Kevin Stubbings
ffa3bdc8bb
Change note changes
2023-08-29 08:37:15 -07:00
Michael Nebel
e226c564b6
C#: Base WriteOnlyContainer test on stubs.
2023-08-29 16:24:01 +02:00
Michael Nebel
35a1dd8ba9
C#: Base Useless Code tests on stubs.
2023-08-29 16:20:59 +02:00
Mathias Vorreiter Pedersen
e4a11b86d9
Merge branch 'main' into reuse-even-more-nodes
2023-08-29 15:08:30 +01:00
Michael Nebel
e9b3f1282a
C#: Base UseBraces tests on stubs.
2023-08-29 16:05:15 +02:00
Tom Hvitved
8624ff12be
Merge pull request #14082 from hvitved/csharp/bump-dependencies
...
C#: Bump all dependencies
2023-08-29 15:52:40 +02:00
Michael Nebel
fc850b18fe
C#: Base ReadOnlyContainer tests on stubs.
2023-08-29 15:36:03 +02:00
Michael Nebel
7d7a893b55
C#: Base Performance tests on stubs.
2023-08-29 15:34:33 +02:00
Jean Helie
41726f52a2
Merge pull request #13954 from github/kaeluka/add-provenance-to-metadata
...
Java: Automodel: Add Candidates for Regression Testing
2023-08-29 14:33:02 +01:00
Michael Nebel
6760dd9121
C#: Base Nullness tests on stubs.
2023-08-29 15:30:24 +02:00
Michael Nebel
b3be4797e2
C#: Base the Metrics tests on stubs.
2023-08-29 15:23:42 +02:00
Michael Nebel
c906009e5b
C#: Base the MagicConstants tests on stubs.
2023-08-29 15:19:19 +02:00
Michael Nebel
4c16f1be8b
C#: Base the Likely Bugs tests on stubs.
2023-08-29 15:16:48 +02:00
Mathias Vorreiter Pedersen
99cc4171f8
C++: Fix FPs by making 'isArgumentOfCallable' more robust.
2023-08-29 14:12:09 +01:00
yoff
ae4c76c788
Merge pull request #13975 from yoff/python/parsemodechars-not-chars
2023-08-29 14:05:57 +02:00
Alex Eyers-Taylor
9df5e30034
CPP: Add changenote for adding delete to the IR.
2023-08-29 12:13:40 +01:00
Alex Eyers-Taylor
24b679d5a0
CPP: Fix IR formatting.
2023-08-29 11:17:44 +01:00
Alex Eyers-Taylor
8b1b1618c4
CPP: Add tests for false positive in memory vulnerability queries.
2023-08-29 11:17:44 +01:00
Alex Eyers-Taylor
3b344c3578
CPP: Handle cases where the deallocator function is determined dynamically.
2023-08-29 11:17:44 +01:00
Alex Eyers-Taylor
689fda43ed
CPP: Add delete/delete[] calls to the IR.
2023-08-29 11:17:43 +01:00
amammad
40ff16bdaf
Merge branch 'main' into amammad-go-JWT
2023-08-29 20:02:57 +10:00
Michael Nebel
08c24930ac
C#: Base the Language Abuse tests on stubs.
2023-08-29 11:39:47 +02:00
Tom Hvitved
7611bfb149
C#: Apply closed-world assumption for type-parameter qualifiers in dynamic calls
2023-08-29 11:27:45 +02:00
Tom Hvitved
1da885fae2
C#: Fix bad join in SSA library
...
```
[2023-08-29 10:10:29] Evaluated non-recursive predicate SsaImpl#75014cd4::Cached::lastRefBeforeRedefExt#4#ffff@4207c208 in 27604ms (size: 7511062).
Evaluated relational algebra for predicate SsaImpl#75014cd4::Cached::lastRefBeforeRedefExt#4#ffff@4207c208 with tuple counts:
9905038 ~9% {5} r1 = SCAN Ssa#da392372::Make#SsaImpl#75014cd4::SsaInput#::lastRefRedefExt#5#fffff OUTPUT In.2, In.3, In.1, In.0, In.4
{5} r2 = r1 AND NOT _SsaImpl#75014cd4::SsaInput::variableRead#4#ffff_3012#join_rhs_const_false#antijoin_rhs(Lhs.0, Lhs.1, Lhs.2)
4605608 ~0% {4} r3 = SCAN r2 OUTPUT In.3, In.0, In.1, In.4
4510888816 ~0% {5} r4 = JOIN _SsaImpl#75014cd4::SsaInput::variableRead#4#ffff_3012#join_rhs_const_false#antijoin_rhs WITH project#Ssa#da392372::Make#SsaImpl#75014cd4::SsaInput#::lastRefRedefExt#5#fffff_1203#join_rhs ON FIRST 2 OUTPUT Rhs.2, Lhs.2, Lhs.0, Lhs.1, Rhs.3
5294405 ~82% {4} r5 = JOIN r4 WITH SsaImpl#75014cd4::adjacentDefReachesReadExt#6#ffffff_014523#join_rhs ON FIRST 4 OUTPUT Lhs.0, Rhs.4, Rhs.5, Lhs.4
9900013 ~28% {4} r6 = r3 UNION r5
return r6
```
2023-08-29 11:26:30 +02:00
Tom Hvitved
e219281016
C#: Speed up ForwarderAssertMethod
...
Avoids the following bad predicate
```
[2023-08-29 10:03:13] (252s) Tuple counts for _Callable#f85cebf6::Callable::getBody#0#dispred#ff_Variable#afb43847::Variable::getAnAccess#0#dispre__#join_rhs/5@43feb6tl after 4m0s:
4416261 ~203% {4} r1 = JOIN _Callable#f85cebf6::Callable::getAParameter#0#dispred#ff_10#join_rhs_Variable#afb43847::Variable::ge__#shared WITH Callable#f85cebf6::Callable::getBody#0#dispred#ff ON FIRST 1 OUTPUT Lhs.1 'arg1', Lhs.2 'arg2', Lhs.0 'arg3', Rhs.1 'arg4'
1189565718 ~152% {5} r2 = JOIN r1 WITH Variable#afb43847::Variable::getAnAccess#0#dispred#ff ON FIRST 1 OUTPUT Rhs.1 'arg0', Lhs.0 'arg1', Lhs.1 'arg2', Lhs.2 'arg3', Lhs.3 'arg4'
return r2
```
2023-08-29 11:25:20 +02:00
Michael Nebel
946854bd17
C#: Base the EmptyBlock test on stubs.
2023-08-29 11:24:10 +02:00
Tom Hvitved
1ac9d2ee5b
CFG: Compute splitsToString using concat, and exclude partial split sets
2023-08-29 11:23:56 +02:00
Michael Nebel
7068da25f0
C#: Base the Documentation tests on stubs.
2023-08-29 11:22:51 +02:00
Michael Nebel
dd274422d1
Merge pull request #14079 from bgrainger/fix-unsynchronized-static-access-docs
...
Delete thin space from documentation
2023-08-29 11:17:52 +02:00
Michael Nebel
f2bf540209
C#: Base the Dead Code tests on stubs.
2023-08-29 11:15:43 +02:00
Rasmus Wriedt Larsen
49d510018d
Python: Add change-note
2023-08-29 11:11:32 +02:00
Rasmus Wriedt Larsen
0b2458d065
Python: Improve modeling of Flask jsonify
...
I also tested whether `Flask.jsonify` or `Flask().jsonify` worked, but
they do not.
2023-08-29 11:11:32 +02:00
Rasmus Wriedt Larsen
26319bfc04
Python: Fix Flask jsonify XSS regression
...
The reason the result was found before, is that `jsonify(data)` was
modeled as TWO separate subclasses of `Http::Server::HttpResponse`, one
because of the implicit construction in return
(FlaskRouteHandlerReturn), and one from the `jsonify` call
(FlaskJsonifyCall). Due to the QL evaluation, we got a combination from
the two, meaning mime-type from FlaskRouteHandlerReturn and body from
FlaskJsonifyCall...
2023-08-29 11:11:32 +02:00
Jean Helie
de76c0749a
Java: Automodel Framework Mode: Add Candidates for Regression Testing
2023-08-29 09:53:55 +01:00
Mathias Vorreiter Pedersen
d14ad92dbd
Merge pull request #14006 from MathiasVP/promote-invalid-pointer-deref-out-of-experimental
...
C++: Promote `cpp/invalid-pointer-deref` out of experimental
2023-08-29 09:38:56 +01:00
Rasmus Wriedt Larsen
b36fd9fdab
Python: Add jsonify XSS regression example
2023-08-29 10:38:49 +02:00
Mathias Vorreiter Pedersen
f3a77c6006
Merge pull request #14060 from MathiasVP/fix-compare-where-assign-meant-fp
...
C++: Fix FP in `cpp/compare-where-assign-meant`
2023-08-29 09:38:39 +01:00
Mathias Vorreiter Pedersen
dbdb433957
Merge pull request #14058 from alexet/delete-or-delete-array
...
CPP: Add parent class for delete and delete[]
2023-08-29 09:38:07 +01:00
Michael Nebel
d3ba7e6b3c
C#: Re-factor using statements order in autobuilder.
2023-08-29 10:10:30 +02:00
Michael Nebel
5f4861f72e
Merge pull request #14069 from michaelnebel/csharp/nugetexe
...
C#: Download `nuget.exe` in the dependency manager (if not present).
2023-08-29 10:04:50 +02:00
Michael Nebel
5de8d9181d
C#: Address review comments.
2023-08-29 09:33:11 +02:00
Jeroen Ketema
0d1fd88729
Merge pull request #14050 from jketema/inline-6
...
Consolidate all `InlineFlowTest` libraries in the dataflow qlpack
2023-08-29 09:30:35 +02:00
Tom Hvitved
bce47fe344
C#: Bump all dependencies
2023-08-29 09:24:39 +02:00
Kevin Stubbings
29e14f7d8d
Feedback, Format, Add Change Notes
2023-08-28 14:15:21 -07:00
Bradley Grainger
d10597f69d
Delete thin space from documentation.
...
Update the MSDN link to avoid an unnecessary redirection and use the correct anchor.
2023-08-28 11:02:38 -07:00
Dave Bartolomeo
3343b78015
Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3
...
Post-release preparation for codeql-cli-2.14.3
2023-08-28 13:34:10 -04:00
github-actions[bot]
3eba77421a
Post-release preparation for codeql-cli-2.14.3
2023-08-28 15:53:49 +00:00
Rasmus Wriedt Larsen
ce6335866b
Python: Move ModificationOfParameterWithDefault to new dataflow API
2023-08-28 16:19:47 +02:00
Mathias Vorreiter Pedersen
f65fe34513
C++: Add false positive caused by flowing back into a function after doing reverse reads.
2023-08-28 14:45:16 +01:00
Asger F
d4cfa8c2b8
Java: autoformatting changes
2023-08-28 15:35:06 +02:00
