Asger F
e5d090c640
Merge pull request #12671 from asgerf/ql/class-type
...
QL: Make Class.getType() only return ClassType
2023-04-03 09:43:14 +02:00
Mathias Vorreiter Pedersen
9a34a7b7cc
Merge pull request #12719 from jketema/typebound-size
2023-04-03 08:31:41 +01:00
Jeroen Ketema
17bd9c12d7
JS: Fix qhelp after file rename
2023-04-03 09:25:19 +02:00
Paolo Tranquilli
5e45377ad7
Merge pull request #12725 from github/redsun82/swift-successfully-extracted-lines
...
Swift: add `SuccessfullyExtractedLines` query
2023-04-03 09:12:41 +02:00
Jeroen Ketema
69619f1fbc
Merge pull request #12738 from MathiasVP/fix-join-in-suspecious-call-to-strncat
...
C++: Fix join order in `cpp/unsafe-strncat`
2023-04-01 20:10:17 +02:00
Jonathan Leitschuh
0d774a647c
Fix partial path traversal Java example Again
...
The original wouldn't compile, and the fix made by #11899 is sub-optimal.
This keeps the entire comparision using the Java `Path` object, which is optimal.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com >
2023-03-31 23:36:07 -04:00
Jonathan Leitschuh
b9d409279b
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-31 23:36:07 -04:00
Jonathan Leitschuh
e641505361
Fix partial path traversal Java example Again
...
The original wouldn't compile, and the fix made by #11899 is sub-optimal.
This keeps the entire comparision using the Java `Path` object, which is optimal.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com >
2023-03-31 23:36:07 -04:00
Jami Cogswell
0688fa6ed1
Java: update expected file for results without interface members
2023-03-31 18:02:09 -04:00
Jami Cogswell
c69745a6f8
Java: fix stubs
2023-03-31 18:02:09 -04:00
Jami Cogswell
266939840d
Java: update expected file with results that include interface members
2023-03-31 18:02:09 -04:00
Jami Cogswell
aca538310f
Java: update some qldocs
2023-03-31 18:02:09 -04:00
Jami Cogswell
8b18df0987
Java: update top jdk apis test case with stubs
2023-03-31 18:02:09 -04:00
Jami Cogswell
e0524a1177
Java: add test case for top jdk apis
2023-03-31 18:02:09 -04:00
Jami Cogswell
8501a16cac
Java: move TopJdkApis.qll to lib directory for better importing
2023-03-31 18:02:09 -04:00
Jami Cogswell
fea55e910e
Java: move query logic to qll file and add subset restriction for top500 jdk apis
2023-03-31 18:02:08 -04:00
Mathias Vorreiter Pedersen
e5700e07c7
C++: Fix join order in 'cpp/unsafe-strncat'.
2023-03-31 21:33:28 +01:00
Porcupiney Hairs
e9615c57e9
Go: Add more JWT sinks
...
This pull requests adds modelling for `katras/iris/v12/middleware/jwt`, `katras/jwt` and `gogf/gf-jwt` frameworks.
2023-03-31 23:11:24 +05:30
Mathias Vorreiter Pedersen
6638df1578
C++: Sync identical files.
2023-03-31 18:25:34 +01:00
Mathias Vorreiter Pedersen
0b33d26852
C++: Speed up non-linear recursion in GVN.
2023-03-31 18:25:19 +01:00
Alexandre Boulgakov
ddd44b4c13
C++: Correct repeated initializers downgrade script compatibility to full.
2023-03-31 17:53:12 +01:00
Alexandre Boulgakov
e593f0f7b3
C++: Update database stats.
2023-03-31 17:53:12 +01:00
Alexandre Boulgakov
b5932debc0
C++: Add db upgrade and downgrade scripts for repeated initializers.
2023-03-31 17:53:12 +01:00
Alexandre Boulgakov
d0a77a8433
C++: Support repeated initializers in dbscheme.
2023-03-31 17:53:12 +01:00
Edward Minnix III
2b9daed26a
Merge pull request #12563 from egregius313/egregius313/refactor-java-libs-to-dataflow-modules
...
Java: Refactor Java query libraries to use dataflow modules
2023-03-31 12:38:14 -04:00
Owen Mansel-Chan
8e8ffb20a3
Accept test changes caused by alert message change
2023-03-31 16:48:01 +01:00
Owen Mansel-Chan
4fa57bfb2d
Use set literal instead of regex comparison
2023-03-31 16:48:00 +01:00
Owen Mansel-Chan
a9f297c031
Use set literal instead of a conjunction
2023-03-31 16:47:59 +01:00
Owen Mansel-Chan
5d93ed5f52
Remove redundant term
...
It's hard to tell what the original intention was, but I don't think
the location of qs should be the same as the location of q, so this
term is redundant.
2023-03-31 16:47:59 +01:00
Owen Mansel-Chan
34bca0612b
Use _ for exists-variable that is only used once
2023-03-31 16:47:58 +01:00
Owen Mansel-Chan
607e2817e5
Use not A and B instead of if A then none() else B
2023-03-31 16:47:58 +01:00
Owen Mansel-Chan
9ac0c57a3e
Fix alert message to match style guide
2023-03-31 16:47:57 +01:00
Owen Mansel-Chan
cf89b00f47
Fix variable names in QLDocs
2023-03-31 16:47:57 +01:00
Owen Mansel-Chan
513409e082
Fix formatting of QLDocs
2023-03-31 16:47:56 +01:00
Owen Mansel-Chan
7a25200962
Remove fields which are only used in char pred
2023-03-31 16:47:55 +01:00
Owen Mansel-Chan
a113b8e8a4
No need for singleton set
2023-03-31 16:47:55 +01:00
Owen Mansel-Chan
f6dc9e2a35
Fix accidental over-modelling of k8s Secret DeepCopy
2023-03-31 16:47:53 +01:00
Geoffrey White
7f69fe6e8c
Swift: Autoformat.
2023-03-31 16:32:49 +01:00
Ed Minnix
800411cd81
More replacing of single-predicate classes to predicate
2023-03-31 10:55:17 -04:00
Geoffrey White
91f6b0ba4f
Swift: Correct test expectations.
2023-03-31 15:50:59 +01:00
Geoffrey White
c88bea7080
Update swift/ql/lib/codeql/swift/elements/type/TypeAliasType.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-03-31 15:29:49 +01:00
Ian Lynagh
c1a7d7f825
Merge pull request #12646 from igfoo/igfoo/expanded_args
...
Java: Store expanded args in the database
2023-03-31 15:27:02 +01:00
Geoffrey White
b3e0c49435
Swift: Remove unnecessary imports.
2023-03-31 15:03:01 +01:00
Geoffrey White
8a805bb7a3
Swift: Replace getABaseOrAliasedType with slightly more sophisticated getABaseType.
2023-03-31 14:16:42 +01:00
Erik Krogh Kristensen
1e1a692ee6
Merge pull request #12686 from erik-krogh/backtick-parse-error
...
JS: add backticks around the concrete parse error
2023-03-31 14:56:38 +02:00
Asger F
64cf27ab87
JS: Modernize crypto libraries
2023-03-31 14:49:23 +02:00
Jeroen Ketema
8d9b96b776
C++: Drop the bit size restriction in typeBound and use float
2023-03-31 14:36:11 +02:00
Geoffrey White
cc841a68f6
Merge pull request #11921 from gsingh93/range-node
...
C++: Add RangeNode class
2023-03-31 13:22:19 +01:00
Ian Lynagh
3d85c4f19c
Java: Add another change note
2023-03-31 12:46:10 +01:00
Ian Lynagh
04c09a73a9
Java: Add .md extension to changenote file
2023-03-31 12:40:19 +01:00