Anders Schack-Mulligen
|
e660ac54da
|
Merge pull request #4358 from joefarebrother/format-taint
Java: Add taint steps through string formatting methods
|
2020-10-05 13:25:54 +02:00 |
|
Geoffrey White
|
591c17d7cf
|
C++: Rearrange comments.
|
2020-10-05 12:22:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
6c87b08c69
|
C++: Respond to review comments:
- ArgumentNode is now abstract
- PrimaryArgumentNode is now an OperandNode.
- ArgumentIndirectionNode is now merged into SideEffectArgumentNode.
|
2020-10-05 12:54:11 +02:00 |
|
Asger Feldthaus
|
fee99105da
|
JS: Remove tslint dependency
|
2020-10-05 11:53:58 +01:00 |
|
Rasmus Lerchedahl Petersen
|
478cfd7310
|
Python: Small clean-up
|
2020-10-05 12:43:30 +02:00 |
|
CodeQL CI
|
43b2c90538
|
Merge pull request #4400 from max-schaefer/js/api-graph-classrefs
Approved by asgerf
|
2020-10-05 03:12:23 -07:00 |
|
Geoffrey White
|
488a55b9dd
|
C++: Autoformat.
|
2020-10-05 10:39:32 +01:00 |
|
Rasmus Lerchedahl Petersen
|
f449da2fdb
|
Python: Write explanatory examples.
|
2020-10-05 11:39:18 +02:00 |
|
Mathias Vorreiter Pedersen
|
4c14f5dbb7
|
Merge branch 'main' into no-more-flow-into-read-side-effect
|
2020-10-05 11:03:42 +02:00 |
|
Asger Feldthaus
|
8689a9b3b9
|
JS: Fix a bad join order in barrierGuardBlocksNode
|
2020-10-05 09:55:22 +01:00 |
|
Asger Feldthaus
|
790d2ba0fc
|
JS: Fix FPs from ParameterFieldAsPropWrite.getPropertyNameExpr
|
2020-10-05 09:55:22 +01:00 |
|
Asger Feldthaus
|
cad259fb83
|
JS: Use more types in DOM model
|
2020-10-05 09:55:22 +01:00 |
|
Asger Feldthaus
|
3dabff6b17
|
JS: Recognize field types in untyped code
|
2020-10-05 09:55:22 +01:00 |
|
Tom Hvitved
|
4d62033a15
|
C#: Handle population of error types
|
2020-10-05 10:14:13 +02:00 |
|
Mathias Vorreiter Pedersen
|
d38121f54a
|
Merge pull request #4394 from geoffw0/oddsends2
C++: Clean up and add to taint tests
|
2020-10-05 09:16:50 +02:00 |
|
Rasmus Lerchedahl Petersen
|
8e27904f65
|
Python: Add explanatory comment.
|
2020-10-04 15:34:25 +02:00 |
|
Rasmus Lerchedahl Petersen
|
3463889010
|
Python: Add comments
|
2020-10-04 09:40:06 +02:00 |
|
Rasmus Lerchedahl Petersen
|
385e213fcf
|
Python: Fix comments
|
2020-10-04 09:33:30 +02:00 |
|
Rasmus Lerchedahl Petersen
|
ce18bff274
|
Python: Support method calls
|
2020-10-03 23:34:39 +02:00 |
|
Erik Krogh Kristensen
|
856ad07694
|
join-order improvement in NoSQL.qll
|
2020-10-03 22:07:34 +02:00 |
|
Tom Hvitved
|
c0b251ad9e
|
C#: Precise data-flow for System.Threading.Tasks
|
2020-10-03 11:13:45 +02:00 |
|
Tom Hvitved
|
26544f322a
|
C#: Update data-flow tests for System.Threading.Tasks
|
2020-10-03 11:13:45 +02:00 |
|
Arthur Baars
|
78c58c2415
|
Merge pull request #4384 from tausbn/python-fix-package-locations
Python: Fix `hasLocationInfo` for packages
|
2020-10-02 20:48:43 +02:00 |
|
Alexander Eyers-Taylor
|
754d82c325
|
Merge pull request #4382 from github/alexet-patch-1
Fix the name of the vscode extension recommendation
|
2020-10-02 18:33:36 +01:00 |
|
Alexander Eyers-Taylor
|
30ed6a0dac
|
Merge pull request #4385 from aibaars/drop-queries
Drop 'tech-inventory' and 'code duplication' queries from the standard query suites
|
2020-10-02 18:31:25 +01:00 |
|
Geoffrey White
|
3536d84bdf
|
C++: Use [, ...] syntax more widely.
|
2020-10-02 18:04:03 +01:00 |
|
Geoffrey White
|
1efe461a98
|
C++: Move the rest of of StdSequenceContainerBeginEnd into BeginOrEndFunction.
|
2020-10-02 18:03:46 +01:00 |
|
Geoffrey White
|
8d5bd2289b
|
C++: Remove parts of StdSequenceContainerBeginEnd in favour of BeginOrEndFunction.
|
2020-10-02 18:03:46 +01:00 |
|
Geoffrey White
|
8d5febf9c4
|
C++: Add a couple more test cases that have been discussed.
|
2020-10-02 18:03:07 +01:00 |
|
Geoffrey White
|
cc170bd513
|
C++: Test layout.
|
2020-10-02 18:03:07 +01:00 |
|
Tom Hvitved
|
1a93090778
|
C#: Improve guards SSA logic in the context of control-flow splitting
|
2020-10-02 18:00:34 +02:00 |
|
Tom Hvitved
|
f1d6f7cd0c
|
C#: Model assertions in the CFG
|
2020-10-02 17:56:41 +02:00 |
|
Geoffrey White
|
2dc8fba7fe
|
C++: Remove StdMapBeginEnd as we now have a general model BeginOrEndFunction in main.
|
2020-10-02 16:39:23 +01:00 |
|
Geoffrey White
|
0d6bd6facb
|
Merge branch 'main' into map
|
2020-10-02 16:24:03 +01:00 |
|
Geoffrey White
|
d4a1acedde
|
C++: Remove StdSetBeginEnd as we now have a general model BeginOrEndFunction in main.
|
2020-10-02 16:23:48 +01:00 |
|
Arthur Baars
|
daa1bcc06e
|
Also mark 'tech inventory' queries as deprecated
|
2020-10-02 17:23:11 +02:00 |
|
Arthur Baars
|
fc45b6cd3c
|
Drop 'tech-inventory' and 'code duplication' queries from the standard query suites
|
2020-10-02 17:22:04 +02:00 |
|
Geoffrey White
|
88a93964a7
|
Merge branch 'main' into set
|
2020-10-02 16:17:48 +01:00 |
|
Geoffrey White
|
28ab092e9f
|
C++: Add 'tainted' markers to standalone_iterators.cpp test.
|
2020-10-02 15:54:26 +01:00 |
|
Taus
|
fce76e2799
|
Merge pull request #4354 from RasmusWL/python-command-execution-modeling
Python: Better command execution modeling
|
2020-10-02 16:14:34 +02:00 |
|
Taus
|
2e4a61428d
|
Merge pull request #4346 from RasmusWL/python-add-implicit-init-test
Python: add test for implicit __init__.py files
|
2020-10-02 16:13:25 +02:00 |
|
Mathias Vorreiter Pedersen
|
072e1967c1
|
C++: Accept more tests
|
2020-10-02 15:51:29 +02:00 |
|
Tom Hvitved
|
17f0ac4b20
|
C#: Add more CFG assertion tests
|
2020-10-02 15:35:33 +02:00 |
|
Tom Hvitved
|
55d25d90fa
|
Merge pull request #4386 from hvitved/csharp/remove-deprecated-queries
C#: Remove deprecated external queries
|
2020-10-02 15:12:33 +02:00 |
|
Rasmus Wriedt Larsen
|
e5b9ac8d9c
|
Python: Use getCommand as tag in ConceptsTest
|
2020-10-02 14:12:41 +02:00 |
|
Rasmus Wriedt Larsen
|
eb67986916
|
Python: Exlucde only command injection sinks in os and subprocess
|
2020-10-02 14:11:07 +02:00 |
|
Mathias Vorreiter Pedersen
|
48902c07a4
|
C++: Accept test changes
|
2020-10-02 14:10:58 +02:00 |
|
Mathias Vorreiter Pedersen
|
8f4982d3f5
|
C++: Remove flow into ReadSideEffect instructions in simpleInstructionLocalFlowStep
|
2020-10-02 14:10:28 +02:00 |
|
Rasmus Wriedt Larsen
|
68eacef23c
|
Python: Refactor OsExecCall and friends for better readability
|
2020-10-02 13:38:54 +02:00 |
|
Rasmus Wriedt Larsen
|
de07d9e5d9
|
Python: Highlight that os.popen is not only problem for extra alerts
|
2020-10-02 13:34:33 +02:00 |
|