41418 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jonas Jensen	93286aabdf	C++: Test for FP introduced by relOp changes	2019-04-08 11:19:57 +02:00
Esben Sparre Andreasen	52d86471af	JS: whitelist another emptiness check for the type-confusion query	2019-04-08 09:52:27 +02:00
semmle-qlci	662ad4b2ca	Merge pull request #1205 from asger-semmle/prefix-sanitizer ... Approved by esben-semmle	2019-04-08 08:29:04 +01:00
Jonas Jensen	fedd652de8	Merge remote-tracking branch 'upstream/rc/1.20' into mergeback-20190408	2019-04-08 08:39:44 +02:00
semmle-qlci	0bd4fde34d	Merge pull request #1216 from geoffw0/revert-microsoft ... Approved by dave-bartolomeo, jbj	2019-04-06 01:02:17 +01:00
Ziemowit Laski	ef54b012e0	[CPP-340] Fixed .expected file to match new query.	2019-04-05 15:43:38 -07:00
Robert Marsh	8087cb5040	C++: add CopyValueInstruction for StmtExpr result	2019-04-05 11:27:19 -07:00
Asger F	50c2921625	TS: Use contextual typing for literals	2019-04-05 18:43:51 +01:00
Asger F	d7bfeeefd0	TS: add test case with nested literals	2019-04-05 18:40:24 +01:00
Rebecca Valentine	40e3a241a1	Revert "Update javascript/ql/src/semmle/javascript/Expr.qll" ... This reverts commit 78407f85ee.	2019-04-05 09:47:56 -07:00
Max Schaefer	78407f85ee	Update javascript/ql/src/semmle/javascript/Expr.qll ... Co-Authored-By: psygnisfive <psygnisfive@users.noreply.github.com>	2019-04-05 09:46:09 -07:00
Max Schaefer	280c334ab8	Update javascript/ql/src/semmle/javascript/Expr.qll ... Co-Authored-By: psygnisfive <psygnisfive@users.noreply.github.com>	2019-04-05 09:45:53 -07:00
Geoffrey White	5dce09b179	Revert "CPP: Workaround improvement for File.compiledAsMicrosoft." ... This reverts commit c3ec7b55b7.	2019-04-05 17:37:44 +01:00
Geoffrey White	918f7043af	Revert "CPP: Add '/' case." ... This reverts commit 5e71207a23.	2019-04-05 17:37:39 +01:00
Max Schaefer	cb22192378	Merge pull request #1196 from asger-semmle/shelljs ... JS: Add model for shelljs	2019-04-05 16:45:45 +01:00
yh-semmle	3d2ae00788	Merge pull request #1201 from aschackmull/java/intmulttolong-w-range ... Java: Use range analysis in IntMultToLong (ODASA-7836).	2019-04-05 11:14:46 -04:00
Asger F	80f413177a	Merge branch 'master' into shelljs	2019-04-05 14:44:32 +01:00
Asger F	e55330b820	JS: Fix flow through +=	2019-04-05 13:55:48 +01:00
Jonas Jensen	f7dda1b3a4	Merge pull request #1213 from geoffw0/pointerscaling2 ... CPP: De-duplicate the PointerScaling queries.	2019-04-05 14:42:28 +02:00
Jonas Jensen	19b05c57d7	Merge pull request #1204 from geoffw0/badlock ... CPP: Add a test of common mistakes using locking classes.	2019-04-05 14:34:32 +02:00
Geoffrey White	f040755b3b	CPP: Remove unnecessary imports.	2019-04-05 11:44:50 +01:00
Geoffrey White	44d68a761d	CPP: Move 'baseType' into IncorrectPointerScalingCommon.qll.	2019-04-05 11:43:47 +01:00
Geoffrey White	695df232e3	CPP: Equalize the definitions of 'baseType'.	2019-04-05 11:28:11 +01:00
Geoffrey White	373075e06d	CPP: Extend the test.	2019-04-05 11:09:13 +01:00
Geoffrey White	34fbc7b194	CPP: Guard the delete.	2019-04-05 10:00:55 +01:00
semmle-qlci	063dbeeff3	Merge pull request #1198 from esben-semmle/js/more-express-route-handlers ... Approved by xiemaisi	2019-04-05 09:47:51 +01:00
Anders Schack-Mulligen	b5681a1260	Java: Add change note.	2019-04-05 10:44:42 +02:00
Anders Schack-Mulligen	dec31a3dd6	Java: Use range analysis in IntMultToLong.	2019-04-05 10:42:23 +02:00
Mark Shannon	df2000ea8e	Python: Fix up dataflow configuration to act as expected. Keep undocumented for now.	2019-04-05 09:05:13 +01:00
Max Schaefer	2f84aac7df	Merge pull request #1193 from esben-semmle/js/improve-createServer ... JS: treat the last argument to https.createServer as a route handler	2019-04-05 08:57:24 +01:00
Tom Hvitved	67ed863c76	Merge pull request #1200 from calumgrant/cs/icryptotransform ... C#: Tidy up cs/thread-unsafe-icryptotransform-field-in-class	2019-04-05 09:28:24 +02:00
Jonas Jensen	d619a8c693	Merge pull request #1192 from geoffw0/severity ... CPP: Change some query severities	2019-04-05 09:23:27 +02:00
Jonas Jensen	8c17278808	Merge pull request #1191 from geoffw0/microsoft ... CPP: Workaround improvement for File.compiledAsMicrosoft.	2019-04-05 09:22:08 +02:00
Jonas Jensen	b555f5025e	Merge pull request #1209 from geoffw0/gmtime ... CPP: Add variants to PotentiallyDangerousFunction.ql	2019-04-05 09:19:40 +02:00
yh-semmle	6ba57fc639	Merge pull request #1202 from aschackmull/java/slf4j-print-array ... Java: Exclude slf4j calls in PrintLnArray as it supports array formatting.	2019-04-04 20:08:20 -04:00
Rebecca Valentine	b7939029bf	removes bigint cases	2019-04-04 16:41:52 -07:00
Rebecca Valentine	5b87b85960	fixes comment language	2019-04-04 16:41:14 -07:00
Esben Sparre Andreasen	0ec0aa35be	JS: change notes for Express	2019-04-04 21:42:23 +02:00
Esben Sparre Andreasen	60ba74a210	JS: Express cleanup and generalization	2019-04-04 21:42:08 +02:00
Esben Sparre Andreasen	c94ca46366	JS: add more Express tests	2019-04-04 21:42:08 +02:00
Robert Marsh	46f93ff322	C++: update test expectations	2019-04-04 10:55:27 -07:00
Robert Marsh	427b853077	C++: add another test case for IR stmtexpr	2019-04-04 10:55:27 -07:00
Robert Marsh	81dd03848f	C++: respond to PR comments	2019-04-04 10:52:08 -07:00
Robert Marsh	f2fbdac31b	C++: add support for GNU StmtExpr in IR	2019-04-04 10:51:06 -07:00
Geoffrey White	0a0bcdf939	CPP: Move some code into IncorrectPointerScalingCommon.qll.	2019-04-04 18:08:18 +01:00
Mark Shannon	2ba122373a	Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation ... Python: Add query for insecure SSH host key policies in Paramiko.	2019-04-04 16:57:13 +01:00
Geoffrey White	7aee334baf	CPP: Update the qhelp.	2019-04-04 16:48:14 +01:00
Geoffrey White	e8b7bf9ddf	CPP: Change note.	2019-04-04 16:38:42 +01:00
Geoffrey White	a437e6c103	CPP: Extend coverage.	2019-04-04 16:31:02 +01:00
Geoffrey White	a1e503f428	CPP: Add test cases for PotentiallyDangerousFunction.	2019-04-04 16:26:53 +01:00