Tom Hvitved
1820bb4b0b
Data flow: Simplify forwards flow-through pruning
2022-12-15 15:29:11 +01:00
Tom Hvitved
cb84b557cf
Data flow: Track parameter instead of parameter position
...
Reverts 70d2a0df8a
2022-12-15 15:29:11 +01:00
Michael Nebel
f8b1fb465b
C#: Downgrade script should convert list- and slice pattern to unknown expression kind.
2022-12-15 14:50:22 +01:00
Michael Nebel
352ae7919b
C#: Add change note.
2022-12-15 14:50:22 +01:00
Michael Nebel
b4407eefb2
C#: Add downgrade script.
2022-12-15 14:50:22 +01:00
Michael Nebel
2c9e8bcb2d
C#: Add upgrade script.
2022-12-15 14:50:22 +01:00
Michael Nebel
88c8eceb4d
C#: Add list pattern test and expected results.
2022-12-15 14:50:21 +01:00
Michael Nebel
e6b4055a5f
C#: Add list pattern sample file.
2022-12-15 14:50:21 +01:00
Michael Nebel
98e125fa98
C#: Add library support for list- and slice patterns.
2022-12-15 14:50:21 +01:00
Michael Nebel
cfd3c1fcbe
C#: Add extractor support for list- and slice patterns.
2022-12-15 14:50:21 +01:00
Michael Nebel
00354a2f08
C#: Add list- and slice pattern expression kinds and re-generate ExprKind.cs.
2022-12-15 14:50:21 +01:00
Michael Nebel
31c60e545e
Java: Update the flow test generator to create ext.yml files.
2022-12-15 14:46:20 +01:00
Mathias Vorreiter Pedersen
99286fbdb1
Merge pull request #11704 from jketema/scanf-free
...
C++: Exclude deallocation functions as `scanf` result accesses
2022-12-15 13:17:43 +00:00
Michael Nebel
6dc798f970
Java: Migrate tests to use implicit ext.yml data extensions.
2022-12-15 14:13:07 +01:00
Geoffrey White
e7ea0d7ee9
C++: Attempt to clarify the way Allocation.qll and Deallocation.qll should be used.
2022-12-15 13:05:56 +00:00
Rasmus Lerchedahl Petersen
3a8fd910b1
python: do not change autogenerated file
2022-12-15 14:02:52 +01:00
Tom Hvitved
d7e44a5426
Merge pull request #10714 from hvitved/ruby/initialize
...
Ruby: Model flow through `initialize` constructors
2022-12-15 13:42:59 +01:00
Geoffrey White
8e61c78ce6
Swift: Fix RemoteFlowSource performance issue.
2022-12-15 12:36:32 +00:00
Owen Mansel-Chan
76a3fa856f
Use any() to stub getSyntheticGlobalType
...
This is used in all other languages not currently using dataflow type
pruning.
2022-12-15 12:24:23 +00:00
Owen Mansel-Chan
1a1b6a1b93
Use any() to stub getCallbackParameter/ReturnType
...
This is used in all other languages not currently using dataflow type
pruning.
2022-12-15 12:24:23 +00:00
Michael Nebel
100f64c09a
C#: Migrate tests to use the implicitly loaded .ext.yml data extensions.
2022-12-15 13:11:09 +01:00
Owen Mansel-Chan
0af530061d
Merge pull request #11697 from owen-mc/go/make-dataflowtype-singleton
...
Make DataFlowType a singleton
2022-12-15 12:07:57 +00:00
Rasmus Lerchedahl Petersen
a97bbdd0bc
python: rework hierarchy to avoid breaking API
2022-12-15 13:01:04 +01:00
Jeroen Ketema
ef61d14e9c
C++: Add change note
2022-12-15 12:57:13 +01:00
Rasmus Lerchedahl Petersen
997e3599f0
python: make tests valid and more fleshed out
2022-12-15 12:54:16 +01:00
Rasmus Lerchedahl Petersen
8e8d36f35e
python: this also works in 3.11
2022-12-15 12:54:14 +01:00
Rasmus Lerchedahl Petersen
3ace1ee69f
Python: remove obsolete coments
2022-12-15 12:54:13 +01:00
Jeroen Ketema
0b4c4fd580
C++: Simplify deallocation check
2022-12-15 12:46:32 +01:00
Owen Mansel-Chan
039d582060
Fix date in unrelated change note
2022-12-15 11:04:48 +00:00
Owen Mansel-Chan
06038d575e
Improve comments about Fields
2022-12-15 11:04:48 +00:00
Owen Mansel-Chan
e01e40c532
Fix FuncTypeExpr.getNumParameter
...
It actually counts the number of parameter declarations. We correct it
to do what it says and introduce `FuncTypeExpr.getNumParameterDecls`,
which we then use in `FuncTypeExpr.getUniquelyNumberedChild`.
2022-12-15 11:04:48 +00:00
Alex Ford
1b49bfe605
Merge pull request #11497 from alexrford/ruby/rails_globalid
...
Ruby: model `rails/globalid` component
2022-12-15 10:35:15 +00:00
Erik Krogh Kristensen
1500fa5f67
Merge pull request #10663 from pwntester/restify_improvements
...
Javascript: Improve Restify support and add new Spife support
2022-12-15 11:08:22 +01:00
Michael Nebel
a67e02df21
Merge pull request #11691 from michaelnebel/renameextensibles
...
C#/Java: Rename externalflow extensible predicates
2022-12-15 11:05:22 +01:00
Tom Hvitved
b3feb4f295
Update ruby/ql/lib/codeql/ruby/typetracking/TypeTrackerSpecific.qll
...
Co-authored-by: Asger F <asgerf@github.com >
2022-12-15 10:46:06 +01:00
Michael Nebel
12c1ebd81c
C#/Java: Add change note.
2022-12-15 09:41:14 +01:00
Jeroen Ketema
4fb43d56b3
C++: Exclude deallocation functions as scanf result accesses
2022-12-15 09:39:16 +01:00
Jami Cogswell
56acfdf672
Java: update test case
2022-12-15 00:57:08 -05:00
Jami Cogswell
510cd4a163
Java: change negative to neutral
2022-12-15 00:46:03 -05:00
Jami Cogswell
f1ddbbb96f
Java: update remaining models
2022-12-15 00:33:35 -05:00
Jami Cogswell
46b8fbc4c9
Java: update remaining models, resolve merge conflict
2022-12-15 00:33:06 -05:00
Jami Cogswell
15069250eb
Java: add draft of test case
2022-12-15 00:24:41 -05:00
Jami Cogswell
134577e52b
Java: some updates to models
2022-12-15 00:24:41 -05:00
Jami Cogswell
4c590d1190
Java: move most negative models to package.model.yml files
2022-12-15 00:24:41 -05:00
Jami Cogswell
b7016feb44
Java: initial updates based on review comments
2022-12-15 00:24:41 -05:00
Jami Cogswell
b3dbf00ae6
Java: update comment
2022-12-15 00:24:41 -05:00
Jami Cogswell
9d3abc72bf
Java: add draft of top 100 jdk models
2022-12-15 00:24:40 -05:00
Nora Dimitrijević
7ea0eada11
Swift: add missing Builtin symbols
2022-12-14 20:03:41 -05:00
Nora Dimitrijević
2d288906a4
Swift: fix db downgrade script
2022-12-14 17:27:11 -05:00
Ed Minnix
72484b9483
Change wording of addJavascriptInterface query description
2022-12-14 16:19:03 -05:00
