Commit Graph

19777 Commits

Author SHA1 Message Date
Dave Bartolomeo
aacee8fecf C++: Reshuffle IR files into a consistent directory structure
There are no real code changes here, other than to fix up `import`s. All tests still hae the same output, as expected.

A future commit will hide the IR flavors other than the one we want queries to use directly.
2018-09-04 09:05:03 -07:00
Aditya Sharad
ab2bec743a Revert "Version: Bump to 1.19.0 dev."
The version bump should now go into the `next` branch rather than `master`.
This reverts commit 2363f49e3a.
2018-09-04 16:01:09 +01:00
Asger F
4e9c52a3c3 TypeScript: add change note 2018-09-04 15:20:16 +01:00
Jonas Jensen
9535f83d3a Revert "Revert "C++: update expected sizes of error and unknown types to be 1 byte""
This commit was reverted on `master` but should remain on `next`, so I'm
reverting the revert before merging `master` into `next`.

This reverts commit adda4c91cf.
2018-09-04 16:10:46 +02:00
Tom Hvitved
6a4dbfce8f Address review comment 2018-09-04 16:07:49 +02:00
Asger F
6ceb10371a TypeScript: rephrase change note 2018-09-04 15:06:04 +01:00
Tom Hvitved
919203a071 Address review comment 2018-09-04 16:04:21 +02:00
calumgrant
98aa7f88b2 Merge pull request #121 from hvitved/csharp/sync-test-files
C#: Synchronize a few test files
2018-09-04 15:01:19 +01:00
Max Schaefer
fdc20e830a Merge pull request #153 from asger-semmle/ts-typescript3.0-changenote
TypeScript: update change note to mention TypeScript 3.0 support
2018-09-04 14:45:29 +01:00
Nick Rolfe
f2d030a7e6 C++: shorten message in integer-multiplication-cast-to-long 2018-09-04 14:45:12 +01:00
ian-semmle
cbca1e1105 Merge pull request #149 from jbj/revert-builtin_types_on_demand3
Revert "C++: update expected sizes of error and unknown types to be 1 byte"
2018-09-04 14:32:55 +01:00
Asger F
f7827b72ab TypeScript: update change note to mention TypeScript 3.0 support 2018-09-04 14:30:16 +01:00
semmle-qlci
3cdaed2e3e Merge pull request #141 from jbj/ql-warnings-1.18
Approved by ian-semmle
2018-09-04 14:27:18 +01:00
Asger F
2b8bc63b01 TypeScript: add change note 2018-09-04 14:23:37 +01:00
Tom Hvitved
9a7746e9b5 C#: Fix bug in BaseSsa library 2018-09-04 15:16:20 +02:00
Asger F
7bd53e72dc TypeScript: fix alerts in ambient code 2018-09-04 13:55:48 +01:00
Asger F
003b600e24 TypeScript: disable queries that rely on token information 2018-09-04 13:18:37 +01:00
Tom Hvitved
81122ca7a4 C#: Add test that reveals bug in BaseSsa implementation 2018-09-04 13:58:59 +02:00
Jonas Jensen
adda4c91cf Revert "C++: update expected sizes of error and unknown types to be 1 byte"
This commit to update test changes got merged to Semmle/ql master but
doesn't belong there because it's not compatible with how the 1.18
extractor works. The corresponding extractor change got merged to the
internal-repo master right after the internal branch for 1.18 was taken.

This reverts commit d4f9b5eb52.
2018-09-04 13:45:08 +02:00
Jonas Jensen
e0ba2b2251 C++: Fix name of suppressUnusedType 2018-09-04 13:38:28 +02:00
Jonas Jensen
ab944f3807 Merge pull request #139 from geoffw0/function-wrappers
CPP: Make FunctionWithWrappers `toCause` work on builtins.
2018-09-04 13:36:33 +02:00
Tom Hvitved
c4c74cd005 C#: Split up DataFlowInternal.qll
Split up into `internal/BaseSSA.qll` and `internal/Steps.qll`.
2018-09-04 13:30:54 +02:00
Ian Lynagh
3fd6a8de7d C++: Fix the definition of GlobalNamespace.getADeclaration()
Globals can still have declarations in declaration statements.
We already rule out local variables etc via the isTopLevel check,
so we don't need to consider DeclStmt.
2018-09-04 11:37:10 +01:00
Ian Lynagh
1fcf156e7e C++: Add another test to namespaces test 2018-09-04 11:36:50 +01:00
Ian Lynagh
e39a0d2f72 C++: Tweak namespaces test 2018-09-04 11:36:09 +01:00
Jonas Jensen
73675e29f2 Merge pull request #138 from ian-semmle/topLevel
C++: Use Declaration.isTopLevel() in GlobalNamespace.getADeclaration()
2018-09-04 10:03:19 +02:00
Jonas Jensen
07bacbf389 C++: Follow suppressUnusedThis convention 2018-09-04 09:40:50 +02:00
Esben Sparre Andreasen
cb2a6ede59 JS: support http.request URL requests 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
0a89f1a420 JS: eliminate DefaultUrlRequest: extract the got library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
de6b83548a JS: refactor DefaultUrlRequest: extract the got library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
1abdf2ffd5 JS: refactor DefaultUrlRequest: extract the http library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
5f26c23582 JS: refactor DefaultUrlRequest: extract the fetch API 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
b3b997ca91 JS: refactor DefaultUrlRequest: extract the axios library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
d7a81ef8ef JS: refactor DefaultUrlRequest: extract the request library 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
80b81b07c5 JS: refactor DefaultUrlRequest: extract names 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
68b7a8b57e JS: change notes for UrlRequest libraries and js/request-forgery 2018-09-04 09:26:45 +02:00
Esben Sparre Andreasen
f5a6af54e6 JS: add security query: js/request-forgery 2018-09-04 09:25:42 +02:00
Esben Sparre Andreasen
2104cf55e3 JS: add models of URL requests 2018-09-04 09:25:42 +02:00
Jonas Jensen
6e9cc46e80 Merge pull request #131 from ian-semmle/namespace_vars
C++: Give namespace variables a qualified name
2018-09-04 08:56:01 +02:00
Jonas Jensen
a2946f71bd Merge pull request #96 from ian-semmle/typo
C++: Fix typo
2018-09-04 08:51:15 +02:00
Jonas Jensen
adc5ee86ad Merge pull request #128 from geoffw0/cwe-190-precision
CPP: Adjust precisions for the CWE-190 queries.
2018-09-04 08:44:38 +02:00
Ian Lynagh
4230adbca2 C++: Remove reundant override 2018-09-03 18:12:30 +01:00
calumgrant
af3f855491 Merge pull request #94 from hvitved/csharp/cfg/minor-fixes
C#: Minor CFG improvements
2018-09-03 17:41:18 +01:00
Nick Rolfe
78f5be0d49 Merge pull request #143 from adityasharad/version/1.19.0
Version: Bump to 1.19.0 dev.
2018-09-03 17:40:23 +01:00
Nick Rolfe
04e919df9d C++: clearer alert wording in integer-multiplication-cast-to-long 2018-09-03 16:56:56 +01:00
Aditya Sharad
2363f49e3a Version: Bump to 1.19.0 dev.
This keeps the QL for Eclipse language plugins in sync with internal `master`.
2018-09-03 16:41:28 +01:00
semmle-qlci
4dec7c5036 Merge pull request #127 from xiemaisi/js/incomplete-sanitisation-doc-improvement
Approved by esben-semmle
2018-09-03 16:25:44 +01:00
Jonas Jensen
88f80e4d4b C++: Silence two more QL compiler warnings
One was for an unused parameter (a deliberate CP of `Type` x
`VoidType`), and one was for use of a deprecated predicate.
2018-09-03 13:45:04 +02:00
Jonas Jensen
ab6dc1d70c C++: Add missing override annotations 2018-09-03 13:22:22 +02:00
Geoffrey White
d5b7ab5aa1 CPP: Make FunctionWithWrappers toCause work on builtin functions. 2018-09-03 11:26:02 +01:00