Harry Maclean
|
83393dc195
|
Ruby: Recognise more AR write accesses
This change means we recognise calls like
```rb
User.create(params)
User.update(id, params)
```
as instances of `PersistentWriteAccess`.
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
21b4918904
|
Ruby: Add getPositionalArgument
This gets positional arguments from a call. These are arguments which
are not keyword arguments.
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
d4f7f2b75e
|
Ruby: Add test for AR PersistentWriteAccesses
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
7ed81db32d
|
Ruby: Move ActiveRecord tests to new directory
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
def1b3c3b3
|
Ruby: QLDoc fix
|
2022-08-04 17:21:29 +12:00 |
|
Harry Maclean
|
fdbe16945f
|
Ruby: Add change note
|
2022-08-04 17:19:05 +12:00 |
|
Shyam Mehta
|
76cecc170e
|
Fix documentation
|
2022-08-03 14:30:17 -04:00 |
|
Geoffrey White
|
997068a9cb
|
Swift: Fix a suggestion merge conflict.
|
2022-08-03 18:16:31 +01:00 |
|
Geoffrey White
|
873c62ef78
|
Swift: Apply another code review suggestion.
|
2022-08-03 18:16:01 +01:00 |
|
Geoffrey White
|
e4dab17318
|
Apply suggestions from code review
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2022-08-03 18:14:14 +01:00 |
|
Geoffrey White
|
9d49986345
|
Swift: Make QL-for-QL happy.
|
2022-08-03 17:18:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
9355f9132e
|
Merge pull request #9961 from MathiasVP/swift-cache-lastRefRedef
Swift: Cache `lastRefRedef`
|
2022-08-03 15:43:35 +01:00 |
|
Alex Ford
|
33fbec1174
|
Merge pull request #9917 from github/post-release-prep/codeql-cli-2.10.2
Post-release preparation for codeql-cli-2.10.2
|
2022-08-03 15:17:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
97bd007592
|
Merge pull request #9962 from intrigus-lgtm/patch-7
C: Add additional reference to CERT C coding standard
|
2022-08-03 15:00:33 +01:00 |
|
Geoffrey White
|
39f1352847
|
Swift: Complete the rename.
|
2022-08-03 14:45:20 +01:00 |
|
Geoffrey White
|
81bd61288c
|
Swift: I think CWE-079 is the more accurate CWE for this query.
|
2022-08-03 14:45:19 +01:00 |
|
Geoffrey White
|
c635895644
|
Swift: Documentation.
|
2022-08-03 14:45:18 +01:00 |
|
Alex Ford
|
440547c958
|
Merge branch 'main' into post-release-prep/codeql-cli-2.10.2
|
2022-08-03 13:44:37 +01:00 |
|
Arthur Baars
|
912dce3ea7
|
Merge branch 'main' into gh-codeql-nightly
|
2022-08-03 14:43:07 +02:00 |
|
Arthur Baars
|
e23a45d02c
|
Merge pull request #9959 from aibaars/order-order
Ruby: PrintAST: more stable order for synthesized nodes
|
2022-08-03 14:42:42 +02:00 |
|
intrigus-lgtm
|
c59e6586f7
|
Add additional reference to CERT C coding standard
|
2022-08-03 14:19:53 +02:00 |
|
Mathias Vorreiter Pedersen
|
be7ba925f9
|
Swift: Cache 'lastRefRedef'.
|
2022-08-03 11:14:55 +01:00 |
|
Arthur Baars
|
35f7fdf24b
|
Update ruby/ql/lib/codeql/ruby/printAst.qll
Co-authored-by: Tom Hvitved <hvitved@github.com>
|
2022-08-03 12:06:47 +02:00 |
|
Chris Smowton
|
977823bd76
|
Create 2022-08-03-tainted-path-mad.md
|
2022-08-03 10:54:35 +01:00 |
|
Chris Smowton
|
84a4b6a866
|
Make reporting locations consistent with PathCreation; add test
|
2022-08-03 10:42:09 +01:00 |
|
Geoffrey White
|
8d9653a999
|
Swift: Generated security-severity tag.
|
2022-08-03 09:54:54 +01:00 |
|
Geoffrey White
|
ea17b852b4
|
Swift: Explain ExternalRemoteFlowSource.
|
2022-08-03 09:42:51 +01:00 |
|
Geoffrey White
|
651b73e21e
|
Swift: Check for tainted baseURL.
|
2022-08-03 09:42:48 +01:00 |
|
Rasmus Wriedt Larsen
|
8fb85a98d8
|
Merge branch 'main' into post-release-prep/codeql-cli-2.10.2
|
2022-08-03 10:42:02 +02:00 |
|
Mathias Vorreiter Pedersen
|
c582d17350
|
Merge pull request #9952 from MathiasVP/speedup-return-stack-allocated-memory
C++: Speedup `cpp/return-stack-allocated-memory`
|
2022-08-03 09:41:38 +01:00 |
|
Geoffrey White
|
53ea65b045
|
Swift: Implement query.
|
2022-08-03 09:41:28 +01:00 |
|
Chris Smowton
|
e04c77ce15
|
Rename sanitizer
|
2022-08-03 09:37:20 +01:00 |
|
Geoffrey White
|
2d76d6d51a
|
Swift: Tests for CWE-95.
|
2022-08-03 09:36:22 +01:00 |
|
Chris Smowton
|
03fa5d8ed0
|
Merge pull request #9960 from RasmusWL/fix-qltest
Python: Accept `.expected` for TarSlip
|
2022-08-03 09:28:47 +01:00 |
|
Chris Smowton
|
83498f58db
|
Add missing import
|
2022-08-03 08:53:43 +01:00 |
|
Rasmus Wriedt Larsen
|
3d0c23e441
|
Python: Accept .expected for TarSlip
Changed after merging https://github.com/github/codeql/pull/9579,
which improved our handling of `not` for guards.
|
2022-08-03 09:52:11 +02:00 |
|
Arthur Baars
|
d8592a2b05
|
Ruby: PrintAST: more stable order for synthesized nodes
|
2022-08-03 09:02:38 +02:00 |
|
Anders Schack-Mulligen
|
d9ae4605c1
|
Merge pull request #9948 from aschackmull/java/samenameassuper-perf
Java: Fix join-order in SameNameAsSuper.
|
2022-08-03 08:04:30 +02:00 |
|
Chris Smowton
|
81f3bcd802
|
Don't require a PathCreation for every tainted-path sink
|
2022-08-02 21:30:06 +01:00 |
|
Chris Smowton
|
c95f17fdf2
|
Make java/path-injection recognise create-file MaD sinks
|
2022-08-02 21:28:00 +01:00 |
|
Alex Ford
|
8e3548efb3
|
Merge branch 'main' into post-release-prep/codeql-cli-2.10.2
|
2022-08-02 20:29:26 +01:00 |
|
Arthur Baars
|
759fd6cc0b
|
Use 'gh codeql' with the nightly release for CI jobs
|
2022-08-02 17:01:20 +02:00 |
|
Arthur Baars
|
0be625f396
|
Merge pull request #9954 from aibaars/fix-triggers
CI: fix path triggers
|
2022-08-02 17:00:23 +02:00 |
|
Jeroen Ketema
|
a63df8fee9
|
Merge pull request #9930 from jketema/templ-var
C++: Update test for indexing of static template variable template arguments
|
2022-08-02 16:59:56 +02:00 |
|
Keith Hoodlet
|
b21fa0e2b0
|
Update Other section with example exit code
Add troubleshooting steps to remediate issues with the kernel killing a process.
|
2022-08-02 10:49:45 -04:00 |
|
Arthur Baars
|
64704057cb
|
CI: fix path triggers
|
2022-08-02 16:33:21 +02:00 |
|
Arthur Baars
|
55e15540f6
|
Merge pull request #9943 from aibaars/gh-codeql-follow-up
CI: remove unneeded PATH definitions
|
2022-08-02 16:22:18 +02:00 |
|
Mathias Vorreiter Pedersen
|
f385041ab3
|
C++: Add change note.
|
2022-08-02 14:07:22 +01:00 |
|
Mathias Vorreiter Pedersen
|
5181cc1295
|
C++: Add a 'allowInterproceduralFlow' predicate to the 'MustFlow' library to and use it instead of checking the enclosing callables after computing the dataflow graph.
|
2022-08-02 13:43:01 +01:00 |
|
Anders Schack-Mulligen
|
aabdf84300
|
Java: Improve join-order for not haveIntersection.
|
2022-08-02 14:29:03 +02:00 |
|