Alex Denisov
|
276fec39fc
|
Swift: consider lazy declaration emitted if the process lost in the race
|
2023-03-01 15:42:44 +01:00 |
|
Asger F
|
b6ec9464eb
|
JS: Remove trailing whitespace
|
2023-03-01 15:29:51 +01:00 |
|
Alex Denisov
|
ded0e570b0
|
Swift: extract lazy declarations
|
2023-03-01 15:22:22 +01:00 |
|
AlexDenisov
|
fed504c1d0
|
Merge pull request #12348 from github/alexdenisov/extract-emission-body-decisions
Swift: move decision making out of dispatcher. NFC
|
2023-03-01 15:18:44 +01:00 |
|
Alex Denisov
|
8194fe3743
|
Swift: do not make module depend on itself for linkage awareness
|
2023-03-01 14:30:06 +01:00 |
|
Paolo Tranquilli
|
37438599de
|
Merge branch 'main' into alexdenisov/extract-emission-body-decisions
|
2023-03-01 13:47:12 +01:00 |
|
Paolo Tranquilli
|
c0f9b111a0
|
Merge pull request #12347 from github/alexdenisov/move-location-extraction
Swift: move location extraction logic into a separate class. NFC
|
2023-03-01 13:46:52 +01:00 |
|
Asger F
|
e09975f853
|
JS: Replace 'remote-flow' kind with 'remote'
|
2023-03-01 13:46:13 +01:00 |
|
Anders Schack-Mulligen
|
34cc93846b
|
Python: Adjust InsecureProtocol query.
|
2023-03-01 13:36:10 +01:00 |
|
Arthur Baars
|
2c611d3fef
|
Address review comments
|
2023-03-01 13:30:02 +01:00 |
|
Michael Nebel
|
2db588f72e
|
Merge pull request #12322 from michaelnebel/csharp/operatorexplicitinterface
C# 11: Support for explicit interface implementations of operators.
|
2023-03-01 12:55:21 +01:00 |
|
erik-krogh
|
31336b09c4
|
add summary for the Array method on Kernel
|
2023-03-01 12:53:13 +01:00 |
|
Erik Krogh Kristensen
|
64dad3db8a
|
Merge pull request #12333 from kaspersv/kaspersv/fix-join-order
ReflectedXss: Prevent bad join order
|
2023-03-01 12:48:30 +01:00 |
|
Mathias Vorreiter Pedersen
|
0469df1c18
|
Merge pull request #12338 from MathiasVP/expr-sanitizer-for-exec-tainted
C++: Speedup `cpp/command-line-injection`
|
2023-03-01 11:40:05 +00:00 |
|
AlexDenisov
|
5701798f1c
|
Merge branch 'main' into alexdenisov/move-location-extraction
|
2023-03-01 12:24:41 +01:00 |
|
AlexDenisov
|
bb8d195607
|
Merge pull request #12337 from github/alexdenisov/extract-mangler
Swift: extract mangler into a separate class. NFC
|
2023-03-01 12:23:24 +01:00 |
|
Alex Denisov
|
def9831180
|
Swift: move decision making out of dispatcher
|
2023-03-01 12:02:58 +01:00 |
|
Alex Denisov
|
b1aef82117
|
Swift: move location extraction logic into a separate class
|
2023-03-01 11:32:50 +01:00 |
|
Tom Hvitved
|
16fa8b2914
|
Merge pull request #12051 from hmac/actioncontroller-filter-flow-steps
Ruby: flow steps for ActionController filters
|
2023-03-01 10:51:09 +01:00 |
|
Michael Nebel
|
ad5a45e465
|
C#: Add change note.
|
2023-03-01 10:42:29 +01:00 |
|
Michael Nebel
|
477b4566ed
|
C#: Update expected test output.
|
2023-03-01 10:42:29 +01:00 |
|
Michael Nebel
|
f209eed91c
|
C#: Extractor- and library support for explicit interface implementations for operators.
|
2023-03-01 10:42:28 +01:00 |
|
Michael Nebel
|
51be175111
|
C#: Add public members testcase and expected output.
|
2023-03-01 10:42:28 +01:00 |
|
Michael Nebel
|
363dd49a3c
|
C#: Add explicit interface implementation examples and update expected test output.
|
2023-03-01 10:42:28 +01:00 |
|
Michael Nebel
|
0dc6ada616
|
Merge pull request #12234 from michaelnebel/csharp/filescopedtypes
C# 11: Support for `file` scoped types.
|
2023-03-01 10:39:46 +01:00 |
|
Geoffrey White
|
b6db0de437
|
Swift: Add inline expectation results.
|
2023-03-01 09:26:30 +00:00 |
|
Geoffrey White
|
228c0e221d
|
Merge branch 'main' into nsstring
|
2023-03-01 09:12:36 +00:00 |
|
Geoffrey White
|
11e0efee68
|
Merge pull request #12308 from geoffw0/taintplusequals2
Swift: Model assignment operators (+= etc)
|
2023-03-01 09:02:29 +00:00 |
|
Tony Torralba
|
0439eb640d
|
Add tests
|
2023-03-01 09:49:28 +01:00 |
|
Tony Torralba
|
4e7dbbf5f0
|
Add stubs
|
2023-03-01 09:48:33 +01:00 |
|
Tom Hvitved
|
92359e539b
|
Fix another bad join
Before
```
[2023-03-01 08:19:51] Evaluated non-recursive predicate Filters#b57b2328::Filters::selfPostUpdate#2#ff@6718c917 in 6751ms (size: 83265).
Evaluated relational algebra for predicate Filters#b57b2328::Filters::selfPostUpdate#2#ff@6718c917 with tuple counts:
3872025 ~3% {2} r1 = JOIN _CfgNodes#ace8e412::ExprCfgNode::getExpr#0#dispred#ff_DataFlowPrivate#462ff392::Cached::TExprNode#ff#shared WITH Statement#f35022d0::Stmt::getCfgScope#0#dispred#ff ON FIRST 1 OUTPUT Rhs.1, Lhs.1
3637917 ~0% {2} r2 = JOIN r1 WITH Method#8b49e67f::Callable#f ON FIRST 1 OUTPUT Lhs.0, Lhs.1
679799 ~0% {2} r3 = JOIN r2 WITH Method#8b49e67f::Method#ff ON FIRST 1 OUTPUT Lhs.0, Lhs.1
3069328 ~0% {3} r4 = JOIN r3 WITH Variable#1965ffe5::Variable::getDeclaringScope#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.0
22039083 ~0% {3} r5 = JOIN r4 WITH Variable#1965ffe5::VariableAccess::getVariable#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2
10051483 ~0% {3} r6 = JOIN r5 WITH Variable#9f7d933a::SelfVariableAccessImpl#class#f ON FIRST 1 OUTPUT Lhs.0, Lhs.1, Lhs.2
10057538 ~5% {3} r7 = JOIN r6 WITH CfgNodes#ace8e412::ExprCfgNode::getExpr#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2
10057538 ~5% {3} r8 = JOIN r7 WITH CfgNodes#ace8e412::ExprNodes::SelfVariableAccessCfgNode#ff ON FIRST 1 OUTPUT Lhs.0, Lhs.1, Lhs.2
10057538 ~0% {3} r9 = JOIN r8 WITH DataFlowPrivate#462ff392::Cached::TExprNode#ff ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2
10033937 ~1% {3} r10 = JOIN r9 WITH DataFlowPublic#e1781e31::PostUpdateNode::getPreUpdateNode#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2
83281 ~2% {2} r11 = JOIN r10 WITH DataFlowPublic#e1781e31::PostUpdateNode::getPreUpdateNode#0#dispred#ff ON FIRST 2 OUTPUT Lhs.0, Lhs.2
return r11
```
After
```
[2023-03-01 08:31:20] Evaluated non-recursive predicate Filters#b57b2328::Filters::selfPostUpdate#2#ff@06d73c6q in 161ms (size: 83265).
Evaluated relational algebra for predicate Filters#b57b2328::Filters::selfPostUpdate#2#ff@06d73c6q with tuple counts:
23680 ~2% {1} r1 = SCAN Method#8b49e67f::Method#ff OUTPUT In.0
23680 ~2% {1} r2 = STREAM DEDUP r1
23680 ~0% {2} r3 = JOIN r2 WITH Method#8b49e67f::Callable#f ON FIRST 1 OUTPUT Lhs.0, Lhs.0
54790 ~4% {3} r4 = JOIN r3 WITH Variable#1965ffe5::Variable::getDeclaringScope#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.0
202490 ~0% {3} r5 = JOIN r4 WITH Variable#1965ffe5::VariableAccess::getVariable#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2
98332 ~5% {3} r6 = JOIN r5 WITH Variable#9f7d933a::SelfVariableAccessImpl#class#f ON FIRST 1 OUTPUT Lhs.0, Lhs.1, Lhs.2
83491 ~1% {2} r7 = JOIN r6 WITH Statement#f35022d0::Stmt::getCfgScope#0#dispred#ff ON FIRST 2 OUTPUT Lhs.0, Lhs.2
83584 ~0% {2} r8 = JOIN r7 WITH CfgNodes#ace8e412::ExprCfgNode::getExpr#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1
83584 ~0% {2} r9 = JOIN r8 WITH DataFlowPrivate#462ff392::Cached::TExprNode#ff ON FIRST 1 OUTPUT Rhs.1, Lhs.1
83265 ~2% {2} r10 = JOIN r9 WITH DataFlowPublic#e1781e31::PostUpdateNode::getPreUpdateNode#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1
return r10
```
|
2023-03-01 08:34:07 +01:00 |
|
Aditya Sharad
|
aa6c60abfc
|
Merge pull request #12342 from github/codeql-cli-2.12.3-mergeback
Mergeback: codeql-cli-2.12.3 into main
|
2023-02-28 10:30:51 -08:00 |
|
Felicity Chapman
|
6224d6ce31
|
Merge branch 'codeql-cli-2.12.3' into codeql-cli-2.12.3-mergeback
|
2023-02-28 17:08:49 +00:00 |
|
Mathias Vorreiter Pedersen
|
a96145a4ac
|
Merge pull request #12340 from MathiasVP/remove-uncertain-write-def-input-predicate
C++: Remove dead code
|
2023-02-28 17:07:17 +00:00 |
|
Mathias Vorreiter Pedersen
|
d5b0ad6bfc
|
C++: Remove cached predicate that's no longer used.
|
2023-02-28 16:20:29 +00:00 |
|
Michael B. Gale
|
49039246e1
|
Apply ql-for-ql suggestion
|
2023-02-28 15:55:50 +00:00 |
|
Michael B. Gale
|
f22c86442e
|
Fix expected test output for Windows tests
|
2023-02-28 15:53:52 +00:00 |
|
Jeroen Ketema
|
2f797fffc1
|
C++: Add copy of dataflow docs for new use-use dataflow library
|
2023-02-28 16:48:26 +01:00 |
|
Michael B. Gale
|
fea29d5172
|
Refactor to avoid public setters
|
2023-02-28 15:22:36 +00:00 |
|
Erik Krogh Kristensen
|
f3f5f6eacf
|
Merge pull request #12190 from erik-krogh/fix-erb
JS: Actually extract `.html.erb` files.
|
2023-02-28 16:11:32 +01:00 |
|
erik-krogh
|
36b33765a5
|
use allowImplicitRead instead of a taint-step from elements to the array
|
2023-02-28 16:09:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
075a83c987
|
Stage stats before on 'ExecTainted.ql' before:
```
1 10 1 Fwd 609968 1398 -1 94 769936 ExecTaintConfiguration
2 15 1 Rev 239464 774 -1 52 320663 ExecTaintConfiguration
3 20 2 Fwd 205794 511 650 39 18576546 ExecTaintConfiguration
4 25 2 Rev 161966 351 428 39 13639502 ExecTaintConfiguration
5 30 3 Fwd 31889 322 791 39 5982574 ExecTaintConfiguration
6 35 3 Rev 30068 303 661 39 4181421 ExecTaintConfiguration
7 40 4 Fwd 24031 232 1432 39 14725618 ExecTaintConfiguration
8 45 4 Rev 21506 219 907 39 5962780 ExecTaintConfiguration
9 50 5 Fwd 20149 204 1527 38 8350094 ExecTaintConfiguration
10 55 5 Rev 20102 204 1472 38 7515307 ExecTaintConfiguration
11 60 6 Fwd 19950 200 904 33 9673369 ExecTaintConfiguration
12 65 6 Rev 18431 200 901 33 7030957 ExecTaintConfiguration
```
Stage stats after:
```
1 10 1 Fwd 368610 699 -1 65 445199 ExecTaintConfiguration
2 15 1 Rev 112848 336 -1 23 150522 ExecTaintConfiguration
3 20 2 Fwd 91528 219 270 22 4120713 ExecTaintConfiguration
4 25 2 Rev 66017 141 159 22 2657398 ExecTaintConfiguration
5 30 3 Fwd 12161 119 208 22 792468 ExecTaintConfiguration
6 35 3 Rev 11640 111 167 22 569193 ExecTaintConfiguration
7 40 4 Fwd 11423 109 331 22 1203871 ExecTaintConfiguration
8 45 4 Rev 10851 107 323 22 904017 ExecTaintConfiguration
9 50 5 Fwd 10694 107 763 22 2428404 ExecTaintConfiguration
10 55 5 Rev 10332 104 735 22 2355698 ExecTaintConfiguration
11 60 6 Fwd 10302 104 729 22 5772762 ExecTaintConfiguration
12 65 6 Rev 9482 102 725 22 4020951 ExecTaintConfiguration
```
|
2023-02-28 15:05:29 +00:00 |
|
Mathias Vorreiter Pedersen
|
8dd0bdbdb0
|
C++: Rename 'fst' and 'snd' to 'incoming' and 'outgoing'.
|
2023-02-28 15:05:18 +00:00 |
|
Felicity Chapman
|
770326e770
|
Merge pull request #12321 from github/fc-7775-docs-update
CodeQL extension for VS Code docs update
|
2023-02-28 14:59:46 +00:00 |
|
Jeroen Ketema
|
5845528bae
|
Merge pull request #12336 from jketema/docs-examples
C++: Add tests for all dataflow examples that occur in our docs
|
2023-02-28 15:45:46 +01:00 |
|
Alex Denisov
|
97d5401118
|
Swift: extract mangler into a separate class
|
2023-02-28 15:29:44 +01:00 |
|
Michael B. Gale
|
e3762c7f93
|
Move Language class to Semmle.Util
|
2023-02-28 14:16:33 +00:00 |
|
Felicity Chapman
|
a7d221cdab
|
Update docs/codeql/reusables/beta-note-mrva.rst
|
2023-02-28 14:12:57 +00:00 |
|
Michael B. Gale
|
e60676fbde
|
Fix IDisposable contract violation
|
2023-02-28 13:56:06 +00:00 |
|
Jeroen Ketema
|
3014f207f3
|
C++: Add tests for all dataflow examples that occur in our docs
|
2023-02-28 14:45:00 +01:00 |
|