Esben Sparre Andreasen
|
a089e0ed3f
|
change branch name
|
2021-10-18 12:31:03 +02:00 |
|
Esben Sparre Andreasen
|
6cc14b16ba
|
QL: change branch name
|
2021-10-18 12:31:03 +02:00 |
|
Esben Sparre Andreasen
|
a9cef84b90
|
Merge pull request #131 from github/esbena/workflow-improvements
Misc. workflow improvements
|
2021-10-18 12:21:39 +02:00 |
|
Esben Sparre Andreasen
|
f29813b3f7
|
QL: Merge pull request #131 from github/esbena/workflow-improvements
Misc. workflow improvements
|
2021-10-18 12:21:39 +02:00 |
|
Tony Torralba
|
392e2eebeb
|
Add intent creation from a URI as a taint step
|
2021-10-18 12:18:07 +02:00 |
|
shati-patel
|
83a1260769
|
Move queries.xml to src
|
2021-10-18 11:18:00 +01:00 |
|
Esben Sparre Andreasen
|
eded7b8da1
|
add nightly-changes workflow
|
2021-10-18 12:03:16 +02:00 |
|
Esben Sparre Andreasen
|
dc715af18b
|
QL: add nightly-changes workflow
|
2021-10-18 12:03:16 +02:00 |
|
Esben Sparre Andreasen
|
c200ec38f5
|
use workflow_call in bleeding-codeql-analysis.yml
|
2021-10-18 12:03:16 +02:00 |
|
Esben Sparre Andreasen
|
7e2b00e62c
|
QL: use workflow_call in bleeding-codeql-analysis.yml
|
2021-10-18 12:03:16 +02:00 |
|
Tony Torralba
|
d1d2d61d7e
|
Add more sinks
Also, fix things after rebase
|
2021-10-18 12:00:07 +02:00 |
|
Ian Lynagh
|
54d2028920
|
Update java/ql/src/Likely Bugs/Resource Leaks/CloseType.qll
Co-authored-by: Chris Smowton <smowton@github.com>
|
2021-10-18 10:12:01 +01:00 |
|
Tony Torralba
|
28ae4c211f
|
Update java/ql/src/Security/CWE/CWE-940/AndroidIntentRedirection.qhelp
Co-authored-by: Ethan Palm <56270045+ethanpalm@users.noreply.github.com>
|
2021-10-18 11:10:23 +02:00 |
|
Tony Torralba
|
e7983fb269
|
Add test and check for another edge case
|
2021-10-18 11:10:23 +02:00 |
|
Tony Torralba
|
bc6c13be69
|
Refactor to actually build the full flows from src to sink
Add more tests for edge cases
|
2021-10-18 11:10:22 +02:00 |
|
Tony Torralba
|
4dd9e7d6a0
|
Remove unnecessary import
Add comment
|
2021-10-18 11:10:22 +02:00 |
|
Tony Torralba
|
14963103aa
|
Add full path reconstruction from RemoteFlowSource to sink
|
2021-10-18 11:10:21 +02:00 |
|
Tony Torralba
|
445da1e71e
|
Move files to new location
|
2021-10-18 11:10:21 +02:00 |
|
Tony Torralba
|
8263524d70
|
Add tests for Intent and ComponentName summaries
|
2021-10-18 11:10:17 +02:00 |
|
Tony Torralba
|
2ab7a55545
|
Improve intermediate flow to add more potential sources
|
2021-10-18 11:09:52 +02:00 |
|
Tony Torralba
|
28369d1822
|
Apply suggestions from code review
Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com>
|
2021-10-18 11:09:31 +02:00 |
|
Tony Torralba
|
aa2cdb7a53
|
Add intermediate dataflow
Make sure that source intents are obtained from another intent's extras
|
2021-10-18 11:09:30 +02:00 |
|
Tony Torralba
|
f90220436f
|
Move sinks to security library
|
2021-10-18 11:09:28 +02:00 |
|
Tony Torralba
|
9a537f9c23
|
Add guard sanitizer for component name checks
|
2021-10-18 11:08:14 +02:00 |
|
Tony Torralba
|
21b70a009e
|
Use CSV models
|
2021-10-18 11:07:58 +02:00 |
|
Tony Torralba
|
9604f88ae0
|
Undo autoformatting
|
2021-10-18 11:07:28 +02:00 |
|
Tony Torralba
|
d7973592da
|
Update java/ql/src/semmle/code/java/security/AndroidIntentRedirection.qll
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>
|
2021-10-18 11:07:03 +02:00 |
|
Tony Torralba
|
5f0ce4d232
|
Add suggestions from code review
|
2021-10-18 11:07:01 +02:00 |
|
Tony Torralba
|
a6f2ebe820
|
Fix stubs
|
2021-10-18 11:06:43 +02:00 |
|
Tony Torralba
|
9eb4cda1af
|
Fix qhelp and formatting
|
2021-10-18 11:06:08 +02:00 |
|
Tony Torralba
|
031fa2199c
|
Fix stubs and tests
|
2021-10-18 11:06:06 +02:00 |
|
Tony Torralba
|
529a3d9d61
|
Added change note
|
2021-10-18 11:04:35 +02:00 |
|
Tony Torralba
|
5dfb0d4d64
|
Fix Android tests affected by changes in stubs
|
2021-10-18 11:04:33 +02:00 |
|
Tony Torralba
|
ef30ca211a
|
Fix stubs
|
2021-10-18 11:03:13 +02:00 |
|
Tony Torralba
|
7b949e8db2
|
QLDoc
|
2021-10-18 11:02:35 +02:00 |
|
Tony Torralba
|
fd8a128693
|
Renamed to AndroidIntentRedirection
Added qhelp
|
2021-10-18 11:02:34 +02:00 |
|
Tony Torralba
|
09d96e65b8
|
Added QLDoc
|
2021-10-18 11:02:32 +02:00 |
|
Tony Torralba
|
8c400d9b1b
|
Added tests and stubs
|
2021-10-18 11:02:10 +02:00 |
|
Tony Torralba
|
d006db9d20
|
First version of the query
|
2021-10-18 10:58:09 +02:00 |
|
Mathias Vorreiter Pedersen
|
ea67ca22a9
|
C++: Undo changes to shared dataflow files.
|
2021-10-18 09:00:00 +01:00 |
|
Tony Torralba
|
5216bbab93
|
Merge pull request #6835 from atorralba/atorralba/fix-local-and-remote-flow-tests
Java: Use InlineExpectationsTest for local and remote flow tests
|
2021-10-18 09:33:57 +02:00 |
|
Tony Torralba
|
9d50511ea4
|
Fix stubs
|
2021-10-18 09:27:53 +02:00 |
|
Tom Hvitved
|
47ae76fb7d
|
Merge pull request #6890 from hvitved/csharp/nullable-default-param
C#: Handle `Nullable<T>` default parameter values in assemblies
|
2021-10-18 08:55:02 +02:00 |
|
Tony Torralba
|
e3b46f25a5
|
Merge branch 'main' into atorralba/fix-local-and-remote-flow-tests
|
2021-10-18 08:52:37 +02:00 |
|
Tony Torralba
|
5deb996b33
|
Merge branch 'main' into atorralba/android_slice_models
|
2021-10-18 08:41:48 +02:00 |
|
Marcono1234
|
43b7bc52ca
|
Java: Add MemberRefExpr.getReceiverType()
|
2021-10-18 00:26:19 +02:00 |
|
Mathias Vorreiter Pedersen
|
af6a21f5d9
|
Merge pull request #6893 from geoffw0/nullterm
C++: Disable the two null termination queries enabled by 6794.
|
2021-10-17 22:14:10 +01:00 |
|
Erik Krogh Kristensen
|
509e77bbdb
|
add nonTotalGetParent to the list of empty consistency queries
|
2021-10-17 15:09:30 +02:00 |
|
Erik Krogh Kristensen
|
ef6ea195db
|
QL: add nonTotalGetParent to the list of empty consistency queries
|
2021-10-17 15:09:30 +02:00 |
|
Erik Krogh Kristensen
|
9a73c36389
|
add support for libraryPathDependencies in qlpacks
|
2021-10-17 14:51:00 +02:00 |
|