
ATM: use min() instead of rank[1]
2021-11-18 14:56:49 +00:00
Erik Krogh Kristensen
af55f172ae use A/An/The to start qlDoc for classes 2021-11-18 15:42:45 +01:00
Erik Krogh Kristensen
011fc20963 use matches instead of regexpMatch 2021-11-18 15:41:25 +01:00
Alex Ford
1ec935dee6 Ruby: make documentation of IOReader and FileReader less ambiguous 2021-11-18 14:35:44 +00:00
Anders Schack-Mulligen
6815a13a00 Merge pull request #6931 from hvitved/dataflow/restrict-derived-summaries
Data flow: Restrict derived flow summaries
2021-11-18 15:31:55 +01:00
Alex Ford
bd940712de Update ruby/ql/lib/codeql/ruby/frameworks/Files.qll
Co-authored-by: Harry Maclean <hmac@github.com>
2021-11-18 14:18:39 +00:00
Erik Krogh Kristensen
036d749378 Merge pull request #126 from github/erik-krogh/update-sources
update sources
2021-11-18 14:32:01 +01:00
Erik Krogh Kristensen
44ffc7e155 QL: Merge pull request #126 from github/erik-krogh/update-sources
update sources
2021-11-18 14:32:01 +01:00
Erik Krogh Kristensen
2af7817691 use min() instead of rank[1] 2021-11-18 14:26:55 +01:00
Erik Krogh Kristensen
a0bf13007c remove codeql-ruby sources 2021-11-18 14:15:19 +01:00
Erik Krogh Kristensen
9a6c9c4d77 QL: remove codeql-ruby sources 2021-11-18 14:15:19 +01:00
Erik Krogh Kristensen
e3c0e190d9 Add codeql-go sources (4cae4b23fc) 2021-11-18 14:14:20 +01:00
Erik Krogh Kristensen
fe097783a7 QL: Add codeql-go sources (4cae4b23fc) 2021-11-18 14:14:20 +01:00
Erik Krogh Kristensen
61b71807df Add codeql sources (6c2713dd8b) 2021-11-18 14:14:17 +01:00
Erik Krogh Kristensen
fa54855995 QL: Add codeql sources (6c2713dd8b) 2021-11-18 14:14:17 +01:00
Erik Krogh Kristensen
fb40b8a032 update import script 2021-11-18 14:13:47 +01:00
Erik Krogh Kristensen
c07d55325e QL: update import script 2021-11-18 14:13:47 +01:00
Erik Krogh Kristensen
349b556c26 Merge pull request #129 from github/erik-krogh/cartesian
various new improvements and queries
2021-11-18 13:16:53 +01:00
Erik Krogh Kristensen
1b070f1dd8 QL: Merge pull request #129 from github/erik-krogh/cartesian
various new improvements and queries
2021-11-18 13:16:53 +01:00
Erik Krogh Kristensen
38b925b19c rename "use matches" query, and refactor into Query.qll 2021-11-18 13:05:41 +01:00
Erik Krogh Kristensen
d64c7fc638 QL: rename "use matches" query, and refactor into Query.qll 2021-11-18 13:05:41 +01:00
Erik Krogh Kristensen
89604deb8d add redundant inline cast query 2021-11-18 12:23:55 +01:00
Erik Krogh Kristensen
d8bf7ed6e0 QL: add redundant inline cast query 2021-11-18 12:23:55 +01:00
Erik Krogh Kristensen
97461d1f11 add var unused in disjunct query 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
12a3fa77f6 QL: add var unused in disjunct query 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
112cd9d29c move use-set-literal implementation to Query.qll file 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
1cbacc41d7 QL: move use-set-literal implementation to Query.qll file 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
33d363eb94 move use-instanceof implementation to Query.qll, and rename the .ql file 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
f320414b1c QL: move use-instanceof implementation to Query.qll, and rename the .ql file 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
45def1b124 move implementation of implicit-this to Query.qll file 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
28444c7e9c QL: move implementation of implicit-this to Query.qll file 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
ac4476fa82 performance improvements 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
c3f362876b QL: performance improvements 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
84d277dc94 add getLeft/getRight helper predicates to disjunction/conjunction 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
0154f4eba4 QL: add getLeft/getRight helper predicates to disjunction/conjunction 2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
9d308ba0bd refactor away the ComparisonOp ast class 2021-11-18 12:23:07 +01:00
Erik Krogh Kristensen
7c82c5e378 QL: refactor away the ComparisonOp ast class 2021-11-18 12:23:07 +01:00
Geoffrey White
6c2713dd8b Merge pull request #7159 from MathiasVP/pointers-are-always-iterators
C++: Always recognize pointers as iterators
2021-11-18 11:14:44 +00:00