Mathias Vorreiter Pedersen
|
2bf8e47932
|
Merge branch 'main' into default-taint-tracking-operand-instruction-interleaving
|
2020-12-18 11:59:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
7ccd48e53c
|
Make DefaultTaintTracking do operand->instruction->operand interleaving like DataFlowUtil.
|
2020-12-18 11:57:16 +01:00 |
|
Geoffrey White
|
dc4ca9b1b9
|
C++: Add qhelp and example.
|
2020-12-18 10:10:05 +00:00 |
|
Tom Hvitved
|
d53faa86dc
|
C#: Restrict FormatInvalid.ql and UncontrolledFormatString.ql to calls with insertions
|
2020-12-18 10:53:11 +01:00 |
|
Rasmus Lerchedahl Petersen
|
0629d3e6e7
|
Python: Enclosing callable for synthetic arguments
|
2020-12-18 10:45:24 +01:00 |
|
Rasmus Lerchedahl Petersen
|
a16d58dfc0
|
Python: Add tests cases with synthetic arguments
|
2020-12-18 10:41:42 +01:00 |
|
Jonas Jensen
|
fd7dec7f20
|
Merge pull request #4824 from geoffw0/modelchanges5
C++: Add cases in the Allocation model.
|
2020-12-18 09:16:01 +01:00 |
|
Tamas Vajk
|
8e8c3a9ded
|
Add change note
|
2020-12-18 09:15:33 +01:00 |
|
Tamas Vajk
|
6fd1f0049d
|
Add DB upgrade folder
|
2020-12-18 09:10:55 +01:00 |
|
yoff
|
39acc9a40b
|
Merge pull request #4735 from RasmusWL/python-untrusted-flow
Python: Untrusted data used in external APIs
|
2020-12-18 00:15:08 +01:00 |
|
yoff
|
9dd6439e3c
|
Merge pull request #4749 from RasmusWL/command-injection-tests
Python: Add some command injection tests
|
2020-12-17 23:36:06 +01:00 |
|
yoff
|
8a44405365
|
Merge pull request #4827 from RasmusWL/reword-qldoc-for-type-tracking-classes
Python: Reword QLDoc for class modeling with type-tracking
|
2020-12-17 23:28:19 +01:00 |
|
Tamas Vajk
|
8eeab8fdd0
|
Add new stats file
|
2020-12-17 21:22:58 +01:00 |
|
Tamas Vajk
|
f3a0d1d138
|
Add test to list all custom modifiers extracted from IL
|
2020-12-17 15:43:41 +01:00 |
|
Tamas Vajk
|
7662b55ecc
|
C#: Extract init only accessors and custom modifiers
|
2020-12-17 15:43:41 +01:00 |
|
luchua-bc
|
bfb138d415
|
Update qldoc
|
2020-12-17 14:42:14 +00:00 |
|
Tom Hvitved
|
7a132149a2
|
C#: Add change note
|
2020-12-17 15:39:01 +01:00 |
|
Tom Hvitved
|
fe559c190e
|
C#: Recognize format methods without insertion parameters
|
2020-12-17 15:39:01 +01:00 |
|
Geoffrey White
|
fda531da49
|
C++: Add query precision.
|
2020-12-17 14:31:43 +00:00 |
|
luchua-bc
|
7b44ee50ea
|
Revamp the functions to have a string parameter
|
2020-12-17 14:26:13 +00:00 |
|
Tamas Vajk
|
57c163f314
|
C#: Add test for CIL setter extraction
|
2020-12-17 15:23:33 +01:00 |
|
Tamás Vajk
|
45893ab084
|
Merge pull request #4775 from tamasvajk/feature/cil-attribute-decoding2
C#: Improve CIL attribute decoding
|
2020-12-17 15:20:44 +01:00 |
|
Tamás Vajk
|
65c58edbed
|
Merge pull request #4617 from tamasvajk/feature/csharp9-implicit-obj-creation
C#: Extract 'ImplicitObjectCreationExpressionSyntax'
|
2020-12-17 15:20:13 +01:00 |
|
Tamas Vajk
|
f12befdcd0
|
Add extra test for collection initialization
|
2020-12-17 13:49:02 +01:00 |
|
luchua-bc
|
b44f01a87b
|
Enhance the check for embedded passwords
|
2020-12-17 03:47:38 +00:00 |
|
luchua-bc
|
bed8a68d28
|
Exclude broken algorithms from the list of secure algorithms
|
2020-12-17 00:41:23 +00:00 |
|
Aditya Sharad
|
a79f1e145b
|
Merge pull request #4832 from github/docs/add-favicon
[docs] Add GitHub favicon to CodeQL docs
|
2020-12-16 13:29:32 -08:00 |
|
Chris Smowton
|
faa08c10e0
|
Merge branch 'rc/1.26' of https://github.com/github/codeql into smowton/admin/mergeback-126-2020-12-16
|
2020-12-16 21:08:20 +00:00 |
|
James Fletcher
|
7bfc2853cb
|
Merge pull request #4839 from github/docs/css-fixes-126
[CodeQL docs] Fix two CSS bugs (rc/1.26)
|
2020-12-16 18:10:18 +00:00 |
|
James Fletcher
|
58f17d79c2
|
Merge pull request #4838 from github/docs/css-fixes
[CodeQL docs] Fix two CSS bugs
|
2020-12-16 16:44:59 +00:00 |
|
james
|
6c430ce0c7
|
align list items correctly
|
2020-12-16 16:41:27 +00:00 |
|
james
|
686eca9adf
|
fix footnote spacing
|
2020-12-16 16:41:27 +00:00 |
|
Geoffrey White
|
136fa01b87
|
C++: Query headers (apart from precison - needs more research).
|
2020-12-16 16:24:10 +00:00 |
|
Geoffrey White
|
1e3535754b
|
C++: Violation message.
|
2020-12-16 16:13:02 +00:00 |
|
james
|
ff123f8e78
|
align list items correctly
|
2020-12-16 15:58:12 +00:00 |
|
Geoffrey White
|
2210344f4d
|
C++: Add a test.
|
2020-12-16 15:44:53 +00:00 |
|
james
|
256460dddc
|
fix footnote spacing
|
2020-12-16 15:31:25 +00:00 |
|
Tamas Vajk
|
1bc65a68df
|
Address PR review comments
|
2020-12-16 16:12:11 +01:00 |
|
Geoffrey White
|
c89f7d824b
|
C++: Back out support for SysAllocString. It turns out supporting all of the SysAlloc stuff is beyond our current models, supporting just SysFreeString as we do is OK.
|
2020-12-16 15:08:53 +00:00 |
|
CodeQL CI
|
41ef7a3fce
|
Merge pull request #4733 from erik-krogh/args
Approved by esbena
|
2020-12-16 06:51:26 -08:00 |
|
CodeQL CI
|
287954e0d8
|
Merge pull request #4686 from erik-krogh/buildFp
Approved by esbena
|
2020-12-16 06:42:41 -08:00 |
|
Erik Krogh Kristensen
|
94e07bb91c
|
add change note
|
2020-12-16 15:10:03 +01:00 |
|
Erik Krogh Kristensen
|
99af484042
|
move the "commander" source
|
2020-12-16 15:05:59 +01:00 |
|
luchua-bc
|
6b77922a25
|
Fix typo and update qldoc
|
2020-12-16 14:04:45 +00:00 |
|
Erik Krogh Kristensen
|
2ae0400922
|
update docstring for dashdash
|
2020-12-16 15:00:44 +01:00 |
|
Erik Krogh Kristensen
|
3d03e7192c
|
Update javascript/ql/src/semmle/javascript/security/dataflow/IndirectCommandInjectionCustomizations.qll
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2020-12-16 14:57:20 +01:00 |
|
Erik Krogh Kristensen
|
d377a02825
|
add change note
|
2020-12-16 14:53:23 +01:00 |
|
James Fletcher
|
8b6c53cbb5
|
Merge pull request #4830 from owen-mc/update-go-supported-frameworks
Update supported Go frameworks
|
2020-12-16 10:07:48 +00:00 |
|
Jonas Jensen
|
406cc64dcc
|
Merge pull request #4831 from geoffw0/printfunknown
C++: Fix Printf.qll specsAreKnown
|
2020-12-16 10:56:56 +01:00 |
|
james
|
1a7ca1d3d2
|
add favicon to query help and support projects
|
2020-12-16 09:29:26 +00:00 |
|