Asger F
a224186fab
JS: Migrate AngularJS.JQLiteObject
2019-10-07 08:29:42 +01:00
Asger F
afdcb1e075
JS: Handle jQuery objects from Parameter.getAnInitialUse()
2019-10-07 08:29:42 +01:00
Asger F
284a24c18e
JS: Update tests with deprecation warning
2019-10-07 08:29:42 +01:00
Asger F
fb181c2d14
JS: Use type info and type tracking in jQuery
2019-10-07 08:29:42 +01:00
Calum Grant
369c456353
Merge pull request #2090 from hvitved/csharp/local-function-trap
...
C#: Use containing type instead of containing method in local function TRAP label
2019-10-07 08:29:13 +01:00
Tom Hvitved
8ba94140b1
C#: Use containing type instead of containing method in local function TRAP label
...
This is in order to handle the case where the enclosing callable of a local
function is a lambda expression.
2019-10-06 21:05:34 +02:00
Tom Hvitved
28021d6715
C#: Add test for local function in lambda
2019-10-06 20:50:24 +02:00
Robert Marsh
057c634fe4
C++: fix identical chi node operands
2019-10-04 13:05:47 -07:00
Robert Marsh
17e14348d5
C++: sanity test for identical Chi node operands
2019-10-04 12:57:30 -07:00
Robert Marsh
3377f88494
C++: generate Chi nodes on total IndirectMayWrites
2019-10-04 11:59:22 -07:00
Jonas Jensen
6c87d75190
Merge pull request #2088 from geoffw0/swap3
...
CPP: Add taint tests.
2019-10-04 20:44:18 +02:00
Robert Marsh
5f8a3054d1
C++: add UninitializedInstructions for direct init
2019-10-04 11:34:14 -07:00
Sam Lanning
b67c5f2cbc
Merge pull request #2083 from jf205/training-logo
...
QL training: add semmle logo image to title slide
v1.22.2
2019-10-04 11:33:06 -07:00
Robert Marsh
7fefe4385a
Merge pull request #1963 from jbj/predictableInstruction
...
C++: Implement predictableInstruction without Expr
2019-10-04 10:04:52 -07:00
Geoffrey White
050d99fa87
CPP: Add test cases.
2019-10-04 17:44:27 +01:00
Calum Grant
2706238413
C#: Update queries to use localExprFlow.
2019-10-04 16:53:02 +01:00
Calum Grant
af25536648
C#: Add localExprFlow and localExprTaint, and change notes.
2019-10-04 16:46:02 +01:00
ian-semmle
ebc10cf5db
Merge pull request #2084 from matt-gretton-dann/cpp-445-synthetic_destructor_call-INVALID_KEY-warnings
...
Update keysets for synthetic_destructor_call and *variables tuple
2019-10-04 16:38:35 +01:00
Calum Grant
ba6eb22cc9
C#: Roslyn workaround for when IPropertySymbol.IsIndexer seems to be working incorrectly.
2019-10-04 16:28:28 +01:00
Tom Hvitved
b55e2948be
Merge pull request #1986 from calumgrant/cs/switch-cfg
...
C#: Fix CFG for switch statements where the default case is not the last
2019-10-04 16:54:04 +02:00
Erik Krogh Kristensen
14cc352bd9
small documentation change based on review
2019-10-04 15:26:32 +02:00
Geoffrey White
0e478d1c0e
Merge pull request #2066 from jbj/dataflow-conditionAlwaysTrue-perf
...
C++: Improve join orders for QL CFG
2019-10-04 14:16:41 +01:00
Geoffrey White
e465f4cc81
Merge pull request #2064 from jbj/leapyear-extends-abstract
...
C++: Avoid `extends Operation` in LeapYear.qll
2019-10-04 14:15:21 +01:00
Erik Krogh Kristensen
144e831515
mention that "function" should not be used when declaring a call signature in an interface
2019-10-04 15:05:11 +02:00
Anders Schack-Mulligen
066a2f0d12
Java: Add another overflow check pattern to UselessComparisonTest.
2019-10-04 15:04:40 +02:00
Erik Krogh Kristensen
bf1fd83851
fix typo in predicate name
2019-10-04 15:04:39 +02:00
Erik Krogh Kristensen
b741a65e9b
documentation changes based on review
...
Co-Authored-By: shati-patel <42641846+shati-patel@users.noreply.github.com >
2019-10-04 14:42:16 +02:00
Jonas Jensen
a7641a8765
C++: Clarify OutNode and ReturnNode QLDoc
2019-10-04 14:33:04 +02:00
Anders Schack-Mulligen
273ef46c22
Merge pull request #2080 from hvitved/dataflow/ap-tostring
...
Java/C++/C#: Tweak `AccessPathNil::toString()`
2019-10-04 14:02:10 +02:00
Erik Krogh Kristensen
c8d60c9e2a
update @description of js/suspicious-method-name-declaration
2019-10-04 11:40:33 +02:00
Tom Hvitved
7f6e253425
Java: Update expected test output
2019-10-04 11:09:44 +02:00
Tom Hvitved
9b58d799cb
Java/C++/C#: Tweak AccessPathNil::toString()
...
Move the type annotation outside the brackets, to avoid prefixes such as
`[ : T]`.
2019-10-04 11:09:44 +02:00
Erik Krogh Kristensen
712a337bdd
qhelp adjustments based on code-review
2019-10-04 11:06:11 +02:00
Erik Krogh Kristensen
ced5e3ea29
qhelp adjustment from code-review
...
Co-Authored-By: Esben Sparre Andreasen <42067045+esben-semmle@users.noreply.github.com >
2019-10-04 11:02:15 +02:00
james
4a8e8fa0de
docs: semmle logo
2019-10-04 09:28:45 +01:00
Robert Marsh
bc973973df
C++: accept test changes
2019-10-03 14:43:54 -07:00
Robert Marsh
6e587f3f2a
IR: Add VariableInstruction.getASTVariable
2019-10-03 13:12:06 -07:00
Robert Marsh
c1e3821ab0
IR: rename getVariable to getIRVariable
2019-10-03 13:10:49 -07:00
Robert Marsh
a76c4d9b3b
C++: index for constructor qualifier side effects
2019-10-03 12:39:32 -07:00
Robert Marsh
47b9c497fa
C++: IR SSA tests for explicit constructor calls
2019-10-03 12:25:41 -07:00
Taus Brock-Nannestad
26da6a1178
Python: Apply autoformat.
2019-10-03 17:58:52 +02:00
Taus Brock-Nannestad
5946a4a066
Python: Teach py/unused-local-variable about nonlocal.
2019-10-03 17:56:29 +02:00
Calum Grant
48dee29620
Merge pull request #2021 from hvitved/csharp/local-not-disposed
...
C#: Refactor `cs/local-not-disposed` using data flow library
2019-10-03 15:21:06 +01:00
Matthew Gretton-Dann
d06e3d79c6
C++: Add DB Upgrade script
2019-10-03 15:16:50 +01:00
Matthew Gretton-Dann
618d0a9603
C++: Update DB Stats
2019-10-03 15:16:50 +01:00
Matthew Gretton-Dann
a7f682a9be
C++: Update *variables keysets.
2019-10-03 15:16:50 +01:00
Matthew Gretton-Dann
d62730a9f3
C++: Update synthetic_destructor_call keysets.
...
Reorder the [ destructor_call, expr ] tuple.
Add a [ expr, i ] tuple.
2019-10-03 15:16:50 +01:00
Matthew Gretton-Dann
06d1d6ed5d
C++: Fix synthetic_destructor_call key uniqueness.
2019-10-03 15:16:50 +01:00
Jonas Jensen
dca39f0fad
Merge pull request #2027 from zlaski-semmle/zlaski/memset-model
...
[zlaski/memset-model] QL model for `memset` and friends
2019-10-03 14:31:23 +02:00
Jonas Jensen
01a3a037bc
C++: Make complex_numbers/expr.ql less brittle
...
This test used `getAQlClass`, which caused it to break when new classes
were added anywhere in the libraries. That's now avoided by switching to
`getCanonicalQLClass`. It turns out that `getCanonicalQLClass` didn't
support arithmetic expressions on complex numbers, so that support had
to be added.
2019-10-03 13:19:16 +02:00