Tom Hvitved
287ce4e683
C#: Add more nullness tests
2018-12-14 12:03:32 +00:00
Max Schaefer
5ccad6ffc2
JavaScript: Minor improvements.
2018-12-14 11:56:59 +00:00
Max Schaefer
3e04f53ed2
Merge pull request #688 from adityasharad/merge/master-next-141218
...
Merge master into next.
2018-12-14 11:48:00 +00:00
Jonas Jensen
23a2bf1756
C++: Delete dead code with warnings in it
2018-12-14 10:59:41 +00:00
Tom Hvitved
654f2ae290
C#: Address review comment
2018-12-14 10:38:34 +00:00
Aditya Sharad
7bc729a7dc
Merge master into next.
2018-12-14 10:16:47 +00:00
Tom Hvitved
56b80ae13a
C#: Add getALocation() for namespaces and namespace declarations
2018-12-14 10:16:20 +00:00
Esben Sparre Andreasen
bb3e3a541d
JS: address doc review comments
2018-12-14 10:24:30 +01:00
semmle-qlci
936094d0b6
Merge pull request #671 from xiemaisi/js/more-unhelpful-magic
...
Approved by asger-semmle
2018-12-14 08:44:45 +00:00
Max Schaefer
f9106b3bfe
Merge pull request #685 from asger-semmle/useless-conditional-as-value
...
JS: fix FPs in UselessConditional
2018-12-14 08:44:10 +00:00
semmle-qlci
7f21f145e2
Merge pull request #678 from asger-semmle/function-receiver
...
Approved by xiemaisi
2018-12-14 08:39:04 +00:00
Tom Hvitved
b11d5c5075
Merge pull request #679 from calumgrant/cs/omitted-array-size
...
C#: Extract stackalloc initializers
2018-12-14 07:48:46 +01:00
Arthur Baars
18eb60b98e
Merge pull request #687 from adityasharad/merge/master-next-131218
...
Merge master into next.
2018-12-13 19:43:58 +01:00
Aditya Sharad
f71e5ac338
Merge master into next.
2018-12-13 17:57:31 +00:00
Anders Schack-Mulligen
7656936cad
Java: Remove Metrics/queries.xml
2018-12-13 17:43:26 +00:00
Asger F
f737830f18
JS: fix typo
2018-12-13 15:56:00 +00:00
Asger F
ae4b55de9a
JS: fix FPs in UselessConditional
2018-12-13 15:41:41 +00:00
Geoffrey White
b21e832ee2
Merge pull request #683 from jbj/prepareQueries-fix-warnings
...
C++: Fix all prepareQueries errors and warnings
2018-12-13 15:30:44 +00:00
calum
9fba643fb0
C#: Address review comments.
2018-12-13 13:53:58 +00:00
Arthur Baars
1158708ea4
Merge pull request #684 from adityasharad/merge/1.19-next-131218
...
Merge rc/1.19 into next.
2018-12-13 14:14:42 +01:00
Aditya Sharad
ce8ca5979b
Merge rc/1.19 into next.
2018-12-13 12:23:59 +00:00
calumgrant
16c065274d
Merge pull request #666 from hvitved/csharp/useless-upcast-performance
...
C#: Improve performance of `cs/useless-upcast`
2018-12-13 12:04:12 +00:00
Jonas Jensen
bee2ddaf26
C++: Fix all prepareQueries errors and warnings
...
With these changes we can run `odasa prepareQueries --check-only
--fail-on-warnings` on the C++ query directory. Two changes were needed:
1. The `Metrics/queries.xml` file had to be deleted. It existed because
the built distribution has a different file layout, where `Metrics`
is moved to the top-level query dir `odasa-cpp-metrics`. Since
internal PR 28230 this file is created as needed as part of the dist
build process, so it doesn't need to be checked in with the sources.
2. All uses of the `deprecated` and stubbed-out Objective C classes were
removed.
2018-12-13 11:13:50 +00:00
Aditya Sharad
fb82811545
Merge pull request #681 from jbj/import-dataflow-clash
...
C++: Fix name clash in data flow imports
v1.19.1
v1.19.0
2018-12-13 10:22:32 +00:00
Asger F
cb349348e7
JS: rename getThisParameter to getReceiver
2018-12-13 10:19:44 +00:00
Geoffrey White
ca999473b0
CPP: Change note.
2018-12-13 10:17:43 +00:00
Jonas Jensen
1a0a8c931f
C++: Fix name clash in data flow imports
...
The AST-based data flow libraries and the IR-based ones both define
modules `DataFlow`, `DataFlow2`, etc. This caused
`ImportAdditionalLibraries.ql` to fail in compilation.
2018-12-13 09:53:20 +00:00
Geoffrey White
e443eb8889
CPP: Fix type logic.
2018-12-13 09:49:32 +00:00
Max Schaefer
e194021c3b
Merge pull request #629 from esben-semmle/js/persistent-read-taint
...
JS: add persistent storage taint steps
2018-12-13 08:24:42 +00:00
Max Schaefer
969fe6e4f1
Merge pull request #657 from esben-semmle/js/classify-more-files
...
JS: classify additional files
2018-12-13 08:20:33 +00:00
Max Schaefer
e8c8360ad1
Merge pull request #659 from esben-semmle/js/more-constant-string-usage
...
JS: replace StringLiteral with ConstantString in two queries
2018-12-13 08:19:22 +00:00
Max Schaefer
f1dcec8369
Merge pull request #667 from asger-semmle/ts-binding-pattern-with-defaults
...
TS: fix extraction of binding pattern with default
2018-12-13 08:18:22 +00:00
Max Schaefer
54bb9d185f
Merge pull request #632 from asger-semmle/pseudo-random-bytes
...
JS: add crypto.pseudoRandomBytes as source in InsecureRandomness.ql
2018-12-13 08:14:40 +00:00
Max Schaefer
df42707050
Merge pull request #675 from asger-semmle/window.name
...
JS: Add window.name as remote flow source
2018-12-13 08:13:15 +00:00
Max Schaefer
3f185364f9
Merge pull request #669 from adityasharad/merge/master-next-111218
...
Merge master into next.
2018-12-13 07:58:58 +00:00
Geoffrey White
c904a338f7
CPP: Add test cases.
2018-12-12 23:47:48 +00:00
Tom Hvitved
b155a0f5fb
C#: Avoid computing CIL strings and non-PDB locations in data flow library
...
Computing strings and locations for CIL instructions can be quite time consuming.
The CIL `toString()`s are not very helpful in path explanations, and their locations
are only useful when a PDB source file exists. Therefore, produce a simple constant
`toString()`, and restrict locations to those in PDB files.
2018-12-12 21:58:16 +01:00
Tom Hvitved
344466a8c1
C#: Cache DataFlow::Node::getEnclosingCallable()
2018-12-12 21:49:21 +01:00
semmle-qlci
1470f9fb70
Merge pull request #677 from aschackmull/java/change-note-cfg-cast
...
Approved by felicity-semmle
2018-12-12 18:24:45 +00:00
Aditya Sharad
f92456fcad
Merge master into next.
...
Conflict in `cpp/ql/test/library-tests/sideEffects/functions/sideEffects.expected`,
resolved by accepting test output (combining changes).
2018-12-12 17:26:18 +00:00
Aditya Sharad
41a48078f7
Merge pull request #673 from calumgrant/cs/sync-files
...
C#: Sync samples and qltest cases
2018-12-12 17:10:00 +00:00
calumgrant
8e546a30b0
Merge pull request #637 from hvitved/csharp/cfg/throwing-callable
...
C#: Fix a bug in `ThrowingCallable`
2018-12-12 16:58:28 +00:00
calum
2bbd55519b
C#: Add tests for C# 7.3 features.
2018-12-12 16:44:55 +00:00
Asger F
635a3cb1ec
JS: add FunctionNode.getThisParameter
2018-12-12 16:26:02 +00:00
calum
5596bc8827
C#: Add change note.
2018-12-12 16:16:07 +00:00
Anders Schack-Mulligen
2150af9732
Java: Add change note about CFG cast deprecation.
2018-12-12 15:04:19 +00:00
Anders Schack-Mulligen
12bc1fc656
Merge pull request #581 from jf205/metadata-guide
...
Query metadata style guide: add to ql/docs
2018-12-12 12:55:20 +00:00
Asger F
a96c53f9b8
JS: restrict when a variable reference is considered a source
2018-12-12 12:28:26 +00:00
Asger F
14621760bb
JS: add window.name as DOM-based remote flow source
2018-12-12 12:22:39 +00:00
Tom Hvitved
74167e478a
C#: Cache NamedElement::getLabel()
2018-12-12 13:16:28 +01:00