SpaceWhite
b7af1645aa
Move directory to experimental
2020-03-07 11:49:33 +09:00
SpaceWhite
2ec107bc2d
Merge branch 'master' into CWE-643
2020-03-07 11:47:53 +09:00
Rebecca Valentine
2f3967cf5e
Python: Fixes erroneous modernization bug
2020-03-06 18:31:38 -08:00
Rebecca Valentine
3e36c672cf
Python: Removes superfluous cast
2020-03-06 13:06:11 -08:00
Rebecca Valentine
7b49c8e6f8
Python: Fixes bug in modernization
2020-03-06 12:47:46 -08:00
Jonas Jensen
0cd3eb7b7e
C++: Accept test changes
...
Some IR inconsistencies are "fixed" because we no longer translate
constant initializers of static locals.
2020-03-06 20:20:47 +01:00
Sauyon Lee
2d879458ba
Merge pull request #49 from max-schaefer/more-function-outputs
...
Make `FunctionOutput` more useful
2020-03-06 09:41:40 -08:00
Max Schaefer
1be0cc57a8
Add test case from https://github.com/github/codeql-go/issues/48 .
2020-03-06 17:35:50 +00:00
Max Schaefer
bcb9ce2498
Add another test for StringBreak.
2020-03-06 17:35:50 +00:00
Max Schaefer
bf6865b96a
Add model of ioutil.ReadAll
2020-03-06 17:35:50 +00:00
Max Schaefer
f599243a34
Conflate references and referents more thoroughly in taint tracking.
2020-03-06 17:35:50 +00:00
Rasmus Wriedt Larsen
8b2c74a4dd
Python: Modernise remaining Security/*.qll files
2020-03-06 17:30:02 +01:00
Rasmus Wriedt Larsen
14957345a3
Python: Fix formatting of isLegalExceptionType
2020-03-06 17:27:50 +01:00
Rasmus Wriedt Larsen
70634fe30e
Python: Remove usage of deprecated .getValue()
2020-03-06 16:20:31 +01:00
Felicity Chapman
90a9a6d2ac
Update docs/language/learn-ql/python/introduce-libraries-python.rst
2020-03-06 15:13:10 +00:00
Max Schaefer
aa8bc972d9
Address review comments.
2020-03-06 15:03:45 +00:00
Sauyon Lee
3d88032f81
Address review comments.
...
Co-authored-by: Max Schaefer <max-schaefer@github.com >
2020-03-06 06:51:30 -08:00
Sauyon Lee
43fbf47da3
Add a change note about go.mod extraction
2020-03-06 06:51:28 -08:00
Sauyon Lee
555b0a9527
Add a GoModFile class
2020-03-06 06:51:27 -08:00
Sauyon Lee
38596dddc0
Address review comments.
...
Co-authored-by: Max Schaefer <max-schaefer@github.com >
2020-03-06 06:51:26 -08:00
Sauyon Lee
34f34e2241
GoModExpr.qll: Rename getOffsetToken to GoModLine.getToken
...
Also add getRawToken to do what getToken did before, and fix up
documentation.
2020-03-06 06:51:25 -08:00
Sauyon Lee
4b9cc87c2e
Add test for replace line with versions
2020-03-06 06:51:24 -08:00
Sauyon Lee
25577a8108
Remove DependencyCustomizations
2020-03-06 06:51:24 -08:00
Sauyon Lee
78239accd5
Dependencies: Make getAnImport() more precise
...
In particular, ensure that the go file importing the dependency is under
the directory of the file where the dependency is declared.
Co-authored-by: Max Schaefer <max-schaefer@github.com >
2020-03-06 06:51:23 -08:00
Sauyon Lee
b27e63ba83
Address review comments
...
Co-authored-by: Max Schaefer <max-schaefer@github.com >
2020-03-06 06:51:22 -08:00
Sauyon Lee
dd3f98c549
extractor: Don't log directory being walked for go.mod files
2020-03-06 06:51:21 -08:00
Sauyon Lee
5911b7005a
Add tests for dependencies library
2020-03-06 06:51:20 -08:00
Sauyon Lee
dddc8cecd4
Add go.mod expression tests
2020-03-06 06:51:19 -08:00
Sauyon Lee
6c78490bbe
Add libraries modeling dependencies
2020-03-06 06:51:18 -08:00
Sauyon Lee
d92e49fb17
Add libraries for go.mod expressions
2020-03-06 06:51:17 -08:00
Jonas Jensen
cc38abd228
C++: Ignore constant static initializers
2020-03-06 15:05:28 +01:00
Jonas Jensen
02f0b89a0d
C++: Test for constant static initializer
2020-03-06 15:05:28 +01:00
Rasmus Wriedt Larsen
2416cac8f4
Python: Modernise StringKind files
2020-03-06 14:45:03 +01:00
Alistair
40e8ccc020
Merge pull request #2879 from hubwriter/alistairs-docs-preparation-csharp
...
CodeQL migration: C# topics - change titles & add intros (2174)
2020-03-06 13:07:15 +00:00
mc
2c542df576
Merge pull request #2897 from mchammer01/js-migration-work
...
Code QL pre-migration tasks: update articles relating to CodeQL for JavaScript
2020-03-06 11:31:08 +00:00
Max Schaefer
f875afca53
Merge pull request #47 from sauyon/use-bufio
...
Use bufio and don't sync FS
2020-03-06 10:59:30 +00:00
mc
3558bb8bc0
Update docs/language/learn-ql/javascript/dataflow-cheat-sheet.rst
...
Co-Authored-By: Felicity Chapman <felicitymay@github.com >
2020-03-06 10:51:13 +00:00
mc
d777c08fc2
Update docs/language/learn-ql/javascript/type-tracking.rst
...
Co-Authored-By: Felicity Chapman <felicitymay@github.com >
2020-03-06 10:50:59 +00:00
Max Schaefer
3a7910da5a
Introduce (un-)marshaling functions as a concept and instantiate it with the functions in encoding/json.
2020-03-06 10:07:54 +00:00
semmle-qlci
3ae1aada37
Merge pull request #2995 from tausbn/python-fix-nested-sequence-assign-cp
...
Approved by RasmusWL
2020-03-06 09:43:24 +00:00
Max Schaefer
9bcbfb2911
Fix flow step from global functions to their use.
...
How does anything work.
2020-03-06 09:41:35 +00:00
Max Schaefer
a7ecb50a34
Add taint-tracking model for append.
2020-03-06 09:41:35 +00:00
Max Schaefer
4f061005cb
Add a taint-tracking model for copy.
2020-03-06 09:41:35 +00:00
Max Schaefer
3f8d2117d8
Introduce post-update nodes for arguments with a mutable type.
2020-03-06 09:41:35 +00:00
Max Schaefer
b99c63d180
Factor out an auxiliary predicate.
2020-03-06 09:41:35 +00:00
Max Schaefer
af2c7aae5d
Don't rely on flow through function models in definition of PostUpdateNode.
2020-03-06 09:41:35 +00:00
Max Schaefer
185d0910c3
Sharpen stringConcatStep to exclude addition.
2020-03-06 09:41:35 +00:00
mchammer01
0a2ca55374
Merge branch 'js-migration-work' of github.com:mchammer01/ql into js-migration-work
2020-03-06 09:24:01 +00:00
mchammer01
fbe0735a5e
pre-migration tasks: address review comments
2020-03-06 09:20:40 +00:00
semmle-qlci
7891f8621e
Merge pull request #2982 from esbena/js/request-model-with-chaining
...
Approved by asgerf
2020-03-06 08:57:42 +00:00
