Tom Hvitved
|
f1d6f7cd0c
|
C#: Model assertions in the CFG
|
2020-10-02 17:56:41 +02:00 |
|
Geoffrey White
|
2dc8fba7fe
|
C++: Remove StdMapBeginEnd as we now have a general model BeginOrEndFunction in main.
|
2020-10-02 16:39:23 +01:00 |
|
Geoffrey White
|
0d6bd6facb
|
Merge branch 'main' into map
|
2020-10-02 16:24:03 +01:00 |
|
Geoffrey White
|
d4a1acedde
|
C++: Remove StdSetBeginEnd as we now have a general model BeginOrEndFunction in main.
|
2020-10-02 16:23:48 +01:00 |
|
Arthur Baars
|
daa1bcc06e
|
Also mark 'tech inventory' queries as deprecated
|
2020-10-02 17:23:11 +02:00 |
|
Arthur Baars
|
fc45b6cd3c
|
Drop 'tech-inventory' and 'code duplication' queries from the standard query suites
|
2020-10-02 17:22:04 +02:00 |
|
Geoffrey White
|
88a93964a7
|
Merge branch 'main' into set
|
2020-10-02 16:17:48 +01:00 |
|
Geoffrey White
|
28ab092e9f
|
C++: Add 'tainted' markers to standalone_iterators.cpp test.
|
2020-10-02 15:54:26 +01:00 |
|
Taus
|
fce76e2799
|
Merge pull request #4354 from RasmusWL/python-command-execution-modeling
Python: Better command execution modeling
|
2020-10-02 16:14:34 +02:00 |
|
Taus
|
2e4a61428d
|
Merge pull request #4346 from RasmusWL/python-add-implicit-init-test
Python: add test for implicit __init__.py files
|
2020-10-02 16:13:25 +02:00 |
|
Mathias Vorreiter Pedersen
|
072e1967c1
|
C++: Accept more tests
|
2020-10-02 15:51:29 +02:00 |
|
Tom Hvitved
|
17f0ac4b20
|
C#: Add more CFG assertion tests
|
2020-10-02 15:35:33 +02:00 |
|
Tom Hvitved
|
55d25d90fa
|
Merge pull request #4386 from hvitved/csharp/remove-deprecated-queries
C#: Remove deprecated external queries
|
2020-10-02 15:12:33 +02:00 |
|
Rasmus Wriedt Larsen
|
e5b9ac8d9c
|
Python: Use getCommand as tag in ConceptsTest
|
2020-10-02 14:12:41 +02:00 |
|
Rasmus Wriedt Larsen
|
eb67986916
|
Python: Exlucde only command injection sinks in os and subprocess
|
2020-10-02 14:11:07 +02:00 |
|
Mathias Vorreiter Pedersen
|
48902c07a4
|
C++: Accept test changes
|
2020-10-02 14:10:58 +02:00 |
|
Mathias Vorreiter Pedersen
|
8f4982d3f5
|
C++: Remove flow into ReadSideEffect instructions in simpleInstructionLocalFlowStep
|
2020-10-02 14:10:28 +02:00 |
|
Rasmus Wriedt Larsen
|
68eacef23c
|
Python: Refactor OsExecCall and friends for better readability
|
2020-10-02 13:38:54 +02:00 |
|
Rasmus Wriedt Larsen
|
de07d9e5d9
|
Python: Highlight that os.popen is not only problem for extra alerts
|
2020-10-02 13:34:33 +02:00 |
|
Taus Brock-Nannestad
|
b5d05f99c9
|
Python: Fix test output
|
2020-10-02 12:04:43 +02:00 |
|
Geoffrey White
|
4b0e9a4fb1
|
C++: Remove the model of make_pair.
|
2020-10-02 10:55:13 +01:00 |
|
Geoffrey White
|
0b6096ebfe
|
C++: Define make_pair and declare std::forward in the test.
|
2020-10-02 10:51:34 +01:00 |
|
Erik Krogh Kristensen
|
6acb199074
|
improve precision using getAnImmediateUse to check parameter names
|
2020-10-02 11:09:50 +02:00 |
|
Erik Krogh Kristensen
|
abdbe92720
|
refactor the NoSQL model to use API graphs
|
2020-10-02 10:42:49 +02:00 |
|
Max Schaefer
|
98e93a7b9d
|
JavaScript: Improve API-graph support for function-style classes.
|
2020-10-02 09:25:51 +01:00 |
|
Rasmus Lerchedahl Petersen
|
bd32faf934
|
Python: annotate new test
|
2020-10-02 10:06:54 +02:00 |
|
Rasmus Lerchedahl Petersen
|
2a4d21a989
|
Python: Test method call
|
2020-10-02 10:02:29 +02:00 |
|
Chris Smowton
|
aa707e9370
|
Merge pull request #4381 from smowton/smowton/admin/fix-owasp-broken-links
Fix OWASP broken links
|
2020-10-02 08:51:36 +01:00 |
|
Tamas Vajk
|
1cf3196b61
|
Fix additional PR review findings
|
2020-10-02 09:12:13 +02:00 |
|
Tamas Vajk
|
01de550ef8
|
Make predicates private
|
2020-10-02 09:12:13 +02:00 |
|
Tamas Vajk
|
f52cf264ec
|
Refactor specificSubExprSign
|
2020-10-02 09:12:13 +02:00 |
|
Tamas Vajk
|
f03146d12f
|
Refactor fieldSign
|
2020-10-02 09:12:13 +02:00 |
|
Tamas Vajk
|
21ff1a0445
|
Address some of the PR review findings
|
2020-10-02 09:12:13 +02:00 |
|
Tamas Vajk
|
638d0399a8
|
Java, C#: Refactor explicitSsaDefSign in sign analysis
|
2020-10-02 09:09:23 +02:00 |
|
Tamas Vajk
|
7545fe74e3
|
Java, C#: Refactor implicitSsaDefSign in sign analysis
|
2020-10-02 09:09:23 +02:00 |
|
Tamas Vajk
|
37fc1d6f0f
|
Java, C#: cleanup sign analysis
Add missing QL doc, improve readability
|
2020-10-02 09:09:23 +02:00 |
|
Gulshan Singh
|
f026d3a1e6
|
C++: Improve bitwise and range analysis
|
2020-10-01 23:30:51 -07:00 |
|
Gulshan Singh
|
78625b764d
|
C++: Add test for bitwise and ranges
|
2020-10-01 23:30:48 -07:00 |
|
Jonathan Leitschuh
|
ab3772eaeb
|
Update JHipster CodeQL query from code review
|
2020-10-01 15:38:56 -04:00 |
|
Tom Hvitved
|
bc68578c8b
|
C#: Remove deprecated external queries
|
2020-10-01 21:11:47 +02:00 |
|
Jonas Jensen
|
48c6f34f91
|
Merge pull request #4372 from matt-gretton-dann/cpp20-constinit
Add support for Variable.is_constinit()
|
2020-10-01 20:19:56 +02:00 |
|
Aditya Sharad
|
f7f05476a2
|
Merge pull request #4375 from adityasharad/javascript/client-side-url-redirect-regexp
JavaScript: Track taint through RegExp.prototype.exec for URL redirection
|
2020-10-01 09:55:19 -07:00 |
|
Geoffrey White
|
ad9f306352
|
C++: Model taint flow only when the second component of a pair would be tainted.
|
2020-10-01 17:38:09 +01:00 |
|
Ian Lynagh
|
e555b6b2a8
|
Merge pull request #4380 from github/igfoo/unnamed
C++: Accept test changes in unnamed entity naming
|
2020-10-01 17:16:20 +01:00 |
|
Taus Brock-Nannestad
|
75f4051cb5
|
Python: Fix hasLocationInfo for packages
|
2020-10-01 17:21:53 +02:00 |
|
Joe
|
ca4781eb78
|
Java: Remove use of StringFormatMethod in TaintTrackingUtils
|
2020-10-01 15:58:32 +01:00 |
|
Rasmus Lerchedahl Petersen
|
0841e92a6b
|
Python: Test for method call
|
2020-10-01 16:26:12 +02:00 |
|
Alexander Eyers-Taylor
|
5ce0974eb2
|
Fix the name of the vscode extension recommendation
The name is case sensitive so it didn't work before.
|
2020-10-01 14:40:45 +01:00 |
|
Rasmus Lerchedahl Petersen
|
5326125b70
|
Python: Handle positional construtor arguments
|
2020-10-01 15:28:26 +02:00 |
|
Anders Schack-Mulligen
|
c027f3bd2b
|
Merge pull request #4324 from tamasvajk/feature/unsigned-sign-analysis
Handle unsigned types in sign analysis (C# and Java)
|
2020-10-01 15:11:49 +02:00 |
|