Geoffrey White
58230d6d0a
C++: Model BSL in Fread.qll.
2021-02-16 18:00:51 +00:00
Mathias Vorreiter Pedersen
fa44cedd38
C++: Add isBarrier to CgiXss.ql.
2021-02-16 18:58:28 +01:00
Geoffrey White
e17d539883
C++: Model BSL in Getenv.qll.
2021-02-16 17:56:48 +00:00
Taus
36be72972d
Merge pull request #2663 from tausbn/python-type-annotation-reuse-fp
...
Python: Add false positive test example for issue #2652 .
2021-02-16 18:46:15 +01:00
Taus Brock-Nannestad
04eb0c774c
Python: Use LocalSourceNode in type tracker tests
...
One minor change to the tests results needed: there is no longer local
flow going into the `ModuleVariableNode` for `attr_ref` in the
`moduleattr.ql` test, but I think this is reasonable.
2021-02-16 18:25:54 +01:00
Geoffrey White
735e014b43
C++: Model BSL in Gets.qll.
2021-02-16 17:22:59 +00:00
Cornelius Riemenschneider
f7f8dd49c6
Merge pull request #5156 from geoffw0/modelsbsl
...
C++: Improve StdSet and StdPair models
2021-02-16 18:00:23 +01:00
Cornelius Riemenschneider
3fb42194a5
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2021-02-16 17:58:45 +01:00
Geoffrey White
92df1f7a3d
Merge pull request #5165 from criemen/bsl-model-identity
...
C++: Refactor IdentityFunction.qll.
2021-02-16 16:32:57 +00:00
Taus
9499edf761
Merge pull request #5078 from RasmusWL/flask-blueprints
...
Python: Add modeling of Flask blueprints
2021-02-16 17:22:13 +01:00
Geoffrey White
c32e54e902
Merge pull request #5176 from criemen/bsl-smartptr
...
BSL support for smart pointers and other std classes.
2021-02-16 16:21:50 +00:00
Jonathan Leitschuh
a8167c6c9c
Add docstring for DeclaredRepository.getUrl
2021-02-16 11:21:19 -05:00
Cornelius Riemenschneider
173b16ae21
Merge pull request #5169 from criemen/bsl-pure
...
C++: Model bsl functions in Pure.qll.
2021-02-16 17:19:11 +01:00
Cornelius Riemenschneider
80eaf0b67a
Merge pull request #5174 from criemen/bsl-str
...
Model bsl functions in Str*.qll
2021-02-16 17:18:40 +01:00
Cornelius Riemenschneider
f087ff3e49
Merge pull request #5167 from criemen/bsl-memset
...
C++: Refactor Mem*.qll and include bsl model.
2021-02-16 17:18:29 +01:00
Cornelius Riemenschneider
a04883cafc
C++: Fix compilation.
2021-02-16 16:17:59 +00:00
Cornelius Riemenschneider
552f0a7c5e
C++: Address review.
2021-02-16 15:55:41 +00:00
Chris Smowton
a2eeffa9c0
Add support for Apache Commons Lang StringUtils
2021-02-16 14:48:39 +00:00
Chris Smowton
bf03c0f419
Port InlineExpectationsTest for the Java analysis
2021-02-16 14:48:39 +00:00
Rasmus Wriedt Larsen
bc8e61366b
Python: Clarify comment about flask blueprint URL prefixes
2021-02-16 15:29:25 +01:00
Rasmus Wriedt Larsen
1e1cb87436
Python: Model flask blueprints
2021-02-16 15:26:51 +01:00
Rasmus Wriedt Larsen
b7ea469e26
Python: Add tests for flask blueprints
2021-02-16 15:03:00 +01:00
Rasmus Wriedt Larsen
bf401c7498
Merge pull request #5103 from tausbn/python-port-flask-to-api-graphs
...
Python: Port Flask models to use API graphs
2021-02-16 15:00:46 +01:00
Rasmus Wriedt Larsen
4b9e37f62d
Docs: Update list of support frameworks in Python
...
So it follows what is we actually support with 6eafa9d396/python/ql/src/semmle/python/Frameworks.qll
2021-02-16 14:37:11 +01:00
Rasmus Wriedt Larsen
8494fcf45f
Python: Move query tests to reflect new file layout
2021-02-16 13:15:01 +01:00
Anders Schack-Mulligen
6eafa9d396
Merge pull request #5133 from pwntester/fix_SnakeYaml
...
Remove sanitizing condition which does not prevent vulnerability.
2021-02-16 12:58:47 +01:00
Cornelius Riemenschneider
434a5f04ed
Merge branch 'bsl-memcpy' into bsl-memset
2021-02-16 11:56:40 +00:00
Cornelius Riemenschneider
3f17171f13
C++: Address review.
2021-02-16 11:55:03 +00:00
Cornelius Riemenschneider
30659f3ecf
C++: Address review.
2021-02-16 11:54:21 +00:00
Cornelius Riemenschneider
a42700f09e
C++: Address review.
2021-02-16 11:52:39 +00:00
Cornelius Riemenschneider
5dc57e9cc2
C++: Address review.
2021-02-16 11:49:44 +00:00
Cornelius Riemenschneider
b25f1fd44a
C++: Address review.
2021-02-16 11:37:43 +00:00
Geoffrey White
b309b711ab
Merge pull request #5173 from criemen/bsl-swap
...
C++: Model bsl functions in Swap.qll.
2021-02-16 11:20:41 +00:00
Cornelius Riemenschneider
86268d49ed
C++: Refactor StdContainer.qll.
2021-02-16 11:10:57 +00:00
Rasmus Wriedt Larsen
1d6f9bee08
Python: Update qlrefs
2021-02-16 11:48:36 +01:00
Rasmus Wriedt Larsen
3a18881660
Python: Restructure query file location
...
Since I can never remember the CWE numbers
2021-02-16 11:36:10 +01:00
Geoffrey White
04f15ad43a
C++: BSL support in StdPairConstructor.
2021-02-16 09:49:09 +00:00
Tamas Vajk
a75b952333
Fix Type.GetQualifiedName()
2021-02-16 09:13:13 +01:00
Tamas Vajk
199e937e9e
C#: Rename CachedEntity.symbol to Symbol
2021-02-16 09:13:12 +01:00
Tamas Vajk
67289a498f
Share entity base classes between CIL and source extraction
2021-02-16 09:10:24 +01:00
Tamas Vajk
e7853cc3a0
Simplify TypeContainer class
2021-02-16 09:10:24 +01:00
Tamas Vajk
67caf3cad0
Remove redundant IEntity implemented interface declaration and explit interface member implemenration
2021-02-16 09:10:24 +01:00
Tamas Vajk
61e952766c
Convert CIL.GenericContext to interface
2021-02-16 09:10:24 +01:00
Tamas Vajk
3e2a6fca21
C#: Simplify CIL.GenericContext contract
2021-02-16 09:10:24 +01:00
Tamás Vajk
1c2b9f9a82
Merge pull request #4669 from tamasvajk/feature/csharp9-global-stmt
...
C#: Extract global statements
2021-02-16 09:07:48 +01:00
Tamas Vajk
9c2ca93986
Use 'Declaration::hasQualifiedName/2' in 'MainMethod'
2021-02-15 21:38:02 +01:00
Tamas Vajk
9bb501c595
Fix failing tests
2021-02-15 21:30:56 +01:00
Mathias Vorreiter Pedersen
eb8309a17d
Merge pull request #5175 from github/igfoo/thethe
2021-02-15 18:09:32 +01:00
luchua-bc
2f17943abc
Update qldoc
2021-02-15 16:58:09 +00:00
Tamas Vajk
4967664d09
Rework global statement extraction without DB scheme change
2021-02-15 17:47:33 +01:00