Harry Maclean
4168245fc0
Ruby: Fix doc comments
2023-09-14 10:02:27 +01:00
Harry Maclean
29a8a82e92
Ruby: add more docs for splat flow
2023-09-14 09:26:42 +01:00
Tom Hvitved
97ed5b8afb
Ruby: Improvments to splat flow
...
- Only step through a `SynthSplatParameterElementNode` when there is a splat parameter
at index > 0.
- Model read+stores via `SynthSplatArgumentElementNode` as a single read-store
step in type tracking.
2023-09-14 09:26:42 +01:00
Harry Maclean
bf51cbad88
Ruby: Update test fixture
2023-09-14 09:26:38 +01:00
Tom Hvitved
e11a4b63e9
Ruby: Remove SynthSplatArgParameterNode
2023-09-14 09:26:38 +01:00
Harry Maclean
5a6a52b767
Ruby: Use fewer SynthSplatArgumentElementNodes
...
In cases such as
def f(x, *y); end
f(*[1, 2])
we don't need any `SynthSplatArgumentElementNodes`. We get flow from the
splat argument to a `SynthSplatParameterNode` via `parameterMatch`, then
from element 0 of the synth splat to the positional param `x` via a
read step.
We add a read step from element 1 to `SynthSplatParameterElementNode(1)`.
From there we get flow to element 0 of `*y` via an existing store step.
2023-09-14 09:26:38 +01:00
Harry Maclean
4c1beea465
Ruby: Address review comments
2023-09-14 09:26:33 +01:00
Paolo Tranquilli
168aca0af4
Swift: add release notes
2023-09-14 10:25:16 +02:00
Paolo Tranquilli
fc51f4a80e
Swift: add update/downgrade scripts
2023-09-14 10:22:59 +02:00
Paolo Tranquilli
270c6407f0
Swift: accept test changes
2023-09-14 10:18:41 +02:00
Paolo Tranquilli
8d02bcc3cb
Swift: change non-generated TypeDecl.ql
2023-09-14 10:18:24 +02:00
Michael Nebel
b9acf1a4ee
Merge pull request #14111 from michaelnebel/csharp/reduceprojectrestore
...
C#: Avoid explicitly restoring projects in solution files.
2023-09-14 10:06:49 +02:00
Paolo Tranquilli
cf1667c325
Swift: update extractor after schema changes
2023-09-14 10:05:17 +02:00
Paolo Tranquilli
4d3aecfff6
Swift: rename base_types to syntactic_base_types in TypeDecl
2023-09-14 10:03:52 +02:00
Harry Maclean
3c8683428b
Ruby: Model more splat flow (alternative approach)
2023-09-14 08:55:59 +01:00
Harry Maclean
9ccd8cd248
Ruby: Update documentation
2023-09-14 08:54:49 +01:00
Harry Maclean
ef63ea8399
Ruby: Update fixture
2023-09-14 08:54:48 +01:00
Harry Maclean
7ebd51163e
Ruby: Handle more splat arg flow
...
Allow flow from a splat argument to a positional parameter in cases
where there are positional arguments left of the splat. For example:
def foo(x, y, z); end
foo(1, *[2, 3])
2023-09-14 08:54:48 +01:00
Tom Hvitved
e258324960
Ruby: Allow for implicit array reads at all sinks during taint tracking
2023-09-14 09:40:05 +02:00
Chuan-kai Lin
d8fb875bbb
Merge pull request #14214 from github/cklin/pick-js-fix-2.14.5
...
Cherry pick "fix out of bounds string access in isUsingDecl" into 2.14.5
codeql-cli/v2.14.5
2023-09-13 14:21:47 -07:00
erik-krogh
cc3a76f7f5
fix out of bounds string access in isUsingDecl
2023-09-13 14:16:02 -07:00
Erik Krogh Kristensen
111227e763
Merge pull request #14211 from erik-krogh/usingOutOfBounds
...
JS: fix out of bounds string access in isUsingDecl
2023-09-13 22:23:15 +02:00
Erik Krogh Kristensen
b019fb3e91
Merge pull request #14212 from erik-krogh/usingOutOfBounds-hotfix
...
JS: fix out of bounds string access in isUsingDecl
2023-09-13 22:23:13 +02:00
Robert Marsh
e0fae764f1
Swift: move IteratorProtocol model to its own file
2023-09-13 20:09:17 +00:00
erik-krogh
c6b8c444d0
fix out of bounds string access in isUsingDecl
2023-09-13 21:53:49 +02:00
Robert Marsh
20de4c625c
Swift: autoformat DataFlowPrivate
2023-09-13 18:57:27 +00:00
Robert Marsh
86bd2168ec
Swift: breaking change note for array content removal
2023-09-13 18:34:30 +00:00
Robert Marsh
0b66be5f07
Swift: restore ArrayElement as an alias for CollectionElement
2023-09-13 18:29:03 +00:00
Robert Marsh
43ca192ceb
Swift: remove ArrayContent in UnsafeJsEvalQuery
2023-09-13 18:26:06 +00:00
erik-krogh
fdd349c1a3
fix out of bounds string access in isUsingDecl
2023-09-13 20:11:21 +02:00
Geoffrey White
6aa8daeeb6
Swift: Fix inline expectations.
2023-09-13 19:06:54 +01:00
Geoffrey White
535a69cd8b
Merge branch 'main' into logfix
2023-09-13 19:01:52 +01:00
Geoffrey White
e109892388
Merge pull request #14189 from geoffw0/protocol2
...
Swift: Consistent additional taint steps between the cleartext-* queries
2023-09-13 18:44:20 +01:00
Geoffrey White
d01a3e26d6
Swift: Change note.
2023-09-13 18:20:49 +01:00
Geoffrey White
200d9a4dfb
Swift: Port regex mode flag character fix from Python.
2023-09-13 18:19:02 +01:00
Geoffrey White
df60f560a2
Swift: Add demonstrative test case.
2023-09-13 18:11:40 +01:00
Geoffrey White
af3d8c88bb
Java: Fix test comment.
2023-09-13 17:58:31 +01:00
Geoffrey White
1c81bd52e6
Java: Change note.
2023-09-13 17:51:26 +01:00
Geoffrey White
8c3e778be6
Java: Port regex mode flag character fix from Python.
2023-09-13 17:50:52 +01:00
Chuan-kai Lin
00c83f185a
Merge pull request #14182 from cklin/deprecate-assume-small-delta
...
Document assume_small_delta deprecation
2023-09-13 07:54:33 -07:00
Mathias Vorreiter Pedersen
18fa6f5d64
Merge pull request #14202 from alexet/translated-element-location
...
CPP: Add a location to TranslatedElement to help with debugging IR creation
2023-09-13 15:19:24 +01:00
Michael Nebel
84ec823ac0
C#: Add some explanatory comments about parallel restore.
2023-09-13 16:07:47 +02:00
Anders Schack-Mulligen
74787bfba8
Dataflow: One more minor perf tweak.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
b63d518114
Dataflow: Minor perf tweak.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
b456ba217a
Dataflow: Improve rev-to-fwd call edge pruning.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
f456bf8d57
Dataflow: Add change note.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
13e7e6b983
Dataflow: Improve fwd-taken call edge predicate and improve fwd-to-rev call edge pruning.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
47f68504a8
Dataflow: Postpone typeflow calledge pruning until stage 3.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
f5a4b792bd
C++/Go/Python/Ruby/Swift: Add dummy localMustFlowStep.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
1750d00fbe
C#: Add localMustFlowStep
2023-09-13 15:43:46 +02:00