Mathias Vorreiter Pedersen
65081a9a1f
C++: Add change note.
2023-10-30 17:11:44 +00:00
Mathias Vorreiter Pedersen
08b528b5c4
C++: Add a taint-model for 'realloc' and accept test changes.
2023-10-30 17:08:01 +00:00
Mathias Vorreiter Pedersen
0837e400a2
C++: Add failing test.
2023-10-30 17:05:43 +00:00
Mathias Vorreiter Pedersen
efe064284b
C++: Add up and downgrade scripts.
2023-10-30 16:07:57 +00:00
Mathias Vorreiter Pedersen
86fe5b47db
C++: Remove 'assignpaddexpr' and 'assignpsubexpr' from the 'assign_bitwise_expr' type.
2023-10-30 16:06:53 +00:00
github-actions[bot]
2b939fdf08
Post-release preparation for codeql-cli-2.15.2
2023-10-30 16:06:51 +00:00
Paolo Tranquilli
f81a3ec464
Swift: add VarDecl children to CaptureListExpr
2023-10-30 17:04:53 +01:00
Mathias Vorreiter Pedersen
375f0ea8b6
C++: Update documentation.
2023-10-30 15:57:30 +00:00
Mathias Vorreiter Pedersen
1e699ec0e5
C++: Simplify 'InvalidPointerToDereference.qll' now that the difference between 'derefSource' and 'pai' is always 0.
2023-10-30 15:53:48 +00:00
Mathias Vorreiter Pedersen
c8edf3151b
C++: Remove the use of range analysis in 'invalidPointerToDerefSource'.
2023-10-30 15:47:47 +00:00
Tony Torralba
45cf50c2af
Apply JMS sink only when there isn't an implementation available
2023-10-30 15:56:24 +01:00
Geoffrey White
c233094846
Swift: Change note.
2023-10-30 14:33:43 +00:00
Geoffrey White
fa3d401226
Swift: Update the qhelp.
2023-10-30 14:33:43 +00:00
Geoffrey White
7cf5210063
Swift: Port the qhelp examples to Swift.
2023-10-30 14:33:43 +00:00
Geoffrey White
9a95b9bcda
Swift: Enable the isLineAnchoredHostnameRegExp case (not working).
2023-10-30 14:33:42 +00:00
Geoffrey White
c09df2e3f1
Swift: Add test cases for the isLineAnchoredHostnameRegExp query case.
2023-10-30 14:33:42 +00:00
Geoffrey White
8f115bfd06
Swift: Implement 'isUsedAsReplace'.
2023-10-30 14:33:42 +00:00
Mathias Vorreiter Pedersen
91d224eea5
Merge pull request #14623 from alexet/dataflow-fps
...
CPP: Add dataflow FP with output arguments
2023-10-30 14:30:51 +00:00
Alex Eyers-Taylor
fb0f9ec601
CPP: Add missing rnage analysis ranges in test.
2023-10-30 14:17:03 +00:00
Alexander Eyers-Taylor
b8d45ae927
Update cpp/ql/test/library-tests/dataflow/dataflow-tests/flowOut.cpp
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-10-30 14:04:45 +00:00
Ian Lynagh
e2ef0dc71d
Merge pull request #14621 from igfoo/igfoo/getFileClassFqName_IrField
...
Kotlin: Fix getFileClassFqName for IrField
2023-10-30 13:54:08 +00:00
Ian Lynagh
d46442245b
Merge pull request #14518 from igfoo/igfoo/trap_files
...
Kotlin: Log when we start and finish writing to TRAP files
2023-10-30 13:53:04 +00:00
Geoffrey White
435638a5bb
Swift: Port the JS tests to Swift.
2023-10-30 13:08:11 +00:00
Geoffrey White
954b0612d5
Swift: Initial state of the existing test.
2023-10-30 13:08:10 +00:00
Geoffrey White
14db0dfcc7
Swift: Fairly minimal fix to get the query and test working for Swift.
2023-10-30 13:08:10 +00:00
Geoffrey White
c040d4847b
Swift: Copy MissingRegexAnchor query from JS.
2023-10-30 13:08:10 +00:00
Harry Maclean
dc9f171ee6
Merge pull request #14631 from hmac/hmac-dynamic-neutral-model
...
JS/Ruby/Python: Add neutralModel extensible predicate
2023-10-30 12:50:09 +00:00
Mathias Vorreiter Pedersen
b4958e7d58
C++: Accept path changes.
2023-10-30 12:44:30 +00:00
Mathias Vorreiter Pedersen
a077b70d66
C++: Accept test changes.
2023-10-30 11:54:24 +00:00
Mathias Vorreiter Pedersen
535d1e2565
C++: Define indirect instructions (and operands) using a 'Node0Impl' column instead of an instruction (or operand).
2023-10-30 11:54:24 +00:00
Ian Lynagh
55df481e5c
Kotlin: Add support for JavaBinarySourceElement sources
2023-10-30 11:43:36 +00:00
Harry Maclean
083be305e1
Shared: Add neutralModel extensible predicate
...
The neutralModel extensible predicate already exists in Java and C#, so
this change brings the dynamic languages more in line with static
languages. The Model Editor uses this predicate to mark endpoints as
"not interesting" from a data flow perspective.
2023-10-30 11:31:57 +00:00
Harry Maclean
38ecde0cc1
Shared: Include data extensions in workspace
...
This change allows codeql to see data extensions stored in the .github
directory inside the codeql repo. This is useful when using the CodeQL
Model Editor whilst working inside the codeql repo.
2023-10-30 11:31:56 +00:00
Chris Smowton
78fcbd07d6
Merge pull request #14630 from github/release-prep/2.15.2
...
Release preparation for version 2.15.2
codeql-cli/v2.15.2
2023-10-30 11:26:32 +00:00
Mathias Vorreiter Pedersen
3a9ffe189e
Merge pull request #14567 from github/redsun82/swift-case-variables
...
Swift: clean up `VarDecl`, `NamedPattern` and `SwitchStmt` interactions
2023-10-30 11:23:38 +00:00
github-actions[bot]
4641990021
Release preparation for version 2.15.2
2023-10-30 11:05:53 +00:00
Mathias Vorreiter Pedersen
9e2f0b5ed0
Merge branch 'main' into redsun82/swift-case-variables
2023-10-30 10:14:45 +00:00
Mathias Vorreiter Pedersen
c4521a30aa
Merge pull request #14113 from geoffw0/implicitflow
...
Swift: Flow through OpenExistentialExpr
2023-10-30 10:08:29 +00:00
Mathias Vorreiter Pedersen
4e08ba6820
Merge pull request #14618 from geoffw0/qldoc
...
Swift: QLDoc and test for getCanonicalType
2023-10-30 10:06:26 +00:00
Tom Hvitved
bf3fb685ad
Python: Sync in changes to SummaryTypeTracker.qll
2023-10-30 10:52:07 +01:00
Tamás Vajk
b9c89750b9
Merge pull request #14493 from tamasvajk/fix/params-attribute-argument
...
C#: Fix params attribute argument extraction
2023-10-30 10:50:02 +01:00
Tom Hvitved
14cfb82a8c
Ruby: Summarized type-tracking stores should target post-update nodes
2023-10-30 10:47:29 +01:00
Mathias Vorreiter Pedersen
342b3d7733
Merge pull request #14619 from MathiasVP/fix-strtol-model
...
C++: Fix `strtol` model
2023-10-30 09:41:23 +00:00
Kevin Stubbings
e0782683eb
Added gin cors framework
2023-10-27 17:50:43 -07:00
Geoffrey White
1929dead39
Merge branch 'main' into implicitflow
2023-10-27 23:35:54 +01:00
Owen Mansel-Chan
c1ecd5a0da
Merge pull request #14608 from Kwstubbs/golang-cookie-reflectedxss-sanitizer
...
Go: GoAdd Cookie Sanitizer to Reflected XSS
2023-10-27 21:47:39 +01:00
Kevin Stubbings
57cbacb495
test.go change
2023-10-27 12:07:51 -07:00
Kevin Stubbings
ce0104799a
Fix minor issues
2023-10-27 11:42:22 -07:00
Alex Eyers-Taylor
60f3598da9
CPP: Add dataflow FP with output arguments
2023-10-27 19:07:10 +01:00
Ian Lynagh
e25c0498d4
Kotlin: Fix getFileClassFqName for IrField
2023-10-27 18:00:33 +01:00