Mathias Vorreiter Pedersen
14468b64fb
Merge pull request #11924 from atorralba/atorralba/optbinding-getters
...
Swift: Support more CFG node types in optional binding flow
2023-01-18 16:37:11 +00:00
Owen Mansel-Chan
3fda9f6e65
Add change note
2023-01-18 15:42:42 +00:00
Arthur Baars
e85e61b6d7
Ruby: add diagnostics module
2023-01-18 16:28:16 +01:00
Owen Mansel-Chan
30f0dd8c03
Add string replacement sanitizer to log injection
2023-01-18 15:24:39 +00:00
Owen Mansel-Chan
015ef4c3ef
Add use of strings.Replacer to replace sanitizer
2023-01-18 15:20:14 +00:00
Owen Mansel-Chan
2b1a7898d9
Move ReplaceAll sanitizer to shared code
2023-01-18 15:12:52 +00:00
AlexDenisov
5173f10e68
Merge pull request #11925 from github/alexdenisov/swift-drop-dead-code
...
Swift: drop dead code
2023-01-18 16:10:25 +01:00
Alex Denisov
35620c4c86
Swift: drop dead code
2023-01-18 15:35:40 +01:00
Mathias Vorreiter Pedersen
e26e83b8df
Merge pull request #11728 from github/rdmarsh2/parameterize-range-analysis
...
C++: Parameterize the semantic range analysis
2023-01-18 14:22:35 +00:00
Geoffrey White
5d6f2436e4
Merge branch 'main' into coredata
2023-01-18 13:39:02 +00:00
Tony Torralba
90517e254a
Accept test expectation changes
2023-01-18 13:25:04 +01:00
Mathias Vorreiter Pedersen
48439bc252
Merge pull request #11905 from geoffw0/rncrypt
...
Swift: Add RNCryptor sinks to swift/constant-password
2023-01-18 11:43:23 +00:00
Tony Torralba
d75a5212b2
Support more CFG node types in optional binding flow
2023-01-18 12:42:44 +01:00
Tony Torralba
4a89a30abd
Add failing test
2023-01-18 12:41:59 +01:00
Rasmus Wriedt Larsen
4df946b161
Python: call-graph: Don't design for special method calls yet
...
The `call` arguments were not `CallNode`s before, to allow for easier
support of special method calls, such as `a + b` going to `__add__`.
However, this is not implemented yet, so for now we can keep things
simple.
Co-authored-by: Taus <tausbn@github.com >
2023-01-18 12:30:53 +01:00
Mathias Vorreiter Pedersen
c8bcfb77b2
Merge pull request #11836 from geoffw0/optbinding
...
Swift: Data flow through optional binding
2023-01-18 11:25:27 +00:00
Geoffrey White
71c1ca53a9
Merge branch 'main' into rncrypt
2023-01-18 11:09:09 +00:00
erik-krogh
e4d4873d0d
remove the dataflow copy for regexp tracking now that type-tracking is used
2023-01-18 11:04:51 +01:00
Michael Nebel
4c94adb5ec
C#: Add change note.
2023-01-18 10:50:04 +01:00
Michael Nebel
3846349ba0
C#: Add testcase for CIL generic attribute extraction.
2023-01-18 10:49:44 +01:00
Michael Nebel
821d294be8
C#: Add library support for CIL generic attributes.
2023-01-18 10:49:44 +01:00
Michael Nebel
5ff89a2ccf
C#: Update expected test output for printing of constructed generic CIL types.
2023-01-18 10:49:44 +01:00
Michael Nebel
8b231c51f9
C#: Improve printing of constructed generic CIL types.
2023-01-18 10:49:44 +01:00
Michael Nebel
b680795d15
C#: The generic attribute type is a constructed class.
2023-01-18 10:49:44 +01:00
Michael Nebel
62e7c22783
C#: Add generic attribute test and expected results.
2023-01-18 10:48:30 +01:00
Michael Nebel
211af1943c
C#: Library support for generic attributes.
2023-01-18 10:48:30 +01:00
Michael Nebel
3a4623b437
Merge pull request #11907 from michaelnebel/csharp/cil/attributes
...
C#: CIL attributes
2023-01-18 10:46:34 +01:00
Rasmus Wriedt Larsen
e0ccb9306a
Merge pull request #11908 from RasmusWL/dataflow-consistency-more-excludes
...
DataFlow: Add `uniqueParameterNodePositionExclude`
2023-01-18 10:44:51 +01:00
AlexDenisov
8910ba4f32
Merge pull request #11919 from github/redsun82/swift-obsolete-conf
...
Swift: remove obsolete configuration fields
2023-01-18 10:34:24 +01:00
erik-krogh
1477974bf1
the RegexExecution concept does not need to have getTerm()
2023-01-18 10:10:36 +01:00
erik-krogh
1a3c9c8305
improve performance of regular-expression type-tracking by adding an exploratory initial analysis
2023-01-18 10:10:36 +01:00
erik-krogh
b8f6feb68b
delete old test
2023-01-18 10:10:36 +01:00
erik-krogh
45316b6381
rename RegExpConfiguration to RegExpTracking
2023-01-18 10:10:36 +01:00
erik-krogh
25e65e0d9f
rewrite the regexp tracking DataFlow::Configuration to TypeTracking
2023-01-18 10:10:36 +01:00
erik-krogh
d0b627b018
move the implementation detail of how regular-expressions are tracked into RegExpConfiguration.qll"
2023-01-18 10:10:05 +01:00
Paolo Tranquilli
f383fd1dc1
Swift: introduce module disambuigation via linkage awareness
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
d7feb001be
Swift: prepare extractSwiftInvocation
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
a3b4c32f07
Swift: stamp all named declarations with an id-ref to the containing module
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
f7a046ccd2
Swift: add trap linkage awareness infrastructure
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
5fdb09380c
Swift: move TargetTrapDomain to TargetDomains in infra
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
7f389b9f9a
Swift: introduce TrapType
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
353536b826
Swift: collect original output module paths
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
84b285a4c6
Swift: collect source files
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
33c4a8233c
Swift: collect encountered modules
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
c7f13f1036
Swift: collect TRAP files related to an extractor run
...
In order to do this a mutable `SwiftExtractorState` is introduced.
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
c31c515205
Swift: move TargetFile as managed inside TrapDomain
2023-01-18 10:07:46 +01:00
Paolo Tranquilli
20eaa34485
Swift: failing tests for linkage awareness
2023-01-18 10:07:46 +01:00
Tony Torralba
c8e894b854
Merge pull request #11917 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-01-18 10:02:22 +01:00
erik-krogh
f516ccb4e2
limit the fieldFlowBranchLimit for the regexp tracker to improve performance
2023-01-18 09:31:04 +01:00
erik-krogh
2fceee4e35
track regular expressions that gets compiled with Regexp.compile
2023-01-18 09:31:04 +01:00
