Mathias Vorreiter Pedersen
eb8309a17d
Merge pull request #5175 from github/igfoo/thethe
2021-02-15 18:09:32 +01:00
Francis Alexander
f32c77c266
Qldoc and formatting changes
2021-02-15 22:35:58 +05:30
luchua-bc
2f17943abc
Update qldoc
2021-02-15 16:58:09 +00:00
Tamas Vajk
4967664d09
Rework global statement extraction without DB scheme change
2021-02-15 17:47:33 +01:00
Tamas Vajk
a14db7a04f
Fix code review findings
2021-02-15 17:47:33 +01:00
Tamas Vajk
423fee3069
Fix argument location of top level statement entry point
2021-02-15 17:47:32 +01:00
Tamas Vajk
b79d5ab44b
Fix labeled stmt factory method parameter types
2021-02-15 17:44:44 +01:00
Tamas Vajk
6a4b54ec89
C#: Extract global statements
2021-02-15 17:44:44 +01:00
Cornelius Riemenschneider
4a07912006
C++: Small code improvement.
2021-02-15 16:36:49 +00:00
Cornelius Riemenschneider
595bb025f9
C++: Model bsl functions in StdMap.qll.
2021-02-15 16:34:07 +00:00
Tamas Vajk
8c4563b7e3
Code quality improvements
2021-02-15 17:27:33 +01:00
Marcono1234
9e2812cbd5
Sync ConditionalExpr changes with csharp
2021-02-15 17:24:56 +01:00
Tamás Vajk
d1fe542280
Merge pull request #5131 from tamasvajk/feature/refactor
...
C# Cleanup and refactoring
2021-02-15 17:24:25 +01:00
Cornelius Riemenschneider
b6b90b59eb
C++: Model bsl functions in SmartPointer.qll.
2021-02-15 16:22:52 +00:00
Cornelius Riemenschneider
d9c6f7bc35
C++: Model bsl functions in Scanf.qll.
2021-02-15 16:12:46 +00:00
Cornelius Riemenschneider
b670e5b04b
C++: Model bsl functions in Printf.qll.
2021-02-15 16:12:35 +00:00
haby0
92c00cb741
Update java/ql/src/Security/CWE/CWE-652/XQueryInjection.ql
...
Co-authored-by: Chris Smowton <smowton@github.com >
2021-02-16 00:09:21 +08:00
Ian Lynagh
ba6e6337f3
C++: Fix TopLevelFunction's qldoc
2021-02-15 16:08:03 +00:00
haby0
f1e44bce4a
Update java/ql/src/Security/CWE/CWE-652/XQueryInjection.ql
...
Co-authored-by: Chris Smowton <smowton@github.com >
2021-02-16 00:07:44 +08:00
Cornelius Riemenschneider
fd2e0292c3
C++: Model bsl functions in Strtok.qll.
2021-02-15 16:00:37 +00:00
Tom Hvitved
bb95b8a0cc
Merge pull request #5120 from rvermeulen/rvermeulen/redirect-sink
...
C#: Add Asp.Net Core redirect sinks
2021-02-15 16:52:32 +01:00
Jonathan Leitschuh
d82e8216ed
Merge branch 'main' into feat/JLL/depricated_bintray_usage
2021-02-15 10:48:28 -05:00
Cornelius Riemenschneider
fd91a972a5
C++: Model bsl functions in Strcpy.qll.
2021-02-15 15:43:31 +00:00
Cornelius Riemenschneider
9d19752d9a
C++: Model bsl functions in Strcat.qll.
2021-02-15 15:42:34 +00:00
Cornelius Riemenschneider
3afe934a05
C++: Model bsl functions in Swap.qll.
2021-02-15 15:40:17 +00:00
Cornelius Riemenschneider
28d5ef919c
Merge pull request #5158 from geoffw0/modelsbsl3
...
C++: StdString BSL support
2021-02-15 16:32:30 +01:00
Jonathan Leitschuh
73fba3a3c0
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2021-02-15 10:01:03 -05:00
Tamas Vajk
f878453f14
Fix performance issue with RecordCloneCallable
2021-02-15 15:49:06 +01:00
luchua-bc
a03e6faf37
Optimize the query and update qldoc
2021-02-15 14:10:17 +00:00
Anders Schack-Mulligen
8f5fe14e52
Merge pull request #5170 from pwntester/ArrayUtils_changeNote
...
add change note for new ArrayUtils support
2021-02-15 15:00:15 +01:00
Alvaro Muñoz
3d3f4ba797
add change note
2021-02-15 14:53:16 +01:00
Alvaro Muñoz
923e1c5e9b
add change note for new ArrayUtils support
2021-02-15 14:41:18 +01:00
Rasmus Wriedt Larsen
1961ec6e8d
Merge pull request #5159 from tausbn/python-unknown-argument-in-format-string-fp
...
Python: Add FP test for unknown argument in string format
2021-02-15 14:39:10 +01:00
Rasmus Wriedt Larsen
69e081e897
Python: Apply code-review suggestion
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2021-02-15 14:38:20 +01:00
Taus
2ca12aa612
Update python/ql/src/semmle/python/dataflow/new/internal/DataFlowPublic.qll
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2021-02-15 14:21:12 +01:00
Taus Brock-Nannestad
27c479a8ba
Python: Limit RequestInputAccess to immediate uses
...
This fixes some spurious results that occurred when we considered
_any_ use of `request.something` to be a source, even ones we had
tracked into other functions. To prevent this, using
`getAnImmediateUse` better captures the fact that we want the source
to be just the actual attribute access.
2021-02-15 13:51:29 +01:00
Anders Schack-Mulligen
b9a479dd31
Merge pull request #5134 from pwntester/ArrayUtils
...
Add support for Apache Commons Lang ArrayUtils
2021-02-15 13:50:01 +01:00
Mathias Vorreiter Pedersen
1c91d3dbe0
Merge pull request #5168 from MathiasVP/model-bsd-sockets-part-2
...
C++: Model vector versions of BSD-style reads and writes.
2021-02-15 13:39:08 +01:00
Cornelius Riemenschneider
c9af97b742
C++: Model bsl functions in Pure.qll.
2021-02-15 12:31:16 +00:00
CodeQL CI
b5143dbdb4
Merge pull request #5117 from erik-krogh/parseForm
...
Approved by asgerf
2021-02-15 04:30:59 -08:00
Cornelius Riemenschneider
79e3bf80c3
C++: Simplify code.
2021-02-15 12:13:25 +00:00
Cornelius Riemenschneider
da38377e36
C++: Simplify code.
2021-02-15 12:12:29 +00:00
Cornelius Riemenschneider
2a3d20d9a9
C++: Refactor Memset.qll and include bsl model.
2021-02-15 12:36:18 +01:00
Erik Krogh Kristensen
74ce7369f8
Update javascript/change-notes/2021-02-09-form-parsers.md
...
Co-authored-by: Asger F <asgerf@github.com >
2021-02-15 12:35:16 +01:00
Cornelius Riemenschneider
a9071a62a0
C++: Refactor Memcpy.qll and include bsl model.
2021-02-15 12:15:17 +01:00
Mathias Vorreiter Pedersen
0f9b044814
C++: Model vector versions of BSD-style reads and writes.
2021-02-15 12:04:51 +01:00
Erik Krogh Kristensen
e5db0ef16b
remove the RequestExpr requirement from FormParsers.qll, and use API graphs.
2021-02-15 11:58:26 +01:00
Cornelius Riemenschneider
f79b3144e3
C++: Refactor IdentityFunction.qll.
2021-02-15 11:31:31 +01:00
CodeQL CI
9b8d94d76e
Merge pull request #5148 from erik-krogh/apollo
...
Approved by esbena
2021-02-15 02:23:52 -08:00
Alvaro Muñoz
00a0b12dad
update expected results
2021-02-15 11:23:40 +01:00
