86439 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Owen Mansel-Chan	805e31fdb9	Update test expectations	2025-07-16 15:25:45 +01:00
Jeroen Ketema	807ab986f4	C++: Update more exoected test results	2025-07-16 16:19:40 +02:00
Mathias Vorreiter Pedersen	a9fb49a2c3	Merge pull request #20066 from MathiasVP/dont-summarize-function-pointer-calls ... C++: Don't wrap calls through function pointers in `FunctionWithWrappers`	2025-07-16 14:57:14 +01:00
Jeroen Ketema	2709bf0615	C++: Add test that shows that IR generation for <=> is broken	2025-07-16 15:54:18 +02:00
Owen Mansel-Chan	7d4a70cc1d	Add change notes	2025-07-16 14:44:24 +01:00
Owen Mansel-Chan	ad60aff860	Update which sink kinds are shared between languages	2025-07-16 14:42:12 +01:00
Owen Mansel-Chan	fdd1e3fefe	Use MaD models for unsafe deserialization sinks when possible ... Many of the unsafe deserialization sinks have to stay defined in QL because they have custom logic that cannot be expressed in MaD models.	2025-07-16 14:42:07 +01:00
Mathias Vorreiter Pedersen	8b953e4f22	C++: No need for 'resolveCall' anymore.	2025-07-16 14:28:04 +01:00
Mathias Vorreiter Pedersen	df4b338c5d	C++: Add change notes.	2025-07-16 14:11:09 +01:00
Jeroen Ketema	1990438376	JS: Fix import ... The import should not have been private, because we want users to still be able to import this file and have access to the crypto algorithms.	2025-07-16 14:41:50 +02:00
Jeroen Ketema	24bea738c9	Shared: Add missing QLDoc and change note	2025-07-16 14:37:43 +02:00
Simon Friis Vindum	7f8829ad8e	Rust: Add additional inline expectation ... Co-authored-by: Arthur Baars <aibaars@github.com>	2025-07-16 14:00:27 +02:00
Mathias Vorreiter Pedersen	ca913b452c	C++: Don't summarize calls through function pointers in FunctionWithWrappers.	2025-07-16 11:51:46 +01:00
Jeroen Ketema	200d46f5c7	Merge pull request #20060 from jketema/typeid-fix ... C++: Fix typeid IR translation	2025-07-16 12:40:03 +02:00
Simon Friis Vindum	bbd7ed57ce	Rust: Add inline expectation	2025-07-16 12:32:35 +02:00
Michael Nebel	e9fdca7d39	C#: Address review comments.	2025-07-16 11:12:25 +02:00
Chris Smowton	d6a3b2e91f	Merge pull request #20065 from smowton/smowton/fix/web.config ... C#: Make web.config match case insensitive (with change note)	2025-07-16 09:52:34 +01:00
Michael Nebel	c5357ff556	Merge pull request #20008 from Hug0Vincent/csharp ... feat: add getASupertype() predicate in ValueOrRefType.	2025-07-16 10:39:57 +02:00
Chris Smowton	a537c0091e	change note	2025-07-16 09:06:38 +01:00
Simon Friis Vindum	a508089df8	Rust: Improvements to tuple type inference based on PR feedback	2025-07-16 09:38:29 +02:00
Geoffrey White	d264fb5865	Merge pull request #20042 from geoffw0/sinknoise ... Rust: Make rust/summary/query-sinks less noisy	2025-07-16 08:36:16 +01:00
Michael Nebel	70bf61dc57	C#: Convert Deserialization tests to use inline expectations.	2025-07-16 08:41:58 +02:00
Michael Nebel	8f8b0428ab	C#: Add change-note.	2025-07-16 08:41:56 +02:00
Michael Nebel	eba901f610	C#: Update flow summaries expected output.	2025-07-16 08:41:55 +02:00
Michael Nebel	95763dd225	C#: Add some models for SerializationInto and SerializationInfoEnumerator.	2025-07-16 08:41:53 +02:00
Michael Nebel	5c05ff843a	C#: Improve the models for System.Text.Encoding.[GetBytes|GetChars].	2025-07-16 08:41:52 +02:00
Michael Nebel	064c4fca12	C#: Add models for the remaining overloads of System.Xml.XmlDictionaryReader.CreateBinaryReader.	2025-07-16 08:41:50 +02:00
Michael Nebel	3ae69d5f3d	C#: Promote the generated System.Xml.XmlDictionaryReader.CreateBinaryReader models to manual models.	2025-07-16 08:41:49 +02:00
Michael Nebel	8ee16f68a7	C#: Update test expected output.	2025-07-16 08:41:48 +02:00
Michael Nebel	13b40bbab4	C#: Fix erroneous model the MemoryStream constructor (and align with the other models).	2025-07-16 08:41:46 +02:00
Michael Nebel	4036140f4b	C#: Add Deserialize testcase.	2025-07-16 08:41:45 +02:00
Kevin Stubbings	504ae0f35a	Update go path sanitizers and sinks	2025-07-16 06:12:45 +00:00
Hugo	8c82405b5b	Update 2025-06-10-getasupertype.md	2025-07-16 00:35:30 +02:00
Hugo	6384cf2e4f	Update predicate name	2025-07-16 00:35:14 +02:00
Jeroen Ketema	529712122c	C++: Address review comments	2025-07-15 22:15:11 +02:00
James Frank	b9acaa0cbd	Make web.config match case insensitive	2025-07-15 15:34:42 -04:00
Jeroen Ketema	a08d594371	C++: Introduce TypeidInstruction base class	2025-07-15 21:31:24 +02:00
Jeroen Ketema	58aa7588e5	Merge pull request #20059 from MathiasVP/no-more-as-expr-inUncontrolledProcessOperation ... C++: Reduce duplication in `cpp/uncontrolled-process-operation`	2025-07-15 21:17:08 +02:00
Jeroen Ketema	54f11ca611	C++: Fix typo in comment	2025-07-15 20:40:57 +02:00
Jeroen Ketema	70bff4e726	C++: Fix typeid IR translation	2025-07-15 20:24:17 +02:00
Chris Smowton	16f3fc6c33	Merge pull request #20056 from github/smowton/fix/tainted-path-is-local ... Golang: Mark filepath.IsLocal as a tainted-path sanitizer guard	2025-07-15 17:40:07 +01:00
Mathias Vorreiter Pedersen	327c4b345d	Merge pull request #20058 from jketema/typeid-test ... C++: Add test showing that the IR translation for `typeid` is broken	2025-07-15 16:55:16 +01:00
Chris Smowton	b71f9ae240	Fix function qname	2025-07-15 16:37:30 +01:00
Jeroen Ketema	477edd215c	C++: Add test showing that the IR translation for typeid is broken	2025-07-15 17:29:00 +02:00
Paolo Tranquilli	fd8ab05724	Merge branch 'main' into redsun82/cargo-upgrade-2	2025-07-15 17:25:40 +02:00
Owen Mansel-Chan	9ef22fff8e	Update SnakeYaml reference to note that it is outdated	2025-07-15 15:27:01 +01:00
Kasper Svendsen	10a678dcbd	Java lib qlpack: Enable overlay compilation	2025-07-15 16:23:40 +02:00
Kasper Svendsen	9c3e275e66	Merge pull request #20011 from kaspersv/kaspersv/discard-xml ... Overlay: Add XML and Java property discarding	2025-07-15 16:13:38 +02:00
Chris Smowton	ac72f8523a	Change note	2025-07-15 14:51:19 +01:00
Chris Smowton	c8eefb7c5c	Golang: Mark filepath.IsLocal as a tainted-path sanitizer guard	2025-07-15 14:47:17 +01:00