Chris Smowton
714611f803
Address review feedback
2021-02-17 09:36:21 +00:00
Chris Smowton
a63f18e49d
Add models for Commons-Lang's StrBuilder class. These exclude its fluent methods for the time being, which will be added in a forthcoming PR.
2021-02-17 09:36:20 +00:00
Anders Schack-Mulligen
5188ad1444
Merge pull request #5126 from smowton/smowton/feature/commons-stringutils
...
Java: Add support for Apache Commons Lang StringUtils
2021-02-17 09:48:22 +01:00
Rasmus Wriedt Larsen
d98aae9fc1
Python: Expose framework identifier for route-setup and req handler
...
This makes collecting metrics on framework coverage a bit simpler (specifically
giving the RoutedParameter class a more descriptive result for getSourceType).
I guess it can also help a bit when trying to get an overview of a new DB, but
making metrics collection easier is my main motivation for this.
2021-02-16 23:44:03 +01:00
Geoffrey White
3323683ab2
C++: Support BSL in Allocation.qll, Deallocation.qll.
2021-02-16 19:19:06 +00:00
Sauyon Lee
8db234f5f3
Merge pull request #5092 from github/sauyon-patch-1
...
Add GoKit to Go supported library list
2021-02-16 11:04:43 -08:00
Geoffrey White
d068ede65b
Merge pull request #5180 from criemen/bsl-stdcontainer
...
C++: Refactor StdContainer.qll.
2021-02-16 18:53:08 +00:00
Geoffrey White
58230d6d0a
C++: Model BSL in Fread.qll.
2021-02-16 18:00:51 +00:00
Mathias Vorreiter Pedersen
fa44cedd38
C++: Add isBarrier to CgiXss.ql.
2021-02-16 18:58:28 +01:00
Geoffrey White
e17d539883
C++: Model BSL in Getenv.qll.
2021-02-16 17:56:48 +00:00
Taus
36be72972d
Merge pull request #2663 from tausbn/python-type-annotation-reuse-fp
...
Python: Add false positive test example for issue #2652 .
2021-02-16 18:46:15 +01:00
Taus Brock-Nannestad
04eb0c774c
Python: Use LocalSourceNode in type tracker tests
...
One minor change to the tests results needed: there is no longer local
flow going into the `ModuleVariableNode` for `attr_ref` in the
`moduleattr.ql` test, but I think this is reasonable.
2021-02-16 18:25:54 +01:00
Geoffrey White
735e014b43
C++: Model BSL in Gets.qll.
2021-02-16 17:22:59 +00:00
Cornelius Riemenschneider
f7f8dd49c6
Merge pull request #5156 from geoffw0/modelsbsl
...
C++: Improve StdSet and StdPair models
2021-02-16 18:00:23 +01:00
Cornelius Riemenschneider
3fb42194a5
Apply suggestions from code review
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2021-02-16 17:58:45 +01:00
Geoffrey White
92df1f7a3d
Merge pull request #5165 from criemen/bsl-model-identity
...
C++: Refactor IdentityFunction.qll.
2021-02-16 16:32:57 +00:00
Taus
9499edf761
Merge pull request #5078 from RasmusWL/flask-blueprints
...
Python: Add modeling of Flask blueprints
2021-02-16 17:22:13 +01:00
Geoffrey White
c32e54e902
Merge pull request #5176 from criemen/bsl-smartptr
...
BSL support for smart pointers and other std classes.
2021-02-16 16:21:50 +00:00
Jonathan Leitschuh
a8167c6c9c
Add docstring for DeclaredRepository.getUrl
2021-02-16 11:21:19 -05:00
Cornelius Riemenschneider
173b16ae21
Merge pull request #5169 from criemen/bsl-pure
...
C++: Model bsl functions in Pure.qll.
2021-02-16 17:19:11 +01:00
Cornelius Riemenschneider
80eaf0b67a
Merge pull request #5174 from criemen/bsl-str
...
Model bsl functions in Str*.qll
2021-02-16 17:18:40 +01:00
Cornelius Riemenschneider
f087ff3e49
Merge pull request #5167 from criemen/bsl-memset
...
C++: Refactor Mem*.qll and include bsl model.
2021-02-16 17:18:29 +01:00
Cornelius Riemenschneider
a04883cafc
C++: Fix compilation.
2021-02-16 16:17:59 +00:00
Cornelius Riemenschneider
552f0a7c5e
C++: Address review.
2021-02-16 15:55:41 +00:00
Chris Smowton
a2eeffa9c0
Add support for Apache Commons Lang StringUtils
2021-02-16 14:48:39 +00:00
Chris Smowton
bf03c0f419
Port InlineExpectationsTest for the Java analysis
2021-02-16 14:48:39 +00:00
Rasmus Wriedt Larsen
bc8e61366b
Python: Clarify comment about flask blueprint URL prefixes
2021-02-16 15:29:25 +01:00
Rasmus Wriedt Larsen
1e1cb87436
Python: Model flask blueprints
2021-02-16 15:26:51 +01:00
Rasmus Wriedt Larsen
b7ea469e26
Python: Add tests for flask blueprints
2021-02-16 15:03:00 +01:00
Rasmus Wriedt Larsen
bf401c7498
Merge pull request #5103 from tausbn/python-port-flask-to-api-graphs
...
Python: Port Flask models to use API graphs
2021-02-16 15:00:46 +01:00
Rasmus Wriedt Larsen
4b9e37f62d
Docs: Update list of support frameworks in Python
...
So it follows what is we actually support with 6eafa9d396/python/ql/src/semmle/python/Frameworks.qll
2021-02-16 14:37:11 +01:00
Rasmus Wriedt Larsen
8494fcf45f
Python: Move query tests to reflect new file layout
2021-02-16 13:15:01 +01:00
Anders Schack-Mulligen
6eafa9d396
Merge pull request #5133 from pwntester/fix_SnakeYaml
...
Remove sanitizing condition which does not prevent vulnerability.
2021-02-16 12:58:47 +01:00
Cornelius Riemenschneider
434a5f04ed
Merge branch 'bsl-memcpy' into bsl-memset
2021-02-16 11:56:40 +00:00
Cornelius Riemenschneider
3f17171f13
C++: Address review.
2021-02-16 11:55:03 +00:00
Cornelius Riemenschneider
30659f3ecf
C++: Address review.
2021-02-16 11:54:21 +00:00
Cornelius Riemenschneider
a42700f09e
C++: Address review.
2021-02-16 11:52:39 +00:00
Cornelius Riemenschneider
5dc57e9cc2
C++: Address review.
2021-02-16 11:49:44 +00:00
Cornelius Riemenschneider
b25f1fd44a
C++: Address review.
2021-02-16 11:37:43 +00:00
Geoffrey White
b309b711ab
Merge pull request #5173 from criemen/bsl-swap
...
C++: Model bsl functions in Swap.qll.
2021-02-16 11:20:41 +00:00
Cornelius Riemenschneider
86268d49ed
C++: Refactor StdContainer.qll.
2021-02-16 11:10:57 +00:00
Rasmus Wriedt Larsen
1d6f9bee08
Python: Update qlrefs
2021-02-16 11:48:36 +01:00
Rasmus Wriedt Larsen
3a18881660
Python: Restructure query file location
...
Since I can never remember the CWE numbers
2021-02-16 11:36:10 +01:00
Geoffrey White
04f15ad43a
C++: BSL support in StdPairConstructor.
2021-02-16 09:49:09 +00:00
Tamas Vajk
a75b952333
Fix Type.GetQualifiedName()
2021-02-16 09:13:13 +01:00
Tamas Vajk
199e937e9e
C#: Rename CachedEntity.symbol to Symbol
2021-02-16 09:13:12 +01:00
Tamas Vajk
67289a498f
Share entity base classes between CIL and source extraction
2021-02-16 09:10:24 +01:00
Tamas Vajk
e7853cc3a0
Simplify TypeContainer class
2021-02-16 09:10:24 +01:00
Tamas Vajk
67caf3cad0
Remove redundant IEntity implemented interface declaration and explit interface member implemenration
2021-02-16 09:10:24 +01:00
Tamas Vajk
61e952766c
Convert CIL.GenericContext to interface
2021-02-16 09:10:24 +01:00