github-actions[bot]
b0da1ef892
Add changed framework coverage reports
2023-08-17 00:14:13 +00:00
Jeroen Ketema
33e8310625
Merge branch 'main' into shared-taint-tracking
2023-08-17 00:14:25 +02:00
Robert Marsh
d3cc366dc5
Swift: add QLDoc for DictionarySubscriptNode
2023-08-16 17:57:30 +00:00
Robert Marsh
3ee3eabd95
Swift: add EnumContent to clearsContent
2023-08-16 17:52:26 +00:00
Ian Lynagh
1fb4e13e0a
Merge pull request #13960 from igfoo/igfoo/parent
...
Kotlin: Handle Kotlin 2 parents better
2023-08-16 16:27:15 +01:00
Mathias Vorreiter Pedersen
e56cd0b498
Merge pull request #13984 from MathiasVP/fix-expected-for-swift
...
Swift: Fix expected files after a semantic merge conflict
2023-08-16 15:06:27 +01:00
Maiky
5f502ec6bb
rename change-note
2023-08-16 15:32:53 +02:00
yoff
7f2f6f14e7
Merge pull request #13729 from yoff/python/model-aws-lambdas
...
Python/JavaScript: Shared module for serverless functions
2023-08-16 15:14:08 +02:00
Rasmus Wriedt Larsen
0443057608
Merge branch 'main' into amammad-python-WebAppsConstatntSecretKeys
2023-08-16 15:06:08 +02:00
Mathias Vorreiter Pedersen
b2c7c57815
Swift: Fix expected files after a semantic merge conflict.
2023-08-16 13:52:06 +01:00
Mathias Vorreiter Pedersen
66d13dc0d5
Merge pull request #13981 from MathiasVP/fix-orig-delta-for-subtraction
...
C++: Fix original delta calculation for subtraction in new range analysis
2023-08-16 13:28:21 +01:00
Tom Hvitved
570654d1f0
Data flow: Earlier call-context based dispatch filtering
2023-08-16 14:24:45 +02:00
Mathias Vorreiter Pedersen
20df63f26d
C++: Respond to review comments.
2023-08-16 12:50:41 +01:00
Geoffrey White
4b66bada3d
Swift: Model array initializers.
2023-08-16 12:13:46 +01:00
Jeroen Ketema
591565a0db
Merge pull request #13971 from jketema/float
...
C++: Update test after float128 related extractor changes
2023-08-16 13:11:35 +02:00
Mathias Vorreiter Pedersen
5e14b5cca7
C++: 'origDelta' should always be 'odLeft' when deriving subtraction ranges.
2023-08-16 12:10:31 +01:00
yoff
b2988e5516
Update python/ql/lib/change-notes/2023-08-07-serverless-sources.md
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-08-16 12:56:39 +02:00
Geoffrey White
9a4410d4b7
Swift: Additional test cases for array conversions.
2023-08-16 11:53:05 +01:00
Mathias Vorreiter Pedersen
986aa74db7
Merge pull request #13972 from MathiasVP/range-analysis-for-sub-expr
...
C++: Support subtraction in the new range analysis
2023-08-16 11:51:11 +01:00
Michael B. Gale
1bd536dd9e
Rename getLocation to hasLocation
2023-08-16 11:21:35 +01:00
Geoffrey White
c123c3a8d8
Swift: Codegen.
2023-08-16 11:09:39 +01:00
Rasmus Wriedt Larsen
c55b0982f7
Merge pull request #13819 from yoff/python/relax-module-resolution
...
Python: Relax module resolution
2023-08-16 12:04:49 +02:00
Geoffrey White
c9e26678d0
Swift: Change notes.
2023-08-16 10:58:04 +01:00
Geoffrey White
da6c2b6c31
Swift: Add more swift/cleartext-logging sinks.
2023-08-16 10:41:02 +01:00
Michael Nebel
365b10183f
Merge pull request #13744 from tamasvajk/standalone/integration-test
...
C#: Add integration test for standalone extraction
2023-08-16 10:50:12 +02:00
Geoffrey White
6a54a8bc62
Swift: QLDoc VariadicSequenceType.
2023-08-16 08:43:51 +01:00
Geoffrey White
8f2e2a6155
Swift: Fix array content sinks for swift/cleartext-logging.
2023-08-16 08:43:50 +01:00
Geoffrey White
269f0c6cb1
Swift: Flow through varargs.
2023-08-16 08:43:28 +01:00
Geoffrey White
3fe8655b6e
Swift: Test data flow through varargs.
2023-08-16 08:34:32 +01:00
Stephan Brandauer
44a9cf93e0
Merge branch 'main' into kaeluka/add-provenance-to-metadata
2023-08-16 09:31:03 +02:00
Stephan Brandauer
808dc3e8d3
Java: Automodel framework mode: track exact ai- provenance in alreadyAiModeled meta data property
2023-08-16 09:25:03 +02:00
Stephan Brandauer
20254c3d0a
Merge pull request #13886 from github/kaeluka/java-automodel-variadic-args
...
Java: automodel application mode: use endpoint class like in framework mode
2023-08-16 08:49:01 +02:00
Ed Minnix
cafd08521e
Add change note
2023-08-15 23:46:12 -04:00
Ed Minnix
7cfe78a52d
Add dashes to SHA algorithm names in Encryption.qll
2023-08-15 23:42:17 -04:00
Geoffrey White
b4595d8b92
Swift: Model getVaList, correct NSLogv sink for swift/cleartext-logging.
2023-08-15 22:05:58 +01:00
Jeroen Ketema
4ada83c0ba
C++: Update test after float128 related extractor changes
2023-08-15 22:10:05 +02:00
Rasmus Lerchedahl Petersen
6614e037ae
Python: format
2023-08-15 21:40:20 +02:00
Robert Marsh
79368c187c
Swift: fixes around DictionaryContent
2023-08-15 19:34:27 +00:00
Michael B. Gale
c981fd714e
Exclude String from TaintSteps
...
For `os.dirEntry` and `os.unixDirent` which are only available
on unix and Windows respectively.
2023-08-15 20:32:41 +01:00
Michael B. Gale
ee58dbc6f7
Add new built-ins to builtinFunction predicate
...
- `clear` isn't pure because it modifies a data structure in place
- `clear` may not be used correctly, but this is determined statically
2023-08-15 20:16:42 +01:00
Robert Marsh
a9f5471e76
Swift: add tests for broken dictionary flow case
2023-08-15 17:58:21 +00:00
Chris Smowton
b8372c2f95
Merge pull request #13973 from github/smowton/fix/go-version-comparison
...
Go: Don't warn when Go version exactly matches go.mod
2023-08-15 18:21:04 +01:00
Mathias Vorreiter Pedersen
49a5a39395
C++: Accept test changes.
2023-08-15 16:49:58 +01:00
Chris Smowton
3bcfbcdf68
Don't warn when Go version exactly matches go.mod
...
We had only previously tested this with e.g. installed go 1.20.5 >= go.mod request `go 1.20`; now we have go 1.21.0 which shouldn't elicit a warning because 1.21.0 is equal to the go.mod request `go 1.21`.
2023-08-15 16:49:42 +01:00
Paolo Tranquilli
234763efa6
Merge pull request #13959 from github/redsun82/cmake-fix
...
C++: make cmake generation work with internal rule `cc_binary_add_features`
2023-08-15 17:16:51 +02:00
Robert Marsh
3d20897725
Merge pull request #13910 from rdmarsh2/rdmarsh2/swift/for-await-cfg
...
Swift: CFG test for for-try-await
2023-08-15 11:16:07 -04:00
Mathias Vorreiter Pedersen
e145b81f58
C++: Accept test changes.
2023-08-15 16:12:44 +01:00
Mathias Vorreiter Pedersen
109e45e112
C++: Add precise range analysis for subtraction.
2023-08-15 16:12:40 +01:00
Mathias Vorreiter Pedersen
3fb024164b
C++: Add a FP caused by bad range analysis for subtraction.
2023-08-15 16:00:35 +01:00
Mathias Vorreiter Pedersen
90888e592f
Merge pull request #13965 from MathiasVP/better-certain-writes-and-invalid-ptr-deref-prep
...
C++: Remove more dataflow FPs after frontend upgrade
2023-08-15 15:43:55 +01:00