Michael Nebel
0bf2d77a7e
C#: Update integration tests.
2023-11-02 15:46:54 +01:00
Michael Nebel
a161d6e666
C#: Update unit tests.
2023-11-02 15:46:39 +01:00
Michael Nebel
9ea6ef06ef
C#: Commented out references in project files should not be used.
2023-11-02 15:45:30 +01:00
Anders Schack-Mulligen
f2b52650d5
Rangeanalysis: Filter useless modulo results.
2023-11-02 15:29:56 +01:00
Tom Hvitved
a35bda2946
Merge pull request #14663 from hvitved/csharp/split-generated-mad-files
...
C#: Split `generated/dotnet_runtime.yml` into separate files
2023-11-02 14:36:48 +01:00
Tom Hvitved
f82f1df5d6
Merge pull request #14657 from hvitved/csharp/qualified-name
...
C#: Move qualified name computation into `QualifiedName.qll`
2023-11-02 14:36:13 +01:00
Anders Schack-Mulligen
7bf271fb6c
RangeAnalysis: Improve bounds that rely on relative modulus.
2023-11-02 12:51:48 +01:00
Tom Hvitved
a9e2f55b61
C#: Split generated/dotnet_runtime.yml into separate files
2023-11-02 12:45:47 +01:00
Anders Schack-Mulligen
484d0fe4cd
Merge pull request #14659 from aschackmull/shared/modulus-analysis
...
Java/C++: Share modulus analysis
2023-11-02 12:45:35 +01:00
Tom Hvitved
12d856737a
Address review comments
2023-11-02 12:38:35 +01:00
Tony Torralba
8f4509f434
Merge pull request #14651 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-11-02 10:48:32 +01:00
Geoffrey White
431d9d58f1
Merge pull request #14639 from geoffw0/anchorquery
...
Swift: New query for Missing Regular Expression Anchor
2023-11-02 09:20:19 +00:00
Geoffrey White
242399817a
Swift: Remove 'only'.
2023-11-02 08:32:36 +00:00
yoff
fd757b0089
Update python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPrivate.qll
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-11-02 09:31:28 +01:00
Rasmus Lerchedahl Petersen
58bf70d61b
Python: filter self steps from use-use flow
...
Factor out use-use flow in order to do this.
Also improve names and comments.
I also wanted to change the types in `difinitionFlowStep`, but
that broke the module instantiation.
2023-11-02 09:31:28 +01:00
Rasmus Lerchedahl Petersen
613831b2e1
Python: add test for post-update loop flow
2023-11-02 09:31:28 +01:00
Geoffrey White
c937230f1a
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-11-02 08:30:53 +00:00
yoff
c26c68c286
Merge pull request #14617 from yoff/python/module-for-import-time-flow
...
Python: module for import time flow
2023-11-02 09:28:51 +01:00
Anders Schack-Mulligen
7c3684dbb7
RangeAnalysis: Rename semExprModulus to exprModulus.
2023-11-02 08:19:23 +01:00
Anders Schack-Mulligen
400910e4d3
C++: Fix modulus analysis test.
2023-11-02 08:19:23 +01:00
github-actions[bot]
155073c498
Add changed framework coverage reports
2023-11-02 00:16:04 +00:00
Geoffrey White
48c3db2290
Swift: Change note.
2023-11-01 18:49:45 +00:00
Geoffrey White
206acea41c
Swift: Fix defaultImplicitTaintRead for sinks that are field accesses on a subclass of the type containing the field.
2023-11-01 17:49:25 +00:00
Geoffrey White
727a7e804c
Update swift/ql/src/queries/Security/CWE-020/MissingRegexAnchor.qhelp
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-11-01 16:32:25 +00:00
Sam Browning
37361d9f79
Merge branch 'main' of https://github.com/github/codeql
2023-11-01 11:43:33 -04:00
Anders Schack-Mulligen
f8ab64dff0
Java: Switch to shared modulus analysis.
2023-11-01 16:34:28 +01:00
Tom Hvitved
c717e346fb
C#: Move qualified name computation into QualifiedName.qll
2023-11-01 16:21:55 +01:00
Anders Schack-Mulligen
ac115e0a6f
Rangeanalysis: Reshuffle perf fix. This should result in the same join-order, but with less materialisation.
2023-11-01 15:59:24 +01:00
Anders Schack-Mulligen
bb2bbd2d4d
Rangeanalysis: Remove useless pragma.
2023-11-01 15:59:24 +01:00
Anders Schack-Mulligen
f6794fe859
Rangeanalysis: Adjust modulo analysis comment.
2023-11-01 15:59:24 +01:00
Anders Schack-Mulligen
8e9aa5b560
C++: Switch to shared modulus analysis.
2023-11-01 15:59:24 +01:00
Anders Schack-Mulligen
a7f3ef1a6c
Rangeanalysis: Parameterise shared modulus analysis.
2023-11-01 15:59:24 +01:00
Anders Schack-Mulligen
8e2b17cd86
Rangeanalysis: Copy C++ ModulusAnalysis file verbatim.
2023-11-01 15:59:24 +01:00
Anders Schack-Mulligen
6d859daf3d
Merge pull request #14656 from aschackmull/shared/range-utils
...
Rangeanalysis: Share ssaRead predicate
2023-11-01 15:57:52 +01:00
Mathias Vorreiter Pedersen
b54b5ae0a9
Merge pull request #14648 from MathiasVP/simplify-invalid-ptr-deref
...
C++: Remove one use of range analysis in `cpp/invalid-pointer-deref`
2023-11-01 14:42:20 +00:00
Geoffrey White
b3fa59d94b
Apply suggestions from code review
...
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com >
2023-11-01 13:15:06 +00:00
Tom Hvitved
3c86aad16d
Merge pull request #14628 from hvitved/ruby/type-tracking-store-post-update
...
Ruby: Summarized type-tracking stores should target post-update nodes
2023-11-01 13:54:21 +01:00
yoff
4ce1b680c2
Merge pull request #14654 from yoff/python/update-partial-flow-debug-query
...
Python: Update debug query to changed API
2023-11-01 13:32:09 +01:00
Anders Schack-Mulligen
048a7c4e42
Rangeanalysis: Rename SsaBound.getAVariable to getVariable.
2023-11-01 11:58:06 +01:00
Anders Schack-Mulligen
48291dd32d
Rangeanalysis: Remove superfluous ignoreZeroLowerBound.
2023-11-01 11:51:46 +01:00
Rasmus Lerchedahl Petersen
0b45b63bd2
Python: Update debug query to changed API
...
The change is commented out by default
which is why no compilation tests failed
when the API changed.
2023-11-01 11:39:51 +01:00
Tom Hvitved
0c5b528d54
Address review comments
2023-11-01 11:32:57 +01:00
Rasmus Lerchedahl Petersen
1366247f4c
Python: Add AWS Lambda as a supported framework
2023-11-01 10:51:35 +01:00
Rasmus Lerchedahl Petersen
f7a8a8ae19
Python: Fix QL alert
2023-11-01 09:24:59 +01:00
Mathias Vorreiter Pedersen
9736936e54
Merge pull request #14635 from MathiasVP/assign-pointer-add-and-sub-is-not-bitwise
2023-11-01 00:40:39 +01:00
Erik Krogh Kristensen
ddb145f15f
Merge pull request #14645 from erik-krogh/rerun-tests
...
JS: re-order expected test output of all JS tests
2023-10-31 21:52:52 +01:00
Rasmus Lerchedahl Petersen
38b811b050
Python: Separate -> PhaseDependentFlow
2023-10-31 21:50:33 +01:00
Edward Minnix III
1ec1dd368d
Merge pull request #13978 from egregius313/egregius313/java/mad/convert-sensitive-api-to-mad
...
Java: Convert `SensitiveApi.qll` to use Models-as-Data
2023-10-31 15:25:42 -04:00
Kevin Stubbings
3697ef72c4
Small changes
2023-10-31 12:23:18 -07:00
Mathias Vorreiter Pedersen
6e385cabd8
C++: Add change note.
2023-10-31 19:16:36 +00:00