Jonas Jensen
|
ee211b02fb
|
Merge remote-tracking branch 'lcartey/cpp/range-analysis-custom-defs' into range-analysis-custom-defs
|
2020-09-22 13:27:56 +02:00 |
|
Tamas Vajk
|
5f96c37b28
|
C#: Fix switch case expression types
|
2020-09-22 13:16:31 +02:00 |
|
Anders Schack-Mulligen
|
47506a859e
|
Merge pull request #4287 from joefarebrother/exectainted-array
Java: Improve the ExecTainted query
|
2020-09-22 13:16:05 +02:00 |
|
Jonas Jensen
|
269b7101c0
|
Merge pull request #4273 from lcartey/cpp/custom-range-analysis-override
C++: Support overriding existing simple range analysis bounds
|
2020-09-22 13:15:05 +02:00 |
|
Tamas Vajk
|
a89d13a5ee
|
C#: Add change notes for increased required key size in 'cs/insufficient-key-size'
|
2020-09-22 13:00:45 +02:00 |
|
Tom Hvitved
|
8de57c7d19
|
C#: Move ASP extraction from auto builder to pre-finalize.{sh,cmd}
|
2020-09-22 11:55:02 +02:00 |
|
Jonas Jensen
|
e86bc0c6ac
|
C++: Autoformat fixup
|
2020-09-22 11:53:05 +02:00 |
|
Asger Feldthaus
|
d34bd51f61
|
JS: Call codeql.exe instead of codeql.cmd
|
2020-09-22 10:28:40 +01:00 |
|
Asger Feldthaus
|
bc09bc45bc
|
JS: Concatenate paths properly
|
2020-09-22 10:17:30 +01:00 |
|
Faten Healy
|
c35a5d120a
|
C#: Increasing required size of RSA key to 2048
|
2020-09-22 11:09:49 +02:00 |
|
Tamas Vajk
|
cc979d0b5f
|
C#: Add switch case expression type test
|
2020-09-22 11:04:44 +02:00 |
|
Tom Hvitved
|
71da9045e5
|
Java/Python: Reduce size of blockPrecedesVar
|
2020-09-22 11:00:26 +02:00 |
|
Erik Krogh Kristensen
|
32b0f1b480
|
add code example to isDecoratedCall
|
2020-09-22 10:42:49 +02:00 |
|
Max Schaefer
|
dafd45f0f4
|
JavaScript: Add a few metric queries for API graphs.
|
2020-09-22 09:30:19 +01:00 |
|
Max Schaefer
|
46ba4a1fa8
|
JavaScript: Expose another useful predicate on API-graph nodes.
|
2020-09-22 09:30:12 +01:00 |
|
Jonas Jensen
|
5cbf498a2d
|
Merge pull request #4302 from MathiasVP/fix-field-conflation-after-4230
C++: Fix field conflation after #4230
|
2020-09-22 10:23:17 +02:00 |
|
Erik Krogh Kristensen
|
ec49c444ef
|
Apply suggestions from code review
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2020-09-22 10:15:30 +02:00 |
|
Tamas Vajk
|
d8176bc00d
|
C#: Change TrapStackBehaviour of local functions
|
2020-09-22 09:53:35 +02:00 |
|
Tom Hvitved
|
b6d93ae81d
|
Merge remote-tracking branch 'upstream/rc/1.25' into merge-rc-1.25
|
2020-09-22 09:35:39 +02:00 |
|
Jonas Jensen
|
c56d5eb90e
|
Merge pull request #4295 from rdmarsh2/rdmarsh2/cpp/ir-qualifier-flow
C++: Improved qualifier flow in IR taint tracking
|
2020-09-22 09:23:10 +02:00 |
|
Tom Hvitved
|
83340e2a62
|
Merge pull request #4212 from hvitved/csharp/path-transformers
C#: Implement support for path transformers
|
2020-09-22 09:20:53 +02:00 |
|
Robert Marsh
|
772a51508f
|
C++: Update test comment
|
2020-09-21 16:19:41 -07:00 |
|
Robert Marsh
|
9e3bfe1968
|
C++: Fix iterator flow context sensitivity
|
2020-09-21 16:17:16 -07:00 |
|
Robert Marsh
|
913881b17b
|
C++: Add test for iterator false positive
|
2020-09-21 16:15:24 -07:00 |
|
Jonathan Leitschuh
|
ab618dcf2f
|
Java: QL Query Detector for JHipster Generated CVE-2019-16303
|
2020-09-21 18:46:13 -04:00 |
|
Erik Krogh Kristensen
|
4243504c8b
|
improve join-order for HTTP::isDecoratedCall
|
2020-09-21 23:20:16 +02:00 |
|
Robert Marsh
|
947ad02db9
|
C++: autoformat
|
2020-09-21 11:38:57 -07:00 |
|
Asger Feldthaus
|
e70bb20f34
|
JS: Support XML extraction when run with codeql
|
2020-09-21 17:21:54 +01:00 |
|
Rasmus Lerchedahl Petersen
|
08b51e67c4
|
Python: Update test annotation
|
2020-09-21 17:44:36 +02:00 |
|
Rasmus Lerchedahl Petersen
|
73d2d9b1f8
|
Python: Make constructor calls post-update nodes
|
2020-09-21 17:32:22 +02:00 |
|
Taus
|
724baaf26a
|
Merge pull request #4308 from RasmusWL/python-private-import-of-DataFlowPrivate
Python: Make import of DataFlowPrivate private
|
2020-09-21 17:13:48 +02:00 |
|
Tom Hvitved
|
06dbec78f7
|
C#: Add Guard::controlsBasicBlock() and simplify Guard::isEquality()
|
2020-09-21 16:15:12 +02:00 |
|
Tamas Vajk
|
8bf4a4209c
|
C#: Sign analysis
Synced between Java and C# through `identical-files.json`.
|
2020-09-21 16:15:12 +02:00 |
|
Rasmus Wriedt Larsen
|
2f9f51dbd8
|
Python: Fix tests that use DataFlowPrivate
|
2020-09-21 16:08:17 +02:00 |
|
yoff
|
557db3381d
|
Merge pull request #4265 from tausbn/python-add-global-flow-steps
Python: Add `ModuleVariableNode` to keep track of global reads and writes
|
2020-09-21 15:51:19 +02:00 |
|
Tom Hvitved
|
d3ea20cd2c
|
Merge pull request #4271 from github/matt-gretton-dann/csharp-dont-trace-macos-pkill
Don't trace through pkill or pgrep on macOS.
|
2020-09-21 15:44:48 +02:00 |
|
Tamas Vajk
|
441fbe3215
|
Add Java test file for sign analysis
|
2020-09-21 15:07:09 +02:00 |
|
Mathias Vorreiter Pedersen
|
873e871620
|
C++: Handle more cases in arrayReadStep.
|
2020-09-21 14:35:37 +02:00 |
|
Mathias Vorreiter Pedersen
|
73cd5ceb80
|
C++: Accept tests. Due to the removal of overlap between the reads steps there are fewer repeated edges in path explanations.
|
2020-09-21 14:17:49 +02:00 |
|
Rasmus Wriedt Larsen
|
6aca82fa82
|
Python: Make import of DataFlowPrivate private
Otherwise you are able to use `DataFlow::isExpressionNode` where
`isExpressionNode` is defined in `DataFlowPrivate.qll`.
|
2020-09-21 13:52:58 +02:00 |
|
Taus
|
9d7a2d2b5d
|
Merge branch 'main' into python-add-global-flow-steps
|
2020-09-21 13:50:20 +02:00 |
|
Anders Schack-Mulligen
|
4a3118b13e
|
Merge pull request #4246 from RasmusWL/java-fix-ssa-varBlockReaches
Java: Minor fixup for SSA AdjacentUsesImpl::varBlockReaches
|
2020-09-21 13:28:20 +02:00 |
|
CodeQL CI
|
016e6d2001
|
Merge pull request #4275 from erik-krogh/CVE760-indirect
Approved by esbena
|
2020-09-21 04:09:51 -07:00 |
|
Mathias Vorreiter Pedersen
|
62d42f20d9
|
C++: use(x) is no longer an array read.
|
2020-09-21 12:46:03 +02:00 |
|
Rasmus Wriedt Larsen
|
233dd43635
|
Java: Port varBlockReaches fix to BaseSSA.qll
|
2020-09-21 12:11:25 +02:00 |
|
Taus Brock-Nannestad
|
1d6558b4e8
|
Python: Add a bit more documentation to ModuleVariableNode
|
2020-09-21 11:46:18 +02:00 |
|
Mathias Vorreiter Pedersen
|
c560c7584c
|
C++: Add QLDoc for BufferMayWriteSideEffectFieldStoreQualifierNode
|
2020-09-21 11:08:06 +02:00 |
|
Mathias Vorreiter Pedersen
|
49dd576352
|
C++: Add more tests
|
2020-09-21 10:59:16 +02:00 |
|
Erik Krogh Kristensen
|
4571ba38a5
|
add change-note for es2021
|
2020-09-21 10:51:36 +02:00 |
|
Erik Krogh Kristensen
|
4bc91c4439
|
add support for Promise.any
|
2020-09-21 10:50:06 +02:00 |
|