Harry Maclean
ef63ea8399
Ruby: Update fixture
2023-09-14 08:54:48 +01:00
Harry Maclean
7ebd51163e
Ruby: Handle more splat arg flow
...
Allow flow from a splat argument to a positional parameter in cases
where there are positional arguments left of the splat. For example:
def foo(x, y, z); end
foo(1, *[2, 3])
2023-09-14 08:54:48 +01:00
Tom Hvitved
e258324960
Ruby: Allow for implicit array reads at all sinks during taint tracking
2023-09-14 09:40:05 +02:00
Chuan-kai Lin
d8fb875bbb
Merge pull request #14214 from github/cklin/pick-js-fix-2.14.5
...
Cherry pick "fix out of bounds string access in isUsingDecl" into 2.14.5
2023-09-13 14:21:47 -07:00
erik-krogh
cc3a76f7f5
fix out of bounds string access in isUsingDecl
2023-09-13 14:16:02 -07:00
Erik Krogh Kristensen
111227e763
Merge pull request #14211 from erik-krogh/usingOutOfBounds
...
JS: fix out of bounds string access in isUsingDecl
2023-09-13 22:23:15 +02:00
Erik Krogh Kristensen
b019fb3e91
Merge pull request #14212 from erik-krogh/usingOutOfBounds-hotfix
...
JS: fix out of bounds string access in isUsingDecl
2023-09-13 22:23:13 +02:00
Robert Marsh
e0fae764f1
Swift: move IteratorProtocol model to its own file
2023-09-13 20:09:17 +00:00
erik-krogh
c6b8c444d0
fix out of bounds string access in isUsingDecl
2023-09-13 21:53:49 +02:00
Robert Marsh
20de4c625c
Swift: autoformat DataFlowPrivate
2023-09-13 18:57:27 +00:00
Robert Marsh
86bd2168ec
Swift: breaking change note for array content removal
2023-09-13 18:34:30 +00:00
Robert Marsh
0b66be5f07
Swift: restore ArrayElement as an alias for CollectionElement
2023-09-13 18:29:03 +00:00
Robert Marsh
43ca192ceb
Swift: remove ArrayContent in UnsafeJsEvalQuery
2023-09-13 18:26:06 +00:00
erik-krogh
fdd349c1a3
fix out of bounds string access in isUsingDecl
2023-09-13 20:11:21 +02:00
Geoffrey White
6aa8daeeb6
Swift: Fix inline expectations.
2023-09-13 19:06:54 +01:00
Geoffrey White
535a69cd8b
Merge branch 'main' into logfix
2023-09-13 19:01:52 +01:00
Geoffrey White
e109892388
Merge pull request #14189 from geoffw0/protocol2
...
Swift: Consistent additional taint steps between the cleartext-* queries
2023-09-13 18:44:20 +01:00
Geoffrey White
d01a3e26d6
Swift: Change note.
2023-09-13 18:20:49 +01:00
Geoffrey White
200d9a4dfb
Swift: Port regex mode flag character fix from Python.
2023-09-13 18:19:02 +01:00
Geoffrey White
df60f560a2
Swift: Add demonstrative test case.
2023-09-13 18:11:40 +01:00
Geoffrey White
af3d8c88bb
Java: Fix test comment.
2023-09-13 17:58:31 +01:00
Geoffrey White
1c81bd52e6
Java: Change note.
2023-09-13 17:51:26 +01:00
Geoffrey White
8c3e778be6
Java: Port regex mode flag character fix from Python.
2023-09-13 17:50:52 +01:00
Chuan-kai Lin
00c83f185a
Merge pull request #14182 from cklin/deprecate-assume-small-delta
...
Document assume_small_delta deprecation
2023-09-13 07:54:33 -07:00
Mathias Vorreiter Pedersen
18fa6f5d64
Merge pull request #14202 from alexet/translated-element-location
...
CPP: Add a location to TranslatedElement to help with debugging IR creation
2023-09-13 15:19:24 +01:00
Michael Nebel
84ec823ac0
C#: Add some explanatory comments about parallel restore.
2023-09-13 16:07:47 +02:00
Anders Schack-Mulligen
74787bfba8
Dataflow: One more minor perf tweak.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
b63d518114
Dataflow: Minor perf tweak.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
b456ba217a
Dataflow: Improve rev-to-fwd call edge pruning.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
f456bf8d57
Dataflow: Add change note.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
13e7e6b983
Dataflow: Improve fwd-taken call edge predicate and improve fwd-to-rev call edge pruning.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
47f68504a8
Dataflow: Postpone typeflow calledge pruning until stage 3.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
f5a4b792bd
C++/Go/Python/Ruby/Swift: Add dummy localMustFlowStep.
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
1750d00fbe
C#: Add localMustFlowStep
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
e677c1ffe6
Java: Add qltest
2023-09-13 15:43:46 +02:00
Anders Schack-Mulligen
c8094d34a7
Dataflow: Add type-based call-edge pruning.
2023-09-13 15:43:45 +02:00
Anders Schack-Mulligen
300425540a
Java: Minor improvement to TypeFlow for super accesses.
2023-09-13 15:43:45 +02:00
Anders Schack-Mulligen
a7b677ba40
Java: Bugfix for SuperAccess.isOwnInstanceAccess().
2023-09-13 15:43:45 +02:00
Anders Schack-Mulligen
110a4c81e3
Java: Minor perf fix.
2023-09-13 15:43:45 +02:00
Dave Bartolomeo
edf6a80c3b
Merge pull request #14185 from michaelnebel/csharp/quotinghotfixrc
...
C#: Quoting hotfix.
2023-09-13 09:34:05 -04:00
Alex Ford
79c305c1a1
Merge pull request #14124 from alexrford/rb/dataflow-query-refactor
...
Ruby: Use the new dataflow API for checked in queries
2023-09-13 14:24:47 +01:00
Koen Vlaswinkel
0434cce4c3
Java: Fix formatting of AutomodelVsCode.qll file
2023-09-13 14:54:03 +02:00
Tom Hvitved
bb7ba7872f
Merge pull request #14203 from hvitved/ruby/semantic-merge-fix
...
Ruby: Fix semantic merge conflict
2023-09-13 14:53:18 +02:00
Koen Vlaswinkel
95296f1518
Java: Use don't care expression for kind and provenance
2023-09-13 14:45:47 +02:00
Tom Hvitved
f15cbb9316
Ruby: Simplify viableSourceCallableNonInit
2023-09-13 14:25:28 +02:00
Max Schaefer
e722e3288f
Merge pull request #13771 from github/max-schaefer/server-side-url-redirect-help
...
JavaScript: Improve query help for `js/server-side-unvalidated-url-redirection`.
2023-09-13 13:20:48 +01:00
yoff
62b41799d2
Merge pull request #14178 from yoff/python/broaden-sql-injection-frameworks
...
Python: import all frameworks in SQL-injection query
2023-09-13 14:14:09 +02:00
Mathias Vorreiter Pedersen
177fcacf38
Merge pull request #14134 from MathiasVP/add-surprising-lifetimes-to-experimental
...
C++: Copy the Coding Standards' use-after-lifetime-ended query to Experimental
2023-09-13 13:06:18 +01:00
Tom Hvitved
f3a78efe03
Ruby: Fix semantic merge conflict
2023-09-13 14:04:20 +02:00
yoff
7d931492d8
Update python/ql/lib/semmle/python/security/dataflow/SqlInjectionCustomizations.qll
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-09-13 13:37:18 +02:00
