Mathias Vorreiter Pedersen
|
70e0b33ce6
|
Merge pull request #14807 from geoffw0/formatsinks
Swift: More sinks for swift/uncontrolled-format-string
|
2023-11-27 11:10:04 +00:00 |
|
Harry Maclean
|
6a38223127
|
Ruby: QL4QL fix
|
2023-11-27 10:17:31 +00:00 |
|
Michael Nebel
|
d1c4e772f0
|
C#: Pin integration tests to a specific .NET version.
|
2023-11-27 10:51:04 +01:00 |
|
Harry Maclean
|
e9277a56a9
|
Ruby: Add sinks from external models
|
2023-11-27 09:18:00 +00:00 |
|
Harry Maclean
|
ad608341ab
|
Ruby: Handle alternative gemspec names
Gemspecs are sometimes named via the first argument to
`Gem::Specification.new`:
```rb
Gem::Specification.new 'sinatra' do |s|
# ...
end
```
|
2023-11-27 09:18:00 +00:00 |
|
Harry Maclean
|
9b998a39b4
|
Ruby: Add tags to GenerateModel query
This allows the model editor to find this query in a more robust way
than by file path.
|
2023-11-27 09:18:00 +00:00 |
|
Harry Maclean
|
b9d15bacba
|
Ruby: Don't classify our test files as test files
For model editing purposes.
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
064b10a5cb
|
Ruby: Handle missing gemspec in model query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
9dcc424f8c
|
Ruby: Include keyword parameters endpoint query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
5dcc3d43ca
|
Ruby: Recognise modeled source/sink methods
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
766e68aa36
|
Ruby: Handle multiple gemspecs in endpoints query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
c54743c3fd
|
Ruby: Include class methods in model editor query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
78125a701d
|
Ruby: Model Editor support
Add experimental support for the CodeQL Model Editor.
|
2023-11-27 09:17:59 +00:00 |
|
Stephan Brandauer
|
68a7734e08
|
Merge pull request #14849 from github/kaeluka/automodel-extraction-skip-primitive-types-candidates
Java Automodel extraction: remove primitives in framework mode
|
2023-11-27 09:52:48 +01:00 |
|
AlexDenisov
|
59ee3e16b4
|
Merge pull request #14800 from github/alexdenisov/more-extractions
Swift: final 5.8/5.9 extractions
|
2023-11-27 08:41:37 +01:00 |
|
amammad
|
ffe2e398c9
|
fix tests, add support for Response.BodyWriter() Thanks to @owen-mc
|
2023-11-25 15:36:37 +01:00 |
|
amammad
|
accc09fd8c
|
Lists of strings should be in alphabetical order. In a QLDoc, there should be a full stop at the end of each sentence. shorter model summary. change target from getACall() to getACall().getResult(.). better tests
|
2023-11-25 13:36:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
865cbab242
|
Merge pull request #14911 from MathiasVP/remove-duplication-workaround-in-sources
|
2023-11-24 20:00:57 +00:00 |
|
Geoffrey White
|
dfdc502525
|
Merge pull request #14908 from geoffw0/setmodels
Swift: Flow models for Set
|
2023-11-24 19:16:16 +00:00 |
|
Geoffrey White
|
4c2a6231e9
|
Swift: Add tests for array append/insert.
|
2023-11-24 18:33:25 +00:00 |
|
Geoffrey White
|
2e93c1d7b6
|
Merge pull request #14879 from geoffw0/contentsof
Swift: "contentsOf" sources
|
2023-11-24 17:47:57 +00:00 |
|
Jeroen Ketema
|
c02a732632
|
C++: Remove DefaultTaintTracking library
|
2023-11-24 18:35:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
73138f1913
|
C++: No need to exclude ExprNodes as sources now that #14903 is merged.
|
2023-11-24 16:58:30 +00:00 |
|
Alex Eyers-Taylor
|
1c012548d4
|
CPP: Add tests for incorrect check scanf
|
2023-11-24 16:58:11 +00:00 |
|
Alex Eyers-Taylor
|
12e24a2b44
|
CPP: Exclude incorrect scanf checks from missing scanf checks
|
2023-11-24 16:57:59 +00:00 |
|
Mathias Vorreiter Pedersen
|
e89d8e2967
|
Merge pull request #14907 from MathiasVP/remove-workaround-in-authentication-bypass
C++: Remove workaround for negated conditions in `cpp/user-controlled-bypass`
|
2023-11-24 16:54:37 +00:00 |
|
Jeroen Ketema
|
04338215cd
|
Merge pull request #14903 from jketema/ret-val
C++: Do not use `isReturnValue` in `getenv`, `gets`, and `fgets` models
|
2023-11-24 17:51:11 +01:00 |
|
Geoffrey White
|
06ae374206
|
Swift: Add a predicate for common code.
|
2023-11-24 16:06:35 +00:00 |
|
Geoffrey White
|
1638796173
|
Swift: Add change note.
|
2023-11-24 15:41:49 +00:00 |
|
Geoffrey White
|
2b481bbb48
|
Swift: Model Sequence.enumerated() as well.
|
2023-11-24 15:41:49 +00:00 |
|
Jeroen Ketema
|
ee35bfb290
|
C++: Do not use isReturnValue in getenv, gets, and fgets models
|
2023-11-24 16:38:15 +01:00 |
|
Mathias Vorreiter Pedersen
|
a7d820ce62
|
C++: Remove workaround for negated conditions in 'cpp/user-controlled-bypass'.
|
2023-11-24 15:17:45 +00:00 |
|
Geoffrey White
|
14031bf351
|
Swift: Model Sequence.forEach as well.
|
2023-11-24 14:58:13 +00:00 |
|
Alex Eyers-Taylor
|
f48e8b6062
|
CPP: Add query for detecteing incorrect error checking for scanf
|
2023-11-24 14:53:10 +00:00 |
|
Geoffrey White
|
60b27a4e69
|
Swift: Expand and improve models of Set and Sequence.
|
2023-11-24 14:43:19 +00:00 |
|
Mathias Vorreiter Pedersen
|
e438671846
|
Merge pull request #14896 from MathiasVP/no-dtt-in-user-controlled-bypass
C++: Rewrite `cpp/user-controlled-bypass` away from `DefaultTaintTracking`
|
2023-11-24 14:43:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
631dc98d72
|
Merge pull request #14904 from MathiasVP/taint-through-int-to-bool-casts
C++: Add Taint through int -> bool casts
|
2023-11-24 14:30:19 +00:00 |
|
Stephan Brandauer
|
2e5971bb57
|
Java automodel: also drop boxed types and number types from endpoints
|
2023-11-24 15:04:13 +01:00 |
|
Tom Hvitved
|
9eaebfcf60
|
Merge pull request #14859 from hvitved/ruby/missing-flow-tests
Ruby: Add tests illustrating missing flow
|
2023-11-24 14:57:15 +01:00 |
|
Harry Maclean
|
d239a30866
|
Merge pull request #14874 from hmac/hmac-missing-flow-test
Ruby: Add test for missing block flow
|
2023-11-24 13:44:55 +00:00 |
|
Ian Lynagh
|
fc2142feb4
|
Merge pull request #14887 from igfoo/igfoo/kloc
Kotlin: Add LighterAST support to numlines extraction
|
2023-11-24 13:43:34 +00:00 |
|
Geoffrey White
|
04c90a684c
|
Swift: Add taint tests for 'Set'.
|
2023-11-24 13:38:31 +00:00 |
|
Ian Lynagh
|
b33fcf3719
|
Kotlin: Accept some location changes in test-kotlin2/library-tests/stmts
|
2023-11-24 13:34:44 +00:00 |
|
Tom Hvitved
|
8ccce5891d
|
Ruby: Add tests illustrating missing flow
|
2023-11-24 14:28:04 +01:00 |
|
Mathias Vorreiter Pedersen
|
6b48b3643e
|
Merge branch 'main' into no-dtt-in-user-controlled-bypass
|
2023-11-24 12:50:45 +00:00 |
|
Mathias Vorreiter Pedersen
|
2681617f28
|
C++: Undo the workaround in 'cpp/tainted-permissions-check'.
|
2023-11-24 10:56:11 +00:00 |
|
Mathias Vorreiter Pedersen
|
0c924c2b27
|
C++: Taint-flow through integer to boolean casts.
|
2023-11-24 10:55:50 +00:00 |
|
Mathias Vorreiter Pedersen
|
e1c326642c
|
Merge pull request #14894 from MathiasVP/dont-short-circuit-negation-in-conditions
C++: Don't short circuit logical negation in conditions
|
2023-11-24 10:50:42 +00:00 |
|
Owen Mansel-Chan
|
6f9a70475d
|
Merge pull request #14882 from owen-mc/go/minor-fixes
Go: improve CallNode documentation
|
2023-11-24 10:36:07 +00:00 |
|
Erik Krogh Kristensen
|
22bdcad0c6
|
Merge pull request #14302 from amammad/amammad-js-SQLI
JS: extend DatabaseAccess by `TypeORM` and `sqlite` and `better-sqlite3` packages
|
2023-11-24 11:18:47 +01:00 |
|