Arthur Baars
16c3da3a27
Merge pull request #11056 from alexrford/ruby/ast-ref-table-docs
...
Ruby: add an AST reference guide
2022-11-07 11:48:37 +01:00
Geoffrey White
7b62bed9db
Merge pull request #10947 from karimhamdanali/swift-pbe-iterations
...
Swift: detect hash functions with low # of iterations
2022-11-07 10:38:29 +00:00
Chris Smowton
e877967a62
Add test verifying no malformed wildcards result from captured type variables with a Collection<? extends ...> type
2022-11-07 10:29:04 +00:00
Chris Smowton
d999c1d3dd
Java: Add test for multiply-bounded wildcards
...
This exercises several cases of variables bounded both by a wildcard and by a bound on the type parameter, checking that the extractor strips the wildcards and captures to decide on a concrete type for the parameters and return values.
2022-11-07 10:29:04 +00:00
Asger F
334d5b1b17
Ruby: fix stale qldoc
2022-11-07 11:23:40 +01:00
Chris Smowton
1cd30847f6
Merge pull request #11121 from smowton/smowton/fix/java-wildcard-extraction
...
Kotlin: fix extraction of Java nested wildcards; wildcards in return types
2022-11-07 10:23:02 +00:00
Asger F
27e1a8bd7a
Ruby: cache predicates related to getConst
2022-11-07 11:18:29 +01:00
Chris Smowton
68face8d46
Merge pull request #11130 from smowton/smowton/fix/kotlin-always-extract-file-labels
...
Kotlin: always populate the `files` table
2022-11-07 10:14:41 +00:00
Jeroen Ketema
d62e3f6bc2
Merge pull request #11137 from jketema/dataflow-test-fixes
...
C++: Small fixes for the dataflow tests
2022-11-07 11:07:09 +01:00
Anders Schack-Mulligen
99ca28ea9b
Merge pull request #10886 from aschackmull/dataflow/joinorders
...
Dataflow: Fix a couple of join-orders.
2022-11-07 11:05:29 +01:00
Chris Smowton
587aa93f6d
Merge pull request #11105 from smowton/smowton/fix/use-defaults-method-to-implement-jvmoverloads
...
Kotlin: use `$default` functions to implement `@JvmOverloads`
2022-11-07 09:54:16 +00:00
Tamas Vajk
4e8d8a4de1
Add compilerGeneratedReason for enum constructor call arguments
2022-11-07 10:07:05 +01:00
Tamas Vajk
7d927a7396
Adjust enum constructor argument extraction based on review
2022-11-07 10:07:05 +01:00
Tamas Vajk
fb5b344427
Fix failing build on early kotlin versions
2022-11-07 10:07:05 +01:00
Tamas Vajk
44e70afa85
Kotlin: Extract missing arguments of enum constructor calls
2022-11-07 10:07:04 +01:00
Asger F
d4b018f242
Ruby: typo: found up -> looked up
2022-11-07 09:58:00 +01:00
erik-krogh
fc38bf0429
Merge branch 'main' into aliasFlow
2022-11-07 09:46:48 +01:00
Jeroen Ketema
291027ad82
C++: Fix return type in dataflow test
2022-11-07 09:42:54 +01:00
Jeroen Ketema
3b1feeef6d
C++: Remove unneeded isAdditionalFlowStep from dataflow test
...
Since the introduction of flow through global variables these additional
steps are no longer needed.
2022-11-07 09:40:57 +01:00
Asger F
25f0382fce
Ruby: replace asMethod with asCallableAstNode
2022-11-07 09:38:48 +01:00
Asger F
af5a378572
Ruby: fix typo in qldoc
2022-11-07 09:20:35 +01:00
Asger F
9a38e31baa
Ruby: add explicit 'this'
2022-11-07 09:20:28 +01:00
Asger F
ff20908bbd
Ruby: Assignment -> AssignExpr
2022-11-07 09:20:16 +01:00
erik-krogh
40032f295a
treat arrays that gets executed with shell:true as a sink for js/shell-command-constructed-from-input
2022-11-07 09:19:05 +01:00
Asger F
25dd8db423
Ruby: Refactor out getAnElementWriteCall
2022-11-07 09:18:18 +01:00
Asger F
5fa49b3319
Ruby: asExpr() -> getExprNode()
2022-11-07 09:18:00 +01:00
Asger F
8b85744d3e
Ruby: use lambdaCreation and handle "proc" in there
2022-11-07 09:14:55 +01:00
erik-krogh
bc5b7455cf
add failing test
2022-11-07 09:14:52 +01:00
Dave Bartolomeo
b8e1aa67d8
Merge pull request #11134 from github/post-release-prep/codeql-cli-2.11.3
...
Post-release preparation for codeql-cli-2.11.3
2022-11-05 13:54:49 -04:00
github-actions[bot]
fca754bddd
Post-release preparation for codeql-cli-2.11.3
2022-11-05 14:30:48 +00:00
Dave Bartolomeo
8344d5a376
Merge pull request #11133 from github/release-prep/2.11.3
...
Release preparation for version 2.11.3
2022-11-04 22:50:41 -04:00
Mathias Vorreiter Pedersen
60ac031db4
Merge pull request #11036 from geoffw0/simplify3
2022-11-05 00:31:05 +00:00
Dave Bartolomeo
013b7eff1c
Apply suggestions from code review
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2022-11-04 18:46:32 -04:00
github-actions[bot]
508327235a
Release preparation for version 2.11.3
2022-11-04 20:16:23 +00:00
Tiferet Gazit
5198ad7612
Merge pull request #11055 from github/tiferet/sink-classification-reasons
...
Sink endpoint characteristics
2022-11-04 11:24:08 -07:00
Henry Mercer
b32f4b844a
Merge pull request #11118 from github/henrymercer/atm-check-queries-improvements
...
ATM: Miscellaneous improvements for the check queries workflow
2022-11-04 18:04:32 +00:00
Arthur Baars
9992ecc317
Merge branch 'codeql-cli-2.11.2' into ruby/ast-ref-table-docs
2022-11-04 17:59:35 +01:00
Calum Grant
e9e94dcb0f
Merge pull request #10932 from github/nickrolfe/ruby-dataflow-docs
...
Ruby: data flow docs
2022-11-04 16:47:00 +00:00
tiferet
833041c62e
Fix QLDoc style errors
2022-11-04 09:30:31 -07:00
tiferet
2aa4651534
Remove predicates not yet used from the current PR
2022-11-04 09:30:31 -07:00
tiferet
74c8bfff4f
Minor changes from code review
2022-11-04 09:30:31 -07:00
tiferet
e60c016fc6
Format fixes
2022-11-04 09:30:31 -07:00
tiferet
cbf81b8839
Improve the import structure
2022-11-04 09:30:31 -07:00
tiferet
300456cd3e
Enforce the abstraction over characteristics:
...
Make the implementations of specific `EndpointCharacteristic`s private.
2022-11-04 09:30:31 -07:00
tiferet
c0cc754fb5
Rename ClassificationReasons
...
Change the name to EndpointCharacteristics.
2022-11-04 09:30:30 -07:00
tiferet
a4939b91e7
Generalize the definition of a known sink:
...
If the list of reasons includes positive indicators with maximal confidence for this class, it's a known sink for the class.
This negates the need for each query config to define the isKnownSink predicate individually.
2022-11-04 09:30:29 -07:00
tiferet
08bbe596a2
Create the sink ClassificationReasons
...
Write the reasons that indicate that an endpoint is a sink for each sink type.
Also fix import error.
2022-11-04 09:30:29 -07:00
erik-krogh
d7f1491f41
fix non-attached annotations for newtype branches
2022-11-04 17:19:42 +01:00
Dave Bartolomeo
649c3af98a
Merge pull request #11127 from github/henrymercer/fix-atm-pr-checks
...
ATM: Fix CodeQL pack workspace references
2022-11-04 12:19:42 -04:00
Alex Ford
53e83ff048
Ruby: AST ref docs - add futher reading section
2022-11-04 16:01:31 +00:00
