Tom Hvitved
307ac7f0b3
Data flow: Remove UntypedAccessPath again
2020-02-17 10:32:27 +01:00
Jonas Jensen
0aba965a9e
C++: Don't mention deprecated class
...
The language tests were failing because they don't tolerate mentioning a
deprecated class anywhere.
2020-02-16 09:43:25 +01:00
Jonas Jensen
a59c0facee
C++: Accept test changes for IR libs
...
This is for the tests in the ql repo. There are also changed tests in
the internal repo.
2020-02-15 21:12:20 +01:00
Jonas Jensen
f4ba56f0c0
C++: Use IR for security.TaintTracking and GVN
2020-02-15 21:10:29 +01:00
Jonas Jensen
e95ebb25a5
C++: Ensure tainted_diff.ql keeps using old lib
...
Without this, the test will compare the IR to itself after we enable it.
2020-02-15 21:10:29 +01:00
Jonas Jensen
0628625a76
Merge pull request #2835 from MathiasVP/value-number-perf
...
C++: Value number performance fix
2020-02-15 20:40:53 +01:00
Mathias Vorreiter Pedersen
8cda847dbc
C++: Add TLoadTotalOverlapValueNumber to getKind predicate in AST GVN wrapper
2020-02-15 09:37:45 -07:00
Jonas Jensen
49d2f5a60b
C++: autoformat
2020-02-15 09:41:27 +01:00
SpaceWhite
0be6f84387
Add sample
2020-02-15 16:49:33 +09:00
SpaceWhite
1ad7bd9684
add sample code
2020-02-15 16:46:09 +09:00
SpaceWhite
a29ccd674f
Initial commit
2020-02-15 16:27:03 +09:00
Dave Bartolomeo
867581df91
Merge pull request #2844 from MathiasVP/value-numbering-performance-fix-2
...
C++: Ensure that there is just one overlap for an operand in value numbering
2020-02-14 16:40:03 -07:00
Robert Marsh
7abd289d7d
C++: reinclude IRType in total load value numbers
2020-02-14 13:34:29 -08:00
Robert Marsh
f3c788d1e9
Merge pull request #2843 from jbj/ValueNumbering-import-order
...
C++: Change import order for stable cache checksum
2020-02-14 13:34:20 -05:00
Mathias Vorreiter Pedersen
8b8a8cae5b
C++/C#: Sync identical files
2020-02-14 16:11:57 +01:00
Mathias Vorreiter Pedersen
4a7b865dc0
C++: Move overlap fix into SSAConstruction
2020-02-14 16:11:00 +01:00
semmle-qlci
8d21692caf
Merge pull request #2845 from max-schaefer/js/http2
...
Approved by esbena
2020-02-14 13:05:48 +00:00
Erik Krogh Kristensen
a6d644bac0
add support for path.normalize(path.realtive(...))
2020-02-14 13:10:35 +01:00
Erik Krogh Kristensen
94814fa721
fix typos in the test
2020-02-14 13:03:35 +01:00
Nick Rolfe
d2a0037ad0
Merge pull request #2833 from hmakholm/pr/ql-codeql
...
Don't chain to ./codeql in .codeqlmanifest.json
2020-02-14 11:44:27 +00:00
Erik Krogh Kristensen
d765a33b8d
add support for "../" prefixes in sanitizer
2020-02-14 12:36:54 +01:00
Erik Krogh Kristensen
9d61004128
remove redundant constructor on sink
2020-02-14 12:31:12 +01:00
Max Schaefer
ad83a8946c
JavaScript: Sort lines in change notes.
2020-02-14 11:15:09 +00:00
Max Schaefer
f181111886
JavaScript: Add model of http2 compatibility API.
...
Also deprecated the `httpOrHttps` predicate, which was now only used in one place and seemed a little pointless anyway.
2020-02-14 11:14:31 +00:00
Mathias Vorreiter Pedersen
121c5e436d
C++: Check that there is only one overlap
2020-02-14 11:13:53 +01:00
Erik Krogh Kristensen
3a146514ce
add sanitizer for relative ".." in js/path-injection
2020-02-14 10:51:48 +01:00
Jonas Jensen
928bdbacb0
C++: Change import order for stable cache checksum
...
Without this fix, running the full LGTM suite would get the IR evaluated
twice. That's because we have multiple IPA types and constructors with
the same name (like `TInstruction` and `MkIRFunction`), and the QL
compiler chooses how to disambiguate those names differently depending
on import order.
I've tested that the IR is only evaluated once now by running the whole
suite on a tiny project (jbj/magicrescue) and looking at the output of
perl -ne 'print if /^RESULTS IN:/ .. /^\[/ and not /^\[/' runSnapshotQueries-debug.log | sort |uniq -c |sort -n |less
2020-02-14 10:28:52 +01:00
semmle-qlci
da566a4484
Merge pull request #2828 from erik-krogh/CVE24
...
Approved by esbena
2020-02-14 09:12:48 +00:00
semmle-qlci
769dce511b
Merge pull request #2788 from erik-krogh/CVE42-sink
...
Approved by esbena
2020-02-14 08:00:00 +00:00
Mathias Vorreiter Pedersen
98db6d8fd7
C#: Fix format and sync files
2020-02-14 08:22:25 +01:00
Robert Marsh
b4ff1216cc
C++: sync identical files
2020-02-13 17:02:00 -08:00
Aditya Sharad
5e0d640f57
Merge pull request #2841 from BekaValentine/gitignore_vim_swap_files
...
Adds .gitignore entry for vim swap files.
2020-02-13 16:20:33 -08:00
Robert Marsh
0f58887396
C++: unique value number for filtered instructions
...
Instructions that are removed from the normal value numbering recursion
because they have a duplicated type or AST element get unique value
numbers rather than going unnumbered. This ensures comparisons of value
numbers using `!=` hold for filtered instructions.
2020-02-13 15:36:42 -08:00
Rebecca Valentine
2ee38f246b
Adds .gitignore entry for vim swap files.
2020-02-13 15:23:50 -08:00
Rebecca Valentine
6a04004d94
Adds test cases and qlref.
2020-02-13 14:49:01 -08:00
Rebecca Valentine
b665f54a31
Corrects query to use builtin instead of special
2020-02-13 14:48:46 -08:00
Rebecca Valentine
3b45fbc87c
Adds rough modernization.
2020-02-13 14:22:00 -08:00
Mathias Vorreiter Pedersen
d4c6f487bc
C++/C#: Fix sync config file for value numbering sharing
2020-02-13 22:32:52 +01:00
Mathias Vorreiter Pedersen
ed7888c612
C++: Sync identical files
2020-02-13 21:50:03 +01:00
Mathias Vorreiter Pedersen
57613d5507
C++: Reintroduce the type in TConstantValueNumber to avoid giving constant with different signed-ness the same value number. Instead filter those with more than one type out.
2020-02-13 21:49:40 +01:00
Dave Bartolomeo
9e1ea01be8
Fix typo
2020-02-13 13:01:09 -07:00
Tom Hvitved
09b1e8b161
C#: Update expected test output
2020-02-13 20:08:11 +01:00
james
b32683fc9f
docs: expand handbook entry on monotonic aggregates
2020-02-13 18:06:44 +00:00
Mathias Vorreiter Pedersen
cb510edcf0
C++: Sync up identical files and restore imports
2020-02-13 18:02:56 +01:00
Mathias Vorreiter Pedersen
04c5f1cbb4
C++: Perf fix for value numbering
2020-02-13 18:02:56 +01:00
Jonas Jensen
24396905a5
WIP: Try to reduce ambiguous value numbers
...
This is not enough to get genome/breakdancer working.
2020-02-13 18:02:56 +01:00
Jonas Jensen
8054cde9fc
WIP: Switch on IR
2020-02-13 18:02:56 +01:00
Tom Hvitved
332733a92e
Java/C++: Follow-up changes
2020-02-13 16:34:06 +01:00
Tom Hvitved
b5b0c2b8cf
Data flow: Sync files
2020-02-13 16:34:06 +01:00
Tom Hvitved
6be2bf8374
Address review comments
2020-02-13 16:34:06 +01:00
