Robert Marsh
2afda5f3f1
Merge pull request #13305 from MathiasVP/fix-join-of-pointerArithOverflow0
...
C++: Fix join in `pointerArithOverflow0`
2023-05-30 10:24:35 -04:00
Taus
00e4c455b5
Update MaD Declarations after Triage
2023-05-30 16:11:30 +02:00
Asger F
d7f747e684
Merge pull request #13195 from asgerf/js/no-globals-in-example
...
JS: Avoid using global vars in documentation examples
2023-05-30 15:44:38 +02:00
Tamás Vajk
19f1d2b116
Merge pull request #13290 from tamasvajk/feature/source-generators
...
C#: Extract source files generated by source generators
2023-05-30 15:40:46 +02:00
Geoffrey White
560aa43953
Swift: Repair for AccountID / AccountKey.
2023-05-30 14:20:17 +01:00
Rasmus Lerchedahl Petersen
820b5f235e
python: add change note
2023-05-30 13:36:10 +02:00
Rasmus Lerchedahl Petersen
2daa9577bb
ruby/python: implement shared module
...
ruby:
- create new shared file `SummaryTypeTracker.qll`
- move much logic into the module
- instantiate the module
- remove old logic, now provided by module
python:
- clone shared file
- instantiate module
- use (some of the) steps provided by the module
2023-05-30 13:31:24 +02:00
Taus
73aa790cdd
Java: Improve sampling strategy
...
Instead of the "random" sampling used before (which could -- in rare circumstances -- end up sampling fewer points than we want) we now sample an equally distributed set of points.
2023-05-30 11:22:26 +00:00
Rasmus Lerchedahl Petersen
47b2d48da2
python: add tests
...
- add `getACallSimple` to `SummarizedCallable`
(by adding it to `LibraryCallable`)
2023-05-30 13:16:04 +02:00
Tamas Vajk
138bfad3d0
Add change note
2023-05-30 12:00:31 +02:00
Jeroen Ketema
16bc584bd1
Merge pull request #13294 from MathiasVP/better-test-for-range-analysis
...
C++: Change range-analysis test to not use `getAst`
2023-05-30 10:49:58 +02:00
Geoffrey White
d506172027
Swift: Change note.
2023-05-30 09:41:11 +01:00
Paolo Tranquilli
2183d380db
Swift: implement review suggestions
2023-05-30 10:30:44 +02:00
Stephan Brandauer
d4b964c849
add support for sanitizers
2023-05-30 10:25:52 +02:00
Tony Torralba
db4e82e2f3
Merge pull request #13301 from atorralba/atorralba/java/stub-generator-perf-fix
...
Java: Fix performance issue in the stub generator
2023-05-30 10:21:16 +02:00
Geoffrey White
4a8320fafd
Merge pull request #13287 from geoffw0/stringfp
...
Swift: Fix some string length conflation false positives
2023-05-30 08:57:48 +01:00
Michael Nebel
e764b46c88
Merge pull request #13306 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-05-30 09:23:09 +02:00
Erik Krogh Kristensen
073e31917a
Merge pull request #13315 from github/dependabot/cargo/ql/chrono-0.4.25
...
Bump chrono from 0.4.24 to 0.4.25 in /ql
2023-05-30 07:53:01 +02:00
dependabot[bot]
39a07d42a1
Bump chrono from 0.4.24 to 0.4.25 in /ql
...
Bumps [chrono](https://github.com/chronotope/chrono ) from 0.4.24 to 0.4.25.
- [Release notes](https://github.com/chronotope/chrono/releases )
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md )
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.24...v0.4.25 )
---
updated-dependencies:
- dependency-name: chrono
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-05-30 04:03:50 +00:00
github-actions[bot]
53aecb1949
Add changed framework coverage reports
2023-05-30 00:17:04 +00:00
Andrew Eisenberg
2d81e30d81
Fix addsTo.pack references
...
This change is a prerequisite for a CLI change where there will be
strict testing of the `addsTo.pack` values. It must resolve to a pack
reference that is a transitive dependency of the current query's pack.
2023-05-29 13:45:41 -07:00
Maiky
345f43fbae
fix concepts
2023-05-29 21:17:48 +02:00
Maiky
62353122c0
Add Improper LDAP Authentication query (CWE-287)
2023-05-29 21:16:13 +02:00
Maiky
03b7c5e5e8
naming error
2023-05-29 16:34:40 +02:00
Maiky
a8f887e3f9
naming error
2023-05-29 16:33:58 +02:00
Tony Torralba
6386ef3b96
Further perf improvements
2023-05-29 09:58:52 +02:00
Harry Maclean
e70e3e52dc
Ruby: fix typo in qhelp
2023-05-29 04:05:42 +00:00
Harry Maclean
ca1024e285
Ruby: Reword unsafe deserialization qhelp
2023-05-29 03:46:30 +00:00
Maiky
2d8318dc02
remove unnecessary imports and edit .qhelp
2023-05-28 17:40:31 +02:00
Maiky
065b69460d
remove space
2023-05-28 17:34:16 +02:00
Maiky
5e33f14ff1
Undo Concepts changes
2023-05-28 17:33:05 +02:00
Maiky
d45d046fa7
Add test file and .expected
2023-05-28 17:29:34 +02:00
Maiky
d8bc818d5a
add Change note
2023-05-28 16:50:36 +02:00
Harry Maclean
e515981c81
Ruby: Remove unused examples
2023-05-27 12:01:00 +00:00
Harry Maclean
562065f29e
Ruby: Add change note
2023-05-27 01:20:09 +00:00
Harry Maclean
b8c3cba4ff
Ruby: Consolidate unsafe deserialization queries
...
Merge the experimental YAMLUnsafeDeserialization and
PlistUnsafeDeserialization queries into the generate
UnsafeDeserialization query in the default suite.
These queries look for some specific sinks that we now find in the
general query.
Also apply some small code and comment refactors.
2023-05-27 01:20:04 +00:00
amammad
d727d573d5
v4.2 write exact version of yaml.load default loader change
2023-05-27 01:15:29 +00:00
amammad
40e24b6b94
v4.1 fix file names in qhelp
2023-05-27 01:15:29 +00:00
amammad
335441ce04
v4: make variable names camelCase, some inhancement, remove some duplicates
2023-05-27 01:15:29 +00:00
amammad
e76ed9454a
v3 add global taint steps for to_ruby of YAML/Psych
2023-05-27 01:15:24 +00:00
amammad
ad7e107ff5
add the new YAML/PLIST sinks into the existing rb/unsafe-deserialization query
2023-05-27 01:14:36 +00:00
amammad
b9296d3df8
v2.1 fix file names
2023-05-27 01:14:36 +00:00
amammad
4360a56b45
v2 add plist.parse_xml as a dangerous sink and enhancements on documents
2023-05-27 01:14:36 +00:00
amammad
0521ffe175
v1.4 correct dirs uppercase issue
2023-05-27 01:14:36 +00:00
amammad
0e343e5a12
v1.3
2023-05-27 01:14:36 +00:00
amammad
d96153a05e
v1.2 change to PascalCase
2023-05-27 01:14:36 +00:00
amammad
e4b8a0e06d
v1.1
2023-05-27 01:14:36 +00:00
amammad
486a5ac96f
v1
2023-05-27 01:14:36 +00:00
Jami Cogswell
24fc4ba2d4
Java: add tests
2023-05-26 18:55:13 -04:00
Jami Cogswell
f255b6acb8
Java: fix typos
2023-05-26 18:55:13 -04:00
