Paolo Tranquilli
25ab1a934d
Merge branch 'main' into redsun82/bazel-fix
2024-05-31 14:03:20 +02:00
Paolo Tranquilli
67e2ea195f
Merge pull request #16634 from github/redsun82/swift-integration-tests
...
Swift: remove integration test running in CI
2024-05-31 13:55:14 +02:00
Cornelius Riemenschneider
f27d48d03d
Merge pull request #16622 from github/criemen/pkg-lib-nolang
...
`pkg.bzl`: Add features to support the nolang dist.
2024-05-31 13:15:23 +02:00
Paolo Tranquilli
959aa3515c
Swift: remove integration test running in CI
...
They are being triggered by QLucie now, so there's no need to also
trigger them in the `codeql` specific CI.
2024-05-31 12:59:38 +02:00
Michael Nebel
8b75bb2ba9
C#: The model generator should consider System.Type and System.DateTime as sanitizers.
2024-05-31 12:50:18 +02:00
Michael Nebel
02f9aec517
C#: Add some spurious summary generation examples.
2024-05-31 12:50:14 +02:00
Michael Nebel
b628c2e121
C#: Update flow summaries expected output.
2024-05-31 12:50:10 +02:00
Michael Nebel
5e1801f7be
C#: Update models based on review comments.
2024-05-31 12:50:06 +02:00
Michael Nebel
121378a262
C#: Add change-note.
2024-05-31 12:50:02 +02:00
Michael Nebel
0985a3a5f6
C#: Update expected test output.
2024-05-31 12:49:58 +02:00
Michael Nebel
9bb7575018
C#: Promote IDataRecord and IDbCommand to manual summaries such that they are used in conjunction with source code.
2024-05-31 12:49:53 +02:00
Michael Nebel
90538d4b4c
C#: Update expected test output.
2024-05-31 12:49:48 +02:00
Michael Nebel
cd5168b570
C#: Limit the defintion of database flow source and use summaries for better paths and reduced result multiplicity.
2024-05-31 12:49:44 +02:00
Michael Nebel
38d246a3bd
C#: Update flowsummaries expected output.
2024-05-31 12:49:40 +02:00
Michael Nebel
db0131d931
C#: Update .NET8 models.
2024-05-31 12:49:35 +02:00
Tom Hvitved
be4fce26c0
Merge pull request #16631 from hvitved/tree-sitter/multi-file-lists
...
Tree-sitter: Allow for multiple file lists in simple extractor
2024-05-31 12:47:11 +02:00
Paolo Tranquilli
bfc37fddff
Bazel: move --build_tests_only from swift action to .bazelrc
2024-05-31 12:35:52 +02:00
Cornelius Riemenschneider
14988002fa
Address review.
2024-05-31 12:35:03 +02:00
Tom Hvitved
42d87f6d19
Data flow: Inline isUnreachableInCall1
2024-05-31 12:25:11 +02:00
Paolo Tranquilli
3f19974bb6
Bazel: fix transition on non-macOS
2024-05-31 12:14:13 +02:00
Paolo Tranquilli
b3e29bd8b5
Bazel: add --build_tests_only in swift CI
2024-05-31 12:13:26 +02:00
Paolo Tranquilli
07f4288e1f
Fix zipmerge build and test
2024-05-31 12:12:58 +02:00
Paolo Tranquilli
8e26f64f89
Bazel: fix non-swift macOS builds
...
This is meant to be cleaned up in a later PR with respect to the TODOs.
2024-05-31 11:49:36 +02:00
Tom Hvitved
d6a3765597
Tree-sitter: Allow for multiple file lists in simple extractor
2024-05-31 11:15:21 +02:00
Tony Torralba
2d3d49f957
Merge pull request #16628 from mbaluda/main
...
Disable csrf for ServerHttpSecurity
2024-05-31 10:31:28 +02:00
Mauro Baluda
48fc44baff
Add release notes
2024-05-30 23:21:12 +02:00
Mauro Baluda
bbe888c2b3
Update SpringCsrfProtection.qll
2024-05-30 23:13:08 +02:00
Mauro Baluda
e2479a7ce2
Disable csrf for ServerHttpSecurity
2024-05-30 23:08:57 +02:00
Owen Mansel-Chan
d112073a13
Edit change note
2024-05-30 21:04:05 +01:00
Owen Mansel-Chan
ffc25add70
Accept test changes
2024-05-30 21:01:06 +01:00
Owen Mansel-Chan
a5c392ed4b
Add back taint models for append and copy
...
This is needed when they are used with string arguments.
2024-05-30 21:01:03 +01:00
Cornelius Riemenschneider
e2cb5631d9
pkg.bzl: Fix install targets.
...
First, the labels used in this file need to be wrapped in `Label`,
so that we can use the installer target from the internal repo.
Second, when unpacking zips, the path passed to `ripunzip` included a trailing
`\n`, which caused `ripunzip` to fail.
2024-05-30 21:06:46 +02:00
Chuan-kai Lin
0369f8f5df
Merge pull request #16625 from github/revert-16605-release-prep/2.17.4
...
Revert "Release preparation for version 2.17.4"
2024-05-30 10:08:31 -07:00
Chuan-kai Lin
b41835a7d9
Revert "Release preparation for version 2.17.4"
2024-05-30 09:25:15 -07:00
Cornelius Riemenschneider
e43b773d7c
Fix comment to indicate the correct order in the zip dict.
2024-05-30 17:58:22 +02:00
Cornelius Riemenschneider
60cb8e7e8e
Ruby: Move to new packaging rules.
2024-05-30 14:25:20 +02:00
Cornelius Riemenschneider
1158e92f12
Python: Move to the new packaging rules.
2024-05-30 14:25:18 +02:00
Cornelius Riemenschneider
dcd44859f5
Go: Move to new packaging rules.
2024-05-30 14:25:17 +02:00
Cornelius Riemenschneider
d66d7d8a3a
C#: Move to new packaging rules.
2024-05-30 14:25:16 +02:00
Cornelius Riemenschneider
60b5317c5f
C++: Move to new packaging rules.
2024-05-30 14:25:15 +02:00
Cornelius Riemenschneider
9f3310d3d2
pkg.bzl: Add features to support the nolang dist.
...
In order to build the language-independent parts of our dist with `pkg.bzl`,
we need two override features:
* A way to set the prefix in the zip files to the empty string, so that our top-level files
stay top-level.
* A way to put `codeql.exe` into the arch-specific zip, despite it not being under `CODEQL_PLATFORM`.
This PR implements both.
2024-05-30 13:03:57 +02:00
Owen Mansel-Chan
61593aed7d
Merge pull request #16617 from owen-mc/go/side-effects-on-global-variables
...
Go: Add tests (mostly failing) for writes to global variables
2024-05-30 08:02:45 +01:00
Cornelius Riemenschneider
2c4a216dd9
Merge pull request #16616 from github/redsun82/fix-pkg
...
Reinstate bazel packaging library with a backward compatibility fix
2024-05-29 23:02:30 +02:00
Owen Mansel-Chan
1d9a98614a
Fix bug in ResponseWriter for variadic MaD
...
`getSummaryInputOrOutputNode` was giving the summary component stack for
arguments corresponding to variadic parameters. This will be a problem
when the models for variadic functions are converted to models-as-data.
2024-05-29 21:15:49 +01:00
Owen Mansel-Chan
7ff1eabfc3
Add tests (mostly failing) for writes to global variables
...
This was based on the equivalent for java:
https://github.com/github/codeql/pull/16500
2024-05-29 16:07:16 +01:00
am0o0
1f112467ce
update id of the query file
2024-05-29 16:48:35 +02:00
am0o0
b9edcb7943
rename secondary to remote :), complete the previous commit changes
2024-05-29 16:47:37 +02:00
am0o0
52a809145e
SecondaryCommandInjection to RemoteCommandExecution, change RemoteCommandExecution to module like SystemCommandExecution module
2024-05-29 16:18:55 +02:00
Paolo Tranquilli
655f079329
Swift: fix legacy extractor-pack-arch target
2024-05-29 16:17:59 +02:00
am0o0
fd9e6f48d7
fix the docs of secondary server cmd injection
2024-05-29 16:01:43 +02:00
