semmle-qlci
1a9f3624c2
Merge pull request #1504 from xiemaisi/js/shift-bigint
...
Approved by asger-semmle
2019-06-26 18:30:48 +01:00
Tom Hvitved
ead50999a3
C#: Remove unused EmptyPasswordInConfigurationFile.config
2019-06-26 19:30:04 +02:00
Geoffrey White
47644b08b2
CPP: Normalize spacing.
2019-06-26 17:19:56 +01:00
Max Schaefer
e35fde322b
JavaScript: Teach ShiftOutOfRange about BigInt.
2019-06-26 09:16:34 -07:00
Robert Marsh
8994a5acf1
C++: fix FP with ExprHasNoEffect in defaulted func
...
This is a workaround for an extractor issue where expressions in a
defaulted function are not always marked as generated. I haven't yet been
able to reproduce the issue in a test case.
2019-06-26 09:11:23 -07:00
Geoffrey White
4326699aa7
CPP: Extend the StrcpyFunction model.
2019-06-26 17:01:15 +01:00
Geoffrey White
39be9c3125
CPP: Use StrcpyFunction model in UsingStrcpyAsBoolean.ql.
2019-06-26 16:51:48 +01:00
Anders Schack-Mulligen
2af3598223
Java: Restrict Object.toString dispatch based on a more closed-world assumption.
2019-06-26 17:42:40 +02:00
Geoffrey White
a7fb2e1261
CPP: More test cases for ArithmeticWithExtremeValues.
2019-06-26 15:38:23 +01:00
Geoffrey White
f8655b1664
CPP: Add a test that uses Function.getAThrownType() and Function.isNoThrow().
2019-06-26 15:20:46 +01:00
Geoffrey White
e237507208
CPP: Add a reference to the ReturnConstType tests.
2019-06-26 15:20:46 +01:00
Calum Grant
c7983a0d9d
Merge pull request #1501 from felicity-semmle/1.21/new-c#-queries
...
Update C# change notes for 1.21 to mention two new queries
2019-06-26 14:40:14 +01:00
Felicity Chapman
dcbe765e58
Merge pull request #1502 from markshannon/python-pythag-change-note
...
Python: Add change note for pythagorean query.
2019-06-26 13:49:50 +01:00
Felicity Chapman
637608cae0
Add information on LGTM visibility and fix typo
2019-06-26 13:45:37 +01:00
Mark Shannon
208d313b3f
Python: Add comment.
2019-06-26 12:54:43 +01:00
Mark Shannon
1bb003b1dc
Python: Add change note for pythagorean query.
2019-06-26 12:03:19 +01:00
Felicity Chapman
9645e48c98
Update C# change notes to mention two new queries
2019-06-26 11:33:37 +01:00
Jonas Jensen
473d4d44a3
Add Alistair as code owner for *.qhelp within cpp
2019-06-26 12:10:22 +02:00
Mark Shannon
347e3f3bd0
Python regex: Fix handling of character sets where first character in set is '['.
2019-06-26 10:55:47 +01:00
Asger F
102fd11e8d
JS: Change to queries of @kind metric
2019-06-25 22:12:11 +01:00
Taus
76f8da8986
Merge pull request #1484 from markshannon/python-aggressive-pruning
...
Python: Use aggressive dead-code elimination when pruning.
2019-06-25 19:17:44 +02:00
Geoffrey White
ac5b62ccff
CPP: Update comment in qhelp sample for accuracy and consistency.
2019-06-25 17:26:46 +01:00
Geoffrey White
fe315a9a1c
CPP: Make things private.
2019-06-25 17:08:35 +01:00
Geoffrey White
cb80aa3772
CPP: Rename the classes for time structs.
2019-06-25 16:49:25 +01:00
Geoffrey White
2e31f48a7a
CPP: Clean up StructFieldAccess.
2019-06-25 16:43:24 +01:00
Asger F
57dac1d0d5
JS: Update test output to reflect new edge relation
2019-06-25 16:41:29 +01:00
Geoffrey White
66dffdde05
CPP: Correct overuse of 'toString'.
2019-06-25 16:38:16 +01:00
Mark Shannon
6f1399be9b
Python: Better handle calls on edge of context.
2019-06-25 16:15:39 +01:00
Tom Hvitved
51d093add0
C#: Address review comments
2019-06-25 17:01:48 +02:00
Mark Shannon
7bbe39ef01
Python: Don't report uninitialized locals in unreachable code.
2019-06-25 15:52:48 +01:00
Geoffrey White
bc5fb24371
CPP: Correct overuse of 'matches'.
2019-06-25 15:13:38 +01:00
Geoffrey White
ab543aa0eb
CPP: QLDoc pass.
2019-06-25 15:12:27 +01:00
Geoffrey White
627fba81ce
CPP: Improve wording of UnsafeArrayForDAysOfYear.ql.
2019-06-25 14:42:18 +01:00
Geoffrey White
db6e2904a8
CPP: Simplify to 'CrementOperation'.
2019-06-25 14:17:20 +01:00
Geoffrey White
51caee67b0
CPP: Update comment so that it no longer contains (incorrect) line numbers.
2019-06-25 14:15:09 +01:00
Asger F
aa4d28028e
JS: Add test
2019-06-25 14:15:06 +01:00
Geoffrey White
fa1347f7ef
CPP: Remove security tags that haven't been justified.
2019-06-25 14:11:56 +01:00
Asger F
71100bb68a
JS: Do not require predecessor to be a SourceNode
2019-06-25 14:03:57 +01:00
Jonas Jensen
d2f8029625
Merge pull request #1492 from geoffw0/exprnoeffectweak
...
CPP: Fix for 'Expression has no effect' on calls to weak functions
2019-06-25 10:58:28 +02:00
Jonas Jensen
de65dc5501
Merge pull request #1490 from geoffw0/leapyeararith
...
CPP: Improvements to LeapYear.qll
2019-06-25 10:46:12 +02:00
Max Schaefer
0fa41f7a21
Merge pull request #1493 from chrisgavin/owasp-cheat-sheet
...
JavaScript: Update link to the OWASP XSS prevetion cheat sheet.
2019-06-24 16:09:02 -07:00
Chris Gavin
bce153648e
JavaScript: Update link to the OWASP XSS prevetion cheat sheet.
2019-06-24 23:21:14 +01:00
Geoffrey White
6800abdf23
CPP: Change note.
2019-06-24 22:07:55 +01:00
Geoffrey White
9a0645ac0b
CPP: Calls to weak functions should be considered impure.
2019-06-24 22:04:12 +01:00
Geoffrey White
aee2af7ca1
CPP: Add a test of ExprHasNoEffect.ql with a call to a 'weak' function.
2019-06-24 22:01:46 +01:00
Taus
a254a84cca
Merge pull request #1489 from markshannon/python-fix-nested-import-stars
...
Python: fix nested import stars
2019-06-24 17:37:20 +02:00
Geoffrey White
562141759a
CPP: Autoformat LeapYear.qll.
2019-06-24 15:20:24 +01:00
Mark Shannon
9bf67e19c2
Python points-to: Fix up some oddities with nested from ... import *.
2019-06-24 15:20:15 +01:00
Geoffrey White
69533a7fd3
CPP: Clean up duplication in Adding365DaysPerYear.ql.
2019-06-24 15:18:29 +01:00
Mark Shannon
a917019915
Python: Add failing tests for undefined variable as value and nested 'from import *'.
2019-06-24 14:54:25 +01:00
