Jeroen Ketema
70d0e987c4
Swift: Rewrite PredicateInjection to use DataFlow::ConfigSig
2023-04-03 16:19:30 +02:00
Mathias Vorreiter Pedersen
c19edc5f0b
C++: Fix Code Scanning errors.
2023-04-03 15:17:37 +01:00
Mathias Vorreiter Pedersen
aa337c72c2
C++: Update import paths in tests and experimental queries.
2023-04-03 15:17:37 +01:00
Alex Ford
0e1d2ad67f
Merge pull request #12746 from alexrford/diagnostics-nullptr-rc-3.9
...
JS: only set the file in the diagnostics message if the file is within the source root (base rc/3.9)
2023-04-03 14:47:07 +01:00
Alexandre Boulgakov
0aa39c0ca0
Merge pull request #12712 from github/sashabu/repeated-initializers
...
C++: Support repeated initializers in dbscheme.
2023-04-03 14:46:17 +01:00
jarlob
e941218e30
change notes added
2023-04-03 15:15:00 +02:00
jarlob
ba5747dff3
fix formatting
2023-04-03 15:10:27 +02:00
jarlob
c6eaf194a5
Remove empty.js as it is not needed anymore
2023-04-03 15:09:40 +02:00
Geoffrey White
4d3fc02d7e
Merge pull request #11965 from geoffw0/realmfix
...
Swift: Test and fix missing swift/cleartext-storage-database results
2023-04-03 14:02:18 +01:00
jarlob
99d634c8a4
Add more sources, more unit tests, fixes to the GitHub Actions injection query
2023-04-03 15:02:02 +02:00
Mathias Vorreiter Pedersen
4c5ca082ce
C++: Delete the experimental range-analysis library.
2023-04-03 13:53:43 +01:00
Mathias Vorreiter Pedersen
e8800a6dba
C++: Move the new range-analysis library out of experimental and into an 'internal' directory.
2023-04-03 13:53:43 +01:00
erik-krogh
0b4f239ab5
only set the file in the diagnostics message if the file is within the source root
2023-04-03 13:49:29 +01:00
Erik Krogh Kristensen
1a0e3c8907
Merge pull request #12743 from erik-krogh/null-ptr-2
...
JS: only set the file in the diagnostics message if the file is within the source root
2023-04-03 14:04:19 +02:00
erik-krogh
a7c2892af4
only set the file in the diagnostics message if the file is within the source root
2023-04-03 12:38:10 +02:00
Asger F
53de9ae580
Merge pull request #12729 from asgerf/js/crypto-modernize
...
JS: Modernize crypto libraries
2023-04-03 12:16:22 +02:00
Paolo Tranquilli
abc0c7cf24
Swift: add trace logging of all trap emission
2023-04-03 11:47:24 +02:00
Paolo Tranquilli
a386c58371
Swift: add preliminary logging to dispatcher
2023-04-03 11:47:23 +02:00
Paolo Tranquilli
3fc488167f
Swift: add logging to main
2023-04-03 11:47:23 +02:00
Paolo Tranquilli
ed48065c2d
Swift: add logging infrastructure
2023-04-03 11:47:23 +02:00
Tony Torralba
6331c37b46
Merge pull request #12735 from JLLeitschuh/doc/JLL/fix-partial-path-documentation
...
Fix partial path traversal Java example Again
2023-04-03 11:18:02 +02:00
Jeroen Ketema
e5c7c88588
Merge pull request #12737 from MathiasVP/speed-up-gvn
...
C++: Speed up non-linear recursion in GVN library
2023-04-03 10:46:37 +02:00
Jeroen Ketema
1d9fc8a581
Merge branch 'main' into sashabu/repeated-initializers
2023-04-03 09:48:23 +02:00
Jeroen Ketema
ecf92f0c5d
Merge pull request #12741 from jketema/js-qhelp-example-fix
...
JS: Fix qhelp after file rename
2023-04-03 09:47:38 +02:00
Asger F
e5d090c640
Merge pull request #12671 from asgerf/ql/class-type
...
QL: Make Class.getType() only return ClassType
2023-04-03 09:43:14 +02:00
Mathias Vorreiter Pedersen
9a34a7b7cc
Merge pull request #12719 from jketema/typebound-size
2023-04-03 08:31:41 +01:00
Jeroen Ketema
17bd9c12d7
JS: Fix qhelp after file rename
2023-04-03 09:25:19 +02:00
Paolo Tranquilli
5e45377ad7
Merge pull request #12725 from github/redsun82/swift-successfully-extracted-lines
...
Swift: add `SuccessfullyExtractedLines` query
2023-04-03 09:12:41 +02:00
Jeroen Ketema
69619f1fbc
Merge pull request #12738 from MathiasVP/fix-join-in-suspecious-call-to-strncat
...
C++: Fix join order in `cpp/unsafe-strncat`
2023-04-01 20:10:17 +02:00
Jonathan Leitschuh
0d774a647c
Fix partial path traversal Java example Again
...
The original wouldn't compile, and the fix made by #11899 is sub-optimal.
This keeps the entire comparision using the Java `Path` object, which is optimal.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com >
2023-03-31 23:36:07 -04:00
Jonathan Leitschuh
b9d409279b
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-31 23:36:07 -04:00
Jonathan Leitschuh
e641505361
Fix partial path traversal Java example Again
...
The original wouldn't compile, and the fix made by #11899 is sub-optimal.
This keeps the entire comparision using the Java `Path` object, which is optimal.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com >
2023-03-31 23:36:07 -04:00
Jami Cogswell
0688fa6ed1
Java: update expected file for results without interface members
2023-03-31 18:02:09 -04:00
Jami Cogswell
c69745a6f8
Java: fix stubs
2023-03-31 18:02:09 -04:00
Jami Cogswell
266939840d
Java: update expected file with results that include interface members
2023-03-31 18:02:09 -04:00
Jami Cogswell
aca538310f
Java: update some qldocs
2023-03-31 18:02:09 -04:00
Jami Cogswell
8b18df0987
Java: update top jdk apis test case with stubs
2023-03-31 18:02:09 -04:00
Jami Cogswell
e0524a1177
Java: add test case for top jdk apis
2023-03-31 18:02:09 -04:00
Jami Cogswell
8501a16cac
Java: move TopJdkApis.qll to lib directory for better importing
2023-03-31 18:02:09 -04:00
Jami Cogswell
fea55e910e
Java: move query logic to qll file and add subset restriction for top500 jdk apis
2023-03-31 18:02:08 -04:00
Mathias Vorreiter Pedersen
e5700e07c7
C++: Fix join order in 'cpp/unsafe-strncat'.
2023-03-31 21:33:28 +01:00
Porcupiney Hairs
e9615c57e9
Go: Add more JWT sinks
...
This pull requests adds modelling for `katras/iris/v12/middleware/jwt`, `katras/jwt` and `gogf/gf-jwt` frameworks.
2023-03-31 23:11:24 +05:30
Mathias Vorreiter Pedersen
6638df1578
C++: Sync identical files.
2023-03-31 18:25:34 +01:00
Mathias Vorreiter Pedersen
0b33d26852
C++: Speed up non-linear recursion in GVN.
2023-03-31 18:25:19 +01:00
Alexandre Boulgakov
ddd44b4c13
C++: Correct repeated initializers downgrade script compatibility to full.
2023-03-31 17:53:12 +01:00
Alexandre Boulgakov
e593f0f7b3
C++: Update database stats.
2023-03-31 17:53:12 +01:00
Alexandre Boulgakov
b5932debc0
C++: Add db upgrade and downgrade scripts for repeated initializers.
2023-03-31 17:53:12 +01:00
Alexandre Boulgakov
d0a77a8433
C++: Support repeated initializers in dbscheme.
2023-03-31 17:53:12 +01:00
Edward Minnix III
2b9daed26a
Merge pull request #12563 from egregius313/egregius313/refactor-java-libs-to-dataflow-modules
...
Java: Refactor Java query libraries to use dataflow modules
2023-03-31 12:38:14 -04:00
Owen Mansel-Chan
8e8ffb20a3
Accept test changes caused by alert message change
2023-03-31 16:48:01 +01:00
