Taus
eb6feeeaf8
Merge pull request #2482 from RasmusWL/python-include-zope-web-tests
...
Python: include zope web tests from internal repo
2019-12-18 13:55:23 +01:00
Rasmus Wriedt Larsen
48f873e3d9
Python: Add getAReturnedNode to PythonFunctionValue
2019-12-18 12:00:43 +01:00
Erik Krogh Kristensen
43e9d11f75
inline definition of importIdentifier
2019-12-18 11:43:10 +01:00
Erik Krogh Kristensen
76d4db2552
changes based on review
2019-12-18 11:39:46 +01:00
Erik Krogh Kristensen
807664e545
add change note
2019-12-18 11:35:16 +01:00
Erik Krogh Kristensen
4fdfa51e44
add support for import.meta expressions in JavaScript
2019-12-18 10:45:54 +01:00
Rasmus Wriedt Larsen
582ef6cec9
Python: Restructure logic in Twisted.qll
2019-12-18 10:42:39 +01:00
Rasmus Wriedt Larsen
9942c3fd8b
Python: Autoformat twisted library
2019-12-18 10:42:39 +01:00
Rasmus Wriedt Larsen
ac55e6aba6
Python: Modernise twisted library
2019-12-18 10:42:39 +01:00
Rasmus Wriedt Larsen
4e3c183676
Python: Adapt twisted tests so they pass
2019-12-18 10:42:39 +01:00
Rasmus Wriedt Larsen
6011cb74f8
Python: Add twisted tests from internal repo
2019-12-18 10:42:39 +01:00
Anders Schack-Mulligen
2443f10823
C#: Update .expected file.
2019-12-18 10:40:18 +01:00
Jonas Jensen
367827a2ef
Merge pull request #2541 from max-schaefer/unify-xml-qlls
...
C++/Java/JavaScript/Python: Unify XML libraries.
2019-12-18 10:35:34 +01:00
Jonas Jensen
66d49a4a8a
Merge pull request #2546 from MathiasVP/arguments-source-qltest
...
C++: Added test for 333d0a69
2019-12-18 09:11:11 +01:00
Robert Marsh
e209ed961a
Merge branch 'master' into rdmarsh/cpp/ir-callee-side-effects
2019-12-17 15:11:02 -08:00
Robert Marsh
93ace5be35
C++: remove Chi node flow in DefaultTaintTracking
2019-12-17 14:23:11 -08:00
semmle-qlci
8ad11b98d0
Merge pull request #2538 from hvitved/csharp/missing-to-string
...
Approved by calumgrant
2019-12-17 19:23:47 +00:00
Dave Bartolomeo
240823019a
Merge remote-tracking branch 'upstream/master' into dbartol/MissingToString
2019-12-17 11:50:36 -07:00
Geoffrey White
ab0be19cc5
C++: Autoformat.
2019-12-17 17:51:55 +00:00
Jonathan Leitschuh
b218374772
Add io.netty.handler.codec.http.DefaultHttpResponse to Netty Response Splitting Detection
...
Related: #2185
Related: https://github.com/github/security-lab/issues/22
2019-12-17 12:12:04 -05:00
Robert Marsh
7468facb34
C++: autoformat more
2019-12-17 09:06:52 -08:00
Rasmus Wriedt Larsen
8b5d6ae2cf
Python: Modernise zope web tests
2019-12-17 17:42:03 +01:00
Rasmus Wriedt Larsen
e257ba40c4
Python: Make zope web tests pass
2019-12-17 17:42:03 +01:00
Erik Krogh Kristensen
2e5b7273ab
changes based on review feedback.
2019-12-17 17:30:05 +01:00
Taus Brock-Nannestad
1d94f6d303
Python: Fix several bad join orders.
...
Performance on `taers232c/GAMADV-X` (which exhibited pathological behaviour in
the most recent dist upgrade) went from ~670s to ~313s on
`py/hardcoded-credentials`.
There are still a few tuple counts in the 10-100 million range, but this commit
takes care of all of the ones that numbered in the billions. (A single tuple
count in the 100-1000 million range remains, but it appears to be less critical,
taking only two seconds to calculate.)
2019-12-17 17:19:49 +01:00
Geoffrey White
eaf00c6683
C++: Fix override related warning.
2019-12-17 15:39:29 +00:00
Erik Krogh Kristensen
0a8a2ecc61
make EventEmitter classses non final, and add a comment about extending EventEmitter::Range
2019-12-17 16:37:03 +01:00
Erik Krogh Kristensen
fed9302996
uppercase E in Electron
...
Co-Authored-By: Max Schaefer <54907921+max-schaefer@users.noreply.github.com >
2019-12-17 16:29:55 +01:00
Geoffrey White
9986206dc6
C++: Placement new does not necessarily require a delete.
2019-12-17 15:28:21 +00:00
Erik Krogh Kristensen
bf56797ad7
update expected output of tests
2019-12-17 16:27:55 +01:00
Erik Krogh Kristensen
f140820511
fix FP related to block-level flow type annotations
2019-12-17 16:10:20 +01:00
Shati Patel
6a1d0b016c
QL tutorials: Update formatting and style
2019-12-17 14:59:50 +00:00
Anders Schack-Mulligen
0880b57372
Merge pull request #1 from hvitved/csharp/no-ternary-cond-taint-tracking
...
C#: No taint-tracking steps for ternary conditionals
2019-12-17 15:29:24 +01:00
Mathias Vorreiter Pedersen
1d3ee71f73
C++: Added test for 333d0a69
2019-12-17 13:54:41 +01:00
Tom Hvitved
9dde1ce76a
C#: No taint-tracking steps for ternary conditionals
...
Ternary conditionals `b ? x : y` mistakenly had taint-tracking steps from both
`b`, `x`, and `y` to the conditional expression itself. Flow from `b` was not
intented, and flow from `x` and `y` is already part of ordinary data flow.
2019-12-17 13:53:39 +01:00
James Fletcher
a974bccd62
Merge pull request #2545 from shati-patel/update-ql4e
...
Docs: Update mention of "QL for Eclipse"
2019-12-17 12:39:31 +00:00
shati-patel
8143333928
Docs: Update mention of "QL for Eclipse"
2019-12-17 12:33:01 +00:00
Erik Krogh Kristensen
9dd7d1c6d7
changes based on review feedback
2019-12-17 13:19:53 +01:00
Erik Krogh Kristensen
f9ddd5891a
minor documentation fixes
...
Co-Authored-By: Max Schaefer <54907921+max-schaefer@users.noreply.github.com >
2019-12-17 13:05:20 +01:00
Geoffrey White
a5e10a7ae2
C++: More change notes.
2019-12-17 11:56:23 +00:00
Geoffrey White
520ff39349
C++: Update MemoryMayNotBeFreed.ql similarly.
2019-12-17 11:56:23 +00:00
Geoffrey White
9a944a947a
C++: Update MemoryNeverFreed.ql to exclude alloca (and use the new allocation model directly).
2019-12-17 11:10:03 +00:00
Geoffrey White
a8c31c6590
C++: Add AllocationFunction/AllocationExpr.requiresDealloc().
2019-12-17 11:07:08 +00:00
Anders Schack-Mulligen
ca08097b56
Java/C++/C#: Fix Java Content.getType and getContainerType to match C# and fix C# tests.
2019-12-17 11:51:58 +01:00
Geoffrey White
b2e2db1e5c
CPP: Autoformat.
2019-12-17 10:39:52 +00:00
Geoffrey White
19835cd11d
C++: Change note.
2019-12-17 10:27:13 +00:00
Max Schaefer
81f51e4e2b
Ensure that XML libraries for C++, Java, JavaScript and Python stay in sync.
2019-12-17 10:15:43 +00:00
Max Schaefer
09ee106333
Java/JavaScript: Add two deprecated predicates to XML.qll.
...
This makes XML.qll identical across C++, Java, JavaScript and Python.
2019-12-17 10:15:43 +00:00
Max Schaefer
a17b615ae5
C++/Python: Deprecate XMLFile.getPath and XMLFile.getFolder.
...
Both can be expressed using predicates inherited from `File`.
2019-12-17 10:15:43 +00:00
Max Schaefer
47c1fc7358
C++/Python: Fix XMLFile.getPath and XMLFile.getFolder.
...
Previously, the former returned the file's stem (that is, basename without extension), and the latter never held.
2019-12-17 10:15:43 +00:00
