Rasmus Wriedt Larsen
a850a481d0
Merge pull request #13676 from RasmusWL/aiohttp-ssrf-sink
...
Python: Relax restriction of flow through `async with`
2023-07-07 14:55:57 +02:00
Tamas Vajk
23f3e44fa1
C#: Use nuget.config file for dotnet restore fallback logic
2023-07-07 14:47:07 +02:00
Rasmus Wriedt Larsen
43b025015d
Python: Avoid overlap between AssignmentDefinition and ParameterDefinition
2023-07-07 14:26:28 +02:00
Asger F
b14cac6b28
Merge pull request #12689 from asgerf/rb/perf-diagnostics
...
Ruby: performance diagnostics query
2023-07-07 14:25:56 +02:00
Rasmus Wriedt Larsen
4e8a1144f2
Python: Remove explicit jumpStep for default parameter values
...
tests added in https://github.com/github/codeql/pull/5238
functionality added in https://github.com/github/codeql/pull/6640
2023-07-07 14:24:51 +02:00
Asger F
965ca169e5
JS: Recognise fs/promises
2023-07-07 14:14:49 +02:00
Asger F
d49359a95c
JS: Add step through spread arg to path.join()
2023-07-07 14:10:50 +02:00
Michael Nebel
e4aaa43c43
C#: Also support alpha, beta, rc candidates.
2023-07-07 14:06:11 +02:00
Mathias Vorreiter Pedersen
1af60aa9d4
Merge pull request #13684 from github/release-prep/2.14.0
...
Release preparation for version 2.14.0
2023-07-07 12:30:09 +01:00
Michael Nebel
f065ba9aa1
C#: Add unit tests for runtime version fetching.
2023-07-07 13:21:02 +02:00
Michael Nebel
4270425f14
C#: Cater for preview versions.
2023-07-07 13:16:35 +02:00
Michael Nebel
bffdbbcf95
C#: Address review comments.
2023-07-07 13:16:34 +02:00
Mathias Vorreiter Pedersen
a826c8327a
Merge pull request #13682 from jketema/ptr-comp
...
C++: Support pointer addition and subtraction in the IRGuards library
2023-07-07 11:32:43 +01:00
Rasmus Wriedt Larsen
4920557c36
Merge pull request #13670 from jorgectf/seclab/xxe-sanitizer
...
Python: Add `markupsafe` as XXE sanitizer
2023-07-07 12:30:26 +02:00
Rasmus Wriedt Larsen
70994b9c57
Python: Accept points-to .expected changes
...
They look pretty safe to me, but haven't given them a whole lot of
thought.
2023-07-07 12:14:19 +02:00
Rasmus Wriedt Larsen
c5e8e232e5
Python: Fix dataflow consistencies for default parameter values
2023-07-07 11:55:07 +02:00
Rasmus Wriedt Larsen
6f3cb67050
Python: Model parameter with default value as DefinitionNode
2023-07-07 11:54:50 +02:00
Rasmus Wriedt Larsen
64a86e8fd7
Python: Update inline expectations
2023-07-07 11:32:05 +02:00
Jeroen Ketema
2c2903d58d
C++: Add change note
2023-07-07 11:27:46 +02:00
Jeroen Ketema
f60f80fea9
Update swift/ql/lib/change-notes/released/0.2.0.md
2023-07-07 11:06:07 +02:00
Rasmus Wriedt Larsen
cfd2d09a61
Python: Add test for DefinitionNode default parameter value
2023-07-07 11:00:16 +02:00
Mathias Vorreiter Pedersen
1064efa8b3
Update python/ql/lib/change-notes/released/0.10.0.md
2023-07-07 09:25:03 +01:00
Mathias Vorreiter Pedersen
cc6ac812af
Update swift/ql/lib/CHANGELOG.md
2023-07-07 09:24:56 +01:00
Mathias Vorreiter Pedersen
82ff045315
Update python/ql/lib/CHANGELOG.md
2023-07-07 09:24:50 +01:00
github-actions[bot]
6484ee106e
Release preparation for version 2.14.0
2023-07-07 08:22:14 +00:00
Asger F
d8604ff390
Ruby: exclude Object class from API graph
2023-07-07 09:49:21 +02:00
Asger F
86b5f0adc7
Revert "Merge pull request #13620 from github/revert-13496-rb/tracking-on-demand"
...
This reverts commit 133de56ac228a8e48351
2023-07-07 09:42:34 +02:00
Mingjie Shen
4b4c0cd563
C++: add testcases for UninitializedLocal.ql
2023-07-06 20:07:58 -04:00
Mingjie Shen
9218afedbe
C++: exclude uninitialized uses that are cast to void
...
This eliminates FPs caused by casting a variable explicitly to
void type. Developers use this cast to suppress compiler warnings
on unused variables, e.g.
(void) x;
2023-07-06 17:43:42 -04:00
Dave Bartolomeo
139585fe5c
Merge pull request #13681 from github/dbartol/mergeback-3.10
...
Mergeback `rc/3.10` -> `main`
2023-07-06 12:13:17 -04:00
Jeroen Ketema
572aa1330d
Merge pull request #13680 from jketema/product-default
...
C++: Add more default predicates to product flow
2023-07-06 18:12:38 +02:00
Rasmus Wriedt Larsen
bea07002d3
Python: Expand captured-variable test with default param
2023-07-06 17:21:29 +02:00
Jeroen Ketema
8d05d8a4dc
C++: Add change note
2023-07-06 17:14:49 +02:00
Taus
f666260cd8
Java: Add meta query for metrics gathering
...
Exposes the same information as the existing queries through two query
predicates instead. This makes the downstream data gathering a bit more
convenient to implement.
2023-07-06 16:59:15 +02:00
Taus
36c6c7235c
Java: Move instance counting logic into utility library
2023-07-06 16:59:15 +02:00
Jeroen Ketema
8bc8ef4dda
C++: Support pointer addition and subtraction in the IRGuards library
...
It seems this was something supported by the AST Guards library
2023-07-06 16:54:44 +02:00
Dave Bartolomeo
9631e9f2f1
Bump minor version numbers post-GHES
2023-07-06 10:10:01 -04:00
Jeroen Ketema
fa2ee26379
C++: Add more default predicates to product flow
2023-07-06 16:06:36 +02:00
Dave Bartolomeo
2bb9adfbf1
Merge remote-tracking branch 'origin/main' into dbartol/mergeback-3.10
2023-07-06 10:00:46 -04:00
Erik Krogh Kristensen
b2a60bf3d1
Merge pull request #13642 from erik-krogh/san-script
...
JS/RB: Fix FP in incomplete-multi-character-sanitization
2023-07-06 15:38:39 +02:00
Geoffrey White
b010de3cb0
Swift: Change note.
2023-07-06 14:06:17 +01:00
Rasmus Wriedt Larsen
30cf213372
Python: Add change-note
2023-07-06 15:04:49 +02:00
Rasmus Wriedt Larsen
a0dfbfd96f
Python: Fix grammar in qldoc
...
Co-authored-by: Taus <tausbn@github.com >
2023-07-06 15:04:21 +02:00
Mathias Vorreiter Pedersen
83d0dec0fb
DataFlow: Sync identical files.
2023-07-06 14:00:00 +01:00
Mathias Vorreiter Pedersen
4cc2771bbf
C++: Speed up the big step relation by specializing the 'isUnrachableInCall' predicate.
2023-07-06 13:59:52 +01:00
Geoffrey White
dbb0333f97
Swift: Add a test case confirming a model works outside of closures.
2023-07-06 13:59:49 +01:00
Asger F
59c72836d3
Ruby: fix typo
2023-07-06 14:57:24 +02:00
Asger F
db58d32f7a
Ruby: Add a query ID
2023-07-06 14:57:24 +02:00
Asger F
d123e5ba63
Ruby: add performance diagnostic query
2023-07-06 14:57:24 +02:00
Geoffrey White
507cf116e2
Swift: Add a test case for return values from closures.
2023-07-06 13:27:13 +01:00
