Commit Graph

41418 Commits

Author SHA1 Message Date
Mathias Vorreiter Pedersen
286c09183f Merge pull request #3837 from geoffw0/qldoc5
C++/Java: Update QLDoc and terminology in Encryption.qll
2020-06-30 17:44:59 +02:00
Mathias Vorreiter Pedersen
cb39525f3b Merge pull request #3847 from nickrolfe/71-this-followup
C++: make MemberFunction::getTypeOfThis() return PointerType
2020-06-30 17:44:32 +02:00
Tom Hvitved
f1179cc202 Java: Follow-up changes 2020-06-30 17:44:16 +02:00
Tom Hvitved
de3dc734ff C++: Follow-up changes 2020-06-30 17:44:16 +02:00
Tom Hvitved
1fa58bd82d Data flow: Sync files 2020-06-30 17:37:16 +02:00
Tom Hvitved
6bcb8a3a5b C#: Replace getErasedRepr() and getTypeBound() with getNodeType() 2020-06-30 17:37:16 +02:00
James Fletcher
8ff8b3e22c Merge pull request #3852 from jf205/1.24-mergeback
1.24 -> master mergeback
2020-06-30 16:21:49 +01:00
Geoffrey White
3016798101 Merge branch 'master' into copymove 2020-06-30 16:20:41 +01:00
Geoffrey White
c57c016ced C++: Go the other way. 2020-06-30 16:16:00 +01:00
Jonas Jensen
63de58c557 Merge pull request #3819 from dbartol/codeql-c-analysis-team/40/2
C++: More IR QLDoc (including `Opcode.qll`)
2020-06-30 17:09:15 +02:00
yoff
989b57c51d Merge pull request #3822 from tausbn/python-document-internal-ast-classes
Python: Document internal AST classes.
2020-06-30 16:48:14 +02:00
james
5a929def95 Merge branch 'rc/1.24' into 1.24-mergeback 2020-06-30 15:44:29 +01:00
James Fletcher
d5c6433245 Merge pull request #3849 from asger-semmle/js/vue-support-rc
JS: Add Vue to list of supported frameworks
2020-06-30 15:43:04 +01:00
Remco Vermeulen
a89b87f643 CWE-322 InsecureHostKeyCallback (#234) 2020-06-30 15:38:21 +01:00
Jonas Jensen
4a5299e368 Merge pull request #3843 from geoffw0/qldoc6
C++: Bit more QLDoc
2020-06-30 16:21:37 +02:00
Max Schaefer
ccfccb4828 Revert "autobuilder: Add support for GITHUB_REPOSITORY environment variable" 2020-06-30 15:13:26 +01:00
Chris Smowton
595866a6d8 Extractor: give the go.mod comment groups a source location (#232)
The comment group is now omitted entirely if empty, and otherwise delimits the range of the comments ascribed to this group.
2020-06-30 14:59:13 +01:00
Erik Krogh Kristensen
ed48efe5b4 recognize access to a query object through function calls 2020-06-30 15:52:08 +02:00
semmle-qlci
224289c55f Merge pull request #3845 from max-schaefer/js/walk-sync
Approved by asgerf
2020-06-30 14:45:41 +01:00
Geoffrey White
cf75397ef1 Java: Rename tests. 2020-06-30 14:33:05 +01:00
Max Schaefer
e374f92555 Merge pull request #236 from max-schaefer/update-data-flow
Update data-flow libraries
2020-06-30 14:32:56 +01:00
Geoffrey White
3bdfab8d8c C++: Autoformat. 2020-06-30 14:12:34 +01:00
Anders Schack-Mulligen
4dabbac19b Dataflow: Add documentation language maintainers. 2020-06-30 14:57:56 +02:00
Asger Feldthaus
472501bd6f JS: Add Vue to list of supported frameworks 2020-06-30 13:47:25 +01:00
Nick Rolfe
09e13ca2f2 C++: make MemberFunction::getTypeOfThis() return PointerType
The dbscheme technically allows for any Type, but in practice it will
always be a PointerType, so this should make it easier for users to
understand.
2020-06-30 13:45:21 +01:00
Matthew Gretton-Dann
ab876b8b78 Merge pull request #3814 from nickrolfe/71-this
C++: add MemberFunction::getTypeOfThis()
2020-06-30 13:31:14 +01:00
semmle-qlci
42bca1a3fa Merge pull request #3824 from asger-semmle/js/static-regexp-capture-group-step
Approved by erik-krogh, esbena
2020-06-30 13:20:14 +01:00
semmle-qlci
c850938af0 Merge pull request #3833 from asger-semmle/js/vue-class-component
Approved by erik-krogh
2020-06-30 13:16:42 +01:00
semmle-qlci
15a0297ca2 Merge pull request #3834 from asger-semmle/js/vue-classification
Approved by erik-krogh
2020-06-30 13:14:25 +01:00
Geoffrey White
5c11c9ee43 Java: Rename additional private predicates. 2020-06-30 13:05:46 +01:00
Geoffrey White
f8425b8a58 Java: Update uses. 2020-06-30 13:02:48 +01:00
Geoffrey White
db0500b9ef Java: Direct port of changes to Java. 2020-06-30 13:02:48 +01:00
Geoffrey White
51db1475ff Apply suggestions from code review
Co-authored-by: Jonas Jensen <jbj@github.com>
2020-06-30 12:42:12 +01:00
Geoffrey White
4c088b19ad C++: Delete outdated bit. 2020-06-30 12:38:02 +01:00
semmle-qlci
4b7d60a217 Merge pull request #3803 from esbena/js/more-fs-promises
Approved by erik-krogh
2020-06-30 12:33:35 +01:00
Geoffrey White
bbb9396300 C++: Improvement in Overflow.qll. 2020-06-30 12:20:19 +01:00
Geoffrey White
0ee73cce51 Update cpp/ql/src/semmle/code/cpp/security/FunctionWithWrappers.qll
Co-authored-by: Jonas Jensen <jbj@github.com>
2020-06-30 12:16:20 +01:00
luchua-bc
d978f28822 Simplify the query for subtype check 2020-06-30 11:15:18 +00:00
Geoffrey White
de25bc6c78 C++: Improvement in Synchronization.qll. 2020-06-30 12:14:56 +01:00
Geoffrey White
3a3cc9a60a C++: Autoformat. 2020-06-30 12:06:18 +01:00
Max Schaefer
62d56a3d7c JavaScript: Fix module name for walk-sync package. 2020-06-30 11:57:16 +01:00
Slavomir
8238d111b5 Fix tests 2020-06-30 13:37:44 +03:00
Esben Sparre Andreasen
80981ec8f5 Update UnsafeHtmlExpansion-transformed.html 2020-06-30 12:01:02 +02:00
Slavomir
c28e83a793 Add references 2020-06-30 12:53:51 +03:00
Slavomir
3181ac6ec8 Add qhelp file and examples 2020-06-30 12:43:42 +03:00
Taus Brock-Nannestad
7e97bd1d36 Python: Address review comments. 2020-06-30 11:36:26 +02:00
Slavomir
27ac4c3236 Fix comment 2020-06-30 12:12:03 +03:00
Max Schaefer
df4265e31b Add more tests for clear-text logging. 2020-06-30 10:05:01 +01:00
Max Schaefer
ef340954e4 Add mask* as a heuristic name for an obfuscating function. 2020-06-30 10:05:01 +01:00
Max Schaefer
e6a44d4578 Add HTTP-request headers as a source for clear-text logging. 2020-06-30 10:05:01 +01:00