Nick Rolfe
f6681f30c6
Merge pull request #8399 from github/nickrolfe/simple_symbol_constant_value
...
Ruby: implement getComponent(n) for simple and hash-key symbols
2022-03-16 12:10:39 +00:00
Asger Feldthaus
2ca45ef9f9
Ruby: support BlockArgument in identifying access path
2022-03-16 12:51:14 +01:00
Nick Rolfe
94ce578ea4
Ruby: implement getComponent(n) for simple and hash-key symbols
2022-03-16 11:43:46 +00:00
Asger Feldthaus
c9355095e3
Ruby: Use Receiver instead of Argument[-1] in ActiveStorage
2022-03-16 12:37:21 +01:00
Asger Feldthaus
71f195d1e0
Ruby: add test for Receiver in summary
2022-03-16 12:37:21 +01:00
Arthur Baars
6b323eeda8
Update expected output
2022-03-16 12:34:03 +01:00
Arthur Baars
ab93b3784b
Merge remote-tracking branch 'upstream/main' into incomplete-hostname
2022-03-16 12:31:12 +01:00
Arthur Baars
852f05bfb7
Address comment
2022-03-16 12:26:39 +01:00
Nick Rolfe
76918238f0
Ruby: test ExprCfgNode::getConstantValue()
2022-03-16 11:21:57 +00:00
Geoffrey White
95a63a69a5
Merge branch 'main' into cwe497b
2022-03-16 11:09:46 +00:00
Asger Feldthaus
f140c13261
JS: Sync ApiGraphModels.qll and update accordingly
2022-03-16 12:04:41 +01:00
Asger Feldthaus
2b02a173c1
Ruby: canonicalize callables based on package;type;path instead of input;output;kind
2022-03-16 12:04:41 +01:00
Asger Feldthaus
d8b4bc81ff
JS: Rename EntryPoint.getNode -> getANode
2022-03-16 12:04:39 +01:00
Erik Krogh Kristensen
f53df255b9
Merge pull request #8459 from erik-krogh/addSeverities
...
JS: add missing @security-severity to JS queries
2022-03-16 12:03:19 +01:00
Nick Rolfe
82ef2a12f6
Merge pull request #8164 from github/nickrolfe/escape_sequences
...
Ruby: interpret string escape sequences in getConstantValue()
2022-03-16 10:45:39 +00:00
Chris Smowton
b11340c829
Change note tense and detail level
2022-03-16 10:34:25 +00:00
Nick Rolfe
1a850028e7
Ruby: update date in changenote filename
2022-03-16 10:32:43 +00:00
Erik Krogh Kristensen
cd9d61c1fc
Merge pull request #8450 from erik-krogh/importAs
...
disallow lowercase import-as aliases
2022-03-16 11:32:37 +01:00
Jeroen Ketema
37293141ee
Merge pull request #8428 from jketema/noreturn
...
C++: Handle C11 _Noreturn in DefaultOptions
2022-03-16 11:23:23 +01:00
Rasmus Wriedt Larsen
ae1ba11d57
Merge branch 'main' into orm
2022-03-16 11:23:14 +01:00
Paul1nh0
85b22647ac
Add query for double-fetch vulnerability
2022-03-16 18:16:49 +08:00
4B5F5F4B
2a29c201ff
Merge branch 'github:main' into main
2022-03-16 18:06:16 +08:00
Asger Feldthaus
33ca55770c
Ruby: EntryPoint.getNode -> getANode
2022-03-16 11:02:26 +01:00
Asger Feldthaus
ecf7073bf1
Shared: codeql -> ql in code blocks
2022-03-16 11:00:24 +01:00
Rasmus Wriedt Larsen
f1e6271d20
Python: Apply suggestions from code review
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2022-03-16 10:53:19 +01:00
4B5F5F4B
baf1c8d76b
Create cve-2016-6480.ql
2022-03-16 17:49:05 +08:00
Rasmus Wriedt Larsen
461e2f3663
Python: Apply suggestions from code review
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2022-03-16 10:43:20 +01:00
Michael Nebel
8b16c1f585
C#: Add some test cases for inheritance.
2022-03-16 10:40:49 +01:00
Erik Krogh Kristensen
d47b0a68e7
exclude tests from ql/missing-security-metadata
2022-03-16 10:40:45 +01:00
Erik Krogh Kristensen
2442beaf9a
add missing severities to JS queries
2022-03-16 10:40:34 +01:00
Michael Nebel
e69ea8f577
C#: Add some testcases for generics.
2022-03-16 10:20:55 +01:00
jorgectf
f6eb83fd22
Update MyBatisAnnotationSqlInjection.qlref
...
By adding more imports in the test file, the expected result's lines changed.
2022-03-16 10:12:38 +01:00
Michael Nebel
814947b876
C#: Add some test cases for methods that are not properly exposed and will this not get their summary captured.
2022-03-16 09:47:14 +01:00
Michael Nebel
a555e04b55
C#: Bulk array flow.
2022-03-16 09:30:15 +01:00
Michael Nebel
226a874a74
C#: Test cases for IEnumerable.
2022-03-16 09:22:18 +01:00
Michael Nebel
ec6dab89d8
C#: Update the Summary model generator with better support for IEnumerable typed parameters.
2022-03-16 09:21:02 +01:00
ihsinme
ccbb4434de
Update DangerousUseOfExceptionBlocks.expected
2022-03-16 09:54:35 +03:00
ihsinme
cd561dd19c
Update test.cpp
2022-03-16 09:53:45 +03:00
ihsinme
2959150198
Update DangerousUseOfExceptionBlocks.ql
2022-03-16 09:30:38 +03:00
Jeroen Ketema
d51cbe2525
C++: Update IR tests for handling of bitwise copy with explicit source
2022-03-15 23:22:37 +01:00
Jeroen Ketema
8be02b164c
C++: Add IR tests exposing incorrect translation due to unhandled bitwise copy
...
These tests are in addition to exisiting tests involving default copy
constructors, which suffer from the same problem, i.e., the extractor not
handling bitwise copies.
2022-03-15 23:22:37 +01:00
Jeroen Ketema
2894bb0933
C++: Use correct change note file name format
2022-03-15 23:21:14 +01:00
Jeroen Ketema
638b2cac04
C++: Add change note on _Noreturn/noreturn in C11
2022-03-15 23:21:14 +01:00
Jeroen Ketema
1a1c34e1be
C++: Handle C11 _Noreturn in DefaultOptions
2022-03-15 23:21:14 +01:00
Geoffrey White
92d748e006
C++: Fix ODR/dbcheck issue in test.
2022-03-15 20:00:19 +00:00
Dave Bartolomeo
7359e3253d
Fix reference to deprecated predicate
2022-03-15 15:59:35 -04:00
Dave Bartolomeo
62553ab089
Merge remote-tracking branch 'upstream/main' into semantic-scratch
2022-03-15 15:53:50 -04:00
Erik Krogh Kristensen
b45f56ac08
Merge pull request #8431 from erik-krogh/deadCode
...
Delete dead code
2022-03-15 20:09:06 +01:00
Dave Bartolomeo
f22c91b762
Update cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeUtils.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-03-15 15:01:32 -04:00
Dave Bartolomeo
c8a0a86354
Fix Code Scanning warning
2022-03-15 14:53:43 -04:00
