Commit Graph

17948 Commits

Author SHA1 Message Date
Mark Shannon
da04086385 Add missing extractor change notes for 1.21. 2019-06-07 12:01:28 +01:00
Felicity Chapman
fe38417765 Update for feedback 2019-06-07 11:54:22 +01:00
Felicity Chapman
53ea76ba48 Update for feedback 2019-06-07 10:51:19 +01:00
Felicity Chapman
e589d12d78 Update change-notes/1.21/analysis-javascript.md
Co-Authored-By: Max Schaefer <max@semmle.com>
2019-06-07 10:25:56 +01:00
Felicity Chapman
012f6adf90 Minor text changes 2019-06-07 09:44:49 +01:00
Anders Schack-Mulligen
64a8daa4b5 Merge pull request #1415 from felicity-semmle/1.21/java-change-notes
QL 1.21: Finalize Java change notes
2019-06-07 09:04:13 +02:00
Jonas Jensen
cf96035d8c C++: Suspicious pointer scaling: @precision medium
This query is not producing good enough results to justify `@precision
high`. It's fundamentally looking for a pattern that should correlate
with memory management errors, but it doesn't look for the errors
themselves.
2019-06-06 21:08:20 -07:00
Felicity Chapman
a4e2593c94 Correct table sort order 2019-06-06 18:53:10 +01:00
Felicity Chapman
5be8576ee2 Minor text updates 2019-06-06 18:48:23 +01:00
Felicity Chapman
eba8abe3d4 Minor text changes 2019-06-06 18:33:56 +01:00
Felicity Chapman
463371aeb9 Merge two rows for one query 2019-06-06 17:52:52 +01:00
Felicity Chapman
2f97aac64a Sort table rows alphabetically 2019-06-06 17:50:17 +01:00
Felicity Chapman
36a6d9ea81 Update text for consistency 2019-06-06 17:45:26 +01:00
Anders Schack-Mulligen
5fed6c78fe Java: Include two more base cases in TypeFlow to improve virtual dispatch. 2019-06-06 14:45:23 +02:00
Max Schaefer
16c33b54b6 JavaScript: Recognise references to the process global. 2019-06-06 11:48:18 +01:00
Taus
58285c08dd Merge pull request #1391 from markshannon/python-points-to-varargs
Python points to varargs
2019-06-05 20:17:01 +02:00
Mark Shannon
03d296a617 Fix typo in qldoc. 2019-06-05 17:54:09 +01:00
Taus
703fbc6976 Merge pull request #1403 from markshannon/python-builtin-inherit
Python points-to: Make sure that builtin-classes inherit attributes.
2019-06-05 17:40:10 +02:00
Max Schaefer
e11406ca90 Merge pull request #1406 from taus-semmle/mergeback-rc/1.21
Merge `rc/1.21` into `master`
2019-06-05 16:33:50 +01:00
Mark Shannon
75f87bbeda Python points-to. If __all__ is overly complex, treat all 'public' symbols as exported. 2019-06-05 14:46:51 +01:00
Taus
f7a092882b Merge pull request #1405 from markshannon/python-fix-import-analysis
Python: Fix up 'import failure' analysis query.
2019-06-05 14:47:09 +02:00
Tom Hvitved
51d6858cd0 Merge pull request #1392 from calumgrant/cs/cs8/static-using-null
C#: More C# 8 features
2019-06-05 14:21:49 +02:00
Mark Shannon
e757bce96e Python: Fix up 'import failure' analysis query. 2019-06-05 12:56:36 +01:00
Mark Shannon
cec4d55b2a Python points-to: Make sure that vararg tuples are only assigned to vararg parameters. 2019-06-05 11:56:17 +01:00
Mark Shannon
8fadb64452 Python points-to: Make sure that builtin-classes inherit attributes. 2019-06-05 11:36:44 +01:00
yh-semmle
a6da4996a7 Merge pull request #1398 from aschackmull/java/switchexpr-guards
Java: Add SwitchExpr support in Guards.qll
2019-06-05 06:35:12 -04:00
semmle-qlci
3789cb2858 Merge pull request #1402 from xiemaisi/js/pwd-in-cfg-file
Approved by esben-semmle
2019-06-05 10:45:18 +01:00
Geoffrey White
98eced973e Merge pull request #1401 from jbj/tostring-performance-1.22
C++: Move `Element.toString` performance change note to 1.22 file
2019-06-05 10:21:01 +01:00
Calum Grant
c88359b9c7 C#: Fix test. 2019-06-05 09:42:48 +01:00
Anders Schack-Mulligen
98c5dc194b Java: Rename to selector as per review comment. 2019-06-05 09:16:12 +02:00
Max Schaefer
d233cea79d JavaScript: Lower precision of PasswordInConfigurationFile.
In spite of recent improvements, this query is still too noisy to show
by default.
2019-06-05 08:09:19 +01:00
Max Schaefer
d723ab76d8 JavaScript: Fix getDelimiterMatchingRegexp to work on multi-line strings. 2019-06-05 08:09:19 +01:00
Max Schaefer
a4876270ec JavaScript: Tweak PasswordInConfigurationFile alerts.
Only highlight first line, and include the password in the alert
message.
2019-06-05 08:09:19 +01:00
Jonas Jensen
9830c69892 C++: Put tostring-performance note in 1.22 file 2019-06-04 20:47:29 -07:00
Jonas Jensen
62246ecdf5 Revert "Add release note blurb about TypeMention.toString()"
This change didn't make into 1.21, so it doesn't belong in this file.

This reverts commit 8c099000d9.
2019-06-04 20:45:35 -07:00
Jonas Jensen
e036cd70e2 Merge pull request #1366 from zlaski-semmle/zlaski/tostring-performance
C++: Improve Element::toString() performance
2019-06-04 20:42:06 -07:00
Ziemowit Laski
8f79cdb1fb [CPP-370] Add an additional test case. 2019-06-04 16:19:01 -07:00
Ziemowit Laski
8c099000d9 Add release note blurb about TypeMention.toString() 2019-06-04 12:57:43 -07:00
Ziemowit Laski
d86557cfcb Adjust .expected output. 2019-06-04 12:57:43 -07:00
Ziemowit Laski
37fe68c656 Improve Element::toString() performance by removing recursion
in TypeMention::toString().
2019-06-04 12:57:43 -07:00
semmle-qlci
601ea22bfd Merge pull request #1399 from xiemaisi/js/metric-types
Approved by esben-semmle
2019-06-04 20:39:02 +01:00
Calum Grant
9678f8eaba C#: Fix control flow graph for using declaration statements. 2019-06-04 18:10:49 +01:00
Calum Grant
20752c80c9 C#: Address review comments 2019-06-04 18:10:49 +01:00
Calum Grant
f1bb8b893b C#: Fix test. 2019-06-04 18:10:49 +01:00
Calum Grant
4b3297ceef C#: Analysis change notes 2019-06-04 18:10:49 +01:00
Calum Grant
73c2898666 C#: Minor edits. 2019-06-04 18:10:49 +01:00
Calum Grant
5679a72f37 C#: DB Upgrade script 2019-06-04 18:10:49 +01:00
Calum Grant
d6fac7bfb7 C#: Delete file. 2019-06-04 18:10:49 +01:00
Calum Grant
fa89d2b845 C#: Update stats and test output. 2019-06-04 18:10:49 +01:00
Calum Grant
923fbe4c9e C#: Implement QL model for using declarations, introducing UsingBlockStmt and a UsingDeclStmt. 2019-06-04 18:10:49 +01:00