Benjamin Rodes
13cf555cee
False positive fix for cpp/uninitialized-local
2024-01-29 13:21:05 -05:00
Joe Farebrother
3abd67064d
Add change note
2024-01-29 16:33:07 +00:00
Mathias Vorreiter Pedersen
5024df9c4e
C++: Add change note.
2024-01-29 16:30:55 +00:00
Joe Farebrother
94075ef148
Fix FPs - consider flow through fields when determining whether a view is masked, and find more instances of findViewById.
2024-01-29 16:25:38 +00:00
Joe Farebrother
8d201626e1
Add documentation
2024-01-29 16:25:38 +00:00
Joe Farebrother
aa78050933
Implement checks for elements hidden by their xml attributes
2024-01-29 16:25:38 +00:00
Joe Farebrother
6081f18089
Add unit tests + make some fixes
2024-01-29 16:25:37 +00:00
Joe Farebrother
8582093e65
Implement checks for parent views being hidden
2024-01-29 16:25:37 +00:00
Joe Farebrother
1b13597d72
Implement checks for calls that may safely mask information
2024-01-29 16:25:37 +00:00
Joe Farebrother
5dd0addfc2
Add sensitive text flow query
2024-01-29 16:25:36 +00:00
Mathias Vorreiter Pedersen
ea79a84c2e
C++: Accept test changes.
2024-01-29 16:24:44 +00:00
Mathias Vorreiter Pedersen
ebd1595fbe
C++: Fix FP by concluding that a less-than-zero check also implies a not-equal-to-EOF check.
2024-01-29 16:24:36 +00:00
Mathias Vorreiter Pedersen
7e29141196
C++: Add FP test.
2024-01-29 16:23:37 +00:00
Ben Rodes
308a3b533f
Update cpp/ql/src/change-notes/2024-01-29-false_positive_incorrect_string_type_conversion.md
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-01-29 09:35:59 -05:00
Mathias Vorreiter Pedersen
aeae208dc3
Merge pull request #15456 from MathiasVP/fix-scanf-fp
...
C++: Fix FP in `cpp/incorrectly-checked-scanf`
2024-01-29 14:30:20 +00:00
Benjamin Rodes
6f17c432d9
Change log
2024-01-29 09:19:39 -05:00
Mathias Vorreiter Pedersen
320092092d
C++: Accept test changes.
2024-01-29 14:11:07 +00:00
Mathias Vorreiter Pedersen
a4727b5597
C++: Fix 'asExpr' duplication.
2024-01-29 14:11:01 +00:00
Mathias Vorreiter Pedersen
044d94c580
C++: Add change note
2024-01-29 13:47:17 +00:00
Michael Nebel
cda09478c5
C# Update expected test output and remove false positive.
2024-01-29 14:37:25 +01:00
Michael Nebel
63c06b72b1
C#: Chop dataflow of spread into smaller steps and make sure to only propagate element flow for the spread operator.
2024-01-29 14:34:57 +01:00
Michael Nebel
b6f94ea44a
C#: Add example test of field flow via the spread operator, which leads to a false positive.
2024-01-29 14:30:52 +01:00
Rasmus Wriedt Larsen
5867fb3d29
Python: Add change-note
2024-01-29 14:30:20 +01:00
Rasmus Wriedt Larsen
3f0dc2b022
Python: Model the psycopg package
2024-01-29 14:30:20 +01:00
Michael Nebel
cd5f678e1c
C#: Add IntegerCollection class to the CollectionFlow tests and update line numbers in expected test output.
2024-01-29 14:28:05 +01:00
yoff
391ca5d8a6
Merge pull request #15390 from Marcono1234/marcono1234/python-ascii-regex-flag
2024-01-29 14:27:50 +01:00
Tamás Vajk
39b32a9068
Merge pull request #15454 from tamasvajk/standalone/cshtml-default
...
C#: Change asp.net core view generation to be opt out
2024-01-29 13:22:44 +01:00
Tamas Vajk
4dffb3bfdd
Change integration test to specify .net 6.0 as target framework
2024-01-29 12:40:51 +01:00
Mathias Vorreiter Pedersen
a5794509ec
C++: Accept test changes.
2024-01-29 11:33:14 +00:00
Mathias Vorreiter Pedersen
41f44f598a
C++: Explicitly check that a check for EOF isn't present.
2024-01-29 11:33:14 +00:00
Tamas Vajk
f16aa034a2
Code quality improvement
2024-01-29 12:29:01 +01:00
Ian Lynagh
79d9109850
Merge pull request #15428 from igfoo/igfoo/catch_illegal_arg
...
Kotlin: Catch/ignore a IllegalArgumentException exception
2024-01-29 11:27:38 +00:00
Ian Lynagh
76e417c23e
Merge pull request #14940 from igfoo/igfoo/comments
...
Kotlin 2: Comment improvements
2024-01-29 11:27:19 +00:00
Mathias Vorreiter Pedersen
3a66fd7175
C++: Add FP test.
2024-01-29 10:59:38 +00:00
Tamas Vajk
7a8d83e859
C#: Add integration test with asp.net core view generation on dotnet 6
...
Source generators are needed for asp.net core view generation. Dotnet 6 is the first version where we support view generation. This commit adds an integration test for this.
2024-01-29 11:52:55 +01:00
Tamas Vajk
92fec66370
C#: Add integration test for disabled asp.net core view generation
2024-01-29 11:52:55 +01:00
Tamas Vajk
d7de5fcfcb
C#: Change asp.net core view generation to be opt out
2024-01-29 10:52:26 +01:00
Tony Torralba
49d6d3fa0c
Merge pull request #15449 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-01-29 10:27:32 +01:00
github-actions[bot]
6d06c9cb7d
Add changed framework coverage reports
2024-01-29 00:16:27 +00:00
Marcono1234
d8fe0f5bb8
Java: Document which assignment type is covered by which class
2024-01-28 19:03:36 +01:00
Maiky
c2c4d9e4d1
` change to <code>
...
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2024-01-27 14:08:55 +01:00
Mathias Vorreiter Pedersen
a391f7802d
C++: Add a test.
2024-01-27 13:08:52 +00:00
maikypedia
d7314a1689
File format
2024-01-27 14:07:36 +01:00
Marcono1234
1ad08efe08
Python: Support a (ASCII) inline regex flag
2024-01-26 22:18:49 +01:00
Ben Rodes
f79846467e
Update cpp/ql/src/Security/CWE/CWE-704/WcharCharConversion.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-01-26 15:25:08 -05:00
Benjamin Rodes
b7648bcf27
Adding test cases.
2024-01-26 15:19:07 -05:00
Benjamin Rodes
562221f48e
False positive fix.
2024-01-26 13:27:14 -05:00
Geoffrey White
d19ad49313
Merge pull request #15381 from geoffw0/cppfiles
...
C++: Report any extracted file as successfully extracted
2024-01-26 18:18:27 +00:00
Edward Minnix III
4602f8933d
Merge pull request #15292 from egregius313/egregius313/java/dataflow/common-sanitizers/uuid-and-date
...
Java: Add `java.util.UUID` and `java.util.Date` to the `SimpleTypeSanitizer` class
2024-01-26 13:16:18 -05:00
Geoffrey White
b125d2c9ab
Merge branch 'main' into cppfiles
2024-01-26 16:47:48 +00:00
