Tom Hvitved
b470c36c82
Ruby: Implement multipleArgumentCallExclude
2023-09-12 20:05:11 +02:00
Tom Hvitved
c13a8e41ad
Data flow: Add more consistency checks
2023-09-12 20:05:05 +02:00
Ian Lynagh
4908188060
Kotlin: Add 1.9.20 support
2023-09-12 18:28:33 +01:00
Ian Lynagh
4d1ceff7df
Kotlin: Fix build
2023-09-12 18:28:33 +01:00
Ian Lynagh
2b9a425468
Kotlin: Support 1.9.20
2023-09-12 18:28:33 +01:00
Geoffrey White
0d7769f687
Merge pull request #13276 from geoffw0/sqlpathinject
...
Swift: Add path injection sinks for sqlite3 and SQLite.swift
2023-09-12 17:36:27 +01:00
Henning Makholm
596f7012ca
Merge pull request #14191 from github/hmakholm/pr/monotonic-unique
...
C++ tests: fix output of bug-stricken test
2023-09-12 18:21:35 +02:00
Geoffrey White
7e962dc764
Swift: Accept fixed test cases.
2023-09-12 17:18:29 +01:00
Max Schaefer
a9e81672f0
Make suggestion to replace example.com more explicit.
2023-09-12 16:54:05 +01:00
Robert Marsh
c2868fe05a
Swift: change note for keypath write dataflow
2023-09-12 15:53:50 +00:00
Robert Marsh
47ac54bb81
Swift: autoformat DataFlowPrivate
2023-09-12 15:52:53 +00:00
Robert Marsh
8f797c7189
Merge branch 'main' into rdmarsh2/swift/keypath-write-flow
2023-09-12 15:51:36 +00:00
Max Schaefer
7ddb7da65e
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2023-09-12 16:47:23 +01:00
Chuan-kai Lin
d792175907
Merge pull request #14174 from github/post-release-prep/codeql-cli-2.14.4
...
Post-release preparation for codeql-cli-2.14.4
2023-09-12 08:02:20 -07:00
Henning Makholm
bac175e881
C++ tests: fix output of bug-stricken test
...
The expected output was incorrect and the result of an evaluator bug.
This change should go together with the internal PR that fixes this bug.
2023-09-12 16:28:59 +02:00
Alex Denisov
743fd902a1
Swift: fix CFG for identity expressions (await, dot_self, parent)
2023-09-12 16:04:45 +02:00
Stephan Brandauer
928898e979
Java: automodel: add class and method doc to test code
2023-09-12 15:43:09 +02:00
Geoffrey White
d65f2b4fa9
Swift: Change note.
2023-09-12 14:36:37 +01:00
Mathias Vorreiter Pedersen
d6e143a858
Merge pull request #14151 from MathiasVP/deduplicate-dataflow-results-take-3
...
C++: Deduplicate dataflow query results
2023-09-12 14:07:40 +01:00
Stephan Brandauer
089b147d04
Java: Automodel format
2023-09-12 14:27:12 +02:00
Stephan Brandauer
bd10ac799a
Java: Automodel application mode: add test expectations
2023-09-12 14:20:28 +02:00
Stephan Brandauer
8121c7fefa
Java: Automodel application mode: add method doc and class doc as related locations
2023-09-12 14:08:55 +02:00
Tom Hvitved
49d57653dc
Merge pull request #14170 from hvitved/csharp/cil-arg-exclude
...
C#: Exclude CIL arguments from `ArgumentNode` when they are compiled from source
2023-09-12 13:44:29 +02:00
Ian Lynagh
2f57a62a7a
Merge pull request #14144 from igfoo/igfoo/nonir
...
Kotlin: Give some more informative errors messages
2023-09-12 12:07:09 +01:00
Ian Lynagh
d8a99e6b7d
Kotlin: Regenerate expected test output
...
It's now in the order generated by the new CLI. This means that
changes in test output are easier to understand.
2023-09-12 11:13:58 +01:00
Mathias Vorreiter Pedersen
d528c96563
Merge branch 'main' into deduplicate-dataflow-results-take-3
2023-09-12 10:28:57 +01:00
Mathias Vorreiter Pedersen
ff28f45058
C++: Accept test changes.
2023-09-12 10:28:46 +01:00
Mathias Vorreiter Pedersen
7d2c12e63d
C++: Handle the extent of 'new[]' in 'getConvertedResultExpressionImpl0' and add a few more comments.
2023-09-12 10:28:36 +01:00
Michael Nebel
7bcaa49f5a
C#: Add integration test with quoted arguments.
2023-09-12 10:33:39 +02:00
Michael Nebel
6fe9b70c92
C#: Poor mans quoting of arguments on windows.
2023-09-12 10:33:21 +02:00
Stephan Brandauer
0115ba0df3
Java: Automodel: drive-by, add extensibleType metadata to app mode +/- extraction
2023-09-12 09:29:54 +02:00
intrigus-lgtm
b6417ca212
Java: Fix alert message
...
The signing key that is being set, is _not_ what is being parsed.
A _JWT_ is being parsed, that will then be verified using the set key.
(Or in our case not, because we're looking for security problems :P)
2023-09-12 02:23:37 +02:00
Geoffrey White
ae0fcf791b
Swift: Expand the additional taint step from the cleartext storage database query to the other sensitive data queries.
2023-09-11 22:25:17 +01:00
Geoffrey White
aa5820c061
Swift: Add some test cases.
2023-09-11 19:33:37 +01:00
Chuan-kai Lin
43eee2b4b3
Document assume_small_delta deprecation
2023-09-11 10:37:15 -07:00
Chris Smowton
b291ee361a
Merge pull request #14179 from github/smowton/fix/go-baseline-quoting
...
Fix space handling in Golang configure-baseline scripts
2023-09-11 15:54:24 +01:00
Rasmus Lerchedahl Petersen
a063d7d510
Python: sinks -> decodings
...
Query operators that interpret JavaScript
are no longer considered sinks.
Instead they are considered decodings
and the output is the tainted dictionary.
The state changes to `DictInput` to reflect
that the user now controls a dangerous dictionary.
This fixes the spurious result and moves the error reporting
to a more logical place.
2023-09-11 16:33:20 +02:00
Geoffrey White
e038f60640
Swift: Convert some sinks to CSV.
2023-09-11 14:54:32 +01:00
Rasmus Lerchedahl Petersen
d9f63e1ed3
Python: Split modelling of query operators
...
`$where` and `$function` behave quite differently.
2023-09-11 15:54:00 +02:00
Geoffrey White
7d05446483
Swift: Formatting.
2023-09-11 14:11:11 +01:00
Rasmus Lerchedahl Petersen
154a36934d
Python: Add test for function
2023-09-11 14:49:03 +02:00
Geoffrey White
1cde183005
Merge branch 'main' into logfix
2023-09-11 13:14:58 +01:00
Geoffrey White
c18de7d9af
Merge pull request #14036 from geoffw0/quicktest
...
Swift: Additional dataflow test
2023-09-11 13:04:48 +01:00
Geoffrey White
3fd5de83cb
Merge branch 'main' into sqlpathinject
2023-09-11 12:42:49 +01:00
Michael Nebel
6bfaa90fe4
C#: Avoid explicitly restoring the projects in the restored solution files.
2023-09-11 13:30:28 +02:00
Geoffrey White
fc69be4df9
Merge branch 'main' into quicktest
2023-09-11 12:25:38 +01:00
Michael Nebel
aaaf6f8616
Merge pull request #14150 from michaelnebel/csharp/tracerwhitespace
...
C#: Explicitly quote arguments in the LUA tracer on windows.
2023-09-11 13:18:21 +02:00
Chris Smowton
d13f4210eb
Fix space handling in Golang configure-baseline scripts
2023-09-11 10:51:35 +01:00
Michael Nebel
d4a1c297aa
C#: Quote arguments containing whitespaces on windows in the tracer.
2023-09-11 11:18:27 +02:00
Michael Nebel
8475464fbe
C#: Cleanup hotfix version of quoting.
2023-09-11 11:18:27 +02:00
