Tom Hvitved
fd32e1110a
C#: Remove footnote from versions-compilers.rst
2020-05-01 13:57:28 +02:00
Tom Hvitved
8a41a5fc47
C#: Update version-compilers.rst to mention .NET Core 3.1
2020-05-01 13:48:24 +02:00
Jonas Jensen
5f74c24d4d
C++: Test definitions through &, *, ...
2020-05-01 11:04:49 +02:00
Jonas Jensen
4ddf12119d
C++: Don't suppress consistency checks for calls
...
See https://github.com/github/codeql/pull/3162#discussion_r400849713 .
2020-05-01 11:04:42 +02:00
Taus
33f4503ac3
Merge pull request #3213 from RasmusWL/python-iter-str-seq-with-tests
...
Python: supress non-useful results (w/ tests) for iter str/seq query
2020-05-01 11:04:05 +02:00
Taus
40def2af05
Merge pull request #3311 from RasmusWL/python-parse_qs
...
Python: Propagate taint through parse_qs
2020-05-01 10:40:31 +02:00
Erik Krogh Kristensen
16823143dd
refactor getAPropertyUsedInLoadStore
2020-05-01 09:58:11 +02:00
Erik Krogh Kristensen
1a42c9fd80
make predicates private
...
Co-authored-by: Asger F <asgerf@github.com >
2020-05-01 09:42:09 +02:00
Jonas Jensen
9fc27e9130
C++: Fix "is constant" check
...
The check was supposed to check for constant type, not constant value.
This fixes a false negative that appeared in
`LargeParameter/test.cpp:106`.
2020-05-01 09:04:31 +02:00
Max Schaefer
980241603b
Switch to new-style change notes.
2020-05-01 07:57:13 +01:00
Sauyon Lee
cd1d699208
Improve BadRedirectCheck query
...
We now look for a path from the variable being checked to a redirect.
Additionally, several sources of false positives have been eliminated, and a model of relevant parts of the Macaron framework has been added.
2020-05-01 07:13:16 +01:00
Rasmus Wriedt Larsen
e569d7ae41
Merge branch 'master' into python-parse_qs
2020-04-30 17:05:17 +02:00
Slavomir
836b8965e2
Beautify .qhelp file
2020-04-30 16:59:30 +03:00
Slavomir
127cd3d003
Refactor query
2020-04-30 16:46:19 +03:00
Slavomir
b9fae2e5d0
Add newline
2020-04-30 16:46:19 +03:00
Slavomir
6f1f60896a
autoformat
2020-04-30 16:46:19 +03:00
Slavomir
c9c7e6c0a9
Add more test cases: add negative cases
2020-04-30 16:46:19 +03:00
Slavomir
d713087364
Mention in qhelp file: CWE-190: Integer Overflow or Wraparound
2020-04-30 16:46:19 +03:00
Slavomir
4517d4513f
Update qhelp file and go examples
2020-04-30 16:46:19 +03:00
Slavomir
f093226dab
Move query to experimental
2020-04-30 16:46:19 +03:00
Slavomir
57ac636d60
Change alert message
2020-04-30 16:46:19 +03:00
Slavomir
fe661b227c
Improve alert message inside select statement
2020-04-30 16:46:19 +03:00
Slavomir
05314a19ee
Add comments, improve naming
2020-04-30 16:46:19 +03:00
Slavomir
b176c4ad19
Add ParseFloat, ParseInt, ParseUint
2020-04-30 16:46:19 +03:00
Slavomir
8ecc2b9523
add comments, improve naming, refactor
2020-04-30 16:46:19 +03:00
Slavomir
fd9e3a005e
fix comments
2020-04-30 16:46:19 +03:00
Slavomir
6d2c5be196
rename OverflowingConversionExpr to NumericConversionExpr
2020-04-30 16:46:19 +03:00
Slavomir
74481c4bad
CWE-681: initial commit
2020-04-30 16:46:19 +03:00
Cornelius Riemenschneider
c856552b64
Add preOffset to the bindingset for simpleArrayLengthStep.
2020-04-30 15:00:12 +02:00
semmle-qlci
606a1145eb
Merge pull request #3331 from RasmusWL/python-improve-file-taint
...
Approved by tausbn
2020-04-30 13:58:03 +01:00
Jonas Jensen
8ffa124bf9
C++: Addresses may escape through call qualifiers
...
Also clarify the docs on `Call` to decrease the likelyhood of such an
omission happening again.
The updated test reflects that `f1.operator()` lets the address of `f1`
escape from the caller.
2020-04-30 14:27:40 +02:00
Rasmus Wriedt Larsen
e0b4518a3e
Merge branch 'master' into python-improve-file-taint
2020-04-30 11:24:29 +02:00
semmle-qlci
59a04282c1
Merge pull request #3381 from RasmusWL/docs-minor-python-fix
...
Approved by shati-patel
2020-04-30 10:11:28 +01:00
Rasmus Wriedt Larsen
862c4b0845
Docs: Fix result of cmp.getComparator(0) in Python tutorial
...
Fixes https://github.com/github/codeql/issues/3360
2020-04-30 10:59:59 +02:00
Tom Hvitved
b03e87f623
Merge pull request #3379 from calumgrant/cs/nullability-warning
...
C#: Remove nullability warnings
2020-04-30 08:38:28 +02:00
Max Schaefer
dd4f1ca70b
Merge pull request #125 from gagliardetto/exec-syscall
...
Add syscall functions to SystemCommandExecutors
2020-04-30 07:21:28 +01:00
Sauyon Lee
417102c120
Merge pull request #124 from github/rc/1.24
...
Merge rc/1.24 into master
2020-04-29 12:27:56 -07:00
Cornelius Riemenschneider
b838426421
Move ArrayLengthAnalysis library to the correct location.
2020-04-29 21:07:44 +02:00
Slavomir
a357121e89
Fix test by removing a unix-only func; add windows-only funcs
2020-04-29 19:17:24 +03:00
Slavomir
a93477c301
Add syscall functions to SystemCommandExecutors
2020-04-29 18:31:07 +03:00
Jason Reed
62c128f9a4
C++: Add QLDoc.
2020-04-29 11:06:06 -04:00
semmle-qlci
2b055de4d6
Merge pull request #3154 from erik-krogh/ImplicitConv
...
Approved by asgerf
2020-04-29 16:05:19 +01:00
Calum Grant
25d5c81896
C#: Enable nullability for Semmle.Extraction project. Some refactoring required.
2020-04-29 15:59:46 +01:00
Calum Grant
6b8a5606d6
C#: Enable nullability for Autobuild tests project.
2020-04-29 15:27:35 +01:00
Calum Grant
86d032e2ea
C#: Remove nullability warning by lifting local function. Warning seems to be caused by a compiler bug.
2020-04-29 15:21:43 +01:00
Jason Reed
e73833eda6
C++: Factor out file encoding predicate
2020-04-29 10:15:26 -04:00
Jason Reed
0500715bc1
C++: Fix docstring in localReferences.ql
2020-04-29 10:15:26 -04:00
Jason Reed
f0a7ff0d9d
Exclude ide queries from lgtm suite.
2020-04-29 10:15:26 -04:00
Jason Reed
b341f768de
C++: Fix formatting
2020-04-29 10:15:26 -04:00
Jason Reed
3b7fecab93
C++: Fix duplicate query ids
2020-04-29 10:15:26 -04:00
