Taus Brock-Nannestad
a4da245809
Python: Implement check for flask debug mode.
2018-11-27 15:14:38 +01:00
Tom Hvitved
41edd61e2e
Merge pull request #545 from calumgrant/cs/typemention-constraints
...
C#: Fix for type mentions of type parameter constraints
2018-11-27 14:25:48 +01:00
Aditya Sharad
5d5bfc215e
Merge rc/1.19 into next.
2018-11-27 12:04:46 +00:00
Max Schaefer
cf1e7cff3f
JavaScript: Move an auxiliary predicate into shared library.
2018-11-27 12:03:25 +00:00
Mark Shannon
698957e2cf
Python: Correct case of query name and improve help.
2018-11-27 11:32:40 +00:00
Geoffrey White
a85dfb1c4e
Merge pull request #548 from jbj/security-tags-1.19
...
C++: Update security tag in change note
2018-11-27 11:13:56 +00:00
Jonas Jensen
c8e34bff6c
C++: Update security tag in change note
...
These two queries have the `security` tag in the `.ql` file, but it was
missing in the change note.
2018-11-27 11:03:42 +01:00
Jonas Jensen
c403bb1cad
Merge pull request #541 from kevinbackhouse/CppPostDominators
...
Add post-dominators
2018-11-27 08:23:43 +01:00
Dave Bartolomeo
689002a22e
C++: Fix handling of Chi instructions in sign analysis
2018-11-26 16:46:39 -08:00
Robert Marsh
f4ce7b9648
C++: respond to further PR review comments
2018-11-26 16:16:46 -08:00
Robert Marsh
7ef0d5e98d
C++: respond to technical nits
2018-11-26 15:47:47 -08:00
Dave Bartolomeo
2b9afe95e8
C++: Accept test output after rebase
2018-11-26 12:08:19 -08:00
Robert Marsh
799eb06eea
C++: add AliasedDefinition for aliased SSA
2018-11-26 12:08:19 -08:00
Robert Marsh
3ee033d96e
C++: IR sanity fixes for Chi nodes
2018-11-26 12:08:19 -08:00
Robert Marsh
b401cd97f2
C++: use UnmodeledDefinition in UnmodeledUse
2018-11-26 12:08:19 -08:00
Robert Marsh
927f935e62
C++: hook ChiInstructions into the operand graph
2018-11-26 12:08:19 -08:00
Robert Marsh
a33b59103a
C++: insert Chi nodes in the IR successor relation
...
This commit adds Chi nodes to the successor relation and accounts for
them in the CFG, but does not add them to the SSA data graph. Chi nodes
are inserted for partial writes to any VirtualVariable, regardless of
whether the partial write reaches any uses.
2018-11-26 12:08:18 -08:00
Dave Bartolomeo
1fb36ff7e7
C++: Add conservative side effects for function calls
2018-11-26 12:08:18 -08:00
Robert Marsh
f9ed39915f
C++: recompute IRBlock membership at each stage
...
This enables the addition of new instructions in later phases of IR
construction; in particular, aliasing write instructions and inference
instructions.
2018-11-26 12:08:18 -08:00
calumgrant
d1f7eef7eb
Merge pull request #537 from hvitved/csharp/guards-splitting
...
C#: Make guards library work with CFG splitting
2018-11-26 18:19:37 +00:00
Geoffrey White
f034abc275
CPP: Add the Semmle security tests.
2018-11-26 17:52:34 +00:00
Aditya Sharad
7aef8fa945
Merge pull request #547 from pavgust/fix/cwe-497-performance
...
C++: Refactor CWE-497 for clarity and performance
2018-11-26 17:13:27 +00:00
Mark Shannon
516b29d2c9
Merge pull request #544 from pavgust/fix/python-hotfixes
...
Pull recent Python fixes to RC branch
2018-11-26 16:18:13 +00:00
Max Schaefer
8e54c7ab6c
Merge pull request #503 from asger-semmle/unsafe-global-object-access
...
JS: add method name injection query
2018-11-26 15:56:20 +00:00
Aditya Sharad
38095e2f96
Python: Add QL for VS workspace settings file.
2018-11-26 15:10:12 +00:00
Max Schaefer
588defd6b6
Merge pull request #519 from esben-semmle/js/nullish-coalescing-extractor-and-ql
...
JS: nullish coalescing support in extractor and QL
2018-11-26 15:03:23 +00:00
Kevin Backhouse
4877659578
Fix names.
2018-11-26 14:56:35 +00:00
Tom Hvitved
e069041bd5
Merge pull request #431 from calumgrant/cs/extractor/fsharp-core
...
C#: Fix extraction of method signatures
2018-11-26 15:07:33 +01:00
Jonas Jensen
fcd53ae631
Merge pull request #540 from geoffw0/cpp-296
...
CPP: Fix false positive from AutoGeneratedFile.qll.
2018-11-26 15:03:21 +01:00
Tom Hvitved
7dc0a8132e
Merge pull request #513 from calumgrant/cs/cwe-134
...
C#: New query cs/uncontrolled-format-string
2018-11-26 14:58:54 +01:00
calum
de36151c4a
C#: Add regression test and fix for type mentions of type parameter constraints.
2018-11-26 13:51:02 +00:00
semmle-qlci
03fd5498d9
Merge pull request #542 from xiemaisi/js/move-project-file-back-to-code
...
Approved by esben-semmle
2018-11-26 11:41:39 +00:00
Max Schaefer
a1772a9ae4
Merge pull request #543 from markshannon/python-backward-compat-default
...
Python: Add default.qll for backwards compatibility with older queries and libraries.
2018-11-26 11:27:17 +00:00
Mark Shannon
4d8f5e1020
Python: Add default.qll for backwards compatibility with older queries and libraries.
2018-11-26 11:25:28 +00:00
Esben Sparre Andreasen
2d7f09d321
JS(ql): support nullish coalescing operators
2018-11-26 10:31:19 +01:00
Esben Sparre Andreasen
a2a798e59c
JS(extractor): support nullish coalescing operators
2018-11-26 09:45:19 +01:00
Max Schaefer
93f4ee8813
JavaScript: Remove Eclipse metadata files for extractor.
2018-11-26 08:24:33 +00:00
Arthur Baars
8d7ace25bf
Merge pull request #535 from adityasharad/merge/master-next-231118
...
Merge master into next.
2018-11-25 20:19:23 +01:00
Kevin Backhouse
bc752e1a98
Add post-dominators.
2018-11-24 18:23:27 +00:00
Geoffrey White
f338a4f0d6
CPP: Fix false positive from AutoGeneratedFile.qll.
2018-11-23 17:34:18 +00:00
Taus
f0fbed76e7
Merge pull request #539 from markshannon/python-path-fix-siblings
...
Python: Fix parents relation for path queries.
2018-11-23 17:59:04 +01:00
Aditya Sharad
c20b688a3f
Merge master into next.
2018-11-23 16:36:31 +00:00
Taus
3cee874ee3
Merge pull request #536 from markshannon/python-more-shell-injection
...
Python: Some additional sinks for command injection.
2018-11-23 17:12:20 +01:00
yh-semmle
17b063f0b2
Merge pull request #473 from sb-semmle/add-properties-files-to-java-schema
...
Add properties files to java schema
2018-11-23 11:09:00 -05:00
yh-semmle
f4ec168666
Merge pull request #533 from aschackmull/java/inherit-bugfix-changenote
...
Java: Add change note for #459 .
2018-11-23 10:53:44 -05:00
Mark Shannon
3190b12544
Python: Fix parent relation for path-queries.
2018-11-23 15:04:01 +00:00
Mark Shannon
bfc001cc68
Python: Add change note for requests without cert verification query.
2018-11-23 14:48:19 +00:00
Mark Shannon
6588606739
Python: Account for other 'falsey' values in query.
2018-11-23 14:42:45 +00:00
Mark Shannon
06e5bc8359
Python: Add qhelp for new query.
2018-11-23 14:42:45 +00:00
Mark Shannon
45e864a395
Python: New query to test for requests without validation.
2018-11-23 14:42:45 +00:00
