Henry Mercer
423374a7b8
Merge branch 'main' into codeql-ci/atm/release-0.4.4
2022-12-13 14:26:21 +00:00
github-actions[bot]
745823ca60
JS: Bump version of ML-powered library and query packs to 0.4.5
2022-12-13 13:32:52 +00:00
github-actions[bot]
ea13925a92
JS: Bump patch version of ML-powered library and query packs
2022-12-13 13:28:09 +00:00
Alex Denisov
ee94849528
Swift: switch to bootstrapped Swift compiler
2022-12-13 13:59:13 +01:00
Asger F
6b15839221
JS: Add tests for the examples used in the docs
2022-12-13 11:33:12 +01:00
Asger F
ba1364a4cb
JS: Add sinks mentioned in doc
...
Note that 'sql-injection' was already added
2022-12-13 11:33:12 +01:00
Alvaro Muñoz
270a4355df
format Restify.qll
2022-12-13 11:22:24 +01:00
Alvaro Muñoz
4ba3190d29
Replace API::Node with DataFlow::Node for Spife's RouteSetup
2022-12-13 11:10:04 +01:00
Felicity Chapman
cbbce9b98a
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
2022-12-13 09:56:50 +00:00
Michael Nebel
b8ef961498
Merge pull request #9415 from JarLob/sockets
...
Add TCP and UDP socket client taint sources
2022-12-13 10:39:33 +01:00
Felicity Chapman
6aaaf4267b
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
2022-12-13 09:37:49 +00:00
Chris Smowton
406a12e797
Remove unused function DeclarationStack.findFirst
2022-12-13 09:34:36 +00:00
Tom Hvitved
39fea378b8
Python: Update expected test output
2022-12-13 09:53:01 +01:00
Tom Hvitved
cfcb3a60ba
C++: Update expected test output
2022-12-13 09:53:01 +01:00
Tom Hvitved
da6a42980f
Swift: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
24b1da4d02
Python: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
2a28953e41
Java: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
4d2436dd82
Go: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
64eb0cc941
C#: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
bc58cbec8c
C++: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
0c2eee2a72
Data flow: Sync files
2022-12-13 09:52:55 +01:00
Tom Hvitved
410ef4d713
Data flow: Rename stages
2022-12-13 09:52:46 +01:00
Tom Hvitved
d11cb2ee0f
Data flow: Introduce ApproxContent in a new pruning stage between existing stages 2 and 3
2022-12-13 09:52:45 +01:00
AlexDenisov
73196fd732
Merge pull request #11669 from github/redsun82/swift-wrapper
...
Swift: wrap extractor with shell script
2022-12-13 09:46:42 +01:00
Paolo Tranquilli
0dc717fd9c
Swift: remove no more needed library path setting in qltest.sh
2022-12-13 09:13:43 +01:00
Paolo Tranquilli
03d7adb303
Swift: wrap extractor with shell script
...
This is in preparation for the extractor to use shared libraries
packaged alongside it.
We could probably also move the `CODEQL_EXTRACTOR_SWIFT_RUN_UNDER` logic
in it, where it would be simpler and more robust.
2022-12-13 09:07:37 +01:00
yoff
557a5b469f
Merge pull request #11555 from pwntester/new_python_cmdi_sinks
...
Added two new CMDi sinks for python's stdlib
2022-12-13 09:00:34 +01:00
SiaraMist
0518eda7ab
Remove import tutorial
2022-12-12 17:46:03 -08:00
SiaraMist
dee66354cc
Link to template reusable
2022-12-12 17:36:43 -08:00
Siara
094a9f4aa7
Edit reusable
2022-12-12 17:32:02 -08:00
Jami
93d8a03e73
Merge branch 'main' into jcogs33/mad-metrics-query
2022-12-12 20:31:53 -05:00
Siara
028ab325f4
Update docs/codeql/reusables/codespaces-template-note.rst
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2022-12-12 17:28:39 -08:00
Jami Cogswell
08b5cf1415
Java/C#: fix formatting issue
2022-12-12 20:24:00 -05:00
Siara
4aa92dfd88
Updates from review comments
2022-12-12 17:13:57 -08:00
Jami Cogswell
a77acd6745
Java: add change note
2022-12-12 17:28:12 -05:00
Jami Cogswell
f0124dae1a
Java: replace exists with instanceof
2022-12-12 16:40:19 -05:00
erik-krogh
92a7e787a8
C: do the minimal change to ValueNumberBound instead
2022-12-12 22:17:50 +01:00
Jami
84b69deb55
Merge branch 'main' into jcogs33/update-externalapi-charpredicate
2022-12-12 16:01:22 -05:00
Siara
169a465214
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
...
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com >
2022-12-12 12:54:01 -08:00
Harry Maclean
0340549744
Ruby: Slight rewording
2022-12-13 09:45:31 +13:00
erik-krogh
e0045d2736
filter out string literals from the taint-sink meta query
2022-12-12 21:44:24 +01:00
Jami Cogswell
3526406db0
Java: add tests
2022-12-12 15:10:55 -05:00
Chris Smowton
dd86f7a696
Kotlin: Revert type erasure within $default functions
...
This imprecise implementation turned out to cause linkage errors, e.g. when type variables in the signatures of member methods were inappropriately erased. For the time being we accept that $default methods despite having erased signatures in keeping with their JVM representation can contain expressions whose types make reference to their
surrounding function or class' type variables, even though they should be out of scope since $default methods are static and don't have type parameters, and need to cope with the inconsistency in QL.
2022-12-12 18:33:22 +00:00
Jami Cogswell
22f8d97f31
C#: add test case
2022-12-12 13:28:01 -05:00
Jami Cogswell
446ac75c87
Java: update unit test
2022-12-12 13:28:01 -05:00
Jami Cogswell
39154b1455
C#: add isParameterless predicate to Constructor class
2022-12-12 13:28:00 -05:00
Jami Cogswell
5113041623
Java: add isParameterless predicate to Constructor class
2022-12-12 13:28:00 -05:00
Jami Cogswell
a8a8b03d2f
C#: exclude parameterless constructors from DataFlowTargetApi
2022-12-12 13:28:00 -05:00
Jami Cogswell
16d8e8e931
Java: exclude parameterless constructors from DataFlowTargetApi
2022-12-12 13:28:00 -05:00
Erik Krogh Kristensen
636d5e341c
Merge pull request #11652 from erik-krogh/static-useInstanceOf
...
Java/C#/GO: Use instanceof in more places
2022-12-12 17:52:04 +01:00
