Ed Minnix
86b57a11ac
Bump change note date
2023-12-15 11:09:07 -05:00
Ed Minnix
25fa8d5ae7
Move some logic to class
2023-12-15 11:09:07 -05:00
Ed Minnix
4ff6c1e2ea
Test case
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-12-15 11:09:07 -05:00
Ed Minnix
93cf5b8eb9
Weak Hashing Property initial query
2023-12-15 11:09:07 -05:00
Tamas Vajk
e62d542e8f
C#: Add telemetry query to report extractor information
2023-12-15 16:25:38 +01:00
Geoffrey White
f6a4970012
Swift: Autoformat.
2023-12-15 14:58:11 +00:00
Mathias Vorreiter Pedersen
82b9f1b31c
C++: Accept test changes.
2023-12-15 14:57:31 +00:00
Mathias Vorreiter Pedersen
0543ed115e
C++: Add barrier for array lookups in 'cpp/double-free' and 'cpp/use-after-free'.
2023-12-15 14:57:17 +00:00
Michael Nebel
38ae848b94
C#: Update generated stubs.
2023-12-15 15:50:08 +01:00
Geoffrey White
0b04e4abe5
Swift: Address QL-for-QL alerts.
2023-12-15 14:48:30 +00:00
Michael Nebel
e69f0e3461
C#: Don't generate stubs for the record Clone method.
2023-12-15 15:41:59 +01:00
Mathias Vorreiter Pedersen
dc9c538fcc
Merge pull request #15120 from MathiasVP/fix-joins-in-av-rule-79
...
C++: Fix joins in `cpp/resource-not-released-in-destructor`
2023-12-15 14:06:53 +00:00
Rasmus Lerchedahl Petersen
1ee11ae7af
Merge branch 'main' of https://github.com/github/codeql into python/captured-variables-basic
2023-12-15 14:31:57 +01:00
Geoffrey White
034daa9b35
Swift: Address false positives.
2023-12-15 13:29:49 +00:00
Mathias Vorreiter Pedersen
1cbe01923d
C++: Fix joins in 'AV Rule 145'.
2023-12-15 13:08:13 +00:00
Rasmus Lerchedahl Petersen
8601105988
Python: Address TODO comment
2023-12-15 14:03:38 +01:00
Rasmus Lerchedahl Petersen
e1bf2821d9
Python: split variable capture instantiation out
...
into its own file.
2023-12-15 13:59:52 +01:00
Rasmus Lerchedahl Petersen
f668453d01
Python: move things around
2023-12-15 13:48:50 +01:00
Rasmus Lerchedahl Petersen
739b839628
Python: use updated names
2023-12-15 13:48:28 +01:00
Jeroen Ketema
3977689808
Merge pull request #15117 from jketema/buffer
...
C++: Only consider the maximum buffer size for badly bounded write
2023-12-15 13:46:09 +01:00
yoff
b07316f4ae
Update python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPrivate.qll
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-12-15 13:41:04 +01:00
Rasmus Lerchedahl Petersen
a311582285
Python: Bring back (now simplified) exclusion
2023-12-15 13:28:16 +01:00
Alex Eyers-Taylor
8e92fcc08f
CPP: Format Temporaries
2023-12-15 12:00:44 +00:00
yoff
4b89a412c6
Update python/ql/lib/semmle/python/dataflow/new/internal/DataFlowDispatch.qll
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2023-12-15 12:59:01 +01:00
Rasmus Lerchedahl Petersen
d3b237bf7e
Python: rename synthetic lambda nodes
2023-12-15 12:55:26 +01:00
Geoffrey White
326242a1fb
Swift: Change note.
2023-12-15 11:39:09 +00:00
Mathias Vorreiter Pedersen
2c5f65a241
C++: Drive-by cleanup: This case is redundant since a 'DestructorCall' is also a 'FunctionCall'.
2023-12-15 11:38:52 +00:00
Mathias Vorreiter Pedersen
ce326a0f79
C++: Fix joins.
2023-12-15 11:37:28 +00:00
Geoffrey White
b7a533f879
Swift: Update .qhelp for Swift.
2023-12-15 11:32:14 +00:00
Alexander Eyers-Taylor
c68d3c5983
Update cpp/ql/src/Security/CWE/CWE-416/Temporaries.qll
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-12-15 11:23:11 +00:00
Alex Denisov
dd13ea3d0a
Swift: separate installation of dependencies and autobuilding
...
`pod install` could generate Xcode projects files needed for
autobuilding, so it's better to install dependencies first, and then do
re-scan to pick up the new files.
2023-12-15 12:20:36 +01:00
Geoffrey White
0ff84b467f
Swift: Create examples for the .qhelp in Swift, and test them.
2023-12-15 11:14:05 +00:00
Michael Nebel
f6af593b0b
C#: Add a unit test for escaping method names.
2023-12-15 12:04:46 +01:00
Alex Eyers-Taylor
49e1467581
CPP: Fix handling of ternary operators in tempory queries and add tests.
2023-12-15 11:03:23 +00:00
Anders Schack-Mulligen
1ea1130271
Merge pull request #15062 from aschackmull/dataflow/deprecate-flowstatestring
...
Dataflow: Deprecate FlowStateString.
2023-12-15 11:59:04 +01:00
Michael Nebel
671692177e
C#: Escape method names.
2023-12-15 11:34:06 +01:00
Jeroen Ketema
0b1b1be356
C++: Add change note
2023-12-15 11:13:52 +01:00
Erik Krogh Kristensen
16e53d3972
Merge pull request #15115 from erik-krogh/no-types-integration-test
...
JS: add integration test for the new extractor option to disable type extraction
2023-12-15 11:13:14 +01:00
Rasmus Lerchedahl Petersen
5b6ea15028
Python: remove unneeded consistency exclusion
2023-12-15 11:09:37 +01:00
Michael Nebel
d59b5a9647
Merge pull request #15100 from michaelnebel/csharp/stubsrefresh
...
C#: .NET8 Stubs update.
2023-12-15 10:46:43 +01:00
Jeroen Ketema
2065ecff66
C++: Only consider the maximum buffer size for badly bounded write
2023-12-15 10:46:13 +01:00
Rasmus Lerchedahl Petersen
bfdcae4538
Python : P -> PY
2023-12-15 10:43:02 +01:00
erik-krogh
a694928dd3
use the extractor option directly instead
2023-12-15 10:39:36 +01:00
erik-krogh
9c520778c7
Merge remote-tracking branch 'upstream/main' into no-types-integration-test
2023-12-15 10:38:05 +01:00
Rasmus Lerchedahl Petersen
262d43abcf
Python: Make compile and add comment
2023-12-15 10:28:51 +01:00
Rasmus Lerchedahl Petersen
2051ba3395
Python: hide synthesized capture nodes
2023-12-15 10:26:56 +01:00
Rasmus Lerchedahl Petersen
f96c52ed3b
Python: make compile again
...
also improve comment
2023-12-15 10:25:49 +01:00
Jeroen Ketema
b29c886d9b
Merge pull request #15107 from MathiasVP/better-tostring
...
C++: Produce a better `toString` for dataflow nodes with indirections
2023-12-15 10:19:53 +01:00
Michael Nebel
305e015948
C#: Update flowsummaries expected tests.
2023-12-15 10:02:02 +01:00
Michael Nebel
3ead21fb13
C#: Update options files.
2023-12-15 10:02:02 +01:00
