james
a6cfdfe8e3
docs: small change to codeql training landing page
2020-03-27 13:00:26 +00:00
james
b4b1903642
docs: simplify 'learning codeql' landing page
2020-03-27 13:00:26 +00:00
james
76f344638e
docs: 'What's new' -> 'Further reading'
2020-03-27 13:00:26 +00:00
james
deb657acdb
docs: tidy up 'codeql for x' pages
...
Manually construct tocs including intro text.
Fix a few intros and titles.
2020-03-27 13:00:00 +00:00
Philip Ginsbach
05be9b82a2
better wording for type compatibilit
2020-03-27 12:56:37 +00:00
Philip Ginsbach
135a288bed
Update docs/language/ql-handbook/expressions.rst
...
Co-Authored-By: Shati Patel <42641846+shati-patel@users.noreply.github.com >
2020-03-27 12:55:42 +00:00
semmle-qlci
fad902fc9b
Merge pull request #3095 from erik-krogh/MorePerf
...
Approved by asgerf
2020-03-27 12:51:37 +00:00
Mathias Vorreiter Pedersen
5ba5791ec6
C++: Only allow flow through non-conflated chi instructions
2020-03-27 13:37:17 +01:00
Mathias Vorreiter Pedersen
580310f321
Merge branch 'master' into ir-flow-fields
2020-03-27 13:32:26 +01:00
semmle-qlci
9b3400337b
Merge pull request #3130 from erik-krogh/PreciseSteps
...
Approved by asgerf
2020-03-27 12:18:28 +00:00
Philip Ginsbach
1b4df6e24c
whitespace fix
2020-03-27 11:53:19 +00:00
Philip Ginsbach
8e873f35ac
mention set literals in handbook
2020-03-27 11:51:03 +00:00
Philip Ginsbach
f9442211bf
unique aggregate in handbook and reference
2020-03-27 11:31:25 +00:00
Mathias Vorreiter Pedersen
7890a322c8
C++/C#/Java: Sync identical files
2020-03-27 11:51:38 +01:00
Mathias Vorreiter Pedersen
9ab8580ca7
Data flow: No magic in parameterThroughFlowCand
2020-03-27 11:51:10 +01:00
Rasmus Wriedt Larsen
8aadb8bd06
Python: Fix iterable-unpacking tests
2020-03-27 11:42:37 +01:00
semmle-qlci
1975a83cdd
Merge pull request #3116 from max-schaefer/js/postgres-type-tracking
...
Approved by asgerf
2020-03-27 09:23:52 +00:00
Erik Krogh Kristensen
58af63d8cc
add test case for XSS on url suffix
2020-03-27 10:02:24 +01:00
Erik Krogh Kristensen
d3e1a258fa
autoformat
2020-03-27 09:34:56 +01:00
Erik Krogh Kristensen
be11418c77
autoformat
2020-03-27 00:18:41 +01:00
Robert Marsh
968ddc6274
Merge pull request #3137 from jbj/DefaultTaintTracking-argv
...
C++: Never track flow out of an argv argument
2020-03-26 15:29:52 -07:00
Calum Grant
b94b4b7c91
C#: Fix tests
2020-03-26 20:40:40 +00:00
Calum Grant
8a968dac81
C#: Enable nullability in Semmle.Util
2020-03-26 20:10:21 +00:00
Jonas Jensen
95f116eb48
Merge branch 'DefaultTaintTracking-argv' into dataflow-indirect-args
2020-03-26 20:47:50 +01:00
Jonas Jensen
2801941ca2
C++: Never track flow out of an argv argument
...
This change removes some duplicate results that will otherwise appear
due to https://github.com/Semmle/ql/pull/3123 and possibly
https://github.com/Semmle/ql/pull/2704 .
2020-03-26 20:40:16 +01:00
Calum Grant
782f2b5b50
Merge pull request #3073 from hvitved/csharp/null-maybe-fp
...
C#: Add test for `cs/dereferenced-value-may-be-null`
2020-03-26 18:55:54 +00:00
Dave Bartolomeo
7879dde8b8
Merge pull request #3097 from jbj/detect-conflated-memory
...
C++: Implement Instruction.isResultConflated
2020-03-26 14:52:47 -04:00
Rasmus Wriedt Larsen
96d1fc8c0b
Python: Fix iterable-unpacking taint CP
...
When running ql/python/ql/src/Security/CWE-079/ReflectedXss.ql against the
database for flask.
Iitially there were 10 million result-tuples for iterable_unpacking_descent.
With this change, we're down to roughly 2100,
2020-03-26 16:42:48 +01:00
Calum Grant
71e0dc087b
C#: General code tidy.
2020-03-26 15:35:31 +00:00
Erik Krogh Kristensen
6b507c6933
add urlSuffix support to DomBasedXSS
2020-03-26 15:47:59 +01:00
Erik Krogh Kristensen
a850616927
delete Xss.actual
2020-03-26 15:40:37 +01:00
Erik Krogh Kristensen
e2d2c2341e
autoformat and update expected output
2020-03-26 15:38:00 +01:00
Erik Krogh Kristensen
baf50c832c
more precise charpreds in taint steps
2020-03-26 15:30:43 +01:00
Philip Ginsbach
71c588a74f
information on version support
2020-03-26 14:15:29 +00:00
Tom Hvitved
a8660d446e
C#: Fix typo
2020-03-26 14:54:03 +01:00
Philip Ginsbach
f4a1479d33
sentence about semantics
2020-03-26 12:49:09 +00:00
Philip Ginsbach
783cee30c4
mention set literals in the specification
2020-03-26 12:21:38 +00:00
Asger Feldthaus
816968d102
JS: Rename test files to avoid clash
2020-03-26 11:59:57 +00:00
Tom Hvitved
db8d61c3be
C#: Remove compiler warning in Remote.qll
2020-03-26 12:26:17 +01:00
Jonas Jensen
08c53d4a61
C++: Clean up the ParameterNode class tree
...
The new names are chosen to align with Java's `DataFlowUtil.qll`.
2020-03-26 11:57:53 +01:00
Mathias Vorreiter Pedersen
a43abaaed9
Merge branch 'master' into ir-flow-fields
2020-03-26 11:51:07 +01:00
Mathias Vorreiter Pedersen
c6c613840a
C++: Removed toString from PostUpdateNodes. They were more confusing than helpful
2020-03-26 11:43:40 +01:00
Mathias Vorreiter Pedersen
fbef146a49
C++: Remove PositionalArgumentWithoutWriteSideEffectNode (since not all arguments need a PostUpdateNode). Also generalized the added flow rule in simpleLocalFlowStep since there isn't always a ChiInstruction - for instance of it's a write to a struct that only has a single field.
2020-03-26 11:39:20 +01:00
Jonas Jensen
4f068685e1
C++: Add AssignExpr + Initializer to lib overview
2020-03-26 10:49:03 +01:00
yo-h
0f70da2258
Merge pull request #3105 from aschackmull/java/postupdate-jump
...
Java: Fix missing jump step from PostUpdate to capture.
2020-03-25 22:05:30 -04:00
Robert Marsh
e6cdbb9bd2
Merge pull request #3121 from dbartol/dbartol/ir-generate-all-fixup
...
C++: Late fix for PR feedback
2020-03-25 17:58:01 -07:00
Erik Krogh Kristensen
1cefa12315
update expected output
2020-03-25 23:54:57 +01:00
Erik Krogh Kristensen
8f45c8fe83
use LoadStoreStep for type-tracking promises
2020-03-25 23:54:57 +01:00
Erik Krogh Kristensen
1a2983fe39
support small steps for promise tracking
2020-03-25 23:54:57 +01:00
Erik Krogh Kristensen
00181e059b
add tests for type-tracking promises
2020-03-25 23:54:56 +01:00
