Taus
37291c5642
Merge pull request #2100 from RasmusWL/python-fix-hasFlowPath
...
Python: Fix hasFlowPath default implementation of isSink/2
2019-10-18 11:16:58 +02:00
Geoffrey White
5a97a16945
CPP: Autoformat.
2019-10-18 09:46:04 +01:00
Jonas Jensen
dcc446660e
Merge pull request #2149 from rdmarsh2/rdmarsh/cpp/ir-side-effect-primary
...
C++: Add getPrimaryInstruction to specific side effects
2019-10-18 10:31:01 +02:00
yh-semmle
1d415b3680
Java: enable java/alert-suppression-annotations in LGTM suite
2019-10-17 22:09:04 -04:00
yh-semmle
ee2c97f147
Java: add extra test for java/alert-suppression-annotations
2019-10-17 22:09:04 -04:00
yh-semmle
62521dca32
Java: account for multiple strings in java/alert-suppression-annotations
2019-10-17 22:09:04 -04:00
yh-semmle
f3a980deb6
Java: clarify predicate name in java/alert-suppression-annotations
2019-10-17 22:09:03 -04:00
yh-semmle
d165ce95f2
Java: tidy QLDoc in Extents.qll
2019-10-17 22:09:03 -04:00
yh-semmle
e3f828c588
Java: refine ranges in java/alert-suppression-annotations
2019-10-17 22:09:03 -04:00
yh-semmle
b2bc8382b0
Java: add alert-suppression query for @SuppressWarnings("lgtm[...]")
2019-10-17 22:09:02 -04:00
Ziemowit Laski
6772fa1352
[CPP-434] Reformat QHelp.
2019-10-17 17:21:14 -07:00
Ziemowit Laski
70441edacf
[CPP-434] Additional test case; improve QHelp by including themes from the BadAdditionOverflowCheck QHelp.
2019-10-17 16:41:17 -07:00
Robert Marsh
30e501e110
C++/Docs: reword "divide" to "partition"
...
Co-Authored-By: Jonas Jensen <jbj@knef.dk >
2019-10-17 12:22:37 -07:00
Robert Marsh
5451c394a2
C++/C#: autoformat
2019-10-17 12:20:36 -07:00
Robert Marsh
b29f88450b
C++: buffer read side effects on unmodeled funcs
2019-10-17 12:10:23 -07:00
Robert Marsh
b8bbce0eb6
C#: sync IR
2019-10-17 11:00:04 -07:00
Nick Rolfe
176d7672a1
Merge pull request #2148 from Semmle/cpp-454-invalid_key-diagnostic_for
...
Drop unique diagnostic key on diagnostic_for tuple
2019-10-17 16:51:03 +01:00
Matthew Gretton-Dann
4e345fb921
C++: Add upgrade script
2019-10-17 15:37:34 +01:00
Matthew Gretton-Dann
bc0d73b86e
C++: Remove unique diagniostic key on diagnostic_for.
2019-10-17 15:34:51 +01:00
Esben Sparre Andreasen
80a32aebc1
JS: add SystemCommandExecution::isShellInterpreted
2019-10-17 13:29:24 +02:00
Max Schaefer
a4bffe35fd
JavaScript: Add support for globalThis.
2019-10-17 12:04:01 +01:00
semmle-qlci
9995c12132
Merge pull request #2144 from shati-patel/monospace-links
...
Approved by jf205
2019-10-17 11:55:58 +01:00
Taus Brock-Nannestad
067bdf5ec4
Python: Disregard packages when looking for cyclic imports.
2019-10-17 12:47:34 +02:00
Shati Patel
54d7bba3dd
Docs: Remove unused styling
2019-10-17 11:31:35 +01:00
Jonas Jensen
9bc7ce1fac
Merge pull request #2141 from geoffw0/newtest
...
CPP: AV Rule 114 test cases
2019-10-17 09:28:10 +02:00
Esben Sparre Andreasen
93b1e59d62
JS: fix spelling: sanitisers -> sanitizers
2019-10-17 09:05:03 +02:00
Robert Marsh
30d7238921
C++: fix missing getPrimaryInstruction
2019-10-16 17:05:37 -07:00
Robert Marsh
fffe3c2432
C++: add sanity test for side effect primaries
2019-10-16 16:53:55 -07:00
Robert Marsh
6cef936046
C++: add function info to duplicateChiOperand
2019-10-16 15:59:00 -07:00
Dave Bartolomeo
6e61b1dcd0
C++: Fix up after merge from master
...
The one interesting piece that needed to be fixed up was the type of an `Indirect[Read|Write]SideEffect` operand/result. If the parameter type is a pointer or reference to an incomplete type, we need to set the type of the side effect memory access to `Unknown`, because we don't model incomplete types in the IR type system.
I also added minimal support for `__assume` (generated as a `NoOp`), because lack of `__assume` support got in the way of debugging the other issue above.
2019-10-16 15:55:56 -07:00
Ziemowit Laski
fb625c12ef
[CPP-434] Move SignedOverflowCheck test to BadAdditionOverflowCheck directory; add additional tests.
2019-10-16 14:31:11 -07:00
Robert Marsh
3c127fb829
C++/Docs: expand on VN/HC and add wikipedia links
2019-10-16 13:09:36 -07:00
Robert Marsh
0cc0977a09
C++/Docs: more examples and rewording for guards
2019-10-16 12:45:59 -07:00
Dave Bartolomeo
167d2289c4
Merge from master
2019-10-16 10:10:10 -07:00
Max Schaefer
dfed7502b6
Merge pull request #2142 from Semmle/jf205-patch-1
...
docs: update path to support docs in readme.md
2019-10-16 16:58:34 +01:00
James Fletcher
d1a8152f29
update path to support docs in readme.md
2019-10-16 16:55:28 +01:00
semmle-qlci
280a62ed30
Merge pull request #2138 from Semmle/xiemaisi-patch-1
...
Approved by erik-krogh
2019-10-16 15:14:29 +01:00
Pavel Avgustinov
7fa6c54731
Merge pull request #2119 from hmakholm/pr/qlpacks
...
Add qlpack.json files
2019-10-16 14:27:10 +01:00
Geoffrey White
6f96d1759f
Merge pull request #2077 from jbj/cfg-enable-pr
...
C++: enable the QL-based CFG code
2019-10-16 14:06:22 +01:00
Geoffrey White
5f1fdd08a7
CPP: Post-2115.
2019-10-16 13:51:06 +01:00
Geoffrey White
096af3c3f3
CPP: Add test cases involving __builtin_complex.
2019-10-16 13:46:11 +01:00
Tom Hvitved
c57015af7d
C#: Data-flow pruning based on call contexts
2019-10-16 13:51:32 +02:00
Max Schaefer
f963ebcddc
JavaScript: Remove stray comma from @tags.
2019-10-16 12:42:33 +01:00
Tom Hvitved
853cbd8728
C#: Add dataflow tests exhibiting missing call-context based pruning
2019-10-16 13:39:35 +02:00
Max Schaefer
712762481c
Merge pull request #2001 from esben-semmle/js/identity-escape
...
JS: add query js/useless-regexp-character-escape
2019-10-16 10:27:50 +01:00
Geoffrey White
33ae7ee802
Merge pull request #2130 from jbj/cfg-pos-int
...
C++: Implement Pos and Spec as int, not newtype
2019-10-16 09:56:14 +01:00
Jonas Jensen
bca1be0601
Merge pull request #2135 from zlaski-semmle/zlaski/memset-model
...
[zlaski/memset-model] Add side effect modeling to Memset.
2019-10-16 08:49:24 +02:00
Esben Sparre Andreasen
e1d7434be4
JS: add query js/useless-regexp-character-escape
2019-10-16 00:15:54 +02:00
Ziemowit Laski
fcc1938143
[zlaski/memset-model] Ctrl+Shift+F.
2019-10-15 15:03:58 -07:00
Ziemowit Laski
2ca52a4124
[zlaski/memset-model] Add side effect modeling to Memset.
2019-10-15 14:43:39 -07:00
