Harry Maclean
c7e8f0d12a
Shared: Pin rust version for shared extractor
2023-05-05 06:36:55 +00:00
Harry Maclean
a577bec22c
Shared: Fix clippy warnings in shared extractor
2023-05-05 06:30:12 +00:00
github-actions[bot]
3d9e5ebfd8
Add changed framework coverage reports
2023-05-05 00:14:57 +00:00
Edward Minnix III
2d5b35067e
Merge pull request #12721 from egregius313/egregius313/java/move-configurations-to-libraries
...
Java: Move more dataflow configurations to `*Query.qll` files
2023-05-04 20:14:22 -04:00
Ed Minnix
0c604b1c34
Remove generated model
2023-05-04 16:56:14 -04:00
Ed Minnix
7a295b554b
Remove Map rows
2023-05-04 16:52:40 -04:00
Edward Minnix III
a34a51737f
Add SyntheticFields for JwsHeader
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-05-04 16:52:40 -04:00
Ed Minnix
62cbcdb30c
Add change note
2023-05-04 16:52:40 -04:00
Ed Minnix
a4f4ff15ce
Change method resolveSigningKey from class to interface
...
The resolveSigningKey method of SigningKeyResolverAdapter is an
implementation of that defined in SigningKeyResolver. So this changes
the type from the class to the interface it implements
2023-05-04 16:52:40 -04:00
Ed Minnix
5c10d42915
More test cases for io.jsonwebtoken.SigningKeyResolverAdapter
2023-05-04 16:52:40 -04:00
Ed Minnix
a4fa1ec768
Test case for modeling io.jsonwebtoken.SigningKeyResolverAdapter
2023-05-04 16:52:40 -04:00
Ed Minnix
3d0147765c
Add missing methods to jwtk-jjwt stubs
2023-05-04 16:52:40 -04:00
Ed Minnix
a38466b0f3
Erase generics in generated model
2023-05-04 16:52:40 -04:00
Ed Minnix
26cdf24bf0
Added MaD models for io.jsonwebtoken
2023-05-04 16:52:39 -04:00
Robert Marsh
e32e28d95f
Merge pull request #13035 from MathiasVP/ranked-phi-hack-for-bounded-phi
...
C++: Work around poor codegen for `forex` in IR-based range analysis
2023-05-04 16:48:00 -04:00
Robert Marsh
b7653ec92d
C++: ignore cast arrays in constant off-by-one query
2023-05-04 16:39:02 -04:00
Robert Marsh
d9665e1678
C++: add case test for constant off-by-one query
2023-05-04 16:34:29 -04:00
Robert Marsh
3abf5d1bd2
C++: stitch paths in array off-by-one query
2023-05-04 16:28:05 -04:00
Chuan-kai Lin
0984fc7cce
JS: Add pragma[only_bind_out] to Locatable::toString() calls
2023-05-04 13:20:56 -07:00
Jami
3c74c8bbe0
Merge pull request #13019 from jcogs33/jcogs33/url-open-stream-updates
...
Java: switch `url-open-stream` sink models to `experimentalSinkModel`
2023-05-04 15:07:44 -04:00
Chuan-kai Lin
d968cee2c4
Java: Add pragma[only_bind_out] to Top::toString() calls
2023-05-04 11:46:35 -07:00
Mathias Vorreiter Pedersen
27c4408431
Merge pull request #12997 from MathiasVP/sync-product-flow-across-calls
...
C++: Synchronize product dataflow paths on function entry points
2023-05-04 17:37:48 +01:00
Mathias Vorreiter Pedersen
de08ada0bc
C++: Accept test changes.
2023-05-04 17:29:39 +01:00
Mathias Vorreiter Pedersen
2587f8ed96
C++: Only alert on the largest possible overflow.
2023-05-04 17:29:31 +01:00
Mathias Vorreiter Pedersen
a09a8dba95
C++: Add testcase with repeated TP alerts.
2023-05-04 16:59:54 +01:00
Stephan Brandauer
62ab91c14a
fix ql-for-ql warning
2023-05-04 17:48:50 +02:00
Stephan Brandauer
27703c777a
pull subtypes-logic out into helper predicate, and document it
2023-05-04 17:45:17 +02:00
Stephan Brandauer
0e5591ff86
move getCallable to signature module implementation, and document it
2023-05-04 17:35:46 +02:00
Stephan Brandauer
a616a786f0
formatting
2023-05-04 17:27:27 +02:00
Jami
4e31c46b0c
Merge pull request #13024 from jcogs33/jcogs33/remove-hardcoded-jwt-key-summaries
...
Java: remove `hardcoded-jwt-key` experimental summary models
2023-05-04 11:18:18 -04:00
Mathias Vorreiter Pedersen
5a5240dbf9
Merge pull request #12865 from rdmarsh2/rdmarsh2/range-analysis-ast-wrapper
...
C++: AST-based wrapper for new range analysis
2023-05-04 16:10:21 +01:00
Paolo Tranquilli
b511c5f355
Merge pull request #13012 from github/redsun82/swift-json
...
Swift: add infrastructure for emitting JSON diagnostics
2023-05-04 17:04:45 +02:00
Stephan Brandauer
36aabc077e
Update java/ql/src/Telemetry/AutomodelFrameworkModeCharacteristics.qll
...
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com >
2023-05-04 16:50:37 +02:00
Ed Minnix
5f3c8fef3f
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
Ed Minnix
3100e98513
Add missing change notes and update date
2023-05-04 10:25:17 -04:00
Ed Minnix
74fc6382a6
Add improper validation of array size query libraries
2023-05-04 10:25:17 -04:00
Ed Minnix
c319ee4c0d
Add TempDirLocalInformationDisclosureQuery
2023-05-04 10:25:16 -04:00
Ed Minnix
b087cf9a0a
Add Arithmetic query libraries
2023-05-04 10:25:16 -04:00
Ed Minnix
b6361cdd3d
Move CWE-190/ArithmeticCommon.qll to semmle.code.java.security
2023-05-04 10:25:16 -04:00
Ed Minnix
77ee80fd81
Add missing change notes
2023-05-04 10:25:16 -04:00
Ed Minnix
24b00bac11
Add UnsafeHostnameVerificationQuery
2023-05-04 10:25:16 -04:00
Ed Minnix
f4a6f555b4
Add NumericCastTaintedQuery
2023-05-04 10:25:13 -04:00
Ed Minnix
e65a54b85f
Add BrokenCryptoAlgorithmQuery
2023-05-04 10:19:12 -04:00
Ed Minnix
4b76564911
Add MaybeBrokenCryptoAlgorithmQuery
2023-05-04 10:15:00 -04:00
Ed Minnix
e4f47ece43
Add ResponseSplittingLocalQuery
2023-05-04 10:15:00 -04:00
Ed Minnix
91b3533035
Add SqlTaintedLocalQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
a0f7575b34
Add StackTraceExposureQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
aff299eafd
Add ExecTaintedLocal
2023-05-04 10:14:59 -04:00
Ed Minnix
b39d5088de
Add InsecureCookieQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
be24b29e7a
Add UrlRedirectLocalQuery.qll
2023-05-04 10:14:59 -04:00
