Stephan Brandauer
|
db77c6b9a3
|
Java: mark functional expressions as likely not sinks
|
2023-05-25 16:39:27 +02:00 |
|
Stephan Brandauer
|
76d731a61d
|
improve CannotBeTaintedCharacteristic
|
2023-05-25 16:28:07 +02:00 |
|
Paolo Tranquilli
|
cc271d682e
|
Codegen: ignore synth properties in cppgen
|
2023-05-25 16:05:25 +02:00 |
|
Paolo Tranquilli
|
b09386a2c8
|
Codegen: ignore synth properties in Raw.qll
|
2023-05-25 16:05:12 +02:00 |
|
Paolo Tranquilli
|
00fb796f3b
|
Codegen: ignore synth properties in dbschemegen
|
2023-05-25 16:05:12 +02:00 |
|
Paolo Tranquilli
|
d2c9847a79
|
Codegen: parse synth property modifier
|
2023-05-25 16:05:12 +02:00 |
|
Paolo Tranquilli
|
165ac3eeaa
|
Codegen: define and propagate synth property flag
|
2023-05-25 16:05:12 +02:00 |
|
Paolo Tranquilli
|
242d263e8a
|
Codegen: move ipa info from ql.Class to ql.Property
|
2023-05-25 16:05:11 +02:00 |
|
Asger F
|
9e8cef5e1b
|
Ruby: fix type-tracking flow-through for new->initialize calls
|
2023-05-25 15:03:38 +02:00 |
|
Asger F
|
93678e5d36
|
Ruby: fix name of super calls in singleton methods
|
2023-05-25 15:03:34 +02:00 |
|
Geoffrey White
|
791ba81403
|
Swift: Add change note.
|
2023-05-25 13:27:23 +01:00 |
|
Stephan Brandauer
|
9a041243ff
|
Java: fine-tune characteristics
|
2023-05-25 14:16:32 +02:00 |
|
Stephan Brandauer
|
f224a40dec
|
Java: use containing call as call context, not argument
|
2023-05-25 14:16:23 +02:00 |
|
Stephan Brandauer
|
33fdb0fc52
|
Java: remove superfluous characteristic
|
2023-05-25 14:16:23 +02:00 |
|
Taus
|
2000f22533
|
Java: Port over characteristics from codex branch
|
2023-05-25 14:16:23 +02:00 |
|
Taus
|
11ab7e2e71
|
Java: Share argument indexing logic
Adds a utility predicate for turning integer indices into the desired string representation.
|
2023-05-25 14:16:23 +02:00 |
|
Taus
|
04b8bf35d4
|
Java: Avoid overlapping import
Importing `AutomodelEndpointTypes` inside `AutomodelSharedUtil` non-privately made it overlap with the imports in the candidate extraction queries.
|
2023-05-25 14:16:23 +02:00 |
|
Stephan Brandauer
|
db61a2d099
|
Java: share isKnownKind between modes
|
2023-05-25 14:16:16 +02:00 |
|
Stephan Brandauer
|
d93ad9b398
|
Java: remove unneeded abstract metadata extractor classes and fix some names
|
2023-05-25 14:16:11 +02:00 |
|
Stephan Brandauer
|
6e21f14c09
|
Java: update extraction query metadata
|
2023-05-25 14:16:03 +02:00 |
|
Stephan Brandauer
|
7c3bc26c41
|
Java: make input an actual string, not an integer
|
2023-05-25 14:15:59 +02:00 |
|
Stephan Brandauer
|
185ad101b3
|
Java: add application-mode and framework-mode tags to extraction queries
|
2023-05-25 14:15:50 +02:00 |
|
Taus
|
9b30f9a476
|
Java: Add negative characteristic for static calls
|
2023-05-25 14:15:49 +02:00 |
|
Taus
|
6fc16574b3
|
Java: Add QL support for automodel application mode
|
2023-05-25 14:15:49 +02:00 |
|
Paolo Tranquilli
|
5e66885a8e
|
Swift: add change note
|
2023-05-25 14:00:04 +02:00 |
|
erik-krogh
|
9f5bf8fb22
|
also fix the first code-block
|
2023-05-25 13:56:29 +02:00 |
|
erik-krogh
|
765076bcba
|
fix whitespace in the samples in ReDoS.qhelp
|
2023-05-25 13:28:39 +02:00 |
|
Paolo Tranquilli
|
51f1a5dcc8
|
Swift: remove getOpaqueExpr from OpenExistentialExpr's children
|
2023-05-25 13:05:21 +02:00 |
|
Paolo Tranquilli
|
7b76aa34bd
|
Swift: fix CFG inconsistency on TapExpr
|
2023-05-25 13:05:21 +02:00 |
|
Paolo Tranquilli
|
b26b0a6e43
|
Swift: remove property wrapper CFG inconsistencies
|
2023-05-25 13:05:21 +02:00 |
|
Sim4n6
|
52dd247a81
|
Removed redundant cast
|
2023-05-25 11:55:13 +01:00 |
|
Paolo Tranquilli
|
7878bc3cc1
|
Swift: remove property wrapper AST inconsistencies
|
2023-05-25 12:15:22 +02:00 |
|
Paolo Tranquilli
|
5de8934525
|
Merge pull request #13277 from github/redsun82/swift-consistency-accept
Swift: add consistency check and accept results for the moment
|
2023-05-25 11:56:54 +02:00 |
|
Tony Torralba
|
a276cc3094
|
Convert all command injection sinks to MaD format
|
2023-05-25 11:41:32 +02:00 |
|
Paolo Tranquilli
|
f5070bb082
|
Merge pull request #13282 from github/redsun82/swift-change-note-check
Swift: turn change note check on
|
2023-05-25 11:23:10 +02:00 |
|
Paolo Tranquilli
|
d1be942f04
|
Swift: turn change note check on
|
2023-05-25 11:04:21 +02:00 |
|
Paolo Tranquilli
|
ac31209233
|
Swift: add change notes to consistency queries
|
2023-05-25 10:56:25 +02:00 |
|
Sim4n6
|
09c97ce0da
|
Added one more example to the qhelp
|
2023-05-25 09:41:22 +01:00 |
|
Sim4n6
|
7d68f6afc9
|
added ActiveSupport::Multibyte::Chars normalize() sink
|
2023-05-25 09:21:55 +01:00 |
|
Paolo Tranquilli
|
8d656a996b
|
Swift: add QLdoc to AST consistency checks
|
2023-05-25 09:56:39 +02:00 |
|
Tony Torralba
|
ca83b7c0f2
|
Merge pull request #13280 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2023-05-25 09:33:09 +02:00 |
|
Sim4n6
|
d772bb213a
|
Added three more Unicode Normalization sinks
|
2023-05-25 03:10:00 +01:00 |
|
github-actions[bot]
|
5be4f6e58b
|
Add changed framework coverage reports
|
2023-05-25 00:16:11 +00:00 |
|
Mathias Vorreiter Pedersen
|
ec192d621c
|
C++: Whitespace commit to make qhelp show up in diff.
|
2023-05-24 16:13:42 -07:00 |
|
Mathias Vorreiter Pedersen
|
ebc1d5feff
|
Merge branch 'main' into rdmarsh2/cpp/improve-constant-off-by-one
|
2023-05-24 16:07:08 -07:00 |
|
Mathias Vorreiter Pedersen
|
298013a57e
|
C++: Add in-barrier on sources to reduce duplication.
|
2023-05-24 16:02:27 -07:00 |
|
Mathias Vorreiter Pedersen
|
64d7b4923d
|
C++: Prune flow states based on 'PointerArithmeticToDerefConfig'.
|
2023-05-24 16:02:17 -07:00 |
|
Mathias Vorreiter Pedersen
|
f9a464605b
|
Merge pull request #13226 from rdmarsh2/rdmarsh2/cpp/cobo-neq-refinement
C++: fix equality refinement in new range analysis
|
2023-05-24 15:19:02 -07:00 |
|
Mathias Vorreiter Pedersen
|
90824d01b4
|
C++: Add change note.
|
2023-05-24 14:39:05 -07:00 |
|
Robert Marsh
|
7404bd9c4b
|
Merge branch 'main' into rdmarsh2/cpp/cobo-neq-refinement
|
2023-05-24 14:13:38 -04:00 |
|