Arthur Baars
|
c35283cefb
|
Merge pull request #77 from github/aibaars/global-variables
Add global variables
|
2020-12-21 12:15:31 +01:00 |
|
Arthur Baars
|
f0ddeaa9f2
|
Merge pull request #81 from github/aibaars/revert-dup-code
Update ruby.dbscheme.stats
|
2020-12-21 12:15:10 +01:00 |
|
Neal Caffery
|
ee0257836f
|
removed, as it fixed by #4848
|
2020-12-21 19:05:37 +08:00 |
|
Erik Krogh Kristensen
|
cbad705029
|
general performance improvements in the ReDoS utility library
|
2020-12-21 11:49:21 +01:00 |
|
Arthur Baars
|
ad1782b620
|
Address comments
|
2020-12-21 11:01:46 +01:00 |
|
Arthur Baars
|
8469bd3688
|
Uncomment getAPrimaryQlClass()
|
2020-12-21 11:01:46 +01:00 |
|
Arthur Baars
|
dc0de9132e
|
Add GlobalVariable
|
2020-12-21 11:01:46 +01:00 |
|
Arthur Baars
|
1ada9feda7
|
Make VariableAccess "abstract"
|
2020-12-21 11:01:46 +01:00 |
|
Arthur Baars
|
ebacec41d5
|
Update ruby.dbscheme.stats
|
2020-12-21 10:58:25 +01:00 |
|
Nick Rolfe
|
b1b2815c26
|
Merge pull request #80 from github/aibaars/revert-dup-code
Updates after CodeQL upgrade to 2.4.1
|
2020-12-21 09:57:59 +00:00 |
|
Arthur Baars
|
d4874641a3
|
Revert "Add duplicate code tables to dbscheme"
This reverts commit 4c699fcb32.
|
2020-12-21 10:45:59 +01:00 |
|
Arthur Baars
|
bf232f0582
|
Update formatting for CodeQL 2.4.1
|
2020-12-21 10:45:59 +01:00 |
|
Tom Hvitved
|
591f90f98e
|
C#: Add change note
|
2020-12-21 10:26:49 +01:00 |
|
Arthur Baars
|
ff8ea6d44f
|
Merge pull request #79 from github/test_checks
Add all the TRAP check flags in qltest workflow
|
2020-12-21 10:20:47 +01:00 |
|
Tom Hvitved
|
b5a1e039a4
|
C#: Merge queries FormatInvalid.ql, FormatMissingArgument.ql, and FormatUnusedArgument.ql
|
2020-12-21 10:13:56 +01:00 |
|
Tom Hvitved
|
8d6c69bf74
|
C#: Move Expr::hasValue() to DotNet::Expr
|
2020-12-21 09:46:45 +01:00 |
|
Mathias Vorreiter Pedersen
|
06366fa320
|
Merge pull request #4856 from jbj/gvn-wrapper-test
C++: Test the AST wrapper for IR GVN
|
2020-12-21 09:31:10 +01:00 |
|
Tom Hvitved
|
16aee6e71e
|
Merge pull request #4842 from hvitved/csharp/format-method-no-insertion-param
C#: Recognize format methods without insertion parameters
|
2020-12-21 09:25:18 +01:00 |
|
Jonas Jensen
|
3236cbd83e
|
C++: Test the AST wrapper for IR GVN
Out of our 3 GVN libraries, the one we actually use in production didn't
have tests -- except indirectly through `diff_ir_expr.ql`.
|
2020-12-21 08:21:02 +01:00 |
|
neal1991
|
b9d24b8255
|
fix for issue #4849
|
2020-12-21 08:54:15 +08:00 |
|
neal1991
|
eac83df40b
|
fix for issue #4848
|
2020-12-21 08:52:42 +08:00 |
|
luchua-bc
|
4ec78d04f8
|
Insecure LDAP authentication
|
2020-12-21 00:15:15 +00:00 |
|
Erik Krogh Kristensen
|
3a43421193
|
add missing qhelp
|
2020-12-19 00:02:42 +01:00 |
|
yo-h
|
402ed04189
|
Merge pull request #4844 from johnlugton/servicestack
Add provisional support for ServiceStack framework to feature branch
|
2020-12-18 16:24:27 -05:00 |
|
Nick Rolfe
|
5a54026bcc
|
Add all the TRAP check flags in qltest workflow
|
2020-12-18 17:25:28 +00:00 |
|
John Lugton
|
059d6b0e0f
|
Fix warning in ServiceStack.qll
|
2020-12-18 08:34:06 -08:00 |
|
John Lugton
|
563dc62c33
|
Improve qldoc for ServiceStack.qll
|
2020-12-18 08:23:27 -08:00 |
|
Erik Krogh Kristensen
|
05569187b4
|
improve performance of suffix checking
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
6369374224
|
implement new algorithm for detecting superlinear backtracking in regular expressions
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
7ce91e9146
|
introduce cannonical representatives of RegExpTerms to decrease the number of InputSymbols in the NFA
|
2020-12-18 17:21:11 +01:00 |
|
Erik Krogh Kristensen
|
34dda6d38b
|
refactor to share predicates between regular expression queries
|
2020-12-18 16:15:56 +01:00 |
|
Rasmus Wriedt Larsen
|
49f902d28b
|
Merge pull request #4757 from yoff/python-dataflow-synthetic-callables
Python: Enclosing callable for synthetic arguments
|
2020-12-18 16:06:26 +01:00 |
|
yoff
|
a08eb99778
|
Merge pull request #4779 from RasmusWL/django-class-based-handlers
Python: Add modeling of django class based view handlers
|
2020-12-18 15:58:51 +01:00 |
|
Anders Schack-Mulligen
|
5106d5df53
|
Merge pull request #4833 from luchua-bc/java-broken-crypto-algorithms
Java: Add missing broken crypto algorithms
|
2020-12-18 15:12:29 +01:00 |
|
Rasmus Wriedt Larsen
|
3e6296c7b8
|
Python: Fix grammar in QLDoc
|
2020-12-18 14:54:14 +01:00 |
|
Rasmus Wriedt Larsen
|
ed11e8f916
|
Python: Simplify predicate implementation
Co-authored-by: yoff <lerchedahl@gmail.com>
|
2020-12-18 14:52:20 +01:00 |
|
Mathias Vorreiter Pedersen
|
b5102043b1
|
Fix comments.
|
2020-12-18 14:19:02 +01:00 |
|
Chris Smowton
|
de4cdda839
|
Merge pull request #4841 from smowton/smowton/admin/mergeback-126-2020-12-16
Mergeback rc/1.26
|
2020-12-18 12:59:06 +00:00 |
|
Mathias Vorreiter Pedersen
|
f5e4725642
|
C++: Propagate flow from instruction's to non-exact operands for arrays and unions, and accept test changes.
|
2020-12-18 13:54:34 +01:00 |
|
Arthur Baars
|
dddf0a66d9
|
Merge pull request #78 from github/typo
fix typo in comment
|
2020-12-18 13:50:58 +01:00 |
|
Nick Rolfe
|
72319b538f
|
fix typo in comment
|
2020-12-18 12:47:31 +00:00 |
|
Rasmus Lerchedahl Petersen
|
e6e1cc2398
|
Python: Remember to accept failing tests
|
2020-12-18 13:38:14 +01:00 |
|
Rasmus Lerchedahl Petersen
|
712765c185
|
Python: Use ImportExp instead of SSA nodes
This also reverts the previous commit.
It should be squashed with that one, but for now we keep the history,
so we can track the performance tests.
|
2020-12-18 13:30:24 +01:00 |
|
Arthur Baars
|
8f1c916242
|
Merge pull request #66 from github/aibaars/cfg-2
CFG: make all simple nodes instance of StandardLeftToRight{Pre,Post}Tree
|
2020-12-18 13:26:05 +01:00 |
|
Erik Krogh Kristensen
|
b2116dc5b4
|
add more tests for polynomial/exponential redos
|
2020-12-18 13:19:17 +01:00 |
|
Chris Smowton
|
5647a47bd4
|
Merge pull request #436 from sauyon/InVisionApp/main
Refactor HTTP tests
|
2020-12-18 12:08:46 +00:00 |
|
Mathias Vorreiter Pedersen
|
2bf8e47932
|
Merge branch 'main' into default-taint-tracking-operand-instruction-interleaving
|
2020-12-18 11:59:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
7ccd48e53c
|
Make DefaultTaintTracking do operand->instruction->operand interleaving like DataFlowUtil.
|
2020-12-18 11:57:16 +01:00 |
|
Nick Rolfe
|
c4ca537574
|
Merge pull request #75 from github/stmts_exprs
Add AST classes and tests for operations
|
2020-12-18 10:40:27 +00:00 |
|
Nick Rolfe
|
6c828214f7
|
Make import private
|
2020-12-18 10:23:19 +00:00 |
|