Paolo Tranquilli
f9db7864e1
Change note: reword
2024-06-13 18:04:23 +02:00
Paolo Tranquilli
0198806658
Merge branch 'main' into redsun82/kotlin
2024-06-13 16:29:13 +02:00
Alvaro Muñoz
bdaab69d0b
Do not uses globs for source-root
2024-06-13 15:09:37 +02:00
am0o0
bb03a9faba
format the query file
2024-06-13 14:54:29 +02:00
am0o0
f0a467e80b
update tests
2024-06-13 14:52:22 +02:00
am0o0
84b9d4d1ac
fix qlhelp errors
2024-06-13 14:32:41 +02:00
Mathias Vorreiter Pedersen
3d037e73f0
Merge pull request #16749 from MathiasVP/fix-fps-on-double-free
...
C++: Fix `ArrayExpr` FPs in `cpp/double-free`
2024-06-13 12:58:41 +01:00
Paolo Tranquilli
b8de2ea03b
Merge pull request #16731 from github/redsun82/kotlin-fix-version-picker
...
Kotlin: expose kotlin version picker for internal packaging
2024-06-13 13:57:38 +02:00
Anders Schack-Mulligen
b47831af14
Java: Calculate 2nd level scopes for implicit instance accesses.
2024-06-13 13:57:18 +02:00
Michael B. Gale
1834a399d2
Merge pull request #16738 from github/mbg/go/remove-go-work
...
Go: Remove `go.work` file
2024-06-13 12:20:12 +01:00
Mathias Vorreiter Pedersen
4bbeda08d6
C++: Fix change note naming.
2024-06-13 11:10:00 +01:00
Mathias Vorreiter Pedersen
83108e3e25
C++: Add change note.
2024-06-13 11:03:52 +01:00
Mathias Vorreiter Pedersen
bcabc88649
C++: Accept test changes.
2024-06-13 10:59:46 +01:00
Mathias Vorreiter Pedersen
4079de125f
C++: Fix FP by also excluding indirections of array expressions.
2024-06-13 10:59:39 +01:00
Mathias Vorreiter Pedersen
eec259279a
C++: Add another FP test. We already have tests for this, but it doesn't hurt to have another one, I guess.
2024-06-13 10:57:49 +01:00
Alvaro Muñoz
6c73e3770f
Merge branch 'master' of https://github.com/github/codeql-actions
2024-06-13 11:51:54 +02:00
Alvaro Muñoz
4b4901f99f
Bump qlpack versions
2024-06-13 11:51:46 +02:00
Alvaro Muñoz
a84c1c4706
Minor improvemnts
2024-06-13 11:51:15 +02:00
Alvaro Muñoz
ceac1c6392
Do not scan JS files
2024-06-13 11:50:53 +02:00
Alvaro Muñoz
fbaf329428
Remove dependencies with javascript-all
2024-06-13 11:50:28 +02:00
Mathias Vorreiter Pedersen
e244eef3b5
Merge pull request #16748 from MathiasVP/rc-3.14-mergeback-2
...
Mergeback from `rc/3.14`
2024-06-13 10:44:46 +01:00
Michael Nebel
7f7c5d7c94
Java: Update model generator expected test output.
2024-06-13 10:57:15 +02:00
Michael Nebel
e247d5b316
Java: Sync files and make dummy language specific implementation.
2024-06-13 10:55:17 +02:00
Michael Nebel
e56c185f32
Java: Add some model generator sink examples.
2024-06-13 10:49:57 +02:00
Mathias Vorreiter Pedersen
0150269503
Merge branch 'rc/3.14' into rc-3.14-mergeback-2
2024-06-13 09:14:40 +01:00
Mathias Vorreiter Pedersen
9384f6189e
Merge pull request #16740 from MathiasVP/fix-join-in-ssa
...
SSA: Fix bad join in `lastRefRedefExt`
2024-06-13 09:06:20 +01:00
Paolo Tranquilli
11c37734c3
Kotlin: add change note for having fixed kotlin QL tests in release
2024-06-13 09:49:39 +02:00
Michael Nebel
854c6fa813
C#: Update expected test output after .NET 8 models update.
2024-06-13 09:24:13 +02:00
Michael Nebel
9ea2b463f0
C#: Update .NET 8 Runtime models.
2024-06-13 08:36:23 +02:00
Michael Nebel
78d23ee044
C#/Java: Allow the model generator to use 32GB of ram.
2024-06-13 08:35:52 +02:00
am0o0
11a416ea7c
add FlowSources as a common source for all sinks, so we don't need States anymore
2024-06-13 03:30:07 +02:00
Maiky
8ba7ac678d
Update javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-06-12 19:38:13 +02:00
Maiky
4be5cf4e78
Update javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-06-12 19:38:02 +02:00
Rasmus Wriedt Larsen
ec18786488
JS: Provide better model for Array.splice
2024-06-12 16:29:21 +02:00
Mathias Vorreiter Pedersen
5b3403c4b1
C++: Fix bad join in 'lastRefRedefExt'.
2024-06-12 15:24:58 +01:00
Michael B. Gale
e10e2899bd
Go: Update comment in gen.py
2024-06-12 15:24:33 +01:00
Rasmus Wriedt Larsen
54a0e6dc45
JS: Add new test for Array.splice
2024-06-12 16:24:33 +02:00
Michael B. Gale
8629e00686
Go: Remove workspace from vendor/modules.txt
2024-06-12 15:22:56 +01:00
Rasmus Wriedt Larsen
9ed6da1072
JS: prepare to extend Array tests
...
Oh how I have enjoyed working with InlineExpectationTests for these sort
of things, not worrying about all the .expected files changing because
you add a few lines in the middle of your tests :D
2024-06-12 16:22:55 +02:00
Michael B. Gale
a90968d277
Go: Replace go work vendor with go mod vendor
2024-06-12 15:19:14 +01:00
Rasmus Wriedt Larsen
1027ca266d
JS: Allow many Array steps to be used in type-tracking
2024-06-12 16:14:13 +02:00
Joe Farebrother
90d6f2ece3
Factor out nameIndicatesRelevantSensitiveData
2024-06-12 15:11:47 +01:00
Tom Hvitved
605fe54a06
Ruby: Remove two Cartesian products
2024-06-12 15:11:43 +01:00
Joe Farebrother
5f08371f19
Add change note
2024-06-12 15:11:39 +01:00
Joe Farebrother
07f03be8cc
Add unit tests
2024-06-12 15:11:35 +01:00
Joe Farebrother
b0c03f6d68
Allow implicit read steps on sinks
2024-06-12 15:11:32 +01:00
Joe Farebrother
8b51ee8fe8
Use additional sensitive data heuristics in CleartextSources
2024-06-12 15:11:27 +01:00
Michael B. Gale
a04f08f026
Go: Remove go.work file
2024-06-12 15:10:28 +01:00
Tamás Vajk
a756f86847
Merge pull request #16732 from tamasvajk/refactor/extraction-states
...
C#: Refactor extractor state classes and simplify extraction code
2024-06-12 15:20:11 +02:00
Tamas Vajk
0df6a1c4b1
Fix quality issues
2024-06-12 14:48:16 +02:00
