Jonas Jensen
|
1c0e83a374
|
C++: Autoformat fixup
|
2020-08-14 12:27:30 +02:00 |
|
Jonas Jensen
|
aa78c6e750
|
C++: Move to experimental
And rename to `SimpleRangeAnalysisExpr` to clarify which of our range
analysis libraries this belongs to.
|
2020-08-14 12:27:30 +02:00 |
|
Jonas Jensen
|
cdddf5fd40
|
Merge remote-tracking branch 'upstream/master' into SimpleRangeAnalysis-extensible-base
|
2020-08-14 12:26:59 +02:00 |
|
Rasmus Lerchedahl Petersen
|
9556937840
|
Python: address review comments
|
2020-08-14 11:29:58 +02:00 |
|
Rasmus Lerchedahl Petersen
|
5ed3107045
|
Python: Start scaffold for magic methods
|
2020-08-14 11:12:23 +02:00 |
|
Tom Hvitved
|
e518cbabd6
|
Python: Sync data flow files
|
2020-08-14 11:04:45 +02:00 |
|
Tom Hvitved
|
9ebf8d1d58
|
Data flow: Sync files
|
2020-08-14 11:04:45 +02:00 |
|
Tom Hvitved
|
2d29fa1d15
|
Data flow: Use precise call contexts in flowFwd()
|
2020-08-14 11:04:45 +02:00 |
|
yoff
|
8d49ad7325
|
Update python/ql/test/experimental/dataflow/coverage/datamodel.py
Co-authored-by: Taus <tausbn@github.com>
|
2020-08-14 10:53:37 +02:00 |
|
yoff
|
4b336e9b01
|
Update python/ql/test/experimental/dataflow/coverage/classes.py
Co-authored-by: Taus <tausbn@github.com>
|
2020-08-14 10:53:10 +02:00 |
|
CodeQL CI
|
82f9826966
|
Merge pull request #4044 from aschackmull/java/xsssink-printwriter-format
Approved by aibaars
|
2020-08-14 08:34:48 +01:00 |
|
Anders Schack-Mulligen
|
4947e1d817
|
Java: Temporarily move a qltest.
|
2020-08-14 09:25:32 +02:00 |
|
Robert Marsh
|
ed06604b46
|
Merge pull request #4045 from geoffw0/plus
C++: Model more of std::string in models.
|
2020-08-13 16:59:47 -04:00 |
|
Robert Marsh
|
4a07bd5a15
|
Merge pull request #4032 from jbj/asExpr-docs
C++: Clarify the docs on DataFlow::Node::asExpr
|
2020-08-13 16:54:09 -04:00 |
|
Brian Gianforcaro
|
a6bcbe7974
|
C++: Detect GoogleTest tests cases in FNumberOfTests.ql
Co-authored-by: Jonas Jensen <jbj@github.com>
|
2020-08-13 12:06:00 -07:00 |
|
Geoffrey White
|
498b350add
|
Merge remote-tracking branch 'upstream/master' into plus
|
2020-08-13 18:21:28 +01:00 |
|
Geoffrey White
|
a839f1fae5
|
C++: Split off stringstream.cpp.
|
2020-08-13 18:17:24 +01:00 |
|
Geoffrey White
|
49d2f66ddb
|
C++: Tidy up sources and sinks.
|
2020-08-13 18:08:58 +01:00 |
|
Geoffrey White
|
f343eb9143
|
C++: Split stl.cpp into string.cpp and vector.cpp.
|
2020-08-13 18:04:46 +01:00 |
|
Geoffrey White
|
5d7f771933
|
C++: Split off stl.h from stl.cpp.
|
2020-08-13 18:04:45 +01:00 |
|
Robert Marsh
|
de87f8fc42
|
Merge pull request #4057 from geoffw0/sal
C++: SAL.qll QLDoc and cleanup
|
2020-08-13 12:33:52 -04:00 |
|
Geoffrey White
|
93f95b1c22
|
Merge pull request #4053 from jbj/SimpleRangeAnalysis-mul
C++: SimpleRangeAnalysis: unsigned multiplication
|
2020-08-13 16:59:31 +01:00 |
|
Geoffrey White
|
3d60756d40
|
C++: Downgrade the query precision.
|
2020-08-13 15:45:57 +01:00 |
|
Anders Schack-Mulligen
|
ecbbcc2f61
|
Merge pull request #4066 from Marcono1234/marcono1234/simplify-VarAccess-isLValue
[Java] Simplify VarAccess.isLValue()
|
2020-08-13 16:40:28 +02:00 |
|
Geoffrey White
|
7349333006
|
C++: Taint through char append.
|
2020-08-13 15:13:47 +01:00 |
|
Geoffrey White
|
3c0e7a709f
|
C++: Add a test of append with CharT.
|
2020-08-13 14:52:34 +01:00 |
|
Geoffrey White
|
732a8fa4c9
|
C++: Add another member function.
|
2020-08-13 14:52:34 +01:00 |
|
Jonas Jensen
|
36373fce9b
|
C++: Deprecate DataFlow::definitionByReferenceNode
This predicate name was only used in IR data flow, not in AST data flow.
|
2020-08-13 15:27:35 +02:00 |
|
Jonas Jensen
|
3f383784cd
|
C++: QLDoc formatting fixup
|
2020-08-13 15:27:35 +02:00 |
|
Jonas Jensen
|
f70a17b858
|
C++: clearer wording in asExpr doc
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
|
2020-08-13 15:27:35 +02:00 |
|
Jonas Jensen
|
5ae8b02bde
|
C++: Clarify the docs on DataFlow::Node::asExpr
For IR data flow I also added a `definitionByReferenceNodeFromArgument`
predicate to improve compatibility with AST data flow.
|
2020-08-13 15:27:35 +02:00 |
|
CodeQL CI
|
6c60589dbd
|
Merge pull request #4063 from erik-krogh/noJsMsg
Approved by esbena
|
2020-08-13 14:02:18 +01:00 |
|
Anders Schack-Mulligen
|
3469ad7ca6
|
Merge pull request #3600 from luchua-bc/java-sensitive-log4j2-logging
Add Log4J 2 and a new search string secret
|
2020-08-13 13:35:52 +02:00 |
|
Tom Hvitved
|
46f10fc032
|
C#: Restrict DataFlowType to types belonging to Nodes
|
2020-08-13 13:16:10 +02:00 |
|
Marcono1234
|
cca2d9d825
|
Simplify VarAccess.isLValue()
|
2020-08-13 13:12:57 +02:00 |
|
Tom Hvitved
|
dcccdee227
|
C#: Speed up Implements.qll and Unification.qll
Restrict constructed GVN types to those that are complete, and reduce
intermediate string construction in `toString()` computations.
|
2020-08-13 13:11:04 +02:00 |
|
Shati Patel
|
b1be3672e7
|
Merge pull request #4058 from shati-patel/metadata
Docs: Add metadata option missing from reference table
|
2020-08-13 11:31:52 +01:00 |
|
Erik Krogh Kristensen
|
15a74493e0
|
more permissive path elements in js/incomplete-url-substring-sanitization
|
2020-08-13 11:46:13 +02:00 |
|
Erik Krogh Kristensen
|
3fb9c28806
|
adjust comment about slash position
|
2020-08-13 11:46:13 +02:00 |
|
Erik Krogh Kristensen
|
dc6943b739
|
Update change-notes/1.26/analysis-javascript.md
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2020-08-13 11:34:53 +02:00 |
|
Erik Krogh Kristensen
|
2c7bb8c51f
|
adjust error message when files have been found while extracting
|
2020-08-13 11:18:27 +02:00 |
|
Taus Brock-Nannestad
|
a1a1218f95
|
Python: Ignore from foo import * when foo is absent.
|
2020-08-13 10:50:28 +02:00 |
|
Taus Brock-Nannestad
|
dc5c0f8e7a
|
Python: Add test case for missing modules
|
2020-08-13 10:49:11 +02:00 |
|
Geoffrey White
|
f5abf74e0f
|
Update cpp/ql/src/Microsoft/SAL.qll
Co-authored-by: Robert Marsh <rdmarsh2@gmail.com>
|
2020-08-13 09:05:22 +01:00 |
|
Anders Schack-Mulligen
|
8891ae70b6
|
Merge pull request #3938 from lcartey/java/untrusted-data-to-external-api
Java: Untrusted data used in external APIs
|
2020-08-13 09:53:57 +02:00 |
|
Erik Krogh Kristensen
|
d35d3f4271
|
add test for catch with type unknown
|
2020-08-13 09:37:55 +02:00 |
|
Erik Krogh Kristensen
|
d95d427c5b
|
better support for the &&=, ||=, and ??= operators
|
2020-08-13 09:22:32 +02:00 |
|
Jonas Jensen
|
5e5a112c36
|
C++: Change note
|
2020-08-13 08:37:13 +02:00 |
|
Rasmus Lerchedahl Petersen
|
3f2fcbf0ae
|
Python: Remove most noise in the query output
Just a quick change, the query should probably be rewritten
|
2020-08-13 08:23:12 +02:00 |
|
Rasmus Lerchedahl Petersen
|
2cc7712d40
|
Python: Annotate test cases
|
2020-08-13 08:02:42 +02:00 |
|