Tamas Vajk
cdea3afced
C#: Change extraction of Attributes to have ID based on the location when location is from source
2020-11-11 09:46:18 +01:00
Tamas Vajk
c04d6f479c
C#: Change attribute extraction to use AttributeData and created generated expressions when missing
2020-11-11 09:46:18 +01:00
Tamas Vajk
883795e126
C#: Add attribute test for extraction from symbols without syntax nodes
2020-11-11 09:46:18 +01:00
Tamas Vajk
c14a63488c
C#: Add missing tests for attribute extraction
2020-11-11 09:46:18 +01:00
Rasmus Wriedt Larsen
9ed15732ed
Python: Update set literal formatting
...
Now that auto-formatting rules have been updated
2020-11-11 09:38:25 +01:00
Rasmus Lerchedahl Petersen
0710963fc3
Python: update test expectations
...
EssaNode -> ControlFlowNode
2020-11-10 23:58:55 +01:00
Erik Krogh Kristensen
e01d4b104e
update expected output
2020-11-10 23:42:38 +01:00
luchua-bc
018d5c46da
Simplify the query
2020-11-10 21:07:44 +00:00
Mathias Vorreiter Pedersen
8d4b948acf
Merge branch 'main' into interleave-op-instr-field-flow
2020-11-10 21:15:50 +01:00
Erik Krogh Kristensen
6b7f8dd505
fix parse errors related to char escapes and char ranges
2020-11-10 21:02:29 +01:00
Robert Marsh
14f1fa50f1
Merge branch 'main' into rdmarsh2/cpp/remove-initialize-nonlocal
...
Accept test changes from IR temporaries and block ordering
2020-11-10 11:14:26 -08:00
Geoffrey White
2c7a01952e
C++: Improve the changes to Iterator.
2020-11-10 17:11:47 +00:00
Jonas Jensen
fc764db8e1
Merge pull request #4643 from nickrolfe/getFileBySourceArchiveName
...
Replace getEncodedFile with shared getFileBySourceArchiveName predicate
2020-11-10 17:36:29 +01:00
Geoffrey White
c635166079
Merge remote-tracking branch 'upstream/main' into modelchanges2
2020-11-10 16:30:03 +00:00
Mathias Vorreiter Pedersen
a330cae2f9
C++: Update change-notes.
2020-11-10 17:24:45 +01:00
Mathias Vorreiter Pedersen
4bcf1f498b
C++: Add new query for unsafe use of this.
2020-11-10 17:23:55 +01:00
Pavel Avgustinov
60ea9cec6e
Update docs/ql-design-patterns.md
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswl@github.com >
2020-11-10 15:59:45 +00:00
Mathias Vorreiter Pedersen
884554692f
Merge pull request #4645 from geoffw0/oddsends2
...
C++: Odds and ends
2020-11-10 16:59:10 +01:00
Mathias Vorreiter Pedersen
618d9c33a1
Merge pull request #4642 from geoffw0/memberfn
...
C++: Improve MemberFunction.qll data flows
2020-11-10 16:54:42 +01:00
Jonas Jensen
da90717ef0
Merge pull request #4641 from aschackmull/autoformat-setliterals
...
C++/C#/Java/JavaScript/Python: Autoformat set literals.
2020-11-10 16:11:11 +01:00
Tom Hvitved
7e89e57f5d
Merge pull request #4606 from hvitved/csharp/dataflow/ef
...
C#: Precise data flow for EntityFramework(Core)
2020-11-10 15:54:20 +01:00
Rasmus Wriedt Larsen
14236709f6
Fix typo ql-design-patterns.md
...
Co-authored-by: Pavel Avgustinov <54942558+p0@users.noreply.github.com >
2020-11-10 15:39:45 +01:00
Nick Rolfe
ac4a1f1d9b
Update comment to be a QLDoc comment
2020-11-10 14:14:27 +00:00
Geoffrey White
be537a8021
C++: Move ThrowExpr, ReThrowExpr definitions to a more logical location.
2020-11-10 14:06:58 +00:00
Nick Rolfe
1e1eb7ee33
Replace getEncodedFile with shared getFileBySourceArchiveName predicate
...
While also making it work with paths for databases created on Windows.
2020-11-10 13:55:27 +00:00
Geoffrey White
2beb7824ec
C++: Backticks.
2020-11-10 13:35:05 +00:00
Geoffrey White
599034668f
C++: Fix typo.
2020-11-10 13:32:31 +00:00
Geoffrey White
f109e8ccbc
C++: Remove duplicate import.
2020-11-10 13:31:47 +00:00
Geoffrey White
c4fe8df04c
C++: Support data flow from parameter deref to return value.
2020-11-10 13:17:34 +00:00
Geoffrey White
4563e32e92
C++: Remove data flows we shouldn't need in MemberFunction.
2020-11-10 13:17:24 +00:00
Anders Schack-Mulligen
89ef6ea4eb
C++/C#/Java/JavaScript/Python: Autoformat set literals.
2020-11-10 13:32:27 +01:00
Alvaro Muñoz
02cf49a773
apply codeql formatting
2020-11-10 11:46:42 +01:00
Rasmus Lerchedahl Petersen
109d55eb25
Python: Make ParameterNode a CfgNode
...
Add a step from that `CfgNode` to the corresponding `EssaNode`.
The intended effect is seen in `ImpliesDataflow.expected`.
The efeect seen in other `.expected`-files is that parameter nodes
change type, that the extra steps are seen, and that flow from
`EssaVar`s is mirrored in flow from `CfgNode`s.
There is one surprise, which is the `.0` node in
`coverage/localFlow.expected`.
2020-11-10 11:35:50 +01:00
Alvaro Muñoz
24a47fbb0f
additional qldoc commentes
2020-11-10 10:48:47 +01:00
Alvaro Muñoz
3545edb92c
address code review suggestions
2020-11-10 10:45:14 +01:00
Tom Hvitved
697b0ba4c1
C#: Address review comments
2020-11-10 10:42:05 +01:00
Erik Krogh Kristensen
ae7c7607f1
fix typos in documentation strings
...
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2020-11-10 10:41:39 +01:00
Erik Krogh Kristensen
b5b4d6d62a
add change note
2020-11-10 10:41:39 +01:00
Erik Krogh Kristensen
5ecae55e77
add keys used by jsonwebtoken as CredentialsExpr
2020-11-10 10:41:39 +01:00
Erik Krogh Kristensen
e75259d3a6
model the verify function in jsonwebtoken
2020-11-10 10:41:39 +01:00
Erik Krogh Kristensen
6732493377
add model for jwt-decode
2020-11-10 10:41:36 +01:00
yoff
26286e534e
Merge pull request #4174 from yoff/SharedDataflow_PointsToImpliesDataflow
...
Python: Dataflow, Test that `pointsTo` implies data flow
merging now, will fix `self` in a later PR
2020-11-10 10:25:29 +01:00
Robert Marsh
c00587d2cb
C++/C#: Conflated memory as IR dump annotation
...
Removes the IR consistency checks for conflated memory and marks
instructions that have a conflated result with a percent sign (%)
instead. This avoids reimplementing part of the alias analysis logic
in the consistency check.
2020-11-09 14:55:47 -08:00
Porcupiney Hairs
38de9b6433
add request forgery query
2020-11-10 01:19:35 +05:30
CodeQL CI
1e048d8045
Merge pull request #4609 from asgerf/js/destructuring-export
...
Approved by erik-krogh
2020-11-09 15:47:00 +00:00
luchua-bc
bc899b6337
Move common code to a library and add more test cases
2020-11-09 14:14:54 +00:00
luchua-bc
b10552aa2e
Specify exported Android components for local Android DoS
2020-11-09 14:10:01 +00:00
luchua-bc
76a0db84ee
Query for detecting Local Android DoS caused by NFE
2020-11-09 14:10:00 +00:00
Anders Schack-Mulligen
31ec79819e
Merge pull request #4631 from luchua-bc/java-nfe-library
...
Java: Factor NumberFormatException out into a library file
2020-11-09 13:50:31 +01:00
yoff
3215f50b73
Merge pull request #4632 from RasmusWL/python-move-configurations-out-of-queries
...
Python: move configurations out of queries
2020-11-09 13:10:33 +01:00