Anders Schack-Mulligen
1f95fa10fb
Java: Fix comment re. neutrals and WithoutElement.
...
The remove methods should not have been in this section, as they're
plain neutrals.
2024-09-30 15:08:56 +02:00
Tom Hvitved
5ae669937c
Rust: Add labelled block example
2024-09-30 14:47:13 +02:00
Rasmus Lerchedahl Petersen
a22ea6c1c8
Python: use known sanitiser
...
- also adjust test expectations in experimental
2024-09-30 14:22:17 +02:00
Tamás Vajk
752502ba76
Merge pull request #17619 from tamasvajk/text-file-archiving-warning
...
C#: reduce extraction message severity for missing text files
2024-09-30 14:07:45 +02:00
Rasmus Lerchedahl Petersen
7392d186bc
Python: use yield step also for taint
...
Using the comprehension store step meant that all comprehensions would receive taint.
This because comprehension flow now goes via a callable, meaning they share the return node.
2024-09-30 13:49:01 +02:00
Rasmus Lerchedahl Petersen
fb07a56de6
Python: adjust test expectations
2024-09-30 13:26:59 +02:00
Anders Schack-Mulligen
ec0bd4494c
Java: Add overrides to the interpretation of neutral MaD models.
2024-09-30 13:11:49 +02:00
Rasmus Lerchedahl Petersen
ded39749a7
Python: allow comp arg as argumentnode
2024-09-30 13:02:20 +02:00
Tamas Vajk
29948e4c0b
C#: reduce extraction message severity for missing text files
2024-09-30 12:31:07 +02:00
Rasmus Lerchedahl Petersen
f9f46f0f98
Python: update test expectations
...
We now have a new callable, yielding new enclosing callables
2024-09-30 12:00:38 +02:00
Rasmus Lerchedahl Petersen
3ef05a628f
Python: add location to node
2024-09-30 11:56:36 +02:00
Michael Nebel
6f74387600
Merge pull request #17521 from michaelnebel/modelgen/moreimprovements
...
C#/Java: Content based model generation improvements.
2024-09-30 11:22:30 +02:00
Tom Hvitved
4513643a0f
Merge pull request #17617 from hvitved/rust/extraction-consistency
...
Rust: Add extraction error consistency query
2024-09-30 11:06:34 +02:00
Tom Hvitved
3e77dd8b6b
Rust: Fix extraction errors
2024-09-30 10:36:56 +02:00
Rasmus Lerchedahl Petersen
310819d392
Python: fix dataflow inconsistencies
...
- adjust scope of argument, the argument is outside the called function
- add missing post-update nodes for the new arguments
2024-09-30 10:31:36 +02:00
Tom Hvitved
bafef791f7
Rust: Add extraction error consistency query
2024-09-30 10:28:24 +02:00
Anders Schack-Mulligen
a017f92b78
Merge pull request #17579 from aschackmull/java/type-sanitizers
...
Java: Add more type-based sanitizers.
2024-09-30 10:07:06 +02:00
Tom Hvitved
8a1b4501dd
Merge pull request #17602 from hvitved/rust/cfg-prune-bool-literal
...
Rust: Prune CFG for obviously impossible `true/false` edges
2024-09-30 10:05:03 +02:00
Anders Schack-Mulligen
b0ed47c277
Merge pull request #17605 from aschackmull/java/stringbuilder-neutrals
...
Java: Add a couple of neutrals
2024-09-30 10:03:41 +02:00
Michael Nebel
baae8d0bb2
Shared: Address model generator review comments.
2024-09-30 09:12:30 +02:00
Rasmus Lerchedahl Petersen
d4ea62edec
Python: flow through yield
...
- add yield as a dataflow return
- replace comprehension store step
with a store step to the yield
2024-09-30 09:01:29 +02:00
Alvaro Muñoz
4edfdb4101
Bump qlpack versions
2024-09-28 23:59:23 +02:00
Alvaro Muñoz
fce300ee92
Merge pull request #94 from github/fix/sanitizer_scalar_value
...
Fix: ControlChecks protects/dominates only work with Steps. A sink can be in a sub-step node (eg: ScalarValue)
2024-09-28 23:58:47 +02:00
Alvaro Muñoz
f2c5a14883
Fix: ControlChecks protects/dominates only work with Steps. A sink can be in a sub-step node (eg: ScalarValue)
2024-09-28 23:57:32 +02:00
Jeroen Ketema
e73d1c7b76
C++: Add more macro expansion tests
2024-09-28 22:32:36 +02:00
Owen Mansel-Chan
654d97013f
Merge pull request #17607 from owen-mc/go/add-comments-about-interface-methods-from-embedded-interfaces
...
Go: Add comments noting methods from embedded interfaces are already included
2024-09-28 13:49:50 +01:00
Alvaro Muñoz
1b3b47bb1e
Bump qlpack versions
2024-09-27 21:39:51 +02:00
Alvaro Muñoz
05d4b3c9f4
Merge pull request #93 from github/ppe_from_rfs
...
Add remote flow sources as a mutable ref source for untrusted checkouts
2024-09-27 21:39:16 +02:00
Alvaro Muñoz
4fffde2fc5
Add remote flow sources as a mutable ref source for untrusted checkouts
2024-09-27 21:38:38 +02:00
Kevin Stubbings
f0560458af
Finished up
2024-09-27 19:24:40 +00:00
Chris Smowton
ca68aaa0de
Remove test code
2024-09-27 19:07:00 +01:00
REDMOND\brodes
b73fe0ba0a
Adding change log
2024-09-27 12:41:45 -04:00
REDMOND\brodes
92c8d39ba3
Updating expected file, false positives now resolved.
2024-09-27 12:39:50 -04:00
REDMOND\brodes
cc24f1ed9f
Modifications to the query to address false positives.
2024-09-27 12:38:22 -04:00
REDMOND\brodes
26e58532ee
Adding tests and updated expected file with false positives to correct.
2024-09-27 12:37:09 -04:00
Alvaro Muñoz
294ebe56c6
Merge branch 'master' of https://github.com/github/codeql-actions
2024-09-27 18:33:55 +02:00
Alvaro Muñoz
1a5a3044c2
Bump qlpack versions
2024-09-27 18:25:31 +02:00
Alvaro Muñoz
2e6f004bda
Merge pull request #92 from github/fix/direct_cache_poison
...
Improve path checks for Artifact and Cache poisoning queries
2024-09-27 18:25:00 +02:00
Alvaro Muñoz
9d26a8da26
Improve path checks for Artifact and Cache poisoning queries
2024-09-27 18:22:35 +02:00
Owen Mansel-Chan
796db77104
Add comments noting methods from embedded interfaces are already included
2024-09-27 15:03:09 +01:00
Anders Schack-Mulligen
fb630d266e
Java: Add a couple of neutrals
2024-09-27 15:24:06 +02:00
Tom Hvitved
90a8bef64c
Rust: Run codegen
2024-09-27 13:39:15 +02:00
Ian Lynagh
7de1182f92
Merge pull request #17599 from igfoo/igfoo/constrs
...
Kotlin: Fix the return type for lambda constructors
2024-09-27 12:38:50 +01:00
Tom Hvitved
dc4160b24a
Rust: Prune CFG for impossible true/false edges
2024-09-27 13:37:29 +02:00
Tom Hvitved
bf58bdd2bd
Rust: Update CFG tests
2024-09-27 13:35:14 +02:00
Tom Hvitved
431b33a274
Rust: Implement LiteralExpr::toString()
2024-09-27 13:33:25 +02:00
Tom Hvitved
97ead6f462
Merge pull request #17560 from hvitved/codegen/remove-cached
...
Codegen: Do not cache injectors/projectors in `Synth` module
2024-09-27 13:17:02 +02:00
Alvaro Muñoz
65d09b3a4b
Merge pull request #91 from github/fix/artpoison
...
Improve artifact poisoning query
2024-09-27 12:45:59 +02:00
Alvaro Muñoz
86c1d9c30f
Improve artifact poisoning query
...
Better check of download path
Add downloading to /tmp as a sanitizer
2024-09-27 12:35:10 +02:00
Ian Lynagh
2a5b48930a
Kotlin: Fix the return type for lambda constructors
2024-09-27 11:21:40 +01:00
