Asger F
1ae41484da
Ruby: Use new features in ActionMailbox model
2023-06-19 12:05:15 +02:00
Asger F
f8ae5301a4
Ruby: update Twirp
...
This used right-to-left evaluation for API graphs, which is not supported anymore
2023-06-19 12:04:53 +02:00
Asger F
b305c13b65
Ruby: update SQLite3 model
2023-06-19 12:04:12 +02:00
Asger F
2ef010f1c0
Ruby: update GraphQL model
2023-06-19 12:04:00 +02:00
Asger F
61cda97163
Ruby: rename some call sites
2023-06-19 12:03:25 +02:00
Asger F
5b05e72d27
Ruby: switch to local dataflow when dealing with Kernel/IO
2023-06-19 12:02:39 +02:00
Asger F
0110610c6a
Ruby: overhaul API graphs
2023-06-19 12:01:42 +02:00
Rasmus Lerchedahl Petersen
eb3c33dfe2
python: remove erronous getACall()
...
`base` is already the `CallNode` we want.
2023-06-19 11:41:06 +02:00
Ian Lynagh
ca5bc6f224
Java: Add up/downgrade scripts
2023-06-19 10:36:29 +01:00
Ian Lynagh
1f538cced3
Kotlin: Handle IrSyntheticBodyKind.ENUM_ENTRIES
...
Generated by Kotlin 1.9 for some of our tests.
2023-06-19 10:36:29 +01:00
Arthur Baars
ea97c3ea83
Merge pull request #13423 from aibaars/update-grammar-3
...
Ruby: update grammar
2023-06-19 10:54:12 +02:00
Jeroen Ketema
bc42308bd3
Java: fix formatting
2023-06-19 10:31:49 +02:00
Jeroen Ketema
b420455e2b
C#: Update InlineFlowTests to use the merged path graph
2023-06-19 10:28:54 +02:00
Jeroen Ketema
6a84e6cbfd
Add the merged PathGraph to all copies of the InlineFlowTest library
2023-06-19 10:28:10 +02:00
Tony Torralba
8f6d2ed2f9
Adjust ZipSlip query description according to review suggestions.
2023-06-19 10:27:41 +02:00
Erik Krogh Kristensen
c289f66692
Merge pull request #13469 from erik-krogh/redos-3.10
...
ReDoS: stop spuriously matching everything when encountering an unsupported charclass
2023-06-19 10:21:00 +02:00
Tony Torralba
3c4d938cf1
Apply code review suggestions.
...
Co-authored-by: Asger F <asgerf@github.com >
2023-06-19 10:20:19 +02:00
Tony Torralba
433fc680ec
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2023-06-19 10:17:40 +02:00
Tom Hvitved
2253761eb0
Merge pull request #13494 from maikypedia/maikypedia/typo
...
Ruby : Naming error
2023-06-19 09:50:45 +02:00
Michael Nebel
1338261f04
Merge pull request #13472 from michaelnebel/csharp/usestubs2
...
C#: Use stubs in the Security feature related tests.
2023-06-19 09:34:19 +02:00
Maiky
849e732c48
typos
2023-06-19 01:16:27 +02:00
Maiky
d654e98650
Add empty string as source
2023-06-18 22:21:12 +02:00
Rasmus Lerchedahl Petersen
229641070f
python: rename summaries
2023-06-18 22:01:47 +02:00
Rasmus Lerchedahl Petersen
6554e804dd
python: add test for model summaries
...
(but no summaries yet)
2023-06-18 21:52:49 +02:00
Rasmus Lerchedahl Petersen
3cf9e3e692
Py/js/ruby: sync files
2023-06-18 21:52:49 +02:00
Rasmus Lerchedahl Petersen
18f4b75f8b
python: enable summaries from model
...
This requires a change to the shared interface:
Making `getNodeFromPath` public.
This because Python is doing its own thing and identifying call-backs.
2023-06-18 21:52:49 +02:00
Mathias Vorreiter Pedersen
cc09715ba7
Merge pull request #13466 from jketema/pointer-deref-fp
2023-06-18 00:51:59 +01:00
Aditya Sharad
08ac56579c
Merge pull request #13485 from github/jketema/codeql-cli-2.13.4-disable-overrun
...
Exclude `cpp/overrun-write` from `cpp-security-extended.qls`
2023-06-16 11:05:09 -07:00
Jeroen Ketema
0bb67e45b3
C++: lower the precision of cpp/overrun-write to exclude it from our query suites
2023-06-16 19:07:56 +02:00
Jeroen Ketema
000add206c
Revert "Exclude cpp/overrun-write from cpp-security-extended.qls"
...
This reverts commit 3aaa649076
2023-06-16 19:05:04 +02:00
aegilops
8c73fbeabe
Formatted
2023-06-16 17:33:21 +01:00
aegilops
55eeb00309
Added experimental tag
2023-06-16 17:27:01 +01:00
Alexandre Boulgakov
abc6d62b6f
Swift: Use platform-specific Bazel config.
2023-06-16 17:24:04 +01:00
Alexandre Boulgakov
679df1e61b
Swift: Add "autobuilder" on Windows that simply shows an error.
2023-06-16 17:23:50 +01:00
Alexandre Boulgakov
2bb3101316
Swift: Rename incompatible OS diagnostic to clarify that it's for the autobuilder.
2023-06-16 17:22:43 +01:00
Alexandre Boulgakov
bc48968def
Swift: Build incompatible OS diagnostic on all platforms.
2023-06-16 17:22:43 +01:00
aegilops
b6c35dd88c
Added experimental version of Java Command Injection query, to be more sensitive to unusual code constructs
2023-06-16 17:12:53 +01:00
Ian Lynagh
04a7ff7f76
Merge pull request #13477 from igfoo/igfoo/diags_classes
...
Kotlin: Remove diags.ql from classes test
2023-06-16 17:07:38 +01:00
Ian Lynagh
096e9a4ba4
Kotlin: Avoid another cause of ConcurrentModificationException with 1.9
2023-06-16 17:06:54 +01:00
Philip Ginsbach
1ed3baea17
mention instantiation in the section on module resolution
2023-06-16 17:02:17 +01:00
Philip Ginsbach
45426b9289
mention parameters and instantiation-nested types
2023-06-16 17:02:17 +01:00
Philip Ginsbach
aedd9f5f6b
add QL specification section on module instantiations
2023-06-16 17:02:15 +01:00
Jeroen Ketema
9ff5754473
C++: Add cpp/invalid-pointer-def FP test case
2023-06-16 16:48:24 +02:00
Jeroen Ketema
0e68767efc
C++: Add more cpp/invalid-pointer-deref FPs
2023-06-16 15:28:05 +02:00
Rasmus Wriedt Larsen
fb6955edf9
Python: Add tests of methods in summaries
2023-06-16 14:43:45 +02:00
Rasmus Wriedt Larsen
afafaac0d7
Python: Fix typo
2023-06-16 14:41:36 +02:00
Jean Helie
baf6b74945
use new sink mad kinds and simplify isKnownKind predicate
2023-06-16 13:58:23 +02:00
Jean Helie
daf2743143
only use neutral models of kind "sink"
2023-06-16 13:58:23 +02:00
Ian Lynagh
a8acf16088
Kotlin: Remove diags.ql from classes test
...
The diags consistency test already handles this for us.
2023-06-16 12:57:19 +01:00
AlexDenisov
b572974536
Merge pull request #13476 from github/alexdenisov/rc3.10_mergeback
...
rc3.10 mergeback: getting Swift changes back to main
2023-06-16 11:59:23 +02:00
