Jeroen Ketema
7ff6f09626
C++: Improve the QL doc of isConstant
2023-08-03 12:16:12 +02:00
Jeroen Ketema
0c0720a962
C++: Improve use-after-free example code
...
* Remove the mismatch between `new` and `free` and use `delete` instead
* Make the function `void`, so people copying the code will not forget
to add a `return`.
* Balance out the `...` for omitted code.
2023-08-03 11:06:15 +02:00
Tom Hvitved
2ac646770e
Merge ControlFlowTreeBase and AstNode
2023-08-03 10:59:26 +02:00
Jeroen Ketema
1ad533a4f8
Merge pull request #13873 from jketema/ir-range-test
...
C++: Add semantic range analysis test as IR test
2023-08-03 10:58:24 +02:00
Chris Smowton
8702efda1e
Merge pull request #13835 from github/smowton/fix/logrus-with-context
...
Don't treat logrus' WithContext method as a logging function
2023-08-03 09:57:30 +01:00
Tom Hvitved
525ed65b0b
Rename getNode to getAstNode
2023-08-03 10:56:50 +02:00
Jeroen Ketema
f7923d93f1
C++: Add semantic range analysis test as IR test
...
The range analysis test currently fails with the frontend update, because the
generated IR is incorrect after the update.
2023-08-03 10:13:23 +02:00
Anders Schack-Mulligen
0ae81eace3
Java: update fixed test
2023-08-03 10:07:00 +02:00
Asger F
5950865b55
Merge pull request #13755 from github/max-schaefer/js-server-crash-help
...
JavaScript: Improve qhelp for js/server-crash.
2023-08-03 10:04:08 +02:00
Anders Schack-Mulligen
72171972c3
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
84316c41a3
Java: Add more qldoc.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
90052a3ca2
Java: Add proper types for capture nodes.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
e2a0849a0e
Java: Add more qldoc.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
37455ec29e
Java: Replace ratpack test fix with general heuristic summary.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
c5990311ca
Java: Redesign and reimplement variable capture flow.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
70bef64e2a
Java: Fix ratpack flow.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
f4a05c183b
Shared: Add some qldoc.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
15daa51ee5
Shared: Address review comments and QL4QL alerts.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
a23e77ca58
Java: Disregard heap parameter in any-argument and any-parameter specs.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
9a4de208ef
Java: Fix qltests.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
d1a616a70a
Java: Add proper support for variable capture flow.
2023-08-03 10:04:02 +02:00
Asger F
c38cbe859d
Merge pull request #13737 from asgerf/dynamic/fuzzy-models
...
Dynamic: add Fuzzy token
2023-08-03 09:58:24 +02:00
Anders Starcke Henriksen
131ae1aae9
Fix name in predicate.
2023-08-03 09:53:40 +02:00
Anders Starcke Henriksen
1c425a5602
Change from package to endpoint.
2023-08-03 09:50:23 +02:00
Anders Starcke Henriksen
9b8d7df370
Add option to filter automodel queries by package.
2023-08-03 09:50:23 +02:00
Tom Hvitved
2f3e52646c
Add class wrappers around newtype in Cfg.qll
2023-08-03 09:39:30 +02:00
Tom Hvitved
5d69e14cc1
Rename ControlFlowElement to AstNode
2023-08-03 09:39:30 +02:00
Tom Hvitved
1988397f93
Make shared CFG construction library a parameterized module
2023-08-03 09:39:30 +02:00
Tom Hvitved
5049aafdd8
Copy existing ControlFlowGraphImplShared into new shared controlflow pack
2023-08-03 09:32:37 +02:00
Mathias Vorreiter Pedersen
89aa86a1d6
Merge pull request #13741 from rdmarsh2/rdmarsh2/swift/array-content-flow
...
Swift: add DataFlow::Content for arrays
2023-08-02 17:37:40 +02:00
Paolo Tranquilli
56869553e8
Swift: route compiler diagnostics through our log
...
(cherry picked from commit b8c55612e5 )
2023-08-02 15:41:54 +01:00
Owen Mansel-Chan
ff5409fec7
Merge pull request #13785 from owen-mc/go/change-golangSpecificParamArgFilter
...
Go: Avoid using getTarget() as it may not exist
2023-08-02 15:40:40 +01:00
Alexandre Boulgakov
0dafe2d757
Swift: Mangle ArchetypeTypes with different superclasses in different extensions.
2023-08-02 15:18:52 +01:00
Mathias Vorreiter Pedersen
a5f521cfa4
DataFlow: Add change note.
2023-08-02 14:56:57 +02:00
Mathias Vorreiter Pedersen
3007fdab5e
Sync identical files.
2023-08-02 14:33:33 +02:00
Mathias Vorreiter Pedersen
096eeeb549
C++: Handle 'isSink' without states in the backwards-compatibility code and in taint-tracking
2023-08-02 14:33:04 +02:00
Mathias Vorreiter Pedersen
b953c4a1cf
DataFlow: Allow stateless sinks.
2023-08-02 14:31:18 +02:00
Anders Schack-Mulligen
7bc8bf616f
Merge pull request #13863 from aschackmull/dataflow/pack4
...
Dataflow: Move the shared library to a properly shared qlpack.
2023-08-02 14:19:49 +02:00
Mathias Vorreiter Pedersen
7bea18773c
Merge pull request #13857 from github/alexdenisov/unresolved-dot-exprs-patterns
...
Swift: SubExpr may yield unresolved nodes in certain cases while MatchedExpr is always resolved
2023-08-02 09:35:06 +02:00
Anders Schack-Mulligen
1ad51e754e
Dataflow: Rename change note to proper format.
2023-08-02 08:50:51 +02:00
Sarita Iyer
0bd87f9f86
Merge pull request #13840 from github/si-10115-docs-update
...
Update supported frameworks
2023-08-01 13:05:32 -04:00
Max Schaefer
5124310f14
Update javascript/ql/src/Security/CWE-730/ServerCrash.qhelp
...
Co-authored-by: Asger F <asgerf@github.com >
2023-08-01 17:03:05 +01:00
Geoffrey White
5f7e5b946d
Swift: Codegen.
2023-08-01 16:38:27 +01:00
Geoffrey White
e30ac42e3e
Merge branch 'main' into typegetname
2023-08-01 16:36:31 +01:00
Geoffrey White
c8f5ada594
Swift: Fix errors in queries.
2023-08-01 15:50:15 +01:00
Stephan Brandauer
cb55b10edc
Merge pull request #13788 from github/kaeluka/automodel-telemetry-testing
...
Java: Tests for Automodel Extraction Queries
2023-08-01 15:30:26 +02:00
Alex Denisov
9d643ae1ed
Swift: record CFG incosistency
2023-08-01 15:06:04 +02:00
Geoffrey White
116006d280
Swift: Fix for type names containing '...'.
2023-08-01 13:57:46 +01:00
Anders Schack-Mulligen
405a3a73d1
Java: Remove irrelevant import.
2023-08-01 14:31:30 +02:00
Geoffrey White
40219aad88
Swift: More robust Type.getName().
2023-08-01 13:24:10 +01:00