Tom Hvitved
|
0c78fb2933
|
Merge pull request #4855 from madneal/fix-for-csharp-docs
Fix for csharp docs
|
2020-12-21 14:11:36 +01:00 |
|
Erik Krogh Kristensen
|
4ef569fbbe
|
recognize more exported functions in js/shell-command-constructed-from-input
|
2020-12-21 13:50:22 +01:00 |
|
Shati Patel
|
0a0137bb5e
|
Merge pull request #4859 from github/shati-patel-patch-1
Fix typo in docs title
|
2020-12-21 12:07:32 +00:00 |
|
Erik Krogh Kristensen
|
e3ec67d5e3
|
avoid materializing isFeasibleTuple
|
2020-12-21 12:53:41 +01:00 |
|
Jonas Jensen
|
4308381057
|
Merge pull request #4846 from MathiasVP/default-taint-tracking-operand-instruction-interleaving
C++: Instruction -> Operand interleaving for DefaultTaintTracking
|
2020-12-21 12:44:06 +01:00 |
|
Shati Patel
|
66b85f1e5e
|
Fix typo
|
2020-12-21 11:29:02 +00:00 |
|
Neal Caffery
|
ee0257836f
|
removed, as it fixed by #4848
|
2020-12-21 19:05:37 +08:00 |
|
Erik Krogh Kristensen
|
cbad705029
|
general performance improvements in the ReDoS utility library
|
2020-12-21 11:49:21 +01:00 |
|
Tom Hvitved
|
591f90f98e
|
C#: Add change note
|
2020-12-21 10:26:49 +01:00 |
|
Tom Hvitved
|
b5a1e039a4
|
C#: Merge queries FormatInvalid.ql, FormatMissingArgument.ql, and FormatUnusedArgument.ql
|
2020-12-21 10:13:56 +01:00 |
|
Tom Hvitved
|
8d6c69bf74
|
C#: Move Expr::hasValue() to DotNet::Expr
|
2020-12-21 09:46:45 +01:00 |
|
Mathias Vorreiter Pedersen
|
06366fa320
|
Merge pull request #4856 from jbj/gvn-wrapper-test
C++: Test the AST wrapper for IR GVN
|
2020-12-21 09:31:10 +01:00 |
|
Tom Hvitved
|
16aee6e71e
|
Merge pull request #4842 from hvitved/csharp/format-method-no-insertion-param
C#: Recognize format methods without insertion parameters
|
2020-12-21 09:25:18 +01:00 |
|
Jonas Jensen
|
3236cbd83e
|
C++: Test the AST wrapper for IR GVN
Out of our 3 GVN libraries, the one we actually use in production didn't
have tests -- except indirectly through `diff_ir_expr.ql`.
|
2020-12-21 08:21:02 +01:00 |
|
neal1991
|
b9d24b8255
|
fix for issue #4849
|
2020-12-21 08:54:15 +08:00 |
|
neal1991
|
eac83df40b
|
fix for issue #4848
|
2020-12-21 08:52:42 +08:00 |
|
Erik Krogh Kristensen
|
3a43421193
|
add missing qhelp
|
2020-12-19 00:02:42 +01:00 |
|
Erik Krogh Kristensen
|
05569187b4
|
improve performance of suffix checking
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
6369374224
|
implement new algorithm for detecting superlinear backtracking in regular expressions
|
2020-12-18 17:21:15 +01:00 |
|
Erik Krogh Kristensen
|
7ce91e9146
|
introduce cannonical representatives of RegExpTerms to decrease the number of InputSymbols in the NFA
|
2020-12-18 17:21:11 +01:00 |
|
Erik Krogh Kristensen
|
34dda6d38b
|
refactor to share predicates between regular expression queries
|
2020-12-18 16:15:56 +01:00 |
|
Rasmus Wriedt Larsen
|
49f902d28b
|
Merge pull request #4757 from yoff/python-dataflow-synthetic-callables
Python: Enclosing callable for synthetic arguments
|
2020-12-18 16:06:26 +01:00 |
|
yoff
|
a08eb99778
|
Merge pull request #4779 from RasmusWL/django-class-based-handlers
Python: Add modeling of django class based view handlers
|
2020-12-18 15:58:51 +01:00 |
|
Anders Schack-Mulligen
|
5106d5df53
|
Merge pull request #4833 from luchua-bc/java-broken-crypto-algorithms
Java: Add missing broken crypto algorithms
|
2020-12-18 15:12:29 +01:00 |
|
Rasmus Wriedt Larsen
|
3e6296c7b8
|
Python: Fix grammar in QLDoc
|
2020-12-18 14:54:14 +01:00 |
|
Rasmus Wriedt Larsen
|
ed11e8f916
|
Python: Simplify predicate implementation
Co-authored-by: yoff <lerchedahl@gmail.com>
|
2020-12-18 14:52:20 +01:00 |
|
Mathias Vorreiter Pedersen
|
b5102043b1
|
Fix comments.
|
2020-12-18 14:19:02 +01:00 |
|
Chris Smowton
|
de4cdda839
|
Merge pull request #4841 from smowton/smowton/admin/mergeback-126-2020-12-16
Mergeback rc/1.26
|
2020-12-18 12:59:06 +00:00 |
|
Mathias Vorreiter Pedersen
|
f5e4725642
|
C++: Propagate flow from instruction's to non-exact operands for arrays and unions, and accept test changes.
|
2020-12-18 13:54:34 +01:00 |
|
Rasmus Lerchedahl Petersen
|
e6e1cc2398
|
Python: Remember to accept failing tests
|
2020-12-18 13:38:14 +01:00 |
|
Rasmus Lerchedahl Petersen
|
712765c185
|
Python: Use ImportExp instead of SSA nodes
This also reverts the previous commit.
It should be squashed with that one, but for now we keep the history,
so we can track the performance tests.
|
2020-12-18 13:30:24 +01:00 |
|
Erik Krogh Kristensen
|
b2116dc5b4
|
add more tests for polynomial/exponential redos
|
2020-12-18 13:19:17 +01:00 |
|
Mathias Vorreiter Pedersen
|
2bf8e47932
|
Merge branch 'main' into default-taint-tracking-operand-instruction-interleaving
|
2020-12-18 11:59:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
7ccd48e53c
|
Make DefaultTaintTracking do operand->instruction->operand interleaving like DataFlowUtil.
|
2020-12-18 11:57:16 +01:00 |
|
Geoffrey White
|
dc4ca9b1b9
|
C++: Add qhelp and example.
|
2020-12-18 10:10:05 +00:00 |
|
Tom Hvitved
|
d53faa86dc
|
C#: Restrict FormatInvalid.ql and UncontrolledFormatString.ql to calls with insertions
|
2020-12-18 10:53:11 +01:00 |
|
Rasmus Lerchedahl Petersen
|
0629d3e6e7
|
Python: Enclosing callable for synthetic arguments
|
2020-12-18 10:45:24 +01:00 |
|
Rasmus Lerchedahl Petersen
|
a16d58dfc0
|
Python: Add tests cases with synthetic arguments
|
2020-12-18 10:41:42 +01:00 |
|
Jonas Jensen
|
fd7dec7f20
|
Merge pull request #4824 from geoffw0/modelchanges5
C++: Add cases in the Allocation model.
|
2020-12-18 09:16:01 +01:00 |
|
Tamas Vajk
|
8e8c3a9ded
|
Add change note
|
2020-12-18 09:15:33 +01:00 |
|
Tamas Vajk
|
6fd1f0049d
|
Add DB upgrade folder
|
2020-12-18 09:10:55 +01:00 |
|
yoff
|
39acc9a40b
|
Merge pull request #4735 from RasmusWL/python-untrusted-flow
Python: Untrusted data used in external APIs
|
2020-12-18 00:15:08 +01:00 |
|
yoff
|
9dd6439e3c
|
Merge pull request #4749 from RasmusWL/command-injection-tests
Python: Add some command injection tests
|
2020-12-17 23:36:06 +01:00 |
|
yoff
|
8a44405365
|
Merge pull request #4827 from RasmusWL/reword-qldoc-for-type-tracking-classes
Python: Reword QLDoc for class modeling with type-tracking
|
2020-12-17 23:28:19 +01:00 |
|
Tamas Vajk
|
8eeab8fdd0
|
Add new stats file
|
2020-12-17 21:22:58 +01:00 |
|
Tamas Vajk
|
f3a0d1d138
|
Add test to list all custom modifiers extracted from IL
|
2020-12-17 15:43:41 +01:00 |
|
Tamas Vajk
|
7662b55ecc
|
C#: Extract init only accessors and custom modifiers
|
2020-12-17 15:43:41 +01:00 |
|
luchua-bc
|
bfb138d415
|
Update qldoc
|
2020-12-17 14:42:14 +00:00 |
|
Tom Hvitved
|
7a132149a2
|
C#: Add change note
|
2020-12-17 15:39:01 +01:00 |
|
Tom Hvitved
|
fe559c190e
|
C#: Recognize format methods without insertion parameters
|
2020-12-17 15:39:01 +01:00 |
|