Anders Schack-Mulligen
|
283d6efdf8
|
Rangeanalysis/Java/C++: Address some ql4ql findings.
|
2023-10-25 14:06:35 +02:00 |
|
Jeroen Ketema
|
75a1173d63
|
C++: Add change note
|
2023-10-25 14:05:38 +02:00 |
|
Jeroen Ketema
|
dc512728fa
|
C++: Make File extend Locatable
|
2023-10-25 14:05:38 +02:00 |
|
Jeroen Ketema
|
4ea5c13390
|
C++: Add back getLocation in File
|
2023-10-25 14:05:38 +02:00 |
|
Anders Schack-Mulligen
|
7124a53c9c
|
C++: Remove getLocation from Container.
|
2023-10-25 14:05:38 +02:00 |
|
Jami
|
53d92d58fc
|
Merge pull request #14581 from jcogs33/jcogs33/add-internal-to-model-exclusions
Java: exclude internal packages globally from MaD models
|
2023-10-25 08:04:03 -04:00 |
|
Michael Nebel
|
b3e5b86f0a
|
Java: Cleanup threat models tests.
|
2023-10-25 14:02:31 +02:00 |
|
Mathias Vorreiter Pedersen
|
05385eb704
|
Merge pull request #14587 from MathiasVP/fix-indirect-strtok-model
C++: Fix `strtok` model for indirections
|
2023-10-25 12:09:13 +01:00 |
|
Owen Mansel-Chan
|
27646ce971
|
Merge pull request #14547 from owen-mc/go/enable-data-flow-consistency-checks
Go: make data flow consistency checks available (and fix some)
|
2023-10-25 11:15:44 +01:00 |
|
Paolo Tranquilli
|
fb470e4140
|
Swift: remove useless commented-out line
|
2023-10-25 12:15:25 +02:00 |
|
Geoffrey White
|
bf503849ea
|
Swift: Fixup line numbers after merge.
|
2023-10-25 11:09:13 +01:00 |
|
Geoffrey White
|
bf6e6a1e68
|
Merge branch 'main' into stringwith
|
2023-10-25 10:58:25 +01:00 |
|
Geoffrey White
|
a3d53ba9ec
|
Merge pull request #14574 from github/geoffw0-patch-2
Swift: Update README.md
|
2023-10-25 10:56:01 +01:00 |
|
Geoffrey White
|
7029f14651
|
Merge pull request #14511 from geoffw0/substring
Swift: Model Substring
|
2023-10-25 10:46:47 +01:00 |
|
Anders Schack-Mulligen
|
2592c94c54
|
Java: Replace range analysis with shared version.
|
2023-10-25 11:29:55 +02:00 |
|
Anders Schack-Mulligen
|
36082808d3
|
Java: Implement shared range analysis signatures.
|
2023-10-25 11:29:55 +02:00 |
|
Anders Schack-Mulligen
|
c1c4a5bfcf
|
Rangeanalysis: Copy qldoc and simplification from Java.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
cd44d67529
|
Rangeanalysis: Add temporary Java compatibility flag.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
06fe10bbe9
|
Rangeanalysis: Bugfix division with float representation.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
7b214a24df
|
C++: Add division test
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
232c147f6b
|
Rangeanalysis: Port join-order fix from Java version.
|
2023-10-25 11:17:02 +02:00 |
|
Anders Schack-Mulligen
|
ec39de20d8
|
C++: Convert to qlpack version of core range analysis.
|
2023-10-25 11:17:01 +02:00 |
|
Anders Schack-Mulligen
|
38274db205
|
Rangeanalysis: Parameterise library.
|
2023-10-25 11:17:01 +02:00 |
|
Anders Schack-Mulligen
|
169ba03778
|
Rangeanalysis: Copy C++ version verbatim.
|
2023-10-25 11:17:01 +02:00 |
|
Anders Schack-Mulligen
|
aed830cf1b
|
Rangeanalysis: Make new qlpack
|
2023-10-25 11:17:01 +02:00 |
|
Paolo Tranquilli
|
a245d0019e
|
Swift: tiny cosmetic tweak
|
2023-10-25 10:56:21 +02:00 |
|
Mathias Vorreiter Pedersen
|
032572b924
|
C++: Fix 'strtok' model.
|
2023-10-25 09:39:36 +01:00 |
|
Mathias Vorreiter Pedersen
|
f54379d096
|
C++: Add failing test.
|
2023-10-25 09:38:49 +01:00 |
|
Paolo Tranquilli
|
9196939384
|
Swift: canonicalize all VarDecls
|
2023-10-25 10:38:17 +02:00 |
|
Tony Torralba
|
4920c7f8b0
|
Merge pull request #14585 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2023-10-25 10:02:50 +02:00 |
|
Stephan Brandauer
|
cffcc7334d
|
Java: automodel extraction docs: add two intro sentences
|
2023-10-25 09:45:00 +02:00 |
|
Stephan Brandauer
|
0f2db1bcdb
|
Java: automodel extraction docs: use markdown footnote
|
2023-10-25 09:32:59 +02:00 |
|
Stephan Brandauer
|
3eeb6ffec4
|
Java: automodel extraction docs: spell out positive and negative
|
2023-10-25 09:05:22 +02:00 |
|
Stephan Brandauer
|
44c87561b3
|
Java: review suggestion from adityasharad
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
|
2023-10-25 09:00:28 +02:00 |
|
Stephan Brandauer
|
c240c1b3f5
|
Java: review suggestions from aeisenberg
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
|
2023-10-25 08:59:21 +02:00 |
|
github-actions[bot]
|
6cbadece0e
|
Add changed framework coverage reports
|
2023-10-25 00:15:35 +00:00 |
|
Marcono1234
|
bf20b8e5a5
|
Kotlin: Mention Literal::getLiteral() difference from source code
It appears the Kotlin extractor does not have access to the actual
string representation in the source code, and for most literal types
uses simply the represented value also as `getLiteral` result, see
https://github.com/github/codeql/blob/codeql-cli/v2.15.1/java/kotlin-extractor/src/main/kotlin/KotlinFileExtractor.kt#L4443
|
2023-10-25 02:04:54 +02:00 |
|
Geoffrey White
|
8a5f3e4825
|
Swift: Fix an issue with RegexTracking.qll using PotentialRegexEval rather than RegexEval.
|
2023-10-24 22:49:19 +01:00 |
|
Jami
|
7c053ed428
|
CI: add .strip() to comment/ID file read
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
|
2023-10-24 17:48:38 -04:00 |
|
Geoffrey White
|
021ed88a0a
|
Swift: Add a test revealing unevaluated regexs.
|
2023-10-24 22:42:15 +01:00 |
|
Chris Smowton
|
12d0f1a84b
|
Merge pull request #14575 from github/smowton/feature/more-intuitive-java-class-names
Java: Replace MethodAccess, LValue, RValue with more intuitive names. Introduce NewClassExpr.
|
2023-10-24 19:01:37 +01:00 |
|
Dave Bartolomeo
|
33f10d8d19
|
Better handling of all threat model without too many binding sets
|
2023-10-24 13:59:15 -04:00 |
|
Cornelius Riemenschneider
|
790615fbc2
|
Merge pull request #14552 from github/criemen/bazel-js
Javascript extractor: Bazel-based build
|
2023-10-24 19:36:39 +02:00 |
|
Dave Bartolomeo
|
5fd56ce866
|
Alternate threat model implementation
|
2023-10-24 13:12:37 -04:00 |
|
Jami Cogswell
|
121fd0896b
|
Java: exclude internal packages in general from models
|
2023-10-24 12:49:49 -04:00 |
|
Geoffrey White
|
42a2ec9891
|
Merge branch 'main' into substring
|
2023-10-24 17:03:00 +01:00 |
|
Tony Torralba
|
9f7a8aa18c
|
Update MaD Declarations after Triage
|
2023-10-24 17:42:03 +02:00 |
|
Geoffrey White
|
06b1cd939c
|
Merge pull request #14502 from geoffw0/xmlquery
Swift: Model RawRepresentable
|
2023-10-24 16:25:15 +01:00 |
|
Geoffrey White
|
d2d70cc782
|
Swift: Change note.
|
2023-10-24 16:17:21 +01:00 |
|
Geoffrey White
|
79f675cdb7
|
Swift: Fix a model.
|
2023-10-24 16:17:21 +01:00 |
|