Geoffrey White
|
73171682b7
|
C++: Switch to taint flow as suggested in the old PR.
|
2020-04-02 19:49:41 +01:00 |
|
Geoffrey White
|
b14b52d0ac
|
C++: Add models for std::string (as in old PR).
|
2020-04-02 19:49:41 +01:00 |
|
Geoffrey White
|
69f6790c83
|
C++: Add a test of taint through std::strings, based on the one in the old PR.
|
2020-04-02 19:49:31 +01:00 |
|
Erik Krogh Kristensen
|
845020d2ae
|
change getReceiver to getAMethodCall
|
2020-04-02 20:28:27 +02:00 |
|
Erik Krogh Kristensen
|
2c0bae4937
|
Apply suggestions from code review
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com>
|
2020-04-02 20:28:04 +02:00 |
|
Rebecca Valentine
|
712fb8badc
|
Python: ObjectAPI to ValueAPI: IterReturnsNonSelf: Autoformats
|
2020-04-02 09:19:41 -07:00 |
|
Shati Patel
|
26f15b8978
|
Include "Introduction to QL" in tutorial topic
|
2020-04-02 17:19:29 +01:00 |
|
Rebecca Valentine
|
cdda80623d
|
Merge branch 'master' into python-objectapi-to-valueapi-iterreturnsnonself
|
2020-04-02 09:16:23 -07:00 |
|
Jonas Jensen
|
604731ba6b
|
Merge pull request #3171 from MathiasVP/init-dynamic-alloc-newexpr
C++: Emit InitializeDynamicAllocation instructions for NewExpr and NewArrayExpr
|
2020-04-02 17:37:05 +02:00 |
|
Mathias Vorreiter Pedersen
|
ce5d8d516f
|
Merge branch 'master' into ir-flow-fields
|
2020-04-02 15:23:00 +02:00 |
|
Mathias Vorreiter Pedersen
|
e2908eaf63
|
C++: Add comment explaining why we can split call and allocation side effects
|
2020-04-02 15:11:13 +02:00 |
|
Mathias Vorreiter Pedersen
|
a273917e51
|
Merge branch 'master' into init-dynamic-alloc-newexpr
|
2020-04-02 14:11:03 +02:00 |
|
Jonas Jensen
|
4825774ce2
|
Merge pull request #3173 from geoffw0/opnew
C++: Support operator new and operator delete in models library
|
2020-04-02 14:01:10 +02:00 |
|
Mathias Vorreiter Pedersen
|
dda3aaa8aa
|
C++: Add QLDoc to public classes and predicates
|
2020-04-02 14:00:33 +02:00 |
|
Anders Schack-Mulligen
|
01157e43e3
|
Merge pull request #2899 from p-/cwe-036
Java: Calling openStream on URLs created from remote source can lead to file disclosure
|
2020-04-02 13:55:06 +02:00 |
|
Asger Feldthaus
|
8f930fc3e6
|
JS: Remove recursive SourceNode from AngularJS
|
2020-04-02 12:25:33 +01:00 |
|
Asger Feldthaus
|
ee106b1103
|
JS: Remove tautological SourceNode::Range subclasses
|
2020-04-02 12:21:17 +01:00 |
|
semmle-qlci
|
6757924183
|
Merge pull request #3157 from tausbn/python-fix-analysis-qhelp-link
Approved by felicitymay
|
2020-04-02 11:43:15 +01:00 |
|
Asger Feldthaus
|
3a9d047cf5
|
JS: Ignore delete expressions in js/missing-await
|
2020-04-02 11:35:09 +01:00 |
|
Asger Feldthaus
|
ccce0205b4
|
JS: Add test
|
2020-04-02 11:34:07 +01:00 |
|
Shati Patel
|
926d3d0968
|
Merge pull request #3190 from shati-patel/53-ql-reference
Docs: Change "handbook" to "reference"
|
2020-04-02 11:11:55 +01:00 |
|
Taus
|
d540bf6ce5
|
Merge pull request #3039 from BekaValentine/python-objectapi-to-valueapi-returnvalueignored
Python: ObjectAPI to ValueAPI: ReturnValueIgnored
|
2020-04-02 11:42:01 +02:00 |
|
Shati Patel
|
2d602720c1
|
Docs: Change "handbook" to "reference"
|
2020-04-02 10:32:12 +01:00 |
|
Mathias Vorreiter Pedersen
|
af9e05b9cd
|
C++: Accept test
|
2020-04-02 10:57:11 +02:00 |
|
Geoffrey White
|
ead5feb921
|
C++: Autoformat.
|
2020-04-02 09:50:14 +01:00 |
|
semmle-qlci
|
32cf0f14dc
|
Merge pull request #3179 from asger-semmle/js/underscore_int_literals
Approved by erik-krogh
|
2020-04-02 09:48:41 +01:00 |
|
Mathias Vorreiter Pedersen
|
020c273dc9
|
Merge branch 'master' into ir-flow-fields
|
2020-04-02 10:45:58 +02:00 |
|
Peter Stöckli
|
ca80bfda4f
|
Fix tags
|
2020-04-02 07:43:55 +02:00 |
|
Mathias Vorreiter Pedersen
|
8fdc4b037a
|
C++: Ensure that no call side effect is an allocation side effect
|
2020-04-02 07:30:56 +02:00 |
|
Robert Marsh
|
a061811939
|
Merge branch 'master' into rdmarsh/cpp/ir-flow-through-outparams
Pick up new test for user-defined swap functions
|
2020-04-01 17:32:55 -07:00 |
|
Robert Marsh
|
bbb69d524e
|
Merge pull request #3188 from geoffw0/swap4
C++: Add a user defined swap function to taint tests.
|
2020-04-01 17:28:46 -07:00 |
|
Robert Marsh
|
8e89c379f5
|
Merge pull request #1319 from geoffw0/av114
CPP: Improve locations for AV Rule 114.ql.
|
2020-04-01 16:48:21 -07:00 |
|
Rebecca Valentine
|
cc53b15a5d
|
Python: ObjectAPI to ValueAPI: ReturnValueIgnored: Reorganizes predicates
|
2020-04-01 14:41:49 -07:00 |
|
Taus
|
bd41bb59ec
|
Merge pull request #3032 from BekaValentine/python-objectapi-to-valueapi-signatureoverriddenmethod
Python: ObjectAPI to ValueAPI: SignatureOverriddenMethod
|
2020-04-01 23:03:27 +02:00 |
|
Shati Patel
|
c9061f45f0
|
Merge pull request #3186 from shati-patel/51-move-go-docs
Docs: Copy "CodeQL for Go" docs into this repo
|
2020-04-01 21:39:32 +01:00 |
|
Rebecca Valentine
|
09349f1957
|
Python: ObjectAPI to ValueAPI: ReturnValueIgnored: Autoformats
|
2020-04-01 12:54:42 -07:00 |
|
Rebecca Valentine
|
28319ee0f7
|
Python: ObjectAPI to ValueAPI: SignatureOverriddenMethod: Autoformats
|
2020-04-01 12:32:21 -07:00 |
|
Jonas Jensen
|
207c76b855
|
C++: Path explanations in DefaultTaintTracking
The first three queries are migrated to use path explanations.
|
2020-04-01 20:51:05 +02:00 |
|
Erik Krogh Kristensen
|
75b183bc33
|
update expected output
|
2020-04-01 20:46:49 +02:00 |
|
Erik Krogh Kristensen
|
32b86ab91a
|
autoformat
|
2020-04-01 20:44:47 +02:00 |
|
Jonas Jensen
|
b07380d2eb
|
C++: Update ppReprType for C++ IR dataflow
I forgot to do this in b1be123e31. Without this change, we suffix
` : void` on very step of an IR path explanation.
|
2020-04-01 20:19:00 +02:00 |
|
Geoffrey White
|
6b5f4d9e12
|
Merge branch 'master' into av114
|
2020-04-01 18:23:21 +01:00 |
|
James Fletcher
|
698252236b
|
Merge pull request #3184 from jf205/migration-28
CodeQL docs: update query console link text
|
2020-04-01 18:20:24 +01:00 |
|
Geoffrey White
|
7a98919879
|
C++: Add a non-standard swap to taint tests.
|
2020-04-01 17:14:38 +01:00 |
|
Peter Stöckli
|
36c351dc68
|
Add input from documentation review
|
2020-04-01 17:59:45 +02:00 |
|
Rebecca Valentine
|
838e37ca98
|
Python: ObjectAPI to ValueAPI: ReturnValueIgnore: Moves getAnInferredType to CallableObjectInternal
|
2020-04-01 08:45:27 -07:00 |
|
Shati Patel
|
e83bee2f02
|
Copy Go docs into this repo
|
2020-04-01 16:43:52 +01:00 |
|
Geoffrey White
|
452d1d084f
|
Add details about query tagging to supported-queries.md
Add some details about query tagging (see https://wiki.semmle.com/display/IN/Query+tags and https://wiki.semmle.com/display/IN/Modelling+CWEs+at+Semmle).
|
2020-04-01 16:36:06 +01:00 |
|
James Fletcher
|
1ba7a4d39b
|
Update docs/language/learn-ql/introduction-to-ql.rst
Co-Authored-By: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-04-01 16:09:28 +01:00 |
|
James Fletcher
|
aea2957570
|
Update docs/language/learn-ql/java/dataflow.rst
Co-Authored-By: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-04-01 16:09:04 +01:00 |
|