Aditya Sharad
b9b6a35564
Merge pull request #4629 from pwntester/improve_bean_validation_query
...
Java: add some improvements to the bean validation query
2020-11-17 08:35:49 -08:00
Erik Krogh Kristensen
c4d7533701
Merge branch 'main' into moreReDoS
2020-11-17 17:34:49 +01:00
Erik Krogh Kristensen
97acf1fd87
fix FP related to inverted character classes choosing a char that was not matched by the char class
2020-11-17 17:34:43 +01:00
Mathias Vorreiter Pedersen
52bbb326ca
QLDoc: Wrap lines and disambiguate explanation.
2020-11-17 16:23:27 +01:00
Mathias Vorreiter Pedersen
d93d3c8699
C++: Use the getSourceType predicate on RemoteFlowSources for better alert messages.
2020-11-17 16:23:27 +01:00
Mathias Vorreiter Pedersen
d1272d3a79
C++: Use strictcount instead of count.
2020-11-17 16:23:27 +01:00
Mathias Vorreiter Pedersen
4cb25d8e18
C++: Add isParameterDerefOrQualifierObject helper predicate to FunctionInput and FunctionOutput.
2020-11-17 16:23:27 +01:00
Mathias Vorreiter Pedersen
dea16d4d62
QLDoc/C++: Rename {IR}ExternalAPIsUsedWithUntrustedData to {IR}CountUntrustedDataToExternalAPI
2020-11-17 16:23:13 +01:00
Mathias Vorreiter Pedersen
eabc69b98e
C++: Autoformat
2020-11-17 16:09:25 +01:00
Matthew Gretton-Dann
62767e7e0d
Update expected results for `constinit' support
2020-11-17 14:01:00 +00:00
Anders Schack-Mulligen
f74fc0ff26
Dataflow: Fix bad join-orders.
2020-11-17 14:28:25 +01:00
Mathias Vorreiter Pedersen
5d2b85fcf5
Update cpp/ql/src/semmle/code/cpp/models/implementations/Getenv.qll
...
Co-authored-by: hubwriter <hubwriter@github.com >
2020-11-17 13:02:28 +01:00
Tom Hvitved
7f0ad2d232
Merge pull request #4646 from hvitved/csharp/cfg/post-order-exprs
...
C#: Represent all expressions in post-order in the CFG
2020-11-17 13:01:35 +01:00
Mathias Vorreiter Pedersen
c37093f4bc
C++: Add copies of qhelp files for IR.
2020-11-17 12:28:31 +01:00
Mathias Vorreiter Pedersen
3b8580efaf
C++: Add qhelp and example files (modeled after the Java examples).
2020-11-17 12:27:53 +01:00
Mathias Vorreiter Pedersen
c3c29b8dd0
C++: Add qldoc to new library files.
2020-11-17 12:27:53 +01:00
Mathias Vorreiter Pedersen
5c9b8f1cff
C++: Update sync-identical-files.
2020-11-17 12:27:53 +01:00
Mathias Vorreiter Pedersen
5ad18eb748
C++: Add ExternalAPI query files (for AST and IR).
2020-11-17 12:27:40 +01:00
Jonas Jensen
10de931b92
C++: Decrease largeVariable cut-off to 100k
...
This 10x lower cut-off has on at least one snapshot made it possible to
compute AST data flow where it was infeasible before.
Also fix an integer overflow that happened in practice on at least one
snapshot and prevented the cut-off from being applied.
2020-11-17 09:48:32 +01:00
Jonas Jensen
55a38803cb
Merge pull request #4673 from MathiasVP/ir-post-dominance
...
C++: IR post dominance
2020-11-17 09:35:51 +01:00
Tamás Vajk
f2259de5f1
Merge pull request #4666 from tamasvajk/feature/roslyn-3.8.0
...
C#: Upgrade Roslyn dependencies to 3.8.0
2020-11-17 08:59:55 +01:00
Rasmus Lerchedahl Petersen
71830abda0
Python: remaining c# tests, except lambdas
...
both via nonlocal and via dict
2020-11-17 08:28:11 +01:00
Mathias Vorreiter Pedersen
057bb14eee
C++: Add ExternalAPI library files (for AST and IR).
2020-11-16 22:59:54 +01:00
luchua-bc
0bd6255c41
Query for cleartext storage using Android SharedPreferences
2020-11-16 17:23:01 +00:00
Robert Marsh
a94826dc81
C++: common superclass for Remote/LocalFlowSource
2020-11-16 18:05:17 +01:00
Robert Marsh
31d3e94cec
C++: Grammar/style fixes from code review
...
Co-authored-by: Jonas Jensen <jbj@github.com >
2020-11-16 18:03:44 +01:00
Robert Marsh
74e05c111e
C++: add local flow sources
2020-11-16 18:02:19 +01:00
Rasmus Lerchedahl Petersen
27b4c67b9f
Python: Start of tests for captured variables
2020-11-16 17:25:39 +01:00
Tamas Vajk
8bef5f417e
C#: Upgrade Roslyn dependencies to 3.8.0
2020-11-16 16:44:14 +01:00
Mathias Vorreiter Pedersen
4a7f9100e4
C++: Respond to review comments.
2020-11-16 15:30:42 +01:00
Mathias Vorreiter Pedersen
27aab4062a
C++/C#: Sync identical files.
2020-11-16 15:05:59 +01:00
Mathias Vorreiter Pedersen
088d5863fc
C++: Implement IR post-dominance predicates.
2020-11-16 15:04:40 +01:00
Mathias Vorreiter Pedersen
10a9f7ba13
Update cpp/change-notes/2020-11-12-unsafe-use-of-this.md
...
Co-authored-by: hubwriter <hubwriter@github.com >
2020-11-16 12:28:57 +01:00
Anders Schack-Mulligen
4be731d2ab
Java: Adjust reference to static method and add test.
2020-11-16 11:47:58 +01:00
Anders Schack-Mulligen
80ee92ae97
Java: Add support for FastJson in unsafe deserialization.
2020-11-16 11:47:58 +01:00
Mathias Vorreiter Pedersen
020af1c88c
C++: Add qhelp.
2020-11-16 11:21:18 +01:00
Geoffrey White
4b8f338139
C++: Autoformat.
2020-11-16 10:19:06 +00:00
CodeQL CI
09cfb24afa
Merge pull request #4648 from erik-krogh/regexpParse
...
Approved by asgerf
2020-11-16 08:20:40 +00:00
CodeQL CI
13edc3713d
Merge pull request #4638 from erik-krogh/jwt
...
Approved by asgerf
2020-11-16 08:19:58 +00:00
Anders Schack-Mulligen
3dbd48063c
Dataflow: Add Unit type for all languages.
2020-11-16 09:02:44 +01:00
james
45a3024440
Merge branch 'codeql-docs-reorg-2' of github.com:github/codeql into codeql-docs-reorg-2
2020-11-15 08:35:51 +00:00
james
8262435d4b
further changes following review
2020-11-15 08:33:52 +00:00
James Fletcher
a4a47bf88d
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2020-11-15 08:31:40 +00:00
Erik Krogh Kristensen
a49b99b18c
autoformat
2020-11-13 20:06:17 +01:00
Erik Krogh Kristensen
affb11b0e3
changes based on review
2020-11-13 19:46:37 +01:00
Erik Krogh Kristensen
2f4fcc2f5e
Apply suggestions from code review
...
Co-authored-by: Asger F <asgerf@github.com >
2020-11-13 18:03:07 +01:00
james
52d6503fe0
fix link to cli manual
2020-11-13 16:54:05 +00:00
Mathias Vorreiter Pedersen
0a6a22562b
C++: Respond to more review comments.
...
- Remove post-dominance requirement. It was really just hiding good
results.
- Fix test annotations. Turns out Clang and GCC's 'undefined behavior'
warning didn't align with the C++ standard.
2020-11-13 15:44:33 +01:00
Geoffrey White
dfcb0ae7c2
C++: Autoformat.
2020-11-13 14:39:33 +00:00
Anders Schack-Mulligen
9e45f10c5d
Dataflow: Remove headUsesContent.
2020-11-13 15:12:39 +01:00
