Max Schaefer
627583fffa
JavaScript: Refactor UselessConditional for performance.
2019-01-08 09:40:49 +00:00
Anders Schack-Mulligen
9530eb6cdb
Java: Switch to built-in gcd.
2019-01-08 10:07:51 +01:00
Max Schaefer
de429752d1
JavaScript: Restructure implementation of DataFlow::SourceNode.
...
It now uses a facade pattern similar to `InvokeNode`: the range of the class is defined by an abstract class `DataFlow::SourceNode::Range`, while the actual behaviour is defined by the (no longer abstract) `SourceNode` class itself.
Clients that want to add new source nodes need to extend `DataFlow::SourceNode::Range`, those that want to refine the behaviour of existing source nodes should extend `DataFlow::SourceNode` itself.
While this is technically a breaking API change, I think separating the two aspects in this way is cleaner and makes it easier to use, and improves performance as well.
2019-01-08 08:01:20 +00:00
semmle-qlci
8b8b352439
Merge pull request #715 from xiemaisi/js/autoformat
...
Approved by asger-semmle
2019-01-07 22:09:05 +00:00
Raul Garcia
18bb6696e0
Fixing conditional only issue.
...
I changed to detect any logical operation usage (i.e. !, ==), but I kept usage in a conditional directly as a separate detection condition. I found no false positives on the projects you shared with me previously.
2019-01-07 10:44:11 -08:00
yh-semmle
0b19f41093
Merge pull request #728 from aschackmull/java/qltest-qlpath
...
Java: Add .qlpath to the test dir.
2019-01-07 11:34:45 -05:00
Taus Brock-Nannestad
f9c6b0eedc
Add change note for 1.20
2019-01-07 15:35:19 +01:00
Taus Brock-Nannestad
9ac50186f6
Add a few more insecure versions
2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad
1af503ab84
Address documentation comments.
2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad
46973f4305
Support from ssl import PROTOCOL_....
2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad
e8a41f719c
Add documentation.
2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad
dfe3fc6d5c
Pass pyOpenSSL method as parameter instead of keyword argument.
2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad
d604f5c9c9
Fix insecure_version_name comments.
2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad
a893dca06e
Add support for ssl.SSLContext.
2019-01-07 15:24:15 +01:00
Taus Brock-Nannestad
0a839f8468
Python: Check for insecure versions of SSL and TLS.
2019-01-07 15:24:15 +01:00
Anders Schack-Mulligen
203c9fb9d8
Java: Restrict attention to integral types in IntMultToLong.
2019-01-07 14:27:52 +01:00
Anders Schack-Mulligen
e0d3be7dbc
Java: Add .qlpath to the test dir.
2019-01-07 13:25:20 +01:00
Calum Grant
6f827140d7
Merge pull request #710 from hvitved/csharp/extractor/standalone-runtimes
...
C#: Improve logic for looking up .NET runtime in standalone mode
2019-01-07 10:22:17 +00:00
Max Schaefer
31bb39a810
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
Max Schaefer
aa6b89dc34
Merge pull request #723 from Semmle/qlucie/master
...
Master-to-next merge
2019-01-07 07:59:54 +00:00
Raul Garcia
880306c621
Removing duplicated results
2019-01-04 10:45:43 -08:00
Pavel Avgustinov
42cf76027a
Merge branch 'cs/assembly-labels' of https://github.com/calumgrant/ql into HEAD
2019-01-04 18:23:49 +00:00
Tom Hvitved
6fccfa3b0a
C#: Fix CFG for foreach statements with tuple declarations
2019-01-04 18:51:55 +01:00
Tom Hvitved
72b3514970
C#: Add CFG tests for foreach statements with multipe variable declarations
2019-01-04 18:17:48 +01:00
calum
651d207d0d
C#: Fix assembly labels.
2019-01-04 16:19:43 +00:00
Jonas Jensen
26f32f0d6d
C++: Initial version of CFG.qll
...
This implements calculation of the control-flow graph in QL. The new
code is not enabled yet as we'll need more extractor changes first.
The `SyntheticDestructorCalls.qll` file is a temporary solution that can
be removed when the extractor produces this information directly.
2019-01-04 13:34:36 +01:00
Max Schaefer
b4f400fb23
Merge remote-tracking branch 'upstream/next' into qlucie/master
2019-01-04 10:35:57 +00:00
Tom Hvitved
c962f55cd0
C#: Address review comments
2019-01-04 11:32:23 +01:00
Jonas Jensen
a47faa2272
C++: Add ConditionDeclExpr convenience predicates
...
Also expand the QLDoc.
2019-01-04 10:24:08 +01:00
Jonas Jensen
ca0517b3d6
C++: LocalVariable docs
2019-01-04 10:24:08 +01:00
Jonas Jensen
8f9849b30b
C++: Add BuiltInIntAddr class for __INTADDR__
2019-01-04 10:24:08 +01:00
semmle-qlci
6b27dcabc5
Merge pull request #704 from asger-semmle/ts-binary-exprs
...
Approved by esben-semmle
2019-01-04 08:37:41 +00:00
Jonas Jensen
79e246f961
Merge pull request #722 from geoffw0/doc-macroinv
...
CPP: Improve qldoc for MacroAccess and MacroInvocation.
2019-01-04 08:40:37 +01:00
Jonas Jensen
8b06b311a0
Merge pull request #668 from ian-semmle/condexpr
...
C++: Follow changes in how conditional expressions are represented in the database
2019-01-04 07:20:49 +01:00
Ian Lynagh
187fdf67b0
C++: Rename twoOperand to isTwoOperand
2019-01-03 21:09:49 +00:00
Ian Lynagh
98e8858dc6
C++: Accept test changes
2019-01-03 21:09:49 +00:00
Ian Lynagh
283eb51db8
C++: Update stats after adding expr_cond* tables
2019-01-03 21:09:49 +00:00
Ian Lynagh
dc3d87f2fc
C++: Add tables for ConditionalExprs
2019-01-03 21:09:49 +00:00
yh-semmle
0e0ff565d5
Merge pull request #686 from aschackmull/java/rm-metrics-queries-xml
...
Java: Remove `Metrics/queries.xml`
2019-01-03 13:36:17 -05:00
yh-semmle
2d151f71cf
Merge pull request #701 from aschackmull/java/override-annot
...
Java: Add missing override annotations.
2019-01-03 13:34:27 -05:00
Raul Garcia
89c045b550
Merge branch 'users/raulga/c6324' of https://github.com/raulgarciamsft/ql into users/raulga/c6324
2019-01-03 10:06:59 -08:00
Raul Garcia
2c1d7bbc41
Switched to DataFlow::localFlow to avoid false positives.
2019-01-03 10:06:49 -08:00
semmle-qlci
c0868bcb9e
Merge pull request #708 from hvitved/csharp/ssa-read-splitting
...
Approved by calumgrant
2019-01-03 17:59:55 +00:00
Tom Hvitved
54520003f8
Merge pull request #590 from calumgrant/cs/metadata-handles2
...
C#: Extract the metadata handle
2019-01-03 18:49:24 +01:00
semmle-qlci
8174fb51ae
Merge pull request #705 from asger-semmle/loop-index-concurrent-modification
...
Approved by mc-semmle, xiemaisi
2019-01-03 17:06:12 +00:00
semmle-qlci
6b459de95f
Merge pull request #717 from xiemaisi/js/fix-incorrect-suffix-check-performance
...
Approved by asger-semmle
2019-01-03 17:04:10 +00:00
semmle-qlci
6c768263d2
Merge pull request #716 from xiemaisi/js/cosmetics
...
Approved by esben-semmle
2019-01-03 16:11:50 +00:00
semmle-qlci
9b8bf96a6f
Merge pull request #718 from xiemaisi/js/ambiguous-id-attr-alert-loc
...
Approved by asger-semmle
2019-01-03 16:10:57 +00:00
Geoffrey White
114740c148
Merge pull request #721 from jbj/reachable-factor-base-case
...
C++: Factor out `reachable` base case
2019-01-03 15:56:10 +00:00
Geoffrey White
787febae6e
CPP: Improve qldoc for MacroAccess and MacroInvocation.
2019-01-03 15:16:47 +00:00