Geoffrey White
e39c115746
C++: QLDoc Strcpy (as demanded by the tests).
2020-07-01 16:23:50 +01:00
semmle-qlci
66a6fe7317
Merge pull request #3853 from max-schaefer/js/canonical-names
...
Approved by asgerf
2020-07-01 16:08:59 +01:00
Rasmus Lerchedahl Petersen
0b11e77457
Python: make compile
2020-07-01 16:55:44 +02:00
Rasmus Lerchedahl Petersen
0175d5be0c
Sync dataflow files
2020-07-01 16:44:11 +02:00
Rasmus Lerchedahl Petersen
7fb97d75f4
Merge branch 'master' of github.com:github/codeql into SharedDataflow
...
to get updated dataflow files
2020-07-01 16:43:14 +02:00
Dave Bartolomeo
566d7fad63
C++: Autoformat some more
2020-07-01 10:14:35 -04:00
Shati Patel
6429fe48aa
Merge pull request #3862 from shati-patel/shati-patel-patch-1
...
Small terminology update
2020-07-01 14:58:50 +01:00
Max Schaefer
a6d8073987
JavaScript: Make getADefinition and getAnAccess available on all CanonicalNames.
2020-07-01 14:42:03 +01:00
Esben Sparre Andreasen
3ca6031ae5
JS: rename predicate
2020-07-01 15:27:28 +02:00
Esben Sparre Andreasen
75451e349a
JS: teach the dataflow library identity functions Object.freeze/seal
2020-07-01 15:27:28 +02:00
Esben Sparre Andreasen
33c52761d4
JS: more dataflow and global access path testing
2020-07-01 15:26:25 +02:00
Anders Schack-Mulligen
20aed81476
Merge pull request #3863 from intrigus-lgtm/patch-2
...
Fix typo, add Oxford comma
2020-07-01 15:01:49 +02:00
Tom Hvitved
9e3a6e8d5e
Merge remote-tracking branch 'upstream/master' into csharp/dataflow/arrays
2020-07-01 14:50:26 +02:00
intrigus-lgtm
cabd275baa
Fix typo, add Oxford comma
2020-07-01 14:49:09 +02:00
Anders Schack-Mulligen
4aac70d3da
Dataflow: update doc based on review.
2020-07-01 14:45:49 +02:00
Shati Patel
5af5f40ae1
Small terminology update
2020-07-01 13:41:50 +01:00
Anders Schack-Mulligen
7d057598d8
Merge pull request #3857 from jbj/flowthrough-bigstep-perf
...
C++: Remove big-step relation in flow-through code
2020-07-01 14:23:23 +02:00
Jonas Jensen
50cd759718
Merge pull request #3733 from geoffw0/models5
...
C++: Constructor and assignment models
2020-07-01 13:58:27 +02:00
Erik Krogh Kristensen
3157cd724d
add noSQL tests for type-tracking req.query
2020-07-01 11:45:09 +02:00
Erik Krogh Kristensen
bace2994c3
add test for type-tracking req.params
2020-07-01 11:38:54 +02:00
Anders Schack-Mulligen
38b73ff684
Merge pull request #3854 from hvitved/dataflow/node-type-interface
...
Data flow: Replace `getErasedRepr()` and `Node::getTypeBound()` with `getNodeType()`
2020-07-01 11:37:19 +02:00
Erik Krogh Kristensen
8227010463
also use new type-tracking in isUserControlledObject
2020-07-01 11:32:51 +02:00
Rasmus Lerchedahl Petersen
79e4f1ee93
Python: Enable consistency check (currently fails)
2020-07-01 09:21:36 +02:00
semmle-qlci
ef109d91ed
Merge pull request #3842 from hvitved/csharp/dataflow/remove-viable-impl
...
Approved by aschackmull
2020-07-01 08:14:57 +01:00
Tom Hvitved
ed2077b2f4
Merge pull request #3841 from gavinl/master
...
QHELP: Encryption using ECB.qhelp grammar
2020-07-01 08:45:35 +02:00
Dave Bartolomeo
10bbd566d4
C++: Autoformat
2020-07-01 02:28:53 -04:00
Rasmus Lerchedahl Petersen
7787900bed
Python: make compile and simplify
2020-07-01 07:36:00 +02:00
Rasmus Lerchedahl Petersen
825f24a953
Python: simplify according to review comments
2020-07-01 07:20:26 +02:00
Rasmus Lerchedahl Petersen
3388ca44ed
Python: sync dataflow library
2020-07-01 07:16:59 +02:00
Rasmus Lerchedahl Petersen
e259281821
Merge branch 'master' of github.com:github/codeql into SharedDataflow
...
to receive updates from data flow library
2020-07-01 07:15:32 +02:00
dilanbhalla
259654b1a4
moved library to experimental
2020-06-30 18:04:41 -07:00
dilanbhalla
e1130a2bfa
moved privatedata to experimental
2020-06-30 17:58:24 -07:00
dilanbhalla
3fdd11a9b5
scanf fixes, still need to update qhelp file
2020-06-30 17:22:29 -07:00
Robert Marsh
e9777913a3
Merge pull request #3856 from geoffw0/qldoc5follow
...
C++: Make getSecureAlgorithmRegex() work as expected.
2020-06-30 16:17:37 -07:00
Dave Bartolomeo
6592f8c1bb
C++: QLDoc cleanup
...
This PR just fixes a few bits of PR feedback from my previous QLDoc PR.
2020-06-30 17:33:52 -04:00
Jonas Jensen
cff0f48d34
C++: Work around join-order issue in flow-through
...
In this non-linear recursion, a `#prev` relation was joined earlier than
the `#prev_delta` relation. As a result, each iteration of the predicate
processes every tuple from previous iterations.
This quadratic behavior caused severe slowdowns on oneapi-src/oneDNN.
2020-06-30 21:12:57 +02:00
dilanbhalla
f462156cdf
private data file/buffer write
2020-06-30 12:09:50 -07:00
Jonas Jensen
17beb2d867
C++: Remove big-step relation in flow-through code
...
This relation was originally introduced to improve performance but may
no longer be necessary. The `localFlowStepPlus` predicate had an
explosion of tuples on oneapi-src/oneDNN for C++.
2020-06-30 21:06:45 +02:00
Geoffrey White
8bdcc47a50
C++: Add a test.
2020-06-30 17:46:08 +01:00
Jonathan Leitschuh
fa8b278332
Add jOOQ methods as SQL Injection Sinks
2020-06-30 11:57:17 -04:00
Geoffrey White
54b8f8e662
C++: Make getSecureAlgorithmRegex() return a single regexp as expected, and as getInsecureAlgorithmRegex() does.
2020-06-30 16:51:16 +01:00
Mathias Vorreiter Pedersen
286c09183f
Merge pull request #3837 from geoffw0/qldoc5
...
C++/Java: Update QLDoc and terminology in Encryption.qll
2020-06-30 17:44:59 +02:00
Mathias Vorreiter Pedersen
cb39525f3b
Merge pull request #3847 from nickrolfe/71-this-followup
...
C++: make MemberFunction::getTypeOfThis() return PointerType
2020-06-30 17:44:32 +02:00
Tom Hvitved
f1179cc202
Java: Follow-up changes
2020-06-30 17:44:16 +02:00
Tom Hvitved
de3dc734ff
C++: Follow-up changes
2020-06-30 17:44:16 +02:00
Tom Hvitved
1fa58bd82d
Data flow: Sync files
2020-06-30 17:37:16 +02:00
Tom Hvitved
6bcb8a3a5b
C#: Replace getErasedRepr() and getTypeBound() with getNodeType()
2020-06-30 17:37:16 +02:00
James Fletcher
8ff8b3e22c
Merge pull request #3852 from jf205/1.24-mergeback
...
1.24 -> master mergeback
2020-06-30 16:21:49 +01:00
Geoffrey White
3016798101
Merge branch 'master' into copymove
2020-06-30 16:20:41 +01:00
Geoffrey White
c57c016ced
C++: Go the other way.
2020-06-30 16:16:00 +01:00
