Tom Hvitved
|
adc4455f09
|
Parameterize FlowSummaryImpl.qll
|
2023-12-10 11:11:05 +01:00 |
|
Tom Hvitved
|
41fa39eb7c
|
Parameterize AccessPathSyntax.qll
|
2023-12-10 11:11:05 +01:00 |
|
Tom Hvitved
|
fd7e3454d6
|
Copy FlowSummaryImpl.qll to dataflow pack
|
2023-12-10 11:11:05 +01:00 |
|
Tom Hvitved
|
4fbd806d70
|
Copy AccessPathSyntax.qll to dataflow pack
|
2023-12-10 11:11:05 +01:00 |
|
Yunus AYDIN
|
0813199c7f
|
Update vendor directory and go files
|
2023-12-10 01:24:29 +03:00 |
|
Yunus AYDIN
|
a925c23d14
|
Add go.mod and modules.txt
|
2023-12-09 23:36:50 +03:00 |
|
Yunus AYDIN
|
6bd3c8c07b
|
Format Document
|
2023-12-09 23:36:13 +03:00 |
|
Yunus AYDIN
|
6378c5e22f
|
Update Fiber Rule for checking files
|
2023-12-09 23:35:42 +03:00 |
|
Yunus AYDIN
|
63123f3984
|
Add GoChi Rule
|
2023-12-09 23:34:48 +03:00 |
|
Yunus AYDIN
|
ba4f8612eb
|
Add GoChi Test Cases
|
2023-12-09 23:33:18 +03:00 |
|
Yunus AYDIN
|
ad1284853b
|
remove unnecessary file
|
2023-12-09 19:49:21 +03:00 |
|
Yunus AYDIN
|
eb25d0df66
|
Add test cases
|
2023-12-09 19:44:58 +03:00 |
|
Yunus AYDIN
|
85636ccab7
|
Add Web Cache Deception QHelp and Example Code Snippet for Vulnerable Go Fiber usage
|
2023-12-09 19:12:20 +03:00 |
|
Tom Hvitved
|
7819dcf0a7
|
Merge pull request #15043 from hvitved/ql/redundant-import
QL4QL: Improvements to `RedundantImport` query
|
2023-12-09 12:15:09 +01:00 |
|
Owen Mansel-Chan
|
2e2a82c237
|
Add change note
|
2023-12-08 23:33:58 +00:00 |
|
Owen Mansel-Chan
|
ab68c4e341
|
Update test
|
2023-12-08 23:29:44 +00:00 |
|
Owen Mansel-Chan
|
40b3598fd0
|
Also follow jump steps when looking for a callee source
This is needed because capturing a variable is a jump step
and we want to find a callee source for captured functions.
|
2023-12-08 18:44:14 +00:00 |
|
Geoffrey White
|
0133c659d5
|
Swift: Change note.
|
2023-12-08 16:53:38 +00:00 |
|
Geoffrey White
|
c2123f2c9b
|
Swift: More detailed models for pointers.
|
2023-12-08 16:51:53 +00:00 |
|
Rasmus Lerchedahl Petersen
|
d9c0c8c26d
|
Python: Update comment.
|
2023-12-08 17:32:23 +01:00 |
|
Rasmus Lerchedahl Petersen
|
2539e2ec1a
|
Python: slightly improve tarslip logic
|
2023-12-08 17:18:25 +01:00 |
|
erik-krogh
|
e8f9e366d5
|
remove redundant imports for JS
|
2023-12-08 16:56:54 +01:00 |
|
Ed Minnix
|
1526da5929
|
Deprecation change note
|
2023-12-08 10:50:04 -05:00 |
|
Ed Minnix
|
aebbc7d4ab
|
Add private imports to prevent compile warnings
|
2023-12-08 10:42:11 -05:00 |
|
Ed Minnix
|
1b8f3f3450
|
Deprecate or remove imports of dataflow library copies
|
2023-12-08 10:42:10 -05:00 |
|
Michael Nebel
|
fd12c3a3ba
|
C#: Update expected test output.
|
2023-12-08 16:10:38 +01:00 |
|
Harry Maclean
|
944fbeb34c
|
Ruby: Update comment
We don't actually generate type models for `extend` relationships yet,
because they are more complex than `include`.
|
2023-12-08 14:54:21 +00:00 |
|
Harry Maclean
|
ece196cb25
|
Ruby: Update model editor tests
|
2023-12-08 14:52:51 +00:00 |
|
Anders Schack-Mulligen
|
0618568cdc
|
Merge pull request #15045 from aschackmull/java/fix-cp
Java: Fix accidental cartesian product.
|
2023-12-08 15:43:01 +01:00 |
|
Anders Schack-Mulligen
|
1ea2f89e27
|
Merge pull request #15046 from aschackmull/dataflow/deprecation-changenote
Dataflow: Add change note about deprecation.
|
2023-12-08 15:42:34 +01:00 |
|
Mathias Vorreiter Pedersen
|
90b06c2046
|
C++: Switch the source of use-after-free and double-free to be post-update nodes.
|
2023-12-08 14:41:29 +00:00 |
|
Michael Nebel
|
9aeba5063f
|
C#: Use cast expressions for object defaults.
|
2023-12-08 15:37:12 +01:00 |
|
Harry Maclean
|
ec24b25c8b
|
Ruby: fix location in model editor query
|
2023-12-08 14:16:50 +00:00 |
|
Harry Maclean
|
e6df264865
|
Ruby: Report module declarations to model editor
This allows us to render type relations between modules/classes, not
just methods.
|
2023-12-08 14:16:49 +00:00 |
|
Harry Maclean
|
c1c258f567
|
Ruby: Include ancestors in type model generation
|
2023-12-08 14:16:49 +00:00 |
|
Mathias Vorreiter Pedersen
|
5bb2144c80
|
C++: Add field-flow through addresses of fields
|
2023-12-08 14:13:01 +00:00 |
|
Michael Nebel
|
6c30f6a748
|
C#: Add some test cases and update (incorrect) expected output.
|
2023-12-08 15:09:35 +01:00 |
|
Jeroen Ketema
|
db6b1e5f5e
|
Merge pull request #14912 from jketema/dep-userinput
C++: Deprecate `isUserInput`, `userInputArgument`, and `userInputReturned`
|
2023-12-08 15:04:23 +01:00 |
|
Ian Lynagh
|
eab32ea24b
|
Kotlin 2: Accept changes in query-tests/UnderscoreIdentifier
|
2023-12-08 13:49:25 +00:00 |
|
Alex Eyers-Taylor
|
da5c2d9bad
|
CPP: Use guard libraries to find equalities with zero.
|
2023-12-08 13:30:30 +00:00 |
|
Alexander Eyers-Taylor
|
df32e9556c
|
Update cpp/ql/src/change-notes/2023-12-04-incorrectly-checked-scanf.md
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2023-12-08 13:29:13 +00:00 |
|
Anders Schack-Mulligen
|
64eb4ff753
|
Merge pull request #14983 from aschackmull/dataflow/deprecate-old-api
Data Flow: Deprecate old data flow api.
|
2023-12-08 14:27:25 +01:00 |
|
Anders Schack-Mulligen
|
75d8da9007
|
Dataflow: Add change note about deprecation.
|
2023-12-08 14:25:20 +01:00 |
|
Jeroen Ketema
|
c6b0a2363a
|
C++: Add change note
|
2023-12-08 13:31:32 +01:00 |
|
Anders Schack-Mulligen
|
7ee3068fe7
|
Java: Fix accidental cartesian product.
|
2023-12-08 13:27:05 +01:00 |
|
Jeroen Ketema
|
5165999e9e
|
C++: Deprecate isUserInput, userInputArgument, and userInputReturned
|
2023-12-08 13:21:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
30c67ba6e7
|
Merge pull request #15040 from MathiasVP/fewer-dataflow-branches
C++: Fix dataflow inconsistencies
|
2023-12-08 12:14:49 +00:00 |
|
Harry Maclean
|
1dc0a063b0
|
Merge pull request #14679 from hmac/hmac-model-editor-ruby
Ruby: Experimental model editor support
|
2023-12-08 11:03:38 +00:00 |
|
Mathias Vorreiter Pedersen
|
90a62b27f5
|
Merge branch 'main' into fewer-dataflow-branches
|
2023-12-08 10:35:33 +00:00 |
|
Rasmus Wriedt Larsen
|
dc90411809
|
Python: Don't include docs/ folder
|
2023-12-08 11:27:53 +01:00 |
|