Erik Krogh Kristensen
6b9aea82ca
model method calls in the needle library
2020-09-25 14:13:31 +02:00
Erik Krogh Kristensen
a22ddb145b
model calls to needle
2020-09-25 13:53:22 +02:00
Rasmus Lerchedahl Petersen
4621e6d8c0
Python: fix QL format
2020-09-25 13:37:39 +02:00
Rasmus Lerchedahl Petersen
88bba46698
Python: Modify tests based on review
...
The extra hist in `test.py` seen in `globalStep.expected`
are due to the removal of manual filtering code.
(That code was from when dataflow had many strange things in it.)
2020-09-25 13:35:30 +02:00
Max Schaefer
0ccbaf9e88
JavaScript: Handle empty package.json files gracefully.
2020-09-25 12:12:39 +01:00
Joe
5256c0ba39
Java: Improve PrintAst tests and rename things
...
Add tests for `EnhcancedForStmt`s and `InstanceOfExpr`s.
Rename LocalVarDeclParent to SingleLocalVarDeclParent
2020-09-25 11:31:56 +01:00
yoff
c56ff986d4
Apply suggestions from code review
...
Co-authored-by: Taus <tausbn@github.com >
2020-09-25 11:56:50 +02:00
Rasmus Wriedt Larsen
85607fe2d5
Python: Adjust location for .expected output
2020-09-25 11:56:45 +02:00
Rasmus Wriedt Larsen
3d5511221e
Python: Add test for implicit __init__.py files
2020-09-25 11:48:38 +02:00
Rasmus Wriedt Larsen
120a569c6f
Python: Explain how CallGraph test.py even works
...
Also remove options file, since it did nothing at all (and blocked
experimental/library-tests/options from taking effect)
2020-09-25 11:42:59 +02:00
Geoffrey White
09b5fb6753
C++: Fix comments.
2020-09-25 10:41:25 +01:00
CodeQL CI
4deb43f361
Merge pull request #4323 from RasmusWL/python-new-command-injection-query
...
Approved by tausbn
2020-09-25 02:39:46 -07:00
Geoffrey White
6fd1bf89c1
C++: Change note.
2020-09-25 10:33:40 +01:00
Esben Sparre Andreasen
ba0a2e1665
JS: tag consistency: replace cwe-20 with cwe-020
2020-09-25 10:28:05 +02:00
CodeQL CI
7b1dbb4364
Merge pull request #4337 from max-schaefer/js/fix-indirect-command-injection
...
Approved by asgerf
2020-09-25 00:18:55 -07:00
Robert Marsh
1445b31864
C++: QLDoc for Operand
2020-09-24 16:34:16 -07:00
Robert Marsh
e51b9215e4
C++: QLDoc for Overlap in IR construction
2020-09-24 15:56:29 -07:00
Robert Marsh
e9b1d817c7
C++: QLDoc for VirtualVariable in IR construction
2020-09-24 15:55:57 -07:00
Robert Marsh
46ff4d524f
C++: autoformat
2020-09-24 14:54:31 -07:00
Erik Krogh Kristensen
b8154d41b1
type-track objects where the "$where" property has been written
2020-09-24 20:55:25 +02:00
Robert Marsh
ca06637de0
C++: add qldoc comment
2020-09-24 10:40:45 -07:00
Geoffrey White
ec3c1568d2
C++: Model erase.
2020-09-24 18:38:29 +01:00
Geoffrey White
8b91d5077d
C++: Model find.
2020-09-24 18:38:29 +01:00
Geoffrey White
d550741c0c
C++: Model insert_or_assign.
2020-09-24 18:38:28 +01:00
Geoffrey White
c51294e423
C++: Model operator[] and at.
2020-09-24 18:38:28 +01:00
Geoffrey White
13b15d9bcd
C++: Model swap.
2020-09-24 18:38:27 +01:00
Geoffrey White
6119bf3430
C++: Model begin and end.
2020-09-24 18:38:27 +01:00
Geoffrey White
25e0c680c6
C++: Model insert.
2020-09-24 18:38:27 +01:00
Robert Marsh
094b06ec2a
C++: remove unneeded predicate
2020-09-24 10:37:38 -07:00
CodeQL CI
19316930cd
Merge pull request #4310 from asgerf/js/extract-xml-with-codeql
...
Approved by aibaars, esbena
2020-09-24 10:14:46 -07:00
Geoffrey White
0dca7f81bc
C++: Model std::swap.
2020-09-24 15:49:33 +01:00
Jonas Jensen
e012dce755
Merge pull request #4334 from github/faster-skip-copy-value-instructions
...
C++: Manual recursion in `skipCopyValueInstructions`
2020-09-24 16:43:25 +02:00
Geoffrey White
49f9a76c54
C++: Add tests for std::map and std::unordered_map.
2020-09-24 15:19:39 +01:00
Anders Schack-Mulligen
3ef3e6e140
Merge pull request #4319 from hvitved/python-java-block-precedes-var
...
Java/Python: Reduce size of `blockPrecedesVar`
2020-09-24 16:07:49 +02:00
Joe
9c8a468237
Java: PrintAst: Add synthetic nodes for other declarations
2020-09-24 14:31:24 +01:00
Joe
3e960c1e0b
Java: PrintAst: Refactor exceptions to the usual AST of expressions and statements using dispatch
2020-09-24 14:31:24 +01:00
Joe
1f99607624
Java: PrintAst: Improve test
2020-09-24 14:31:24 +01:00
Joe
45651cf123
Java: PrintAst: Add a synthetic node for the initialisers of for statements
2020-09-24 14:31:24 +01:00
Anders Schack-Mulligen
d4d4c0f3f9
Merge pull request #4325 from aibaars/hibernate-changenote
...
Java: change note for Hiberate ORM improvements
2020-09-24 12:58:45 +02:00
Erik Krogh Kristensen
6163e6cf5f
adjust test case for XML entity expansion
2020-09-24 09:53:06 +02:00
Mathias Vorreiter Pedersen
780a07e89c
Merge pull request #4332 from jbj/ExtendedRangeAnalysis-stub
...
C++: ExtendedRangeAnalysis stub implementation
2020-09-24 09:01:06 +02:00
Tom Hvitved
7970fef3e4
Merge pull request #4315 from hvitved/merge-rc-1.25
...
Merge rc/1.25 into main
2020-09-24 08:27:01 +02:00
Robert Marsh
89332ca303
C++: autoformat
2020-09-23 15:29:51 -07:00
Robert Marsh
774dcc7c52
C++: New model class for iterator op* and op[]
2020-09-23 15:29:37 -07:00
Jonathan Leitschuh
17603c8091
Update java/ql/src/Security/CWE/CWE-338/JHipsterGeneratedPRNG.qhelp
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2020-09-23 13:59:49 -04:00
Geoffrey White
71a605b7d9
C++: Add tests for std::pair.
2020-09-23 18:43:28 +01:00
Tamas Vajk
48bf6d55aa
C#: Add implicit cast from array to pointer
2020-09-23 17:21:38 +02:00
Mathias Vorreiter Pedersen
f794eaa670
C++: Manual recursion in skipCopyValueInstructions instead of transitive closure
2020-09-23 16:26:40 +02:00
Erik Krogh Kristensen
83f0514475
add req.files as a RequestInputAccess in the Express model
2020-09-23 15:50:59 +02:00
Jonas Jensen
b7d0939f4a
C++: ExtendedRangeAnalysis stub implementation
...
Just to demonstrate how things fit together, I've created
`SubtractSelf.qll` that adds a (hopefully sound) version of the test
extension that was already used in `extensibility.ql`.
2020-09-23 15:50:07 +02:00
