Taus Brock-Nannestad
83ba8c9bf5
Python: Add LocalSourceNode and flowsTo
...
This fixes the major performance problem with type tracking on
some (pathological) databases.
The interface could probably be improved a bit. In particular, I'm
thinking that we might want to have `DataFlow::exprNode` return a
`LocalSourceNode` so that a cast isn't necessary in order to use
`flowsTo`.
I have added two `cached` annotations. The one on `flowsTo` is
crucial, as performance regresses without it. The one on
`simpleLocalFlowStep` may not be needed, but Java has a similar
annotation, and to me it makes sense to have this relation cached.
2020-11-05 16:26:03 +01:00
Erik Krogh Kristensen
e124ba66b4
moving jsdom sink to js/xss
2020-11-05 16:10:33 +01:00
james
f85f99c6c2
update ql-language-reference links
2020-11-05 14:54:14 +00:00
james
e5fff6445a
rename ql-handbook -> ql-language-reference
2020-11-05 14:43:39 +00:00
james
d749b839fa
ql lang spec: update links
2020-11-05 14:40:45 +00:00
james
21cdf896bb
first pass through files and links
2020-11-05 14:36:35 +00:00
Tom Hvitved
10ab3304c1
Merge pull request #4575 from hvitved/csharp/cfg/post-dominance
...
C#: Restrict post-dominance to normal execution
2020-11-05 15:31:13 +01:00
Nick Rolfe
4bda204118
Add classes for token kinds
2020-11-05 13:06:46 +00:00
Arthur Baars
296d4d0f47
Merge pull request #26 from github/aibaars/tokens
...
Store tokens into separate table
2020-11-05 14:03:26 +01:00
Anders Schack-Mulligen
45d117b68e
Merge pull request #4603 from pwntester/new_deser_sink
...
New UnsafeDeserialization sink and improvements to SnakeYaml sink
2020-11-05 13:09:15 +01:00
Arthur Baars
c565f323f6
Don't register extra tokens as children of the parent node
2020-11-05 12:53:58 +01:00
Rasmus Lerchedahl Petersen
6cecd3ba83
Python: Move and rename query
2020-11-05 11:49:39 +01:00
Alvaro Muñoz
f103955f38
change qldoc formating according to LSP suggestion
2020-11-05 11:48:26 +01:00
james
6ed290f2bd
rename rst files
2020-11-05 09:43:40 +00:00
CodeQL CI
89a808cafe
Merge pull request #4552 from erik-krogh/tsImport
...
Approved by asgerf
2020-11-05 09:23:58 +00:00
CodeQL CI
b55f18bffd
Merge pull request #4549 from erik-krogh/pruneReturn
...
Approved by asgerf
2020-11-05 09:13:21 +00:00
CodeQL CI
c85f817cee
Merge pull request #4579 from erik-krogh/redos
...
Approved by asgerf
2020-11-05 08:38:44 +00:00
Robert Marsh
2f204869e7
Merge pull request #4604 from criemen/ir-block-sort-order
...
C++, C# IR: Stabilize sort order for basic blocks.
2020-11-04 18:22:23 -05:00
Erik Krogh Kristensen
342b6a4f2d
Update javascript/ql/src/semmle/javascript/security/performance/SuperlinearBackTracking.qll
...
Co-authored-by: Asger F <asgerf@github.com >
2020-11-04 22:37:56 +01:00
Tom Hvitved
1ba9e29a40
C#: Precise data flow for EntityFramework(Core)
2020-11-04 19:48:03 +01:00
Alvaro Muñoz
302062b670
Merge branch 'new_deser_sink' of https://github.com/pwntester/ql into new_deser_sink
2020-11-04 18:58:57 +01:00
Alvaro Muñoz
6fef63306e
add qldoc
2020-11-04 18:58:41 +01:00
Erik Krogh Kristensen
e16fa0668a
update expected output
2020-11-04 18:24:31 +01:00
Arthur Baars
180df8a63d
Make classes non-abstract
2020-11-04 18:18:45 +01:00
Asger Feldthaus
5eb3067f58
JS: Add test case
2020-11-04 16:50:23 +00:00
Geoffrey White
48628fa195
Merge pull request #4589 from criemen/model-vector-emplace
...
C++: Model std::vector emplace and emplace_back()
2020-11-04 16:09:31 +00:00
Tom Hvitved
b5063bbcb5
Merge pull request #4495 from hvitved/csharp/dataflow/summaries
...
C#: Shared interface/implementation for flow summaries
2020-11-04 17:02:19 +01:00
Nick Rolfe
69b1d7c0dc
Make union-wrapping classes abstract to fix results for toString/describeQlClass
2020-11-04 16:01:51 +00:00
Cornelius Riemenschneider
78d885ee7d
C++: Accept test output.
2020-11-04 16:45:07 +01:00
Cornelius Riemenschneider
44d6584fa2
C++, C#: Auto-format.
2020-11-04 16:26:56 +01:00
Cornelius Riemenschneider
a13947424a
C++, C# IR: Stabilize sort order for basic blocks.
2020-11-04 16:26:56 +01:00
Cornelius Riemenschneider
e7e5754270
C++: Add taint model for std::vector::emplace/_back.
2020-11-04 16:20:01 +01:00
Erik Krogh Kristensen
03c46c9be0
autoformat
2020-11-04 16:18:24 +01:00
yoff
79fcf598f3
Merge pull request #4608 from RasmusWL/patch-1
...
Python: Remove unnecessary cached annotation from adjacentRefUse
2020-11-04 16:08:30 +01:00
Cornelius Riemenschneider
62a02cde73
C++: Add test to show missing taint steps for std::vector::emplace/_back
2020-11-04 16:07:15 +01:00
Cornelius Riemenschneider
081ab1e2bb
C++: Add std::vector::emplace/_back to our STL model.
2020-11-04 16:07:08 +01:00
Rasmus Lerchedahl Petersen
38b2bb2828
Python: Add testfile with regressions
2020-11-04 15:55:59 +01:00
Ian Lynagh
6ff939db5c
Merge pull request #4432 from dbartol/dbartol/temporaries/work
...
C++: Represent temporary object initialization in AST and IR
2020-11-04 14:38:45 +00:00
Rasmus Lerchedahl Petersen
6df3b8d524
Python: Update query and expectation
2020-11-04 15:17:38 +01:00
Rasmus Wriedt Larsen
31247739d7
Python: Remove unnecessary cached annotation from adjacentRefUse
...
As discussed in https://github.com/github/codeql/pull/4544#pullrequestreview-516575676
2020-11-04 15:16:08 +01:00
Rasmus Lerchedahl Petersen
9baa7b73da
Merge branch 'main' of github.com:github/codeql into SharedDataflow_PointsToImpliesDataflow
2020-11-04 15:05:59 +01:00
yoff
62cb4ec974
Merge pull request #4605 from RasmusWL/python-fix-django-response-modeling
...
Python: fix django response modeling
2020-11-04 15:00:52 +01:00
Arthur Baars
86aa05e3cb
Address comments
2020-11-04 14:49:47 +01:00
Arthur Baars
c3e8d85f0b
Tolerate tokens containing invalid UTF-8
2020-11-04 14:46:31 +01:00
Tom Hvitved
131a05563a
C#: Disable shared compilation when building with Mono+MSBuild
2020-11-04 14:16:25 +01:00
Porcupiney Hairs
0a028dcb47
Java : Refactor all instances of java.net.URI into TypeUri
2020-11-04 18:23:26 +05:30
Arthur Baars
8056186c3c
Hide disconnected tokens
2020-11-04 13:35:24 +01:00
Arthur Baars
96423d2e8e
Remove describeQlClass from union types
...
The descriptions of the underlying types are more interesting.
2020-11-04 13:35:24 +01:00
Arthur Baars
053c9f60a4
Store tokens in a separate table
2020-11-04 13:35:24 +01:00
Nick Rolfe
9e49991859
Merge pull request #27 from github/extractor-pack-script
...
Add scripts to create extractor pack locally
2020-11-04 12:20:45 +00:00
