33872 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Chris Smowton	54c1480fd6	Replace explicit extra step with TaintPreservingCallable	2020-10-27 12:02:29 +00:00
Chris Smowton	60e8910330	Follow taint across getExtras without qualifier	2020-10-27 12:01:30 +00:00
Arthur Baars	52035ef672	Add tracing logger	2020-10-27 11:29:21 +01:00
Arthur Baars	9c534209f7	Add tracing:0.1	2020-10-27 11:26:35 +01:00
Rasmus Lerchedahl Petersen	164acf4055	Python: test that aliasing is not a problem	2020-10-27 11:25:58 +01:00
Geoffrey White	0b35b34288	C++: Add pointer tests.	2020-10-27 09:47:10 +00:00
Tom Hvitved	03a36760b8	C#: Add data-flow test for ConfigureAwait()	2020-10-27 10:23:39 +01:00
Tamas Vajk	342a711296	C#: Add flow summary for 'Task.ConfigureAwait()'	2020-10-27 10:23:39 +01:00
Arthur Baars	467e32ade4	Merge pull request #2 from github/aibaars/extractor-rust ... Rewrite extractor in rust	2020-10-27 10:16:58 +01:00
Asger Feldthaus	7345df63c0	JS: Include DataFlow::AdditionalFlowStep in TaintSteps metric	2020-10-27 08:41:50 +00:00
Jonas Jensen	8f6dbe982e	Merge pull request #4468 from github/rdmarsh2/cpp/output-iterators-2 ... C++: flow through output iterators with user-defined operator= and operator*	2020-10-27 08:36:14 +01:00
Rasmus Lerchedahl Petersen	2baed20067	Python: Test false negative from review	2020-10-27 08:30:16 +01:00
Rasmus Lerchedahl Petersen	b6313dddb9	Python: Add concept tests	2020-10-27 08:26:00 +01:00
Jonas Jensen	45cd47ea77	Merge pull request #4535 from criemen/jump-to-def ... C++: Extend jump-to-def support to template instantiations.	2020-10-27 08:16:57 +01:00
Rasmus Lerchedahl Petersen	8350d64763	Python: Add concept test definitions	2020-10-27 08:00:53 +01:00
Arthur Baars	0f576fe29a	Address review comments	2020-10-26 19:10:44 +01:00
Arthur Baars	1d36b5085a	Do not recurse into 'extra' nodes for now	2020-10-26 18:39:10 +01:00
Arthur Baars	fd39524c5e	Improve error messages ... Include file path and line number and emit better descriptions	2020-10-26 18:37:29 +01:00
Erik Krogh Kristensen	33465dbe6b	refactor parameterPropRead and reachesReturn to get a slight performance improvement	2020-10-26 16:49:49 +01:00
Geoffrey White	12233e5874	Merge pull request #4533 from MathiasVP/mathiasvp/fix-broken-qhelp ... C++: Fix broken qhelp links	2020-10-26 14:40:52 +00:00
Mathias Vorreiter Pedersen	9db66a1b94	Delete the msdn reference in NestedLoopSameVar ... It was a Visual Basic reference anyway, and it doesn't seem to provide more information than the link we have already.	2020-10-26 15:27:24 +01:00
Rasmus Lerchedahl Petersen	601a803ee2	Python: DataFlow/TaintTrackin 3/4	2020-10-26 14:42:18 +01:00
Cornelius Riemenschneider	1b88ca1e81	C++: Simplify code, add comment explaining the logic.	2020-10-26 14:39:12 +01:00
Cornelius Riemenschneider	447ba205b4	C++: Move Conversions in PrintAST to the side.	2020-10-26 13:49:02 +01:00
Tom Hvitved	212b49f3dc	Merge pull request #4416 from hvitved/csharp/dataflow/tuples ... C#: Add flow summaries for `System.[Value]Tuple`	2020-10-26 13:48:24 +01:00
Cornelius Riemenschneider	0e5c44e5c4	C++: Add new test for conversions.	2020-10-26 13:25:17 +01:00
CodeQL CI	e825af2791	Merge pull request #4548 from asgerf/js/handle-empty-package-json ... Approved by erik-krogh	2020-10-26 11:51:12 +00:00
Chris Smowton	68876b02fe	Merge pull request #4519 from smowton/smowton/cleanup/loggertype-dead-code ... C#: Remove dead LoggerType class	2020-10-26 11:19:27 +00:00
Mathias Vorreiter Pedersen	02bcb6d971	Apply suggestions from code review ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2020-10-26 11:39:54 +01:00
Joe Farebrother	2050f82553	Merge pull request #4383 from joefarebrother/guava-strings ... Java: Add modelling for Guava	2020-10-26 10:16:55 +00:00
Asger Feldthaus	c353f61091	JS: Add test case	2020-10-26 09:58:37 +00:00
Asger Feldthaus	f6c0972523	JS: Guard other uses of Gson.fromJson	2020-10-26 09:54:55 +00:00
Asger Feldthaus	fc12b0bb5e	JS: Do not crash on empty package.json file	2020-10-26 09:54:51 +00:00
Tom Hvitved	492b1141ef	Merge pull request #4445 from hvitved/csharp/sign-analysis-cfg ... C#: Use CFG nodes instead of AST nodes in sign/modulus analysis	2020-10-26 09:45:38 +01:00
Cornelius Riemenschneider	07452c0159	C++: Add comment, explaining where this query is used.	2020-10-26 09:28:24 +01:00
Cornelius Riemenschneider	fca141146b	C++: Address review.	2020-10-26 09:27:29 +01:00
luchua-bc	07830aae05	Fix typo	2020-10-25 22:34:15 +00:00
Erik Krogh Kristensen	0b41a59dbf	add support for imports into "outDir" from tsconfig.json	2020-10-25 22:51:21 +01:00
luchua-bc	d9c140dc6c	Enhance the query to use sanitizer and null/empty array flow	2020-10-25 15:33:09 +00:00
luchua-bc	9ae5689af6	Use AndroidIntentInput source	2020-10-24 11:55:00 +00:00
Arthur Baars	47ccc33ab3	Initial version of extractor based on tree-sitter grammar	2020-10-24 13:22:39 +02:00
Arthur Baars	d00c956028	Build with clang for non-windows platforms	2020-10-24 13:22:39 +02:00
Rasmus Lerchedahl Petersen	d89e985246	Python: Test showing chaining FP	2020-10-24 09:20:30 +02:00
Rasmus Lerchedahl Petersen	022cf0b2cc	Python: Add test from tracking issue ... All tests pass, but there are spurious paths due to configuration chaining.	2020-10-24 09:07:43 +02:00
Francis Alexander	27c554c164	feedback integration - Move all files to Play.qll, improvements to add methods to remotetainted method for play	2020-10-24 11:56:06 +05:30
Dave Bartolomeo	3fce971f2d	Fix taint propagation to qualifier objects and update test expectations	2020-10-23 17:48:37 -04:00
Dave Bartolomeo	86668058dc	Avoid ODR violation in test code	2020-10-23 17:45:01 -04:00
Dave Bartolomeo	4d2f658ece	Don't treat allocator argument as a string input	2020-10-23 17:44:07 -04:00
Robert Marsh	aab9797c2f	Merge branch 'main' into rdmarsh2/cpp/output-iterators-2 ... Resolve merge conflict in tests	2020-10-23 13:50:15 -07:00
Dave Bartolomeo	1e96404ee0	Revert bad changes to basic_string	2020-10-23 13:46:27 -04:00