Commit Graph

19777 Commits

Author SHA1 Message Date
Anders Schack-Mulligen
d3c5644229 Java: Add support for in/out barriers on sources and sinks. 2019-07-26 11:52:55 +02:00
semmle-qlci
143016ed96 Merge pull request #1635 from xiemaisi/js/dont-taint-for-in
Approved by asger-semmle
2019-07-26 08:32:14 +01:00
yh-semmle
9fdb964622 Merge pull request #1511 from aschackmull/java/typeflow-precision
Java: Minor TypeFlow precision improvement and refactor.
2019-07-25 23:06:16 -04:00
yh-semmle
0a321f59ab Merge pull request #1631 from aschackmull/java/delete-deprecated-dataflow-copy
Java: Delete deprecated dependency DataFlowImplDepr.
2019-07-25 22:42:49 -04:00
Max Schaefer
2e760bf5b5 JavaScript: Add upgrade script. 2019-07-25 16:52:44 +01:00
Max Schaefer
31b4d8dfb0 JavaScript: Update TRAP test outputs. 2019-07-25 16:52:44 +01:00
Max Schaefer
9a00f4d0f0 JavaScript: store YAML locations in yaml_locations table instead of hasLocation. 2019-07-25 16:52:44 +01:00
Max Schaefer
37cb4e4023 JavaScript: Add upgrade script. 2019-07-25 16:52:44 +01:00
Max Schaefer
79a7a8c6a7 JavaScript: Update TRAP test outputs. 2019-07-25 16:52:44 +01:00
Max Schaefer
6b3abbbde5 JavaScript: Store JSON locations in json_locations table instead of hasLocation. 2019-07-25 16:52:44 +01:00
Max Schaefer
2df41c43e2 JavaScript: Make name of hasLocation relation in location manager configurable. 2019-07-25 16:52:44 +01:00
Taus
a557c6a3ea Merge pull request #1627 from markshannon/python-points-to-from-comprehensions
Python points-to: Infer types for comprehensions.
2019-07-25 16:09:33 +02:00
Taus
76fe36aa48 Merge pull request #1618 from markshannon/python-refine-module-names
Python refine module naming.
2019-07-25 15:29:47 +02:00
Mark Shannon
27c0571a86 Python points-to: Infer types for comprehensions. 2019-07-25 14:18:05 +01:00
Taus
85a0566c43 Merge pull request #1597 from markshannon/python-tracking-special-variable-attributes-through-phis
Python points-to: Track implicit module attributes through phi-nodes.
2019-07-25 11:43:16 +02:00
Anders Schack-Mulligen
046d4a01de Java: Add taint step for String::concat. 2019-07-25 11:38:34 +02:00
Taus
cca1593ea4 Merge pull request #1598 from markshannon/python-better-parameter-api
Python: Better API for parameters.
2019-07-25 11:35:51 +02:00
Anders Schack-Mulligen
3d340d4fba Java: Delete deprecated dependency DataFlowImplDepr. 2019-07-25 11:18:01 +02:00
Anders Schack-Mulligen
e8aae19556 Java: Add toString override for SwitchExpr. 2019-07-25 10:53:16 +02:00
Mark Shannon
2e8c7a9d20 Python points-to: Support property setters and deleters. 2019-07-25 09:35:56 +01:00
Mark Shannon
9b00177544 Python: Add failing test for analysis of property with .setter. 2019-07-25 09:33:41 +01:00
yh-semmle
a42d9b1f96 Merge pull request #1616 from aschackmull/java/dataflow-prunetype-bugfix
Java: Bugfix for flow through methods with taint step and upcast.
2019-07-24 22:28:05 -04:00
Robert Marsh
05cad96086 Merge pull request #1605 from geoffw0/bitwiseneg
CPP: Make BitwiseSignCheck.ql more accurate
2019-07-24 12:33:40 -07:00
Robert Marsh
fa43ae241d Merge pull request #1615 from geoffw0/exprowninit
CPP: Test + workaround for UseInOwnInitializer.ql
2019-07-24 12:13:24 -07:00
semmle-qlci
137427fc40 Merge pull request #1613 from asger-semmle/canonical-name-defs
Approved by xiemaisi
2019-07-24 18:51:08 +01:00
Asger F
6f158182d1 JS: Add self as global object alias 2019-07-24 17:10:59 +01:00
Mark Shannon
90475fa7ef Python: Do not give module names to folders without __init__.py unless specified during extraction. 2019-07-24 15:35:57 +01:00
Max Schaefer
97e8b5fa99 JavaScript: Address review comments. 2019-07-24 15:32:13 +01:00
Mark Shannon
05e498dfdc Python: Clarify pruning code. 2019-07-24 14:47:46 +01:00
semmle-qlci
2a292c7dee Merge pull request #1626 from xiemaisi/js/more-examples
Approved by asger-semmle
2019-07-24 14:15:04 +01:00
Felicity Chapman
b7be2f5045 Merge pull request #1625 from taus-semmle/python-fix-commented-out-code-qhelp-include
Python: Fix missing include in `FCommentedOutCode.qhelp`.
2019-07-24 11:59:40 +01:00
Max Schaefer
74397daeb8 JavaScript: Add concrete syntax examples to ES2015Modules, Externs, JSON, YAML. 2019-07-24 11:56:11 +01:00
Taus Brock-Nannestad
8c6a4bcd9d Python: Fix missing include in FCommentedOutCode.qhelp. 2019-07-24 11:13:33 +02:00
Taus
f214f0e742 Merge pull request #1589 from markshannon/python-fix-sanity
Python: Fix a couple of  false positives in sanity query
2019-07-24 10:59:01 +02:00
semmle-qlci
29e49ae9b2 Merge pull request #1620 from asger-semmle/hardcoded-creds-import
Approved by xiemaisi
2019-07-24 09:57:12 +01:00
Geoffrey White
75f77b5f47 Merge pull request #1532 from zlaski-semmle/zlaski/cpp386
[CPP-386] Add `getCanonicalQLClass()` for AST QL elements.
2019-07-24 09:38:39 +01:00
yh-semmle
8140b68f15 Merge pull request #1623 from aschackmull/java/delete-deprecated
Java: Delete old deprecated code.
2019-07-23 20:20:45 -04:00
Asger F
ff8529d3ec JS: Address comments 2019-07-23 17:14:56 +01:00
Asger F
1c3ce09607 JS: Downgrade the contract for getImmediatePredecessor 2019-07-23 17:14:56 +01:00
Asger F
28efadea73 JS: Use defSourceNode from getRhsNode 2019-07-23 17:14:56 +01:00
Asger F
747c320c35 JS: cache getEnclosingContainer 2019-07-23 17:14:56 +01:00
Asger F
498e4d2d57 JS: Avoid materializing DataFlow::Node.getFile 2019-07-23 17:14:56 +01:00
Asger F
d8165d0313 JS: Restrict importLookup to ASTNode 2019-07-23 17:14:56 +01:00
Asger F
421ad89bf9 JS: Fix join order 2019-07-23 17:14:56 +01:00
Asger F
e39725114a JS: Add jsdoc type lookup to definitions.ql 2019-07-23 17:14:56 +01:00
Asger F
197b4d5637 JS: Add TypeAnnotation.getClass 2019-07-23 17:14:56 +01:00
Asger F
106539c495 JS: Compute qualified name of classes 2019-07-23 17:14:56 +01:00
Asger F
44f7e2d5c5 JS: Handle IIFE parameters 2019-07-23 17:14:56 +01:00
Asger F
7d2e83710a JS: Add JSDoc name resolution test 2019-07-23 17:14:56 +01:00
Asger F
80fa9915fd JS: Rename JSDoc.qll to avoid conflict with JSDoc module 2019-07-23 17:14:56 +01:00