hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-22 02:44:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
19,777 Commits 1,685 Branches 158 Tags
codeql-cli/v2.4.4
Commit Graph

19777 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Asger F
bbb6dad726 JS: Update koa testcase 2019-12-06 11:49:59 +00:00
Asger F
b407de01f8 JS: Update TaintBarriers test 2019-12-06 11:49:59 +00:00
Asger F
a6e75259d6 JS: More fine-grained regexp-based sanitizer guards 2019-12-06 11:49:59 +00:00
Asger F
ad6e949bad JS: Introduce RegExpCreationNode 2019-12-06 11:49:59 +00:00
Asger F
4354945c26 JS: Factor out recognition of RegExp flags 2019-12-06 11:49:59 +00:00
Luke Cartey
b940f3e637 Merge pull request #2461 from jf205/codeql-172 
CodeQL training: update QL4E links and provide database instructions
 2019-12-06 11:15:49 +00:00
Tom Hvitved
3a95cd5e9c C#: Remove a Cartesian product 2019-12-06 10:42:59 +00:00
james
67eea44678 Merge branch 'rc/1.23' into jf-mergeback-123 2019-12-06 09:16:39 +00:00
Geoffrey White
a3efcf66a6 Merge pull request #2495 from hmakholm/pr/update-c-test 
C++ tests: generalize arguments tests
 2019-12-06 09:10:17 +00:00
Henning Makholm
6bdf186d1e C tests: generalize arguments tests 
With the coming `codeql test` support, the `predefined_macros` file will not
necessarily be located under a `tools` directory. Change the test to hide more
of its actual path, so it will work in both cases.
 2019-12-06 01:21:17 +01:00
Tom Hvitved
3e93aa9787 C#: Address review comments 
- Undo split of `localvars` relation.
- Properly extract tuple declarations in `is` expressions.
 2019-12-05 22:31:38 +00:00
Robert Marsh
28fb3d606a C++: add fread and printf alias models 2019-12-05 12:14:33 -08:00
Robert Marsh
52a74718da C++: Move sources into DefaultTaintTracking 2019-12-05 12:14:25 -08:00
Robert Marsh
39b400ca69 C++: Add DefinitionByReferenceNode to IR dataflow 2019-12-05 11:56:57 -08:00
Calum Grant
59ce8842bb Merge branch 'master' of git.semmle.com:Semmle/ql into ASPNetPagesValidateRequest 
# Conflicts:
#	change-notes/1.24/analysis-csharp.md
 2019-12-05 15:58:47 +00:00
Felicity Chapman
fa8e5e6793 Merge pull request #2489 from jf205/deprecate-cobol-master 
Supported languages: update COBOL info
 2019-12-05 15:08:53 +00:00
Robert Marsh
055c1d0efa Merge pull request #2488 from geoffw0/speedup2 
CPP: Speed up SensitiveExprs.qll
 2019-12-04 14:09:32 -08:00
Robert Marsh
420a0bb74c C++: handle namespace vars in DefautlTaintTracking 2019-12-04 13:16:12 -08:00
Robert Marsh
ec95197d6d Merge pull request #2451 from dbartol/dbartol/May-Must 
C++/C#: Consistent handling of "may" vs. "must" memory accesses
 2019-12-04 12:32:53 -08:00
Dave Bartolomeo
cbb6797ca8 Merge from master and resolve conflicts 2019-12-04 10:14:52 -07:00
Calum Grant
73c8888361 Merge pull request #2356 from cldrn/ASPNetRequestValidationMode 
Adds CodeQL query to check for insecure RequestValidationMode in ASP.NET
 2019-12-04 17:02:08 +00:00
shati-patel
ad2da41af8 Merge pull request #2493 from jf205/deprecate-cobol 
Learning CodeQL docs: add COBOL notes and remove links (rc/1.23)
 2019-12-04 16:46:51 +00:00
shati-patel
343385bd2e Merge pull request #2492 from Semmle/revert-2487-deprecate-cobol 
Revert "Learning CodeQL docs: add COBOL notes and remove links"
 2019-12-04 16:41:00 +00:00
james
40920b162c docs: delete link to query console 2019-12-04 16:36:44 +00:00
james
ad32d9140b docs: increase trainig project version number 2019-12-04 16:36:44 +00:00
james
fe3a908317 docs: add cobol notes 2019-12-04 16:36:44 +00:00
James Fletcher
d47f08488f Revert "Learning CodeQL docs: add COBOL notes and remove links" 2019-12-04 16:34:00 +00:00
Dave Bartolomeo
50dc5e2ba3 Merge pull request #2438 from rdmarsh2/rdmarsh/ir-line-number-ids 
C++/C#: use line numbers for instruction IDs
 2019-12-03 18:48:28 -08:00
Robert Marsh
d99a90bfea C++: handle global vars in DefaultTaintTracking 2019-12-03 16:08:43 -08:00
Robert Marsh
722cc91eae C++: make getLineRank private 2019-12-03 10:53:08 -08:00
Jonas Jensen
57917bec17 Merge pull request #2480 from hvitved/dataflow/performance-tweaks 
Data flow: Various performance tweaks
 2019-12-03 18:44:11 +01:00
Calum Grant
db30947e54 Merge pull request #2490 from felicitymay/1.23/SD-4095-finalize-change-notes-csharp 
1.23/sd 4095 finalize change notes csharp
 2019-12-03 17:38:09 +00:00
Felicity Chapman
37e9ff1197 Merge pull request #2487 from jf205/deprecate-cobol 
Learning CodeQL docs: add COBOL notes and remove links
 2019-12-03 17:31:44 +00:00
Calum Grant
8018db3f66 Merge pull request #2474 from hvitved/csharp/dispatch-perf 
C#: Improve performance of dispatch library
 2019-12-03 15:47:43 +00:00
james
971db7126b docs: delete link to query console 2019-12-03 14:37:33 +00:00
Geoffrey White
8ddf877756 CPP: Autoformat. 2019-12-03 12:17:37 +00:00
james
f602c78242 docs: update cobol info 2019-12-03 11:58:30 +00:00
james
a560b6caa5 docs: increase trainig project version number 2019-12-03 10:57:12 +00:00
Geoffrey White
cc43e1116b CPP: Do the logic at the target, rather than the access, as there are likely fewer. 2019-12-03 10:52:40 +00:00
james
25e779913f docs: add cobol notes 2019-12-03 10:52:06 +00:00
Geoffrey White
20eb39d37e CPP: Bypass some of the complexity in 'toString'. 2019-12-03 10:44:59 +00:00
Geoffrey White
6e6c1693f4 CPP: Speed up SensitiveExprs.qll 'suspicious' and 'nonSuspicious' mechanism. 2019-12-03 10:43:36 +00:00
Geoffrey White
b752a6c8ed Merge pull request #2381 from jbj/StackVariable 
C++: Add StackVariable class, preferred over LocalScopeVariable
 2019-12-03 10:35:16 +00:00
Geoffrey White
2faae4dcb1 CPP: Autoformat. 2019-12-03 09:00:43 +00:00
semmle-qlci
cfcd18b411 Merge pull request #2429 from erik-krogh/typeAheadSink 
Approved by esbena
 2019-12-03 08:07:25 +00:00
Robert Marsh
1b802c7e18 C#: accept test change 2019-12-02 13:59:19 -08:00
Paulino Calderon
5fd0662264 Update csharp/ql/src/Security Features/CWE-016/ASPNetPagesValidateRequest.qhelp 
Fixes typo

Co-Authored-By: James Fletcher <42464962+jf205@users.noreply.github.com>
 2019-12-02 16:44:39 -05:00
Paulino Calderon
24b2471533 Update change-notes/1.24/analysis-csharp.md 
tag update

Co-Authored-By: James Fletcher <42464962+jf205@users.noreply.github.com>
 2019-12-02 16:44:25 -05:00
Paulino Calderon
9576e2a698 Update csharp/ql/src/Security Features/CWE-016/ASPNetPagesValidateRequest.qhelp 
Adds missing code tags

Co-Authored-By: James Fletcher <42464962+jf205@users.noreply.github.com>
 2019-12-02 16:43:51 -05:00
Dave Bartolomeo
acc3d23877 Clarify comment 2019-12-02 11:53:43 -08:00