Mathias Vorreiter Pedersen
c4d72e5b4f
C++: No need to check if the offset is non-negative. It always is because of 'defBlock.getInstruction(oldOffset)' has a result.
2024-07-04 14:21:55 +01:00
Mathias Vorreiter Pedersen
cf8b2d55c5
C++: Hide away the 'multiply by two' hack in a predicate.
2024-07-04 14:21:53 +01:00
Mathias Vorreiter Pedersen
8db7ece8d4
C++: Fill in trivial parts of SSA.
2024-07-04 14:21:51 +01:00
Mathias Vorreiter Pedersen
2c4bf13d05
C++: Sync identical files.
2024-07-04 14:21:50 +01:00
Mathias Vorreiter Pedersen
c54dc49891
C++: Improve 'toString' on the 'InitializeGroup' instruction.
2024-07-04 14:21:49 +01:00
Mathias Vorreiter Pedersen
b185c67d4f
C++: Handle overlap with grouped memory locations.
2024-07-04 14:21:47 +01:00
Mathias Vorreiter Pedersen
e7c43b3fcc
C++: Return grouped memory locations from 'getOperandMemoryLocation' and 'getResultMemoryLocation'.
2024-07-04 14:21:46 +01:00
Mathias Vorreiter Pedersen
09c03d9a5f
C++: The virtual variable of a variable that is contained in a grouped memory location is that grouped memory location (or all aliased memory if it escapes).
2024-07-04 14:21:45 +01:00
Mathias Vorreiter Pedersen
399d47d2cb
C++: Cleanup
2024-07-04 14:21:43 +01:00
Mathias Vorreiter Pedersen
5e1c67f5f1
C++: Add a new 'MemoryLocation' that represents a set of allocations.
2024-07-04 14:21:42 +01:00
Paolo Tranquilli
3ae4cb2f9d
Merge pull request #16906 from github/redsun82/swift-codespace
...
Swift: add `git lfs` installation to codespace configuration
2024-07-04 14:55:31 +02:00
Paolo Tranquilli
5c7bbc0287
Swift: add git lfs installation to codespace configuration
2024-07-04 14:28:22 +02:00
Rasmus Wriedt Larsen
0a32f9fed6
Python: Update query metadata
2024-07-04 14:09:37 +02:00
Rasmus Wriedt Larsen
8d1113cdaf
Python: Fixup qhelp
2024-07-04 14:01:30 +02:00
Mathias Vorreiter Pedersen
c5c4f08bea
C++: Rename from 'getAllocation' to 'getAnAllocation'.
2024-07-04 12:12:00 +01:00
Mathias Vorreiter Pedersen
0b84329e8c
C++: Expose the 'AddressOperand' from both 'hasResultMemoryAccess' and 'hasOperandMemoryAccess' and add a boolean column indicating whether they relate to multiple 'Allocation's.
2024-07-04 12:11:59 +01:00
Mathias Vorreiter Pedersen
1c8cf3cd2c
C++: Sync identical files.
2024-07-04 12:11:58 +01:00
Mathias Vorreiter Pedersen
ffa55b4bf8
C++: Disable special casing of Phi operands in alias analysis. Instead, we simply add flow through them.
2024-07-04 12:11:57 +01:00
Mathias Vorreiter Pedersen
ef8532982c
C++: Sync identical files.
2024-07-04 12:11:56 +01:00
Mathias Vorreiter Pedersen
72679c82a9
C++: Add a new opcode and instruction.
2024-07-04 12:11:54 +01:00
Mathias Vorreiter Pedersen
4953e7e7fa
C++: Add tests.
2024-07-04 12:11:50 +01:00
Alvaro Muñoz
966a9b1652
Bump qlpack versions
2024-07-04 13:05:27 +02:00
Alvaro Muñoz
7d58beba67
Better control check support
2024-07-04 13:04:59 +02:00
Erik Krogh Kristensen
1c0c51faaf
Merge pull request #16904 from igfoo/igfoo/shouldExtract
...
JS: Remove call to shouldExtract
2024-07-04 12:44:54 +02:00
Tom Hvitved
d675304703
Merge pull request #16875 from hvitved/csharp/ssa-param-def
...
C#: Move implicit entry definitions inside method bodies in SSA construction
2024-07-04 10:51:06 +02:00
Tamás Vajk
456c649c7d
Merge pull request #16895 from tamasvajk/feature/fix-glob-pattern-processing
...
C#: Fix glob pattern processing: allow `**/` to match empty string
2024-07-04 10:46:36 +02:00
Ian Lynagh
95a418aa14
JS: Remove call to shouldExtract
...
It always returns true nowadays.
2024-07-04 09:42:07 +01:00
Mathias Vorreiter Pedersen
8e18e7d4e6
Merge pull request #16791 from MathiasVP/collection-content-2
...
C++: Add support for `Element` content
2024-07-04 08:52:33 +01:00
Tom Hvitved
da0909c080
Merge pull request #16896 from hvitved/ssa/dataflow-integration-prep
...
SSA: Add `BasicBlock.{getNode/1,length/0}` to the input signature
2024-07-03 19:56:35 +02:00
Mathias Vorreiter Pedersen
356d928544
C++: Accept test changes.
2024-07-03 18:16:20 +01:00
Mathias Vorreiter Pedersen
af28dd8eb4
C++: Add bsl models for 'array::front' and 'array::back'.
2024-07-03 18:14:10 +01:00
Mathias Vorreiter Pedersen
f9d6c63cbb
C++: Add more 'Argument[-1]' to 'ReturnValue' flow.
2024-07-03 17:27:22 +01:00
Mathias Vorreiter Pedersen
246f3fd3e2
C++: Fix 'emplace_after' model in bsl.
2024-07-03 17:21:10 +01:00
Ian Lynagh
ea16f72c6f
Java: Add changenote for dropping $SEMMLE_DIST support
2024-07-03 17:12:04 +01:00
Ian Lynagh
3260966e3b
Kotlin: Remove unused SEMMLE_DIST
2024-07-03 17:10:41 +01:00
Mathias Vorreiter Pedersen
5351c2734f
C++: Fix 'assign' models.
2024-07-03 17:01:43 +01:00
Mathias Vorreiter Pedersen
6d05324724
C++: Make sure the 'emplace' functions that return iterators are modeled via Element content.
2024-07-03 16:47:18 +01:00
Mathias Vorreiter Pedersen
e03f8084e6
C++: Fix yml file name.
2024-07-03 16:04:14 +01:00
Mathias Vorreiter Pedersen
c4dabb94d6
C++: Add models for 'array::front' and 'array::back'.
2024-07-03 16:03:25 +01:00
Porcupiney Hairs
808af28618
Python : Arbitrary codde execution due to Js2Py
...
Js2Py is a Javascript to Python translation library written in Python. It allows users to invoke JavaScript code directly from Python.
The Js2Py interpreter by default exposes the entire standard library to it's users. This can lead to security issues if a malicious input were directly.
This PR includes a CodeQL query along with a qhelp and testcases to detect cases where an untrusted input flows to an Js2Py eval call.
This query successfully detects CVE-2023-0297 in `pyload/pyload`along with it's fix.
The databases can be downloaded from the links bellow.
```
https://file.io/qrMEjSJJoTq1
https://filetransfer.io/data-package/a02eab7V#link
```
2024-07-03 19:06:34 +05:30
Taus
b779341ba6
Merge pull request #16885 from github/tausbn/python-fix-bad-join-in-function-resolution-type-tracker
...
Python: Fix bad join in function resolution
2024-07-03 13:59:13 +02:00
Tamas Vajk
6a036f4e84
Improve code quality
2024-07-03 12:45:47 +02:00
Alvaro Muñoz
69db192378
Bump qlpack versions
2024-07-03 12:40:48 +02:00
Mathias Vorreiter Pedersen
d7eac4d567
C++: Add change note.
2024-07-03 11:33:52 +01:00
Alvaro Muñoz
c70fb6e911
Consider toJson as a sanitizer for Code Injection in JS
2024-07-03 12:25:24 +02:00
Mathias Vorreiter Pedersen
b8c01e2901
C++: Accept test changes.
2024-07-03 11:18:21 +01:00
Mathias Vorreiter Pedersen
5be948533c
C++: Replace 'Element[*@]' with 'Element[@]'.
2024-07-03 11:18:13 +01:00
Rasmus Wriedt Larsen
f9536e9a66
Merge pull request #16883 from github/tausbn/python-fix-bad-join-in-import-resolution
...
Python: Fix bad join in `getImmediateModuleReference`
2024-07-03 11:40:01 +02:00
Tom Hvitved
4ae8720930
SSA: Add BasicBlock.{getNode/1,length/0} to the input signature
2024-07-03 11:32:35 +02:00
Owen Mansel-Chan
dfc59a45c2
Merge pull request #16894 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-07-03 10:17:16 +01:00
