Tom Hvitved
39977e9a43
Merge pull request #4724 from hvitved/csharp/cfg/not-pattern
...
C#: Implement CFG for `not` patterns
2021-01-27 10:12:31 +01:00
Anders Schack-Mulligen
0381190a30
Merge pull request #5021 from hmakholm/qlpack-test
...
Add "tests" fields to test qlpacks
2021-01-27 09:23:35 +01:00
Tom Hvitved
214505c4dc
Merge pull request #5016 from hvitved/csharp/exception-dispatch-info
...
C#: Teach CFG about `ExceptionDispatchInfo::Throw`
2021-01-27 08:36:51 +01:00
Rasmus Lerchedahl Petersen
5d62a56ed8
Python: Remove debug function
2021-01-27 08:24:11 +01:00
haby0
b5ae417851
*)update CWE-652 qhelp references
2021-01-27 10:19:04 +08:00
haby0
b76854a384
*)add CWE-652 test case
2021-01-27 10:14:33 +08:00
Rasmus Lerchedahl Petersen
d18c1602cd
Python: autoformat
2021-01-27 01:25:38 +01:00
Rasmus Lerchedahl Petersen
d29fdda779
Python: Only generate one post-update node,
...
even if there are multiple reasons for doing so.
Solves `uniqueNodeToString` inconsistencies
(and probably saves quite a lot of nodes).
2021-01-27 01:20:51 +01:00
Robert Marsh
8919e5546b
C++ Use dontcare instead of one-use exists
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-26 14:12:49 -08:00
ihsinme
5d5cd4fde5
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrncat.ql
2021-01-27 00:10:04 +03:00
ihsinme
f074564dc1
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-27 00:00:18 +03:00
ihsinme
636fe73f40
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql
2021-01-26 23:52:18 +03:00
ihsinme
fc9d219057
Update AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql
2021-01-26 23:50:54 +03:00
ihsinme
de0bbc8826
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-26 23:47:07 +03:00
Rasmus Lerchedahl Petersen
9b13834d28
Python: small refactor
2021-01-26 21:17:59 +01:00
Rasmus Lerchedahl Petersen
d3e0e84c37
Python: Separate callable for lambdas
...
Since lambdas are split, but their children are not,
we use the Function as the callable.
2021-01-26 21:17:59 +01:00
Rasmus Lerchedahl Petersen
4526a1dd2f
Python: test for split lambda
2021-01-26 21:17:59 +01:00
yoff
cd85cf1645
Update python/ql/src/semmle/python/dataflow/new/internal/DataFlowPrivate.qll
2021-01-26 19:16:54 +01:00
yoff
500ea12224
Apply suggestions from code review
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2021-01-26 19:14:46 +01:00
Henning Makholm
54f00de3e0
Add "tests" fields to test qlpacks
...
This will allow `codeql resolve tests --ignore-dubious-cases`
(and thus the VSCode extension) to recognize all `.ql` files in those
packs as test cases, even if they don't have accompanying `.expected`
files.
CLI versions prior to 2.1.0 will choke on this, but it's almost 10
months since that came out.
2021-01-26 18:15:22 +01:00
Mathias Vorreiter Pedersen
04a3c3d29c
Merge pull request #4953 from ihsinme/ihsinme-patch-207
...
CPP: Add query for CWE-14 compiler removal of code to clear buffers.
2021-01-26 18:13:18 +01:00
Mathias Vorreiter Pedersen
416aa49d99
C++: Capitalize alert message.
2021-01-26 17:24:03 +01:00
Asger Feldthaus
c69a051292
JS: Add test that depends on getAQlClass
2021-01-26 15:16:27 +00:00
Mathias Vorreiter Pedersen
aec0e9808b
Merge pull request #5017 from rvermeulen/patch-2
...
C++: Correct pointer to data member example
2021-01-26 14:56:57 +01:00
Rasmus Wriedt Larsen
902bade5ae
Merge pull request #5015 from yoff/python-add-missing-postupdate-nodes
...
Python: add missing postupdate nodes
2021-01-26 14:39:29 +01:00
Remco Vermeulen
1834403148
Replace HTTP entity
...
The code formatting operator correctly translate to HTTP entities.
2021-01-26 14:14:42 +01:00
Remco Vermeulen
8c09032d1d
Correct access specifier
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2021-01-26 13:23:43 +01:00
Remco Vermeulen
932ee968e0
Correct pointer to data member example
...
The class `PointerToMemberType` is preceded by an example that doesn't define the variable `c` used to access a data member.
2021-01-26 13:08:28 +01:00
CodeQL CI
76e1e4d668
Merge pull request #4712 from asgerf/js/api-graph-tweaks
...
Approved by max-schaefer
2021-01-26 04:04:05 -08:00
Francis Alexander
19872e9aed
More Feedback integration
2021-01-26 17:24:17 +05:30
Taus
4c0f54f5d3
Merge pull request #5007 from yoff/python-disregard-comp-args
2021-01-26 12:53:33 +01:00
Rasmus Lerchedahl Petersen
e253855999
Python: Add comment about reverse reads.
2021-01-26 12:11:21 +01:00
CodeQL CI
0be0929693
Merge pull request #4958 from asgerf/js/angular2
...
Approved by erik-krogh
2021-01-26 02:53:33 -08:00
Rasmus Lerchedahl Petersen
e44f1813fa
Python: Add TODO comment
2021-01-26 11:29:14 +01:00
Tamás Vajk
e4ed050c87
Merge pull request #4970 from tamasvajk/feature/extraction-errors
...
C#: Fix extraction errors
2021-01-26 11:28:39 +01:00
Rasmus Lerchedahl Petersen
2c58643fd1
Python: Test for parameters without nodes.
2021-01-26 11:28:31 +01:00
Tamás Vajk
3ece8c3a01
Merge pull request #4835 from tamasvajk/feature/cil-fnptr
...
C#: Extract function pointer types from CIL
2021-01-26 11:28:02 +01:00
Asger Feldthaus
e6d9cd1905
JS: Add clause to getReturn/getInstance
2021-01-26 10:14:12 +00:00
CodeQL CI
c1726ed868
Merge pull request #5014 from RasmusWL/typetracking-test-track-self
...
Approved by tausbn
2021-01-26 02:10:52 -08:00
Asger Feldthaus
d59ccb7687
JS: Remove unhelpful mat-table load step
2021-01-26 09:27:48 +00:00
Asger Feldthaus
89225e222c
JS: Remove confusing comment
2021-01-26 09:25:12 +00:00
Tom Hvitved
71d25c1f8b
C#: Fix join-orders in ControlFlowTree::last()
2021-01-26 09:58:01 +01:00
Rasmus Lerchedahl Petersen
7b9ca7171a
Python: update test expectations
2021-01-26 09:47:48 +01:00
Rasmus Lerchedahl Petersen
dacc21d0b5
Python: update test expectation
2021-01-26 09:45:41 +01:00
Tom Hvitved
cd8155c201
C#: Teach CFG about ExceptionDispatchInfo::Throw
2021-01-26 09:16:53 +01:00
Tom Hvitved
07a96c3596
C#: Add CFG tests for ExceptionDispatchInfo::Throw
2021-01-26 09:01:06 +01:00
luchua-bc
fee0b94cd4
Use isRequestGetParamMethod as the source
2021-01-26 04:41:44 +00:00
Robert Marsh
44bc6d7fdb
C++/C#: add NonPhiMemoryOperand union type
...
This fixes a performance issue where the whole MemoryOperand table was
scanned in some predicates that used only NonPhiMemoryOperand
2021-01-25 17:03:19 -08:00
yoff
09bb3001d6
Apply suggestions from code review
...
Co-authored-by: Taus <tausbn@github.com >
2021-01-25 21:58:20 +01:00
yoff
7ba0939239
Merge pull request #4995 from RasmusWL/tornado-model-http-sinks
...
Python: model HTTP sink in Tornado
2021-01-25 21:53:44 +01:00