Francis Alexander
985d3d469a
PR feedback integration
2021-01-25 23:26:36 +05:30
Rasmus Wriedt Larsen
91caa13f48
Merge pull request #5004 from github/erik-krogh/ignore-venv
...
add .venv/ to .gitignore
2021-01-25 18:06:28 +01:00
Joe Farebrother
d69ecde5c1
Java: Add additional flow steps for guava collection methods and more unit tests
2021-01-25 16:37:40 +00:00
Joe Farebrother
7e11d8ed07
Java: Add modelling for guava Sets
2021-01-25 16:37:40 +00:00
Joe Farebrother
d1427fcd93
Java: Add modelling for Guava's collection classes
2021-01-25 16:37:40 +00:00
Rasmus Lerchedahl Petersen
96b7f75905
Python: add postupdate nodes for kwargs
...
drops remaining reverse read failures on saltstack.
2021-01-25 17:34:49 +01:00
Rasmus Wriedt Larsen
a8186be2fa
Python: Add test of type-tracking self in methods
2021-01-25 17:20:11 +01:00
Rasmus Lerchedahl Petersen
ad39bfb2ff
Python: Add postupdate nodes for subscripts.
...
This drops reverse read inconsistencies on saltstack from 14909 to 1353.
2021-01-25 17:01:25 +01:00
Rasmus Lerchedahl Petersen
361bee851a
Python: Tests inspired by reverse read check
2021-01-25 17:01:25 +01:00
Rasmus Lerchedahl Petersen
4ff2c6d85a
Python: fix test expectation
...
probably a copy-paste error..
2021-01-25 16:49:51 +01:00
Tom Hvitved
7c9a6064cf
C#: Get rid of ReadKind
2021-01-25 16:20:14 +01:00
CodeQL CI
4601eb9c7c
Merge pull request #4706 from max-schaefer/issue-247
...
Approved by asgerf
2021-01-25 07:11:35 -08:00
Tom Hvitved
6ffeaf8c2a
C#: Adjust flow into phi nodes
2021-01-25 15:44:37 +01:00
Tom Hvitved
38b0f743cb
C#: Add test that illustrates problem with flow through phi nodes
2021-01-25 14:20:27 +01:00
Artem Smotrakov
8d701e604a
Simplified JexlInjectionLib.qll
...
- Merged multiple method definitions to DirectJexlEvaluationMethod
- Don't use TaintPropagatingJexlMethodCall field in JexlInjectionConfig
- Better variable names in JexlEvaluationSink
2021-01-25 14:17:51 +01:00
Tom Hvitved
36ad6b3432
Merge pull request #5001 from hvitved/csharp/ssa/read-kind
...
C#: Remove `ReadKind` from the shared SSA library
2021-01-25 14:11:54 +01:00
Tom Hvitved
221aebc833
C#: Fix bug in AssignOperationWithExpandedAssignment::last
2021-01-25 14:01:31 +01:00
alexet
355edcb136
Csharp: Reduce BDD usage.
2021-01-25 13:52:17 +01:00
Tom Hvitved
0543e34812
C#: Address review comment
2021-01-25 13:52:17 +01:00
Tom Hvitved
e0c7f32282
C#: Add relational pattern CFG test
2021-01-25 13:52:17 +01:00
Tom Hvitved
063733ad52
C#: Implement CFG for not patterns
2021-01-25 13:52:17 +01:00
Tom Hvitved
ab85b2c2d2
C#: Add is not null guards test
2021-01-25 13:52:17 +01:00
Tom Hvitved
0080357153
C#: Add unary pattern CFG tests
2021-01-25 13:52:17 +01:00
Erik Krogh Kristensen
0ba610f7db
Merge pull request #5013 from erik-krogh/asmWhitespace
...
JS: remove benign result for js/whitespace-contradicts-precedence related to " | 0" expressions
2021-01-25 13:29:07 +01:00
haby0
42f55e1ebe
Merge pull request #1 from smowton/smowton/admin/rewrite-xquery
...
Rewrite XQuery injection to use an additional taint step instead of multiple configurations
2021-01-25 19:49:20 +08:00
Chris Smowton
d34233b44f
Rewrite XQuery injection to use an additional taint step instead of multiple configurations.
...
Also remove a needless barrier -- the method in question doesn't conduct taint by default, so excluding particular instances of that call is not necessary.
2021-01-25 11:18:45 +00:00
haby0
16308fe557
Update java/ql/src/Security/CWE/CWE-652/XQueryInjectionLib.qll
...
Co-authored-by: Chris Smowton <smowton@github.com >
2021-01-25 19:16:18 +08:00
haby0
14a23eed4f
Update java/ql/src/Security/CWE/CWE-652/XQueryInjectionLib.qll
...
Co-authored-by: Chris Smowton <smowton@github.com >
2021-01-25 19:15:59 +08:00
Tom Hvitved
e7b43e50b6
C#: Remove ReadKind from the shared SSA library
2021-01-25 12:09:34 +01:00
Tamas Vajk
eac69c1674
Add DB upgrade folder for CIL fnptr support
2021-01-25 11:34:47 +01:00
Tamas Vajk
b434a0f395
Add change notes
2021-01-25 11:27:13 +01:00
Tom Hvitved
1c84455a6d
Merge pull request #5003 from hvitved/csharp/remove-getaqlclass
...
C#: Remove uses of `getAQlClass()`
2021-01-25 10:57:04 +01:00
Erik Krogh Kristensen
d86705fe7a
remove benign result for js/whitespace-contradicts-precedence related to " | 0" expressions
2021-01-25 10:43:39 +01:00
Jonas Jensen
1b3d69d617
Merge pull request #4784 from MathiasVP/mathiasvp/reverse-read-take-3
...
C++: Support longer access paths in IR field flow
2021-01-25 10:36:03 +01:00
Tom Hvitved
c235462f7d
C++: Sync IRType.qll
2021-01-25 09:43:57 +01:00
ihsinme
b899229298
Add files via upload
2021-01-25 00:33:54 +03:00
ihsinme
9ae503a5a8
Add files via upload
2021-01-25 00:30:35 +03:00
ihsinme
20e19ec467
Add files via upload
2021-01-25 00:09:55 +03:00
ihsinme
9071ba2f99
Add files via upload
2021-01-25 00:06:19 +03:00
ihsinme
fcd532522d
Add files via upload
2021-01-24 22:36:42 +03:00
ihsinme
20d1b24e9c
Add files via upload
2021-01-24 22:35:11 +03:00
Francis Alexander
75b79039a1
Example fixes
2021-01-24 20:46:37 +05:30
Rasmus Lerchedahl Petersen
89e56707c3
Python: Omit all unresolved parameter nodes.
...
Drops the results further to 139.
2021-01-24 16:16:07 +01:00
Francis Alexander
81e372d078
Formatting changes
2021-01-24 20:44:21 +05:30
Rasmus Lerchedahl Petersen
baf0917524
On saltstack this drops the number of consistency errors
...
of type uniqueEnclosingCallable from 4026 to 614.
2021-01-24 15:30:59 +01:00
Francis Alexander
a64fc2b24e
Java: Queries to detect remote source flow to CORS header
2021-01-24 18:58:39 +05:30
Artem Smotrakov
71e5cb45d3
Simplified method and class definitions for JEXL
2021-01-23 19:50:16 +01:00
Artem Smotrakov
03348b18b5
Simplified TaintPropagatingJexlMethodCall
2021-01-23 19:41:14 +01:00
Artem Smotrakov
a47147bc5e
Simplify sinks in JexlInjectionLib.qll
2021-01-23 19:22:43 +01:00
Artem Smotrakov
28ebbee61d
Added TaintPropagatingJexlMethodCall class
2021-01-23 17:42:04 +01:00
