Erik Krogh Kristensen
|
67cd303a91
|
add change note
|
2020-02-10 13:51:48 +01:00 |
|
Mathias Vorreiter Pedersen
|
99a9d7f676
|
C++: Simplify
|
2020-02-10 13:01:40 +01:00 |
|
Erik Krogh Kristensen
|
8e316d2f05
|
add unary type-tracking predicates
|
2020-02-10 12:51:09 +01:00 |
|
Calum Grant
|
a95ef31984
|
C#: Analysis change notes
|
2020-02-10 11:36:30 +00:00 |
|
Calum Grant
|
5fef77bf44
|
C#: Handle expressions of typeImplicitStackAllocArrayCreationExpressionSyntax
|
2020-02-10 11:30:12 +00:00 |
|
Mathias Vorreiter Pedersen
|
6804018a64
|
C++: Accept output
|
2020-02-10 11:37:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
522c629441
|
C++: Move fix to adjustedSink to avoid generating too many instructions
|
2020-02-10 11:37:26 +01:00 |
|
Pavel Avgustinov
|
09960e0a7d
|
Merge pull request #2791 from aibaars/language-spec-fixes
Fix a few typos in the QL grammar
|
2020-02-10 10:33:00 +00:00 |
|
Erik Krogh Kristensen
|
0f511c92b4
|
Merge remote-tracking branch 'upstream/master' into FalsySanitizer
|
2020-02-10 09:54:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
52bc25b608
|
C++: Accept output
|
2020-02-10 08:50:29 +01:00 |
|
SpaceWhite
|
949914e48a
|
Add XPathInjection
|
2020-02-10 13:48:02 +09:00 |
|
Mathias Vorreiter Pedersen
|
bb30275e2e
|
C++: Fix false negatives for postfix crement expressions
|
2020-02-09 21:35:07 +01:00 |
|
Tom Hvitved
|
9b699618a8
|
Data flow: Improve performance of flowFwdStore()
|
2020-02-09 19:34:04 +01:00 |
|
Mathias Vorreiter Pedersen
|
bcb4759b6a
|
Merge pull request #2795 from agustingianni/master
cpp: Adds a member predicate to get a FunctionAccess from a Function
|
2020-02-08 10:39:36 +01:00 |
|
Robert Marsh
|
3266a89023
|
C++: document DynamicAllocationInstruction
|
2020-02-07 16:56:57 -08:00 |
|
Robert Marsh
|
3ea3519674
|
C++/C#: sync changes
|
2020-02-07 16:37:42 -08:00 |
|
Robert Marsh
|
7f69cdfb56
|
C++: Dynamic allocations in IR alias analysis
|
2020-02-07 16:37:36 -08:00 |
|
Robert Marsh
|
05c8610bbc
|
C++: tests for alias analysis of malloc
|
2020-02-07 16:35:58 -08:00 |
|
Robert Marsh
|
68097116b0
|
C++:autoformat
|
2020-02-07 15:51:23 -08:00 |
|
semmle-qlci
|
37360e7d93
|
Merge pull request #2794 from esbena/js/move-EnumeratedPropName
Approved by asgerf
|
2020-02-07 21:31:37 +00:00 |
|
semmle-qlci
|
76ba48c6fb
|
Merge pull request #2790 from esbena/js/model-send
Approved by asgerf
|
2020-02-07 21:30:54 +00:00 |
|
Robert Marsh
|
d1d19a7446
|
Merge branch 'master' into rdmarsh/cpp/ir-flow-through-outparams
Update test expectations
|
2020-02-07 12:24:05 -08:00 |
|
Max Schaefer
|
d6f3005e0e
|
Merge branch '235-head'
|
2020-02-07 20:12:47 +00:00 |
|
Asger Feldthaus
|
e4844bfad2
|
JS: Fix deprecated API usage
|
2020-02-07 17:17:48 +00:00 |
|
Asger Feldthaus
|
ad10414604
|
JS: Update expected output of existing test
|
2020-02-07 16:57:57 +00:00 |
|
Max Schaefer
|
5571f1eac7
|
Rename Comparison to ComparisonExpr.
|
2020-02-07 16:24:42 +00:00 |
|
Max Schaefer
|
ad7dfa258c
|
Rename ParenExpr.getExpression() to getExpr() for consistency with similar predicates in other classes.
|
2020-02-07 16:24:42 +00:00 |
|
Agustin Gianni
|
033eeab41e
|
cpp: Adds a member predicate to get a FunctionAccess from a Function
- Adds a member predicate to get a FunctionAccess from a Function
- Adds QLDoc to getACallToThisFunction.
|
2020-02-07 16:45:14 +01:00 |
|
Erik Krogh Kristensen
|
06e13cb3a1
|
Merge branch 'master' of git.semmle.com:Semmle/ql into FalsySanitizer
|
2020-02-07 16:13:02 +01:00 |
|
Erik Krogh Kristensen
|
c6668da02e
|
expand how indirectCommandArguments are found
|
2020-02-07 15:00:05 +01:00 |
|
Asger Feldthaus
|
254af4f3a8
|
JS: Rewrite LodashUnderscore::AnalyzedThisInBoundCallback
|
2020-02-07 13:58:07 +00:00 |
|
Erik Krogh Kristensen
|
dd9e3d2fec
|
expose TaintTracking::arrayFunctionTaintStep and add a step for "concat"
|
2020-02-07 14:57:32 +01:00 |
|
Asger Feldthaus
|
fea5a4331d
|
JS: Rewrite React::AnalyzedThisInBoundCallback
|
2020-02-07 13:55:42 +00:00 |
|
Asger Feldthaus
|
3b28bdbeed
|
JS: Rewrite AnalyzedThisInArrayIterationFunction
|
2020-02-07 13:55:36 +00:00 |
|
Asger Feldthaus
|
f942e69482
|
JS: Improve flow through partial invokes
|
2020-02-07 13:54:14 +00:00 |
|
Anders Schack-Mulligen
|
85adc3be10
|
Java: Add String.join as default taint step.
|
2020-02-07 14:43:31 +01:00 |
|
Esben Sparre Andreasen
|
dcdaa96570
|
JS: remove unused imports
|
2020-02-07 14:10:50 +01:00 |
|
Esben Sparre Andreasen
|
cb30329b3d
|
JS: make DynamicPropertyAccess.qll from PrototypePollutionUtility.ql
|
2020-02-07 13:57:52 +01:00 |
|
Calum Grant
|
3c8aeb946a
|
Merge pull request #2729 from hvitved/csharp/assignment-dataflow-node
C#: Add new class `AssignableDefinitionNode` to the data-flow library
|
2020-02-07 12:53:55 +00:00 |
|
Anders Schack-Mulligen
|
ee3af0a247
|
Java: Add String.format as default taint step.
|
2020-02-07 13:43:35 +01:00 |
|
Erik Krogh Kristensen
|
1ece6b9afe
|
update expected output of tests
|
2020-02-07 12:57:51 +01:00 |
|
semmle-qlci
|
125c6a071c
|
Merge pull request #2787 from asger-semmle/js/lazy-cache-test-case
Approved by esbena
|
2020-02-07 11:53:04 +00:00 |
|
Arthur Baars
|
c91815f44d
|
Remove trailing ; in QL language spec
|
2020-02-07 12:47:14 +01:00 |
|
Arthur Baars
|
c431d47481
|
Fix typos in QL language spec
|
2020-02-07 12:46:41 +01:00 |
|
Esben Sparre Andreasen
|
736ccb98c2
|
JS: model the send library for js/path-injection
|
2020-02-07 12:45:32 +01:00 |
|
Shati Patel
|
4cbf7d2a6d
|
Merge pull request #2789 from jf205/codeql-178
QL language handbook: add link to information about module resolution in QL spec
|
2020-02-07 12:27:02 +01:00 |
|
Sauyon Lee
|
1a21c14f2f
|
Remove build ignore from HardcodedCredentials example
|
2020-02-07 03:13:14 -08:00 |
|
Sauyon Lee
|
e4d228fa0f
|
Fix CleartextStorage tests
|
2020-02-07 03:13:13 -08:00 |
|
Sauyon Lee
|
6300fdf85e
|
Remove accidentally added CleartextStorage tests
|
2020-02-07 03:13:12 -08:00 |
|
Sauyon Lee
|
559ac8f0d2
|
Fix squirrel test build
|
2020-02-07 03:12:19 -08:00 |
|