Alex Denisov
743fd902a1
Swift: fix CFG for identity expressions (await, dot_self, parent)
2023-09-12 16:04:45 +02:00
Stephan Brandauer
928898e979
Java: automodel: add class and method doc to test code
2023-09-12 15:43:09 +02:00
Geoffrey White
d65f2b4fa9
Swift: Change note.
2023-09-12 14:36:37 +01:00
Mathias Vorreiter Pedersen
d6e143a858
Merge pull request #14151 from MathiasVP/deduplicate-dataflow-results-take-3
...
C++: Deduplicate dataflow query results
2023-09-12 14:07:40 +01:00
Stephan Brandauer
089b147d04
Java: Automodel format
2023-09-12 14:27:12 +02:00
Stephan Brandauer
bd10ac799a
Java: Automodel application mode: add test expectations
2023-09-12 14:20:28 +02:00
Stephan Brandauer
8121c7fefa
Java: Automodel application mode: add method doc and class doc as related locations
2023-09-12 14:08:55 +02:00
Tom Hvitved
49d57653dc
Merge pull request #14170 from hvitved/csharp/cil-arg-exclude
...
C#: Exclude CIL arguments from `ArgumentNode` when they are compiled from source
2023-09-12 13:44:29 +02:00
Ian Lynagh
2f57a62a7a
Merge pull request #14144 from igfoo/igfoo/nonir
...
Kotlin: Give some more informative errors messages
2023-09-12 12:07:09 +01:00
Ian Lynagh
d8a99e6b7d
Kotlin: Regenerate expected test output
...
It's now in the order generated by the new CLI. This means that
changes in test output are easier to understand.
2023-09-12 11:13:58 +01:00
Mathias Vorreiter Pedersen
d528c96563
Merge branch 'main' into deduplicate-dataflow-results-take-3
2023-09-12 10:28:57 +01:00
Mathias Vorreiter Pedersen
ff28f45058
C++: Accept test changes.
2023-09-12 10:28:46 +01:00
Mathias Vorreiter Pedersen
7d2c12e63d
C++: Handle the extent of 'new[]' in 'getConvertedResultExpressionImpl0' and add a few more comments.
2023-09-12 10:28:36 +01:00
Michael Nebel
7bcaa49f5a
C#: Add integration test with quoted arguments.
2023-09-12 10:33:39 +02:00
Michael Nebel
6fe9b70c92
C#: Poor mans quoting of arguments on windows.
2023-09-12 10:33:21 +02:00
Stephan Brandauer
0115ba0df3
Java: Automodel: drive-by, add extensibleType metadata to app mode +/- extraction
2023-09-12 09:29:54 +02:00
intrigus-lgtm
b6417ca212
Java: Fix alert message
...
The signing key that is being set, is _not_ what is being parsed.
A _JWT_ is being parsed, that will then be verified using the set key.
(Or in our case not, because we're looking for security problems :P)
2023-09-12 02:23:37 +02:00
Geoffrey White
ae0fcf791b
Swift: Expand the additional taint step from the cleartext storage database query to the other sensitive data queries.
2023-09-11 22:25:17 +01:00
Geoffrey White
aa5820c061
Swift: Add some test cases.
2023-09-11 19:33:37 +01:00
Chuan-kai Lin
43eee2b4b3
Document assume_small_delta deprecation
2023-09-11 10:37:15 -07:00
Chris Smowton
b291ee361a
Merge pull request #14179 from github/smowton/fix/go-baseline-quoting
...
Fix space handling in Golang configure-baseline scripts
2023-09-11 15:54:24 +01:00
Rasmus Lerchedahl Petersen
a063d7d510
Python: sinks -> decodings
...
Query operators that interpret JavaScript
are no longer considered sinks.
Instead they are considered decodings
and the output is the tainted dictionary.
The state changes to `DictInput` to reflect
that the user now controls a dangerous dictionary.
This fixes the spurious result and moves the error reporting
to a more logical place.
2023-09-11 16:33:20 +02:00
Geoffrey White
e038f60640
Swift: Convert some sinks to CSV.
2023-09-11 14:54:32 +01:00
Rasmus Lerchedahl Petersen
d9f63e1ed3
Python: Split modelling of query operators
...
`$where` and `$function` behave quite differently.
2023-09-11 15:54:00 +02:00
Geoffrey White
7d05446483
Swift: Formatting.
2023-09-11 14:11:11 +01:00
Rasmus Lerchedahl Petersen
154a36934d
Python: Add test for function
2023-09-11 14:49:03 +02:00
Geoffrey White
1cde183005
Merge branch 'main' into logfix
2023-09-11 13:14:58 +01:00
Geoffrey White
c18de7d9af
Merge pull request #14036 from geoffw0/quicktest
...
Swift: Additional dataflow test
2023-09-11 13:04:48 +01:00
Geoffrey White
3fd5de83cb
Merge branch 'main' into sqlpathinject
2023-09-11 12:42:49 +01:00
Michael Nebel
6bfaa90fe4
C#: Avoid explicitly restoring the projects in the restored solution files.
2023-09-11 13:30:28 +02:00
Geoffrey White
fc69be4df9
Merge branch 'main' into quicktest
2023-09-11 12:25:38 +01:00
Michael Nebel
aaaf6f8616
Merge pull request #14150 from michaelnebel/csharp/tracerwhitespace
...
C#: Explicitly quote arguments in the LUA tracer on windows.
2023-09-11 13:18:21 +02:00
Chris Smowton
d13f4210eb
Fix space handling in Golang configure-baseline scripts
2023-09-11 10:51:35 +01:00
Michael Nebel
d4a1c297aa
C#: Quote arguments containing whitespaces on windows in the tracer.
2023-09-11 11:18:27 +02:00
Michael Nebel
8475464fbe
C#: Cleanup hotfix version of quoting.
2023-09-11 11:18:27 +02:00
Rasmus Lerchedahl Petersen
93140cb061
Python: import all frameworks
...
Are there any frameworks we do _not_ want here?
2023-09-11 11:17:08 +02:00
Mathias Vorreiter Pedersen
becb469477
Merge branch 'main' into deduplicate-dataflow-results-take-3
2023-09-11 09:55:11 +01:00
Michael Nebel
1b90216c98
Merge pull request #14172 from michaelnebel/csharp/poormansquoting
...
C#: Poor mans quoting.
2023-09-11 08:57:44 +02:00
Mathias Vorreiter Pedersen
7ff4ebd912
Merge pull request #14102 from alexet/alexet/remove-unreachable-ir
...
CPP: Remove sucessors of non-returning IR calls transitively.
2023-09-09 14:48:26 +01:00
github-actions[bot]
d699880c86
Post-release preparation for codeql-cli-2.14.4
2023-09-08 21:17:52 +00:00
Robert Marsh
988a871999
Swift: add flow through for-in loops
2023-09-08 20:00:27 +00:00
Chuan-kai Lin
1a575ef297
Merge pull request #14167 from asgerf/ts/tolerate-out-of-order-requests
...
JS: tolerate out of order requests in TypeScript extractor
2023-09-08 12:33:44 -07:00
Robert Marsh
a3e250aef5
Swift: extract iterator variable for for-in loops
2023-09-08 19:08:57 +00:00
Robert Marsh
e1ffc8d886
Merge pull request #14171 from MathiasVP/fix-dataflow-out-of-post-update-nodes
...
C++: Fix dataflow out of post update nodes
2023-09-08 14:56:41 -04:00
Alex Eyers-Taylor
5892939488
CPP:Fix chnage note spelling
2023-09-08 17:47:04 +01:00
Mathias Vorreiter Pedersen
9f89c63771
C++: Accept test changes.
2023-09-08 17:07:26 +01:00
Mathias Vorreiter Pedersen
0be61be07a
C++: Handle flow out of post-update nodes when there's another use of the variable in the call that we need to skip.
2023-09-08 17:07:26 +01:00
Alex Eyers-Taylor
5fe44b65b7
CPP: Avoid CP with edgekind in non-returning analysis
2023-09-08 16:55:06 +01:00
Robert Marsh
50d23f145b
merge main into for-in getnextcall branch
2023-09-08 15:51:27 +00:00
Robert Marsh
161e5a4ca2
Merge branch 'main' into rdmarsh2/swift/keypath-write-flow
2023-09-08 15:39:06 +00:00
