Nick Rolfe
8786c700c2
Expand explanations of example global data-flow queries
2022-11-02 11:30:37 +00:00
Jean Helie
45320d91d1
Merge pull request #11065 from github/jhelie/add-check-to-run-atm-queries
...
ATM: add PR check running boosted queries
2022-11-02 12:28:40 +01:00
Chris Smowton
39520e54ea
Restore enum class exclusion from constructor default parameters
2022-11-02 11:28:13 +00:00
Paolo Tranquilli
3acd4486a3
Swift: add tests for RUN_UNDER support
...
While I would have preferred to add a proper unit test, this required
more infrastructure for mocking system calls. Instead I made `qltest.sh`
accept a `//codeql-extractor-env` header and used that to write a QL
test exercising the `RUN_UNDER` functionality.
2022-11-02 12:09:13 +01:00
Nick Rolfe
9998752147
Accept suggested wording improvements
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2022-11-02 10:53:21 +00:00
Tamas Vajk
145e2093f3
Kotlin: Remove code duplication
2022-11-02 11:46:33 +01:00
Tom Hvitved
1e3adcd14e
Revert "Revert "SSA: Turn consistency predicates into query predicates""
2022-11-02 11:37:37 +01:00
Tom Hvitved
f603d96f48
Merge pull request #11074 from github/revert-10576-ssa/consistency-queries
...
Revert "SSA: Turn consistency predicates into `query` predicates"
2022-11-02 11:29:42 +01:00
Tom Hvitved
f3e7d8778c
Merge pull request #11075 from hvitved/ruby/avoid-ssa-deprecated-predicates
...
Ruby: Avoid calls to deprecated SSA predicates
2022-11-02 11:29:22 +01:00
erik-krogh
33cca29a8e
drop down to the CFG instead of the AST to better support de-sugaring
2022-11-02 11:23:01 +01:00
Tom Hvitved
fa762d9952
C#: Fix flow steps into phi nodes
...
- Add missing flow from post-update nodes into phi nodes.
- Prevent flow from reads into phi nodes when use-use flow is prohibited.
2022-11-02 10:21:50 +01:00
Tom Hvitved
5b5dd07d60
C#: Add data flow test that illustrates issue with flow into phi nodes
2022-11-02 10:20:56 +01:00
Jean Helie
c4b750002e
Merge branch 'main' into jhelie/add-atm-model-integration-tests-hello-world
2022-11-02 10:09:56 +01:00
Jean Helie
e8549a413b
rename workflow
2022-11-02 10:09:06 +01:00
Tamas Vajk
a7cc8fced5
Adjust code based on review
2022-11-02 09:46:53 +01:00
Tamas Vajk
ec5ac17f87
Kotlin: Excluded compiler generated methods from java/confusing-method-signature
2022-11-02 09:40:31 +01:00
Tamas Vajk
556c199a89
Kotlin: Add test case for confusingly overloaded $default method
2022-11-02 09:40:31 +01:00
Tom Hvitved
2d5b9c12a6
Ruby: Avoid calls to deprecated SSA predicates
2022-11-02 09:37:28 +01:00
Tony Torralba
759ffc4743
Merge pull request #11027 from atorralba/atorralba/swift/webview-js-native-bridge-sources
...
Swift: WebView JS-native bridge sources
2022-11-02 09:32:57 +01:00
Tamás Vajk
79aba19dde
Merge pull request #10951 from tamasvajk/kotlin-fix-startoffset
...
Kotlin: Fix location (start position) of method calls
2022-11-02 09:20:32 +01:00
Tom Hvitved
780ea72b3b
Revert "SSA: Turn consistency predicates into query predicates"
2022-11-02 09:11:45 +01:00
Paolo Tranquilli
82998ce3a3
Merge branch 'main' into redsun82/swift-filtered-debugging
2022-11-02 06:39:16 +01:00
Paolo Tranquilli
57a616262f
Swift: fix run cwd
2022-11-02 06:27:09 +01:00
Paolo Tranquilli
0d9ecfc4de
Swift: move small bazel tests to build action
2022-11-02 06:23:44 +01:00
Paolo Tranquilli
6e370beb92
Swift: turn on macOS QL tests with slicing
2022-11-02 06:07:55 +01:00
Alex Ford
e6f91b91e0
Ruby: AST ref docs - initial draft
2022-11-01 23:48:23 +00:00
Geoffrey White
85e99feb49
Swift: Have swift/unsafe-webview-fetch use indices instead of parameter names.
2022-11-01 22:58:48 +00:00
Geoffrey White
d87117f623
Swift: Have swift/string-length-conflation use indices instead of parameter names.
2022-11-01 22:51:10 +00:00
erik-krogh
851d53d56b
don't sanitize calls through substring calls that just remove the start
2022-11-01 22:51:07 +01:00
erik-krogh
08bc14f598
add failing test
2022-11-01 22:50:13 +01:00
Tom Hvitved
28b7ab7fbe
Merge pull request #11066 from hvitved/ssa/deprecate-no-uncertain-reads-predicates
2022-11-01 22:06:08 +01:00
erik-krogh
c15f63ce62
sync files
2022-11-01 21:35:27 +01:00
erik-krogh
15416a9c86
fix getCanonicalCharClass in NfaUtils
2022-11-01 21:35:07 +01:00
erik-krogh
78e35e2f29
add failing test
2022-11-01 21:33:19 +01:00
Jean Helie
3d1f75221b
address @henrymercer's comments
2022-11-01 20:57:58 +01:00
Jean Helie
44bf8184fe
ATM: add PR check running the boosted queries
2022-11-01 20:57:58 +01:00
Jean Helie
ce1092c33d
add test repo
2022-11-01 20:57:58 +01:00
Chris Smowton
4910bf12e9
Kotlin vararg constructors: don't call a default-parameter constructor just because there are no varargs
...
This is the constructor case of https://github.com/github/codeql/pull/10909
2022-11-01 19:28:56 +00:00
alexet
04a47093ee
QL Spec: Add instanceof in classes
2022-11-01 18:31:43 +00:00
Dave Bartolomeo
9d5e5e3ee7
${workspace} all the things
2022-11-01 13:29:05 -04:00
Felicity Chapman
1a702bfd50
Add new article to toctree to fix test
2022-11-01 17:26:36 +00:00
Dave Bartolomeo
49c4c554c4
Merge from main
2022-11-01 13:22:40 -04:00
Tom Hvitved
ee9163aa40
Ruby: Fix flow steps into phi nodes
...
- Add missing flow from post-update nodes into phi nodes.
- Prevent flow from reads into phi nodes when use-use flow is prohibited.
2022-11-01 16:33:06 +01:00
Tom Hvitved
a191edfbd5
Ruby: Add data flow tests that illustrate problems with flow into SSA phi nodes
2022-11-01 16:32:46 +01:00
Alex Ford
d061df2e12
Ruby: AST ref docs - Module.qll
2022-11-01 15:24:23 +00:00
Tom Hvitved
640b0ce093
SSA: Deprecate *NoUncertainReads predicates
2022-11-01 15:21:32 +01:00
Karim Ali
8be4d47178
fix typos
2022-11-01 16:03:36 +02:00
Jean Helie
1d6db8db9a
ATM: add hello world workflow for development of model integration tests workflow
2022-11-01 14:51:11 +01:00
erik-krogh
6f3ca40fed
expand the explanation to include with arguments make the commands vulnerable
2022-11-01 14:24:23 +01:00
Tom Hvitved
e8f9429b92
Merge pull request #10917 from hvitved/ruby/singleton-call-sensitivity
...
Ruby: Call-context sensitivity for singleton method calls
2022-11-01 14:13:26 +01:00
