Geoffrey White
7f31c9c7e5
Swift: Add a test.
2023-01-12 15:19:57 +00:00
Jami Cogswell
e0444449c8
Java: remove Function.apply model
2023-01-12 09:58:53 -05:00
Arthur Baars
e29e077a03
Ruby/QL4QL: include OS version in cache keys
2023-01-12 15:47:10 +01:00
erik-krogh
7ae27bcc34
fix errors in JS printAst
2023-01-12 15:37:52 +01:00
Henry Mercer
15ead6d0e6
Merge pull request #11864 from github/codeql-ci/atm/release-0.4.5
...
JS: Bump version numbers of ML-powered packs after 0.4.5 release
2023-01-12 13:51:24 +00:00
Jami
c725c447ac
Merge branch 'main' into jcogs33/update-paramsString
2023-01-12 08:24:57 -05:00
Henry Mercer
70f1015fba
Merge branch 'main' into codeql-ci/atm/release-0.4.5
2023-01-12 12:32:25 +00:00
Ian Lynagh
9ebe59d353
Merge pull request #11637 from igfoo/igfoo/kotlin-1.8
...
Kotlin: Add 1.8 support
2023-01-12 12:15:00 +00:00
Geoffrey White
3d1b2fdbda
Swift: Rename NumericOrCharType.qll -> Numer> NumericType.qll.
2023-01-12 11:46:51 +00:00
Joe Farebrother
e12febfd96
Add change note
2023-01-12 11:44:39 +00:00
Joe Farebrother
b565f997a0
Improve qhelp
2023-01-12 11:44:39 +00:00
Joe Farebrother
639c42c9e9
Fix qhelp errors and ql-for-ql errors
2023-01-12 11:44:39 +00:00
Joe Farebrother
f52db7f9a3
Add qhelp
2023-01-12 11:44:39 +00:00
Joe Farebrother
a88759283a
Fix typo in qldoc
2023-01-12 11:44:39 +00:00
Joe Farebrother
7e7b5b4488
Improve test case
2023-01-12 11:44:39 +00:00
Joe Farebrother
8449dabefe
Add qldoc
2023-01-12 11:44:39 +00:00
Joe Farebrother
de565f9ccc
Add test and fix a bug
2023-01-12 11:44:39 +00:00
Joe Farebrother
b96edb9c64
Add Sensitive Result Receiver query
2023-01-12 11:44:39 +00:00
Geoffrey White
418d593a97
Swift: Replace NumericOrCharType with a more basic NumericType, and rename classes for consistency with other static languages.
2023-01-12 11:43:20 +00:00
Geoffrey White
d0eb167d47
Swift: Merge FloatingPointType.qll into NumericOrCharType.qll, because it is a numeric type and other stuff like CharacterType is there.
2023-01-12 11:42:36 +00:00
Geoffrey White
4e5483744f
Swift: Add a test case we're discussing.
2023-01-12 10:52:03 +00:00
Michael Nebel
48d0eccbf6
Go: Cleanup and renaming.
2023-01-12 11:13:34 +01:00
Michael Nebel
3749a1bd4d
Go: Migrate unit tests to use data extensions for Models as Data.
2023-01-12 11:13:33 +01:00
Michael Nebel
218f553fef
Go: Convert remaining CSV production models to use data extensions.
2023-01-12 11:13:33 +01:00
Michael Nebel
ebb3485a73
Go: Use the extensible predicates for model definitions.
2023-01-12 11:13:33 +01:00
Michael Nebel
5fd687d3df
Go: Add MaD related extensible predicates.
2023-01-12 11:13:33 +01:00
Michael Nebel
0f993a0d26
Go: Prepare library for adding extensions.
2023-01-12 11:13:28 +01:00
Mathias Vorreiter Pedersen
1ae52b6c7e
C++: Speedup 'MissingCheckScanf'.
2023-01-12 10:13:02 +00:00
Paolo Tranquilli
4f5f0aad45
Merge branch 'main' into redsun82/swift-open-redirection
2023-01-12 10:54:04 +01:00
Michael Nebel
18a815ca8b
Merge pull request #11721 from michaelnebel/csharpjava/refactorprovenance
...
C#/Java: Re-factor provenance related predicates.
2023-01-12 10:50:31 +01:00
yoff
006eaf3e2a
Merge pull request #11088 from yoff/python/inline-query-tests
...
Python: Inline query tests
2023-01-12 10:32:26 +01:00
Geoffrey White
994ea704da
Swift: Clean up the QL a little.
2023-01-12 09:31:48 +00:00
Jami Cogswell
fd593fd4f0
Java: undo changes to tests that were affected by numeric-flow summary models
2023-01-11 22:34:19 -05:00
Harry Maclean
33a1469a56
Ruby: Add change note
2023-01-12 16:29:00 +13:00
Jami Cogswell
ce74c9d959
Java: Date models as neutral
2023-01-11 22:15:41 -05:00
Jami Cogswell
6bb865ad05
Java: make numeric flow models neutral
2023-01-11 18:04:43 -05:00
Henning Makholm
1d4b2fd0bb
Merge pull request #11870 from github/hmakholm/pr/mergeback-2.12.0
...
Merge codeql-cli-2.12.0 back to main
2023-01-11 23:51:56 +01:00
Harry Maclean
8219465389
Ruby: fix missing doc
2023-01-12 11:35:35 +13:00
Harry Maclean
0626d693f5
Ruby: Recognise rack applications
...
This is a basic first step in modelling rack apps. We recognise classes
that look like rack applications and then treat the argument to `call`
in the same way that we treat `request.env` in ActionController classes.
This finds a TP in CVE-2021-43840.
2023-01-12 11:28:31 +13:00
Pierre
4e1f772f23
Merge pull request #11702 from github/turbo/experimental/combined
...
Introduce the security-experimental CodeQL suite and experimental tag
2023-01-11 20:37:42 +01:00
Geoffrey White
6a0b56bf40
Swift: Fix for extensions.
2023-01-11 18:32:07 +00:00
Geoffrey White
2622de9747
Swift: Improve Core Data coverage.
2023-01-11 18:26:34 +00:00
Geoffrey White
82f9903bf0
Swift: Additional test cases for swift/cleartext-storage-database on Core Data.
2023-01-11 18:22:32 +00:00
Jami Cogswell
0c7ffb0554
Java: update System.getProperty model
2023-01-11 12:04:22 -05:00
Pierre
c3116b3f0f
Merge branch 'main' into turbo/experimental/combined
2023-01-11 18:02:55 +01:00
Mathias Vorreiter Pedersen
cc0371648b
C++: Accept test changes.
2023-01-11 16:25:21 +00:00
Mathias Vorreiter Pedersen
a83879fa42
C++: Make sure that arguments of const pointer-type (as opposed to arguments of pointer to const-type) has an outgoing argument node.
2023-01-11 16:24:22 +00:00
Jami Cogswell
2a99af0e6d
Java: remove summary model for String.endsWith
2023-01-11 10:58:46 -05:00
Jami Cogswell
99ee6c95a1
Java: remove models for Consumer.accept and Collectors.toMap
2023-01-11 10:44:38 -05:00
Mathias Vorreiter Pedersen
cd24405a22
Merge branch 'mathiasvp/replace-ast-with-ir-use-usedataflow' into global-flow
2023-01-11 15:42:34 +00:00
