Mathias Vorreiter Pedersen
310353060e
C++: Also fix the FP in 'cpp/comparison-canceling-subexpr'.
2021-12-14 17:08:10 +00:00
Dave Bartolomeo
a62f181d42
Move new change notes to appropriate packs
2021-12-14 12:05:15 -05:00
Mathias Vorreiter Pedersen
b2082cc3da
C++: Fix false positive in 'cpp/cpp/comparison-of-identical-expressions'.
2021-12-14 16:39:25 +00:00
Mathias Vorreiter Pedersen
9d14a85f3f
C++: Add false positive.
2021-12-14 16:38:19 +00:00
Erik Krogh Kristensen
dc9187778b
QL: simplify the build/analyze workflow into a single workflow
2021-12-14 17:29:35 +01:00
Alex Ford
861ae856b3
Merge pull request #7391 from github/ruby/callnode-more-predicates
...
Ruby: Add `getBlock` and `getNumberOfArguments` predicates to `DataFlow::CallNode`
2021-12-14 16:10:13 +00:00
Erik Krogh Kristensen
f5788b9441
QL: adjust remaining workflows to work in the QL folder
2021-12-14 17:03:26 +01:00
Michael Nebel
edf472b9ed
C#: Convert System.Xml.XmlReader flow to CSV format.
2021-12-14 16:01:40 +01:00
Erik Krogh Kristensen
fdb15d6073
QL: remove workflow that ran CodeQL with a published pack
2021-12-14 15:57:09 +01:00
Erik Krogh Kristensen
633597cc90
QL: remove the nightly ql-for-ql job
2021-12-14 15:57:09 +01:00
Erik Krogh Kristensen
b73b60d431
QL: remove the .devcontainer
2021-12-14 15:57:09 +01:00
Erik Krogh Kristensen
08b06422ff
QL: remove repo-tests
2021-12-14 15:57:09 +01:00
Michael Nebel
a04920f241
C#: Convert System.Xml.XmlDocument flow to CSV format.
2021-12-14 15:56:55 +01:00
Michael Nebel
4bf2a514ac
C#: XmlDocument only has instance Load methods.
2021-12-14 15:55:28 +01:00
Michael Nebel
376ee33707
C#: Convert System.Xml.XmlNode flow to CSV format.
2021-12-14 15:55:23 +01:00
Michael Nebel
4a71aa2165
C#: Update the flow summaries test expected output.
2021-12-14 15:53:16 +01:00
Michael Nebel
fc3299801b
C#: Fix issue with summary tests, such that the output is compatiable with flow summary interpreter.
2021-12-14 15:53:16 +01:00
Michael Nebel
2cac729598
C#: Convert System.Xml.XmlNamedNodeMap flow to CSV format.
2021-12-14 15:53:11 +01:00
Michael Nebel
c5728b2951
Merge pull request #7389 from michaelnebel/csharp-mad-io
...
C#: Convert flow summaries to CSV for System.IO.*
2021-12-14 15:49:08 +01:00
Bas van Schaik
80b9ccff2b
Merge pull request #7388 from github/sj-patch-log4j-query-description
...
Clarify Log4jJndiInjection.ql query name and help
2021-12-14 14:32:17 +00:00
Tom Hvitved
e882cdaca4
Ruby: Add missing getCallable() for nested destructured parameters
2021-12-14 15:04:40 +01:00
Tom Hvitved
10b2a0a54a
Ruby: Add test for nested destructured parameters
2021-12-14 15:04:40 +01:00
Tom Hvitved
9ea8b20e77
Ruby: Deprecate Pattern classes
2021-12-14 15:04:40 +01:00
Mathias Vorreiter Pedersen
dd6085f0a6
C++/C#: Sync identical files.
2021-12-14 13:56:39 +00:00
Mathias Vorreiter Pedersen
3da1c2bde1
C++: Fix join-order in 'isArgumentForParameter'.
2021-12-14 13:56:31 +00:00
Tony Torralba
68a0efaf0c
Formatting
2021-12-14 14:53:38 +01:00
Erik Krogh Kristensen
8eac1dcf15
QL: move .vscode folder inside the ql subfolder
2021-12-14 14:39:03 +01:00
Erik Krogh Kristensen
56a8cdb171
move files and folder, except dotfiles, into a ql subfolder
2021-12-14 14:34:53 +01:00
Erik Krogh Kristensen
d06ac78e4d
QL: move files and folder, except dotfiles, into a ql subfolder
2021-12-14 14:34:53 +01:00
Alex Ford
3262a14f22
Ruby: use DataFlow::CallNode#getBlock to remove a cast
2021-12-14 13:23:38 +00:00
Tom Hvitved
b524a6104d
Merge pull request #7368 from github/hvitved-patch-1
...
Update creating-codeql-databases.rst
2021-12-14 14:12:21 +01:00
Michael Nebel
b921fc62b8
C#: Some manual modifications to the System.IO flow summaries.
2021-12-14 14:02:25 +01:00
Alex Ford
f3dcccb64b
Ruby: Add getBlock and getNumberOfArguments predicates to DataFlow::CallNode
2021-12-14 12:58:15 +00:00
Michael Nebel
c1cf44b342
C#: Remove unneeded imports.
2021-12-14 13:47:57 +01:00
Michael Nebel
16bcb4ec86
C#: Convert System.IO.Path flow to CSV format.
2021-12-14 13:44:27 +01:00
Chris Smowton
f86510ee20
Update comment
2021-12-14 12:39:31 +00:00
Chris Smowton
c2b42ce091
Fix sanitization by strings.Replace[All] in go/unsafe-quoting and go/log-injection
2021-12-14 12:37:18 +00:00
Michael Nebel
ca5c6923da
C#: Convert System.IO.Compression flow to CSV format.
2021-12-14 13:37:08 +01:00
Bas van Schaik
d85ed9ea7a
Clarify Log4jJndiInjection.ql query help
2021-12-14 12:32:36 +00:00
Asger Feldthaus
7e947b2a65
JS: Use return value of trusted type policy callback as a sink
2021-12-14 13:28:46 +01:00
Michael Nebel
45e416b87b
C#: Convert System.IO.Stream flow to CSV format.
2021-12-14 13:28:25 +01:00
Michael Nebel
dd1ae0bbb5
C#: Convert System.IO.MemoryStream flow to CSV format.
2021-12-14 13:23:26 +01:00
Chris Smowton
85ff57bae6
Merge pull request #7354 from atorralba/atorralba/log4j-rce-experimental-query
...
Java: Experimental query for Log4j JNDI Injection
2021-12-14 11:32:13 +00:00
Tom Hvitved
a9c438924e
C#: Introduce class Overridable
...
The class `Overridable` generalizes the existing class `Virtualizable` by also
including accessors. This allows for quite a bit of code to be simplified.
2021-12-14 10:52:13 +01:00
Tom Hvitved
8d607e6251
Docs: Add paragraph about C# shared compilation
2021-12-14 10:40:07 +01:00
Tom Hvitved
37d76f5e49
Merge pull request #6791 from hvitved/csharp/update-nuget-packages
...
C#: Update nuget packages
2021-12-14 10:20:15 +01:00
Mathias Vorreiter Pedersen
6fda5e8f5b
Merge pull request #7272 from github/redsun82/cpp-overrunning-write-precision-split
...
C++: refactor buffer overwrite queries with estimate reasons
2021-12-14 08:50:30 +00:00
Ian Wright
1c79d1f985
Merge pull request #7352 from github/esbena/atm-endpoint-polish
...
ATM Endpoint filtering improvements
2021-12-14 08:19:23 +00:00
Paolo Tranquilli
0d7d60eebd
C++: add small docstring fix
2021-12-14 08:15:45 +00:00
Tamás Vajk
81dedfe22f
Merge pull request #7381 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2021-12-14 08:42:43 +01:00
