Arthur Baars
453045e276
C#: use shared AlertSuppression.qll
2022-12-19 12:25:50 +01:00
Arthur Baars
ad80822a52
C/C++: use shared AlertSuppression.qll
2022-12-19 12:25:46 +01:00
Arthur Baars
b0e8085765
Go: use shared AlertSuppression.qll
2022-12-19 12:25:21 +01:00
Arthur Baars
23f595bea1
JavaScript: use shared AlertSuppression.qll
2022-12-19 12:25:17 +01:00
Jeroen Ketema
a73bd050f7
C++: Define the argv flow source in terms the input parameter
2022-12-19 12:13:39 +01:00
Jeroen Ketema
2705aebbbc
C++: Restrict CWE-119 semmle tests to have a single main function
2022-12-19 12:13:37 +01:00
Tony Torralba
484a16ce1b
Update java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning.ql
2022-12-19 12:10:32 +01:00
Arthur Baars
bc646d407e
Java: use shared AlertSuppression.qll
2022-12-19 12:07:28 +01:00
Arthur Baars
072a180093
Util: add AlertSuppression.qll
2022-12-19 12:06:36 +01:00
erik-krogh
442749bb7f
JS: add heuristic variants of queries that use RemoteFlowSource
2022-12-19 12:01:22 +01:00
Tony Torralba
a880fecc8b
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2022-12-19 11:56:36 +01:00
Jeroen Ketema
88a1eead03
Merge pull request #11724 from MathiasVP/clear-text-transmission-dont-track-indirection
...
C++: Use `asExpr` in `cpp/cleartext-transmission`
2022-12-19 11:31:06 +01:00
erik-krogh
2f84b21c7f
QL: add getQueryName to QueryDoc
2022-12-19 11:29:20 +01:00
erik-krogh
6c8b1cf4be
changes based on Python review
2022-12-19 11:20:31 +01:00
Jean Helie
31f7702a04
Merge pull request #11726 from github/jhelie/fix-endpoint-large-scale-script
...
ATM: fix script updating endpoint large scale test data
2022-12-19 10:55:30 +01:00
Michael Nebel
0661627248
Merge pull request #11733 from michaelnebel/csharp/updatestats
...
C#: Add dummy type sizes for the list pattern expressions kinds.
2022-12-19 10:51:06 +01:00
erik-krogh
db49cfb723
Merge branch 'main' into kernelLoad
2022-12-19 09:46:25 +01:00
Erik Krogh Kristensen
08240e2d65
Merge pull request #11661 from erik-krogh/even-faster-atm-ci
...
ATM: speedup the "ATM - Check query suite" CI job
2022-12-19 09:14:07 +01:00
Michael Nebel
b9f668b320
C#: Add dummy type sizes for the list pattern expressions kinds.
2022-12-19 09:10:35 +01:00
Jami Cogswell
f933fc75cd
Java: update another test affected by Integer.parseInt, and one affected by String.length
2022-12-18 21:46:43 -05:00
Jami Cogswell
f3fc68352e
Java: update tests affected by Integer.parseInt model
2022-12-18 19:43:32 -05:00
erik-krogh
35e8d6afd4
move getACommonTld into a utility module without parameters
2022-12-18 17:23:45 +01:00
erik-krogh
ba7321ac5c
add qldoc to RegExpCharEscape
2022-12-18 17:23:45 +01:00
erik-krogh
26c5480ee6
share {js,rb}/regex/missing-regexp-anchor
2022-12-18 17:23:41 +01:00
turbo
d1d4163b79
Exclude cpp/wrong-use-of-the-umask
2022-12-18 15:55:04 +01:00
turbo
b7c33734b1
Merge remote-tracking branch 'origin/turbo/experimental/combined' into turbo/experimental/combined
2022-12-18 15:44:53 +01:00
turbo
1e5426fca2
Create security-experimental suite helper and all language suite implementations
2022-12-18 15:44:08 +01:00
ihsinme
a2836dc72a
Update test.cpp
2022-12-18 00:38:32 +03:00
ihsinme
945cdef18d
Update DivideByZeroUsingReturnValue.expected
2022-12-18 00:35:28 +03:00
ihsinme
c790b0fed6
Update DivideByZeroUsingReturnValue.ql
2022-12-18 00:34:14 +03:00
erik-krogh
355499ea52
move getACommonTld to the shared pack
2022-12-17 17:26:18 +01:00
erik-krogh
f67d0bc8c0
put the shared HostnameRegexp code in the shared regex pack
2022-12-17 17:26:18 +01:00
Jami Cogswell
1d916a2baa
Java: clean up
2022-12-16 16:16:56 -05:00
Jami Cogswell
0c22d68a65
Java: update extensible predicate names
2022-12-16 15:40:14 -05:00
Jami
ff652f7dee
Merge branch 'main' into jcogs33/model-top-jdk-apis
2022-12-16 15:32:50 -05:00
Jami Cogswell
9762423fbc
Java: add more test cases
2022-12-16 15:26:54 -05:00
Robert Marsh
df7a4ac093
Merge pull request #11722 from MathiasVP/make-buffer.qll-unique-again
...
C++: Use `unique` in `getBufferSize`
2022-12-16 15:00:18 -05:00
Henning Makholm
3e85e9f7d9
remove com.semmle.util.data.Option from from extractor code interface II
...
com.semmle.util.data.Option is going away. Switch the single
cross-repo call that mentions it to use the new Option-less overload
that was introduced in semmle-code PR 44626.
2022-12-16 19:03:20 +01:00
Henry Mercer
30451ee950
Merge pull request #11681 from github/henrymercer/mergeback-3.8
...
Merge `rc/3.8` back to `main`
2022-12-16 17:43:12 +00:00
Mathias Vorreiter Pedersen
1d80e94bb4
C++: Prepare 'CleartextSqliteDatabase.ql' for use-use flow.
2022-12-16 17:10:10 +00:00
Mathias Vorreiter Pedersen
c09ed10d33
Merge pull request #11727 from MathiasVP/fix-crement-and-assign-op-dataflow-mappings
...
C++: Fix `DataFlow <-> Expr` mappings for `CrementOperation` and `AssignOperation`
2022-12-16 17:05:13 +00:00
Mathias Vorreiter Pedersen
33649ed7d3
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2022-12-16 17:02:06 +00:00
Jami Cogswell
83630842b6
Java: add change note
2022-12-16 11:49:52 -05:00
Mathias Vorreiter Pedersen
a7aa1a7d8b
C++: Accept more test changes
2022-12-16 16:04:35 +00:00
Robert Marsh
eddc2f3038
Merge pull request #11694 from MathiasVP/iterator-use-use-flow-using-ir-ssa
...
C++: Iterator flow for IR-based use-use flow (second attempt)
2022-12-16 10:51:19 -05:00
Tom Hvitved
e629568eda
Merge pull request #11720 from hvitved/ruby/call-sensitive-initialize-bug-fix
...
Ruby: Fix bug in call-sensitivity logic for `initialize` calls
2022-12-16 16:36:31 +01:00
Jami Cogswell
c0628035fa
Java: reduce code duplication
2022-12-16 10:28:34 -05:00
Owen Mansel-Chan
003edeab80
Merge pull request #11706 from owen-mc/fix/go-callback-type-stubs-2
...
Go: Use any() to stub getCallbackParameter/ReturnType and getSyntheticGlobalType
2022-12-16 14:43:35 +00:00
Jean Helie
938a7e828c
update tests
2022-12-16 15:31:43 +01:00
Jeroen Ketema
32800bca96
Merge pull request #11680 from jketema/predefined-typedef-for-float
...
C++: Update tests after frontend changes
2022-12-16 15:21:58 +01:00
