Michael Nebel
ec6dab89d8
C#: Update the Summary model generator with better support for IEnumerable typed parameters.
2022-03-16 09:21:02 +01:00
ihsinme
ccbb4434de
Update DangerousUseOfExceptionBlocks.expected
2022-03-16 09:54:35 +03:00
ihsinme
cd561dd19c
Update test.cpp
2022-03-16 09:53:45 +03:00
ihsinme
2959150198
Update DangerousUseOfExceptionBlocks.ql
2022-03-16 09:30:38 +03:00
Jeroen Ketema
d51cbe2525
C++: Update IR tests for handling of bitwise copy with explicit source
2022-03-15 23:22:37 +01:00
Jeroen Ketema
8be02b164c
C++: Add IR tests exposing incorrect translation due to unhandled bitwise copy
...
These tests are in addition to exisiting tests involving default copy
constructors, which suffer from the same problem, i.e., the extractor not
handling bitwise copies.
2022-03-15 23:22:37 +01:00
Jeroen Ketema
2894bb0933
C++: Use correct change note file name format
2022-03-15 23:21:14 +01:00
Jeroen Ketema
638b2cac04
C++: Add change note on _Noreturn/noreturn in C11
2022-03-15 23:21:14 +01:00
Jeroen Ketema
1a1c34e1be
C++: Handle C11 _Noreturn in DefaultOptions
2022-03-15 23:21:14 +01:00
Geoffrey White
92d748e006
C++: Fix ODR/dbcheck issue in test.
2022-03-15 20:00:19 +00:00
Dave Bartolomeo
7359e3253d
Fix reference to deprecated predicate
2022-03-15 15:59:35 -04:00
Dave Bartolomeo
62553ab089
Merge remote-tracking branch 'upstream/main' into semantic-scratch
2022-03-15 15:53:50 -04:00
Erik Krogh Kristensen
b45f56ac08
Merge pull request #8431 from erik-krogh/deadCode
...
Delete dead code
2022-03-15 20:09:06 +01:00
Dave Bartolomeo
f22c91b762
Update cpp/ql/lib/experimental/semmle/code/cpp/semantic/analysis/RangeUtils.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-03-15 15:01:32 -04:00
Dave Bartolomeo
c8a0a86354
Fix Code Scanning warning
2022-03-15 14:53:43 -04:00
Dave Bartolomeo
7623b3d04d
Update cpp/ql/lib/experimental/semmle/code/cpp/semantic/SemanticType.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-03-15 14:49:20 -04:00
Dave Bartolomeo
ea9a5b782c
Don't bother hiding toString() and getLocation()
2022-03-15 14:47:26 -04:00
Ian Lynagh
2116e6d120
Java: Add ErrorExpr, ErrorStmt
2022-03-15 17:30:19 +00:00
Jonathan Leitschuh
09cc8ee09e
Add tests for StandardSystemProperty
2022-03-15 12:37:42 -04:00
Mathias Vorreiter Pedersen
57922f56ee
Merge pull request #8424 from ihsinme/ihsinme-patch-fix077
...
Detection reduction on request
2022-03-15 16:17:47 +00:00
jorgectf
e0952ba432
Fix change note
...
Thanks @atorralba!
2022-03-15 16:41:32 +01:00
Mathias Vorreiter Pedersen
05758181bb
Merge pull request #7884 from rdmarsh2/rdmarsh2/template-implicit-copy-constructor
...
C++: fix hasImplicitCopyConstructor for templates
2022-03-15 15:32:05 +00:00
jorgectf
3356bc4085
Add change note
2022-03-15 16:26:34 +01:00
Anna Railton
a08246a2a7
Merge pull request #8448 from github/annarailton-patch-1
...
Add docstring to `ExtractEndpointMapping.ql`
2022-03-15 14:54:45 +00:00
Geoffrey White
46f3f28a11
C++: Fix broken merge.
2022-03-15 14:53:25 +00:00
Michael Nebel
4f2678fc72
C#: Add some testcases for model generation of methods using Lists.
2022-03-15 15:44:06 +01:00
Michael Nebel
a9bbe6889b
C#: Use CollectionType instead of ArrayType when generating models.
2022-03-15 15:41:46 +01:00
Erik Krogh Kristensen
b0fc958b32
simplify imports
...
Co-authored-by: Henry Mercer <henry.mercer@me.com >
2022-03-15 15:10:04 +01:00
Erik Krogh Kristensen
57db7633c8
C#: make csharp import private
2022-03-15 14:59:06 +01:00
Erik Krogh Kristensen
89af50f6d5
rename all lower-case import-as statements
2022-03-15 14:40:38 +01:00
Erik Krogh Kristensen
54582438a1
QL: recognize the names defined by import as statements
2022-03-15 14:29:33 +01:00
Geoffrey White
71e0da738d
Merge branch 'main' into cwe497b
2022-03-15 13:29:32 +00:00
Anna Railton
739d94e8f9
Add docstring to ExtractEndpointMapping.ql
2022-03-15 12:50:51 +00:00
jorgectf
ed198709b4
Refactor MyBatisAbstractSQLMethodsStep
...
Set output to `Argument[-1]` instead of `ReturnValue` to be able to get rid of `MyBatisAbstractSQLAnonymousClassStep`.
Thanks @pwntester!
2022-03-15 13:46:06 +01:00
Erik Krogh Kristensen
3067231b1a
Merge pull request #8253 from erik-krogh/domWrite
...
JS: merge hasDominatingWrite and hasDominatingAssignment
2022-03-15 13:37:00 +01:00
jorgectf
9aa440e5b6
Refactor MyBatisAbstractSQLMethodsStep and MyBatisAbstractSQLMethod
...
See https://github.com/github/codeql/pull/8345\#discussion_r826734537
2022-03-15 13:23:23 +01:00
Erik Krogh Kristensen
154d0171d3
Merge pull request #8438 from erik-krogh/apiDisable
...
JS: add some API-nodes to js/disabling-certificate-validation
2022-03-15 12:56:59 +01:00
Chris Smowton
451661dd20
Improve guard class names
2022-03-15 11:46:54 +00:00
Mathias Vorreiter Pedersen
9f014be7c7
Merge pull request #8447 from MathiasVP/add-missing-security-severity
...
C++: Add missing `security-severity` tags
2022-03-15 11:29:28 +00:00
Geoffrey White
28315df405
Merge branch 'main' into cwe497b
2022-03-15 11:23:00 +00:00
Joe Farebrother
8acd8ea01f
Merge pull request #8446 from joefarebrother/sensitive-logging
...
Java: Add security severity to sensitive logging query
2022-03-15 11:17:46 +00:00
Jeroen Ketema
157a36bc4f
Use node variable in all disjuncts
2022-03-15 11:55:35 +01:00
Jeroen Ketema
9a0e94f389
Add flow state versions of isBarrierIn, isBarrierOut, and isBarrierGuard
2022-03-15 11:55:34 +01:00
Mathias Vorreiter Pedersen
7337ebd569
C++: Add missing 'security-severity' tags.
2022-03-15 10:54:36 +00:00
Mathias Vorreiter Pedersen
9642e59349
Merge pull request #8382 from MathiasVP/use-taint-configuration-in-three-more-queries
...
C++: Use a `TaintTracking::Configuration` in three more queries
2022-03-15 10:43:05 +00:00
Joe Farebrother
e4a16cc700
Add security severity
2022-03-15 10:42:41 +00:00
Tony Torralba
6d5414281e
Merge pull request #8437 from atorralba/atorralba/missing-security-severity-query
...
Added MissingSecurityMetadata query
2022-03-15 11:42:41 +01:00
Dave Bartolomeo
72725875a5
Undo debugging changes
2022-03-15 06:05:33 -04:00
Henry Mercer
f38b498eed
Merge pull request #8433 from github/henrymercer/js-atm-remove-isEffectiveSinkWithOverridingScore
...
JS: Remove `isEffectiveSinkWithOverridingScore` from ML-powered libraries
2022-03-15 10:04:30 +00:00
Dave Bartolomeo
c9fbf83c1c
Working range analysis for C++
2022-03-15 06:02:54 -04:00
