Jami Cogswell
3da2fb933b
Java: remove parentheses
2022-12-13 11:08:00 -05:00
Jami Cogswell
028fc29639
Java: group test methods
2022-12-13 11:02:21 -05:00
Jami Cogswell
a889cc4f65
Java/C#: remove isTestLibrary
2022-12-13 10:34:04 -05:00
Jeroen Ketema
628f92a9fb
C++: Fix QL-for-QL warnings
2022-12-13 16:24:55 +01:00
Jeroen Ketema
3be0b3e6c7
C++: Recognize indirect argv accesses as flow sources for use-use dataflow
...
This fixes the test regression on `cpp/command-line-injection`.
2022-12-13 16:18:17 +01:00
Jami
9b0163ce22
Merge pull request #11624 from jcogs33/jcogs33/exclude-paramless-constructors-from-dataflowtargetapi
...
Java/C#: exclude parameterless constructors from `DataFlowTargetApi`
2022-12-13 10:05:57 -05:00
Jami Cogswell
91c1ec3be6
C#: exclude AnonymousFunctionExpr from DataFlowTargetApi
2022-12-13 09:54:05 -05:00
Jami Cogswell
1c06378a53
Java: exclude FunctionalExprs from DataFlowTargetApi
2022-12-13 09:54:05 -05:00
Tamas Vajk
5cc2868857
Kotlin: Report CFG dead end consistency issues on ErrorExpr
2022-12-13 15:51:33 +01:00
Anders Schack-Mulligen
a29e529690
Shared: Add missing qldoc.
2022-12-13 15:49:30 +01:00
Asger F
bfe9ee3ead
Merge pull request #11672 from asgerf/js/extensions
...
JS: Add data extension sinks
2022-12-13 15:34:11 +01:00
ALJI Mohamed
54109b8ea7
Add source wget.download
2022-12-13 15:34:01 +01:00
Henry Mercer
423374a7b8
Merge branch 'main' into codeql-ci/atm/release-0.4.4
2022-12-13 14:26:21 +00:00
github-actions[bot]
745823ca60
JS: Bump version of ML-powered library and query packs to 0.4.5
2022-12-13 13:32:52 +00:00
github-actions[bot]
ea13925a92
JS: Bump patch version of ML-powered library and query packs
2022-12-13 13:28:09 +00:00
Alex Denisov
ee94849528
Swift: switch to bootstrapped Swift compiler
2022-12-13 13:59:13 +01:00
Mathias Vorreiter Pedersen
69155cb691
Merge pull request #11664 from jketema/alloca-in-loop-fix
...
C++: Fix `cpp/alloca-in-loop` regressions with use-use dataflow
2022-12-13 11:59:38 +00:00
Tony Torralba
85b3092b16
Add security-severity and fix alert message
2022-12-13 12:01:01 +01:00
Asger F
6b15839221
JS: Add tests for the examples used in the docs
2022-12-13 11:33:12 +01:00
Asger F
ba1364a4cb
JS: Add sinks mentioned in doc
...
Note that 'sql-injection' was already added
2022-12-13 11:33:12 +01:00
Alvaro Muñoz
270a4355df
format Restify.qll
2022-12-13 11:22:24 +01:00
Alvaro Muñoz
4ba3190d29
Replace API::Node with DataFlow::Node for Spife's RouteSetup
2022-12-13 11:10:04 +01:00
Jeroen Ketema
b10ed976cc
Update cpp/ql/src/Likely Bugs/Memory Management/AllocaInLoop.ql
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2022-12-13 10:57:34 +01:00
Felicity Chapman
cbbce9b98a
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
2022-12-13 09:56:50 +00:00
Michael Nebel
b8ef961498
Merge pull request #9415 from JarLob/sockets
...
Add TCP and UDP socket client taint sources
2022-12-13 10:39:33 +01:00
Felicity Chapman
6aaaf4267b
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
2022-12-13 09:37:49 +00:00
Chris Smowton
406a12e797
Remove unused function DeclarationStack.findFirst
2022-12-13 09:34:36 +00:00
Tony Torralba
d72d096c86
Add predicate injection query
2022-12-13 10:27:29 +01:00
Tom Hvitved
39fea378b8
Python: Update expected test output
2022-12-13 09:53:01 +01:00
Tom Hvitved
cfcb3a60ba
C++: Update expected test output
2022-12-13 09:53:01 +01:00
Tom Hvitved
da6a42980f
Swift: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
24b1da4d02
Python: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
2a28953e41
Java: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
4d2436dd82
Go: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
64eb0cc941
C#: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
bc58cbec8c
C++: Implement ContentApprox
2022-12-13 09:53:01 +01:00
Tom Hvitved
0c2eee2a72
Data flow: Sync files
2022-12-13 09:52:55 +01:00
Tom Hvitved
410ef4d713
Data flow: Rename stages
2022-12-13 09:52:46 +01:00
Tom Hvitved
d11cb2ee0f
Data flow: Introduce ApproxContent in a new pruning stage between existing stages 2 and 3
2022-12-13 09:52:45 +01:00
AlexDenisov
73196fd732
Merge pull request #11669 from github/redsun82/swift-wrapper
...
Swift: wrap extractor with shell script
2022-12-13 09:46:42 +01:00
Paolo Tranquilli
0dc717fd9c
Swift: remove no more needed library path setting in qltest.sh
2022-12-13 09:13:43 +01:00
Paolo Tranquilli
03d7adb303
Swift: wrap extractor with shell script
...
This is in preparation for the extractor to use shared libraries
packaged alongside it.
We could probably also move the `CODEQL_EXTRACTOR_SWIFT_RUN_UNDER` logic
in it, where it would be simpler and more robust.
2022-12-13 09:07:37 +01:00
yoff
557a5b469f
Merge pull request #11555 from pwntester/new_python_cmdi_sinks
...
Added two new CMDi sinks for python's stdlib
2022-12-13 09:00:34 +01:00
SiaraMist
0518eda7ab
Remove import tutorial
2022-12-12 17:46:03 -08:00
SiaraMist
dee66354cc
Link to template reusable
2022-12-12 17:36:43 -08:00
Siara
094a9f4aa7
Edit reusable
2022-12-12 17:32:02 -08:00
Jami
93d8a03e73
Merge branch 'main' into jcogs33/mad-metrics-query
2022-12-12 20:31:53 -05:00
Siara
028ab325f4
Update docs/codeql/reusables/codespaces-template-note.rst
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2022-12-12 17:28:39 -08:00
Jami Cogswell
08b5cf1415
Java/C#: fix formatting issue
2022-12-12 20:24:00 -05:00
Siara
4aa92dfd88
Updates from review comments
2022-12-12 17:13:57 -08:00
