Michael Nebel
003166af13
C#: Collect information about used dependencies in a Dependencies object.
2023-11-03 13:27:51 +01:00
Geoffrey White
e7e6529df6
Swift: Add tests.
2023-11-03 12:21:32 +00:00
yoff
8d3ed68b68
Merge pull request #14653 from yoff/python/add-aws-to-supported-frameworks
...
Python: Add AWS Lambda as a supported framework
2023-11-03 13:14:30 +01:00
Geoffrey White
49add7d8ce
Swift: Add stubs to test.
2023-11-03 12:07:15 +00:00
Michael Nebel
eb228b6e68
C#: Address some review comments.
2023-11-03 11:32:53 +01:00
Michael Nebel
62dd86bacb
C#: Update standalone integration tests expected output.
2023-11-03 11:32:48 +01:00
Michael Nebel
7b91be6c52
C#: Allways add Windows Desktop App dlls if the NuGet package is downloaded.
2023-11-03 11:31:28 +01:00
Michael Nebel
11505d6842
C#: Make the assembly cache more robust against non-existing paths.
2023-11-03 11:31:27 +01:00
Michael Nebel
56a70da28f
C#: Remove package cleanup in the dependency manager.
2023-11-03 11:31:27 +01:00
Michael Nebel
70996a4c7e
C#: Rename dllDirNames to dllPaths.
2023-11-03 11:31:27 +01:00
Michael Nebel
576eda3ec6
C#: Add missing package directory to included dlls.
2023-11-03 11:31:27 +01:00
Michael Nebel
4cebb7e848
C#: Integrate the assets parsing and fetching in the dependency manager.
2023-11-03 11:31:27 +01:00
Michael Nebel
f8d427336e
C#: Add assets parsing unit test.
2023-11-03 11:31:27 +01:00
Michael Nebel
7bbf1a24d4
C#: Add assets.json parser.
2023-11-03 11:31:27 +01:00
Michael Nebel
c6c00e7179
C#: Add tests cases for parsing dotnet restore output to find assets.json files.
2023-11-03 11:31:27 +01:00
Michael Nebel
3a7df994cb
C#: The dependency manager should find assets.json files when doing a project or solution restore.
2023-11-03 11:31:27 +01:00
Michael Nebel
387a241efd
C#: Set output verbosity to normal for both solution and project restore (needed to identify where assets file are located).
2023-11-03 11:31:27 +01:00
Paolo Tranquilli
506b911767
Merge pull request #14629 from github/redsun82/rework-resource-dir
...
Swift: rework resource dir
2023-11-03 11:14:49 +01:00
Michael Nebel
4009f03087
Merge pull request #14665 from michaelnebel/csharp/projectreference
...
C#: Update DependencyManager logic to exclude commented out references.
2023-11-03 10:30:03 +01:00
Tom Hvitved
9807a8e1d3
Merge pull request #14675 from hvitved/csharp/split-generated-mad-files-take2
...
C#: Split `generated/dotnet_runtime.yml` into separate files (take 2)
2023-11-03 10:24:38 +01:00
Tom Hvitved
af524f0043
Revert "C#: Temporary changes to model generator"
...
This reverts commit 0f6cea6bd6ecd61139dc09e7b68bf0b8ebc009fe.
2023-11-03 09:51:40 +01:00
Tom Hvitved
894f9ab8fa
C#: Split generated/dotnet_runtime.yml into separate files
2023-11-03 09:51:40 +01:00
Tom Hvitved
7082efa037
C#: Temporary changes to model generator
2023-11-03 09:51:40 +01:00
Tom Hvitved
c34ad25cf9
Merge pull request #14674 from github/revert-14663-csharp/split-generated-mad-files
...
Revert "C#: Split `generated/dotnet_runtime.yml` into separate files"
2023-11-03 09:51:22 +01:00
Tom Hvitved
13e60d7b11
Revert "C#: Split generated/dotnet_runtime.yml into separate files"
2023-11-03 09:07:54 +01:00
Anders Schack-Mulligen
132cc03e3b
Merge pull request #14664 from aschackmull/shared/modulus-step
...
RangeAnalysis: Improve bounds that rely on relative modulus.
2023-11-03 08:16:48 +01:00
amammad
bd1ee9b937
fix tests
2023-11-02 21:26:05 +01:00
amammad
1fc18bee5d
Merge branch 'main' into amammad-go-bombs
2023-11-02 23:33:27 +03:30
amammad
a1a49bdddf
Merge branch 'main' into amammad-go-bombs
2023-11-02 21:01:13 +01:00
amammad
761aede2df
perfomed review suggestions, make Decompression Sink simpler, uncomment the isBarrier, fix some naming issues in tests
2023-11-02 21:01:05 +01:00
Mathias Vorreiter Pedersen
679d64f0e8
Merge pull request #14647 from microsoft/24-odbc-model-instantiation-upstream2
...
C++: Adding a model implementation for ODBC.
2023-11-02 19:42:27 +00:00
amammad
9f8871746b
add flow summary instead of additional flow steps
2023-11-02 20:12:50 +01:00
Benjamin Rodes
30a512c96b
Formatting
2023-11-02 15:01:15 -04:00
Robert Marsh
81d77bf37c
Merge pull request #14578 from geoffw0/stringwith
...
Swift: Models for String methods involving closures.
2023-11-02 13:53:22 -04:00
Benjamin Rodes
947e0274c7
Adding sql injection test for ODBC.
2023-11-02 13:27:42 -04:00
shati-patel
ac0fd93cb3
Update docs for customizing settings
2023-11-02 17:17:02 +00:00
shati-patel
2f4eea5a0d
Update docs for exploring ASTs
2023-11-02 17:16:47 +00:00
Benjamin Rodes
f404d7a5f8
Changes to address pr comments.
2023-11-02 13:11:23 -04:00
Mathias Vorreiter Pedersen
392b2af923
C++: Only the second indirection of the argument should be the remote flow source.
2023-11-02 16:51:24 +00:00
Mathias Vorreiter Pedersen
b82dfa9a21
C++: Fix failing test by allocating 'TFunctionInput's and 'TFunctionOutput's for more indirections. Note that we now mark two output nodes coming out of 'getaddrinfo' as a remote flow source (the first indirection and the second indirection). We'll fix that in the next commit.
2023-11-02 16:45:50 +00:00
Mathias Vorreiter Pedersen
5487b404ed
C++: Add failing test.
2023-11-02 16:41:19 +00:00
amammad
fc3b90915b
fix some grammer mistakes, an unnecessary import, put blank like after go generate
2023-11-02 17:29:11 +01:00
amammad
01fb29e8dc
remove my Hardcoded secret key query in favor of CWE-798:HardcodedCredentials
2023-11-02 16:29:36 +01:00
amammad
a9c8bc082f
delete CWE-321
2023-11-02 16:27:31 +01:00
amammad
faa483a282
move to CWE-347, update comments of tests
2023-11-02 16:24:58 +01:00
amammad
e1d42fad2c
move new secret key sinks to existing CredentialsNode class,
...
add new additional global taint and dataflow steps
update tests of CWE-798
add a new sanitizer for `semmle.javascript.security.dataflow.HardcodedCredentialsQuery`
2023-11-02 16:09:01 +01:00
Michael Nebel
0bf2d77a7e
C#: Update integration tests.
2023-11-02 15:46:54 +01:00
Michael Nebel
a161d6e666
C#: Update unit tests.
2023-11-02 15:46:39 +01:00
Michael Nebel
9ea6ef06ef
C#: Commented out references in project files should not be used.
2023-11-02 15:45:30 +01:00
Anders Schack-Mulligen
f2b52650d5
Rangeanalysis: Filter useless modulo results.
2023-11-02 15:29:56 +01:00
