Erik Krogh Kristensen
7c931452d9
autoformat
2019-12-16 13:45:42 +01:00
Rasmus Wriedt Larsen
6a73479ea3
Python: Modernise py/loop-variable-capture
2019-12-16 13:36:59 +01:00
Rasmus Wriedt Larsen
9004a8e71f
Python: Fix characteristic predicate of XMLParent
...
Like in https://github.com/Semmle/ql/pull/2520
2019-12-16 13:32:28 +01:00
Erik Krogh Kristensen
3ca3fa7e9e
add quotes on code in documentation
...
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com >
2019-12-16 13:32:01 +01:00
Shati Patel
1ff5a8e8e2
Docs: Update references to QL for Eclipse
2019-12-16 12:28:39 +00:00
Geoffrey White
f990634481
C++: Fix the XMLParent Constructor.
2019-12-16 11:07:16 +00:00
Geoffrey White
a6407f00a7
C++: Extend the files test to cover the issue with XMLParent.
2019-12-16 11:07:12 +00:00
Geoffrey White
c4c1dfa2b9
C++: Modernize the files tests.
2019-12-16 11:07:07 +00:00
Jonas Jensen
5cea452123
Merge pull request #2491 from rdmarsh2/rdmarsh/cpp/ir-taintedIncludingGlobalVars
...
C++: handle global vars in DefaultTaintTracking
2019-12-16 11:00:34 +01:00
m00nbsd
f7484171c9
Add NetBSD/Solaris allocation functions.
...
* kmem_{z}alloc is used by Solaris and NetBSD
* pool_{cache_}get is used by NetBSD
2019-12-16 10:32:18 +01:00
Erik Krogh Kristensen
c19d8ecb73
refactorizations and preparations for SocketIO implementation
2019-12-16 10:13:27 +01:00
Erik Krogh Kristensen
8c0b6f26da
Merge remote-tracking branch 'upstream/master' into moarExceptions
2019-12-16 08:35:45 +01:00
Erik Krogh Kristensen
904976c7ac
update tests after removing control-flow checks from error-callbacks
2019-12-16 08:30:21 +01:00
Jonas Jensen
648c19978a
Merge pull request #2528 from geoffw0/hiddenqueries
...
CPP: Resolve some hidden queries
2019-12-14 09:39:13 +01:00
Dave Bartolomeo
914288d3c5
C++: Fix toString() predicates that don't hold
2019-12-13 17:06:05 -07:00
Erik Krogh Kristensen
1efe2ba167
inline ifStmt field
2019-12-13 19:00:54 +01:00
Geoffrey White
91af51cf46
CPP: Change note.
2019-12-13 16:58:37 +00:00
Jonathan Leitschuh
d24d1a11d0
Merge pull request #1 from aschackmull/java/cwe-829-qltest
...
Java: Add .expected file to qltest.
2019-12-13 10:55:17 -05:00
Anders Schack-Mulligen
13f12c5332
Java: Fix characteristic predicate of XMLParent.
2019-12-13 15:20:52 +01:00
Anders Schack-Mulligen
f88623ccb4
Java: Add .expected file to qltest.
2019-12-13 14:34:29 +01:00
semmle-qlci
9b6c394ac7
Merge pull request #2520 from max-schaefer/js/fix-2517
...
Approved by esbena
2019-12-13 12:59:37 +00:00
Erik Krogh Kristensen
3b2cc4674e
autoformat
2019-12-13 11:44:52 +01:00
Erik Krogh Kristensen
e164f46330
changes based on review feedback
2019-12-13 11:44:31 +01:00
Geoffrey White
d1530ddef9
CPP: Reduce precision of ClassesWithManyFields.ql.
2019-12-13 08:40:59 +00:00
Geoffrey White
49b5d9283f
CPP: Reduce precision of FeatureEnvy.ql.
2019-12-13 08:40:59 +00:00
Geoffrey White
896ec9de72
CPP: Reduce precision of InappropriateIntimacy.ql.
2019-12-13 08:40:58 +00:00
Geoffrey White
acb011de04
CPP: Reduce precision of JapaneseEraDate.ql.
2019-12-13 08:40:58 +00:00
Felicity Chapman
54a7b89b99
Merge pull request #2526 from yo-h/java-change-note-netty
...
Java: add change note for `java/netty-http-response-splitting`
2019-12-13 08:12:01 +00:00
Jonas Jensen
12c11d079b
Merge pull request #2523 from jf205/mergeback-123-ql
...
Mergeback 1.23 -> master
2019-12-13 09:08:27 +01:00
Robert Marsh
53988b4b6c
Merge pull request #2527 from Semmle/fix-labeler-yaml-escaping
...
Actions: Fix broken escaping in PR labeller action.
2019-12-12 16:00:17 -08:00
Taus
c1b5389d96
Actions: Fix broken escaping in PR labeler action.
...
TL;DR: YAML escaping is complicated. I think this should fix the problems.
2019-12-12 22:24:23 +01:00
yo-h
32f146fbca
Java: add change note for java/netty-http-response-splitting
2019-12-12 14:31:06 -05:00
Jonathan Leitschuh
0c2da8af40
Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.ql
2019-12-12 14:10:11 -05:00
Robert Marsh
57d891e3b4
C++: autoformat
2019-12-12 11:03:18 -08:00
Asger F
45524d8b19
JS: Add to correctness-core suite
2019-12-12 16:05:05 +00:00
Asger F
e8f0e3811a
JS: Replace backticks with <code>
2019-12-12 15:52:09 +00:00
Asger F
eb82b17f16
JS: QHelp and a bit of qldoc
2019-12-12 15:40:41 +00:00
Rasmus Wriedt Larsen
43301505f5
Merge pull request #2521 from tausbn/automatically-label-pull-requests
...
Actions: Automatically add language-specific labels to pull requests.
2019-12-12 15:35:51 +00:00
Taus Brock-Nannestad
2fec0d0294
Escape labels with potentially problematic characters.
2019-12-12 16:29:04 +01:00
Erik Krogh Kristensen
f35dc5d274
Merge remote-tracking branch 'upstream/master' into moarExceptions
2019-12-12 16:13:52 +01:00
Erik Krogh Kristensen
17358606cb
change callback to rely on an behavior heuristic rather than a naming heuristic
2019-12-12 16:12:37 +01:00
Asger F
f398247d2f
JS: Step through rephinements in getImmediatePredecessor
2019-12-12 15:11:25 +00:00
Asger F
a30f991b5e
JS: Add query for missing await
2019-12-12 15:11:25 +00:00
james
f6029bd55c
Merge branch 'rc/1.23' into mergeback-123-ql
2019-12-12 15:05:28 +00:00
Geoffrey White
73446ea610
Merge pull request #2511 from jbj/isInCycle-raw-only
...
C++: Compute isInCycle only for raw IR
2019-12-12 14:22:00 +00:00
Erik Krogh Kristensen
08d0cb795b
revert the introduction of getEnclosingCall
2019-12-12 15:14:02 +01:00
Taus Brock-Nannestad
51315217ff
Add documentation label to docs/**/*.
2019-12-12 15:10:21 +01:00
Taus Brock-Nannestad
558c0a440e
Actions: Automatically add language-specific labels to pull requests.
2019-12-12 14:42:45 +01:00
Rasmus Wriedt Larsen
e3b502085b
Merge pull request #2515 from tausbn/python-fix-bad-join-order-in-statement-no-effect
...
Python: Fix bad join order in `py/ineffectual-statement`.
2019-12-12 13:41:18 +00:00
Max Schaefer
dfeca63677
JavaScript: Fix characteristic predicate of XMLParent.
...
The database type `@xmlparent` is defined a bit too loosely in that it includes all of `@file`, not just XML files. Fixing that would involve fiddling with the extractor/dbscheme, so I have opted to fix it at the QL level instead.
2019-12-12 12:38:29 +00:00
