Asger F
|
153e778f7f
|
JS: Remove jump-to-namespace
|
2019-05-22 14:42:48 +01:00 |
|
Asger F
|
deb217326d
|
JS: Update our own queries
|
2019-05-22 13:13:08 +01:00 |
|
Nick Rolfe
|
94e3c676d5
|
Merge pull request #1352 from ian-semmle/edg
C++: Follow extractor changes for 0136
|
2019-05-22 13:11:59 +01:00 |
|
Mark Shannon
|
1018f27815
|
Python points-to: Add more comments about TObject and ObjectInternal.
|
2019-05-22 12:59:51 +01:00 |
|
Asger F
|
61ef73b0f7
|
JS: Add change note and deprecation member
|
2019-05-22 12:23:29 +01:00 |
|
Asger F
|
6246eb2fe3
|
JS: Refactor LabeledSantizerGuard
|
2019-05-22 12:08:03 +01:00 |
|
semmle-qlci
|
dc8123db8e
|
Merge pull request #1355 from xiemaisi/js/data-flow-api-fiddling
Approved by asger-semmle
|
2019-05-22 10:40:32 +01:00 |
|
Anders Schack-Mulligen
|
3e5bbd96b1
|
Java: Account for non-source annotation on second field in multi-field declarations.
|
2019-05-22 11:33:10 +02:00 |
|
Calum Grant
|
fc8eccfc6b
|
C#: Add some basic qhelp. Since these are internal queries, this is probably not needed.
|
2019-05-22 10:16:24 +01:00 |
|
semmle-qlci
|
c100c70a65
|
Merge pull request #1348 from xiemaisi/js/add-external-link-cwe
Approved by esben-semmle
|
2019-05-22 08:12:51 +01:00 |
|
Denis Levin
|
1b8117ba3a
|
C++: Mishandling Japanese Era and Leap Year in calculations
|
2019-05-21 14:49:40 -07:00 |
|
Denis Levin
|
0b108fab0f
|
Replaced tabs with spaces
|
2019-05-21 14:11:30 -07:00 |
|
Calum Grant
|
75c19e3991
|
C#: Add internal queries for extractor and compiler diagnostics.
|
2019-05-21 21:22:50 +01:00 |
|
semmle-qlci
|
114ba0e722
|
Merge pull request #1349 from EdoDodo/js-performance
Approved by xiemaisi
|
2019-05-21 17:50:01 +01:00 |
|
Ian Lynagh
|
6a77ac8a13
|
C++: Follow extractor changes for 0136
|
2019-05-21 17:07:21 +01:00 |
|
Asger F
|
180b5443ba
|
JS: Update output of incomplete.ql
|
2019-05-21 17:02:43 +01:00 |
|
Asger F
|
de2f323172
|
JS: Mark unused parameter nodes as incomplete
|
2019-05-21 16:53:39 +01:00 |
|
Asger F
|
69dbbcf1c8
|
JS: Mark destructuring nodes as incomplete
|
2019-05-21 16:52:35 +01:00 |
|
Ziemowit Laski
|
81bfbc250f
|
[CPP-370] Forgot to update an .expected file.
|
2019-05-21 07:08:13 -07:00 |
|
Ziemowit Laski
|
ae55b7b643
|
[CPP-370] Add new test file for testing procedurally nested format
argument violations.
|
2019-05-21 07:08:13 -07:00 |
|
Ziemowit Laski
|
f19f48dc1a
|
[CPP-370] Revert accidental changes to Printf.qll (which belong on zlaski/cpp391 branch).
|
2019-05-21 06:55:32 -07:00 |
|
Ziemowit Laski
|
a49d82d2d6
|
[CPP-370] Exclude UserDefinedFormattingFunction nodes.
|
2019-05-21 06:55:32 -07:00 |
|
Ziemowit Laski
|
92054e2481
|
[CPP-370] Reformat test cases so that the .expect files line up with what was
checked in initially. Check for DataFlow::DefinitionByReferenceNode
when computing isSource() for our taint analysis.
|
2019-05-21 06:54:41 -07:00 |
|
Ziemowit Laski
|
098b6543f5
|
[CPP-370] Rewrite of NonConstantFormat.ql using the taint tracking library.
|
2019-05-21 06:51:47 -07:00 |
|
Ziemowit Laski
|
91902e52f6
|
[CPP-370] Intermediate commit, file not in usable state.
|
2019-05-21 06:46:52 -07:00 |
|
Ziemowit Laski
|
d8b8dda439
|
[CPP-370] First attempt at isAdditionalFlowStep().
|
2019-05-21 06:45:52 -07:00 |
|
Ziemowit Laski
|
dbec17f85b
|
[CPP-370] Tentative implementation of NonConstantFormat.ql using the global
DataFlow library. This is intended solely for further discussion.
|
2019-05-21 06:23:51 -07:00 |
|
Ziemowit Laski
|
6025c03857
|
[CPP-370] Add nested.cpp test case, for nested calls to ...printf functions.
|
2019-05-21 06:21:12 -07:00 |
|
Ziemowit Laski
|
f6903c769a
|
[CPP-370] Remove prohibition against UserDefinedFormattingFunction
|
2019-05-21 06:21:12 -07:00 |
|
Ziemowit Laski
|
8faf95ec84
|
[CPP-370] Tentatively modify CWE consts.cpp file to play nice with the dataflow library.
|
2019-05-21 06:21:12 -07:00 |
|
Ziemowit Laski
|
1fce5a5b40
|
[CPP-370] Revert accidental changes to Printf.qll (which belong on zlaski/cpp391 branch).
|
2019-05-21 06:21:11 -07:00 |
|
Ziemowit Laski
|
99047e51f2
|
[CPP-370] Exclude UserDefinedFormattingFunction nodes.
|
2019-05-21 06:19:52 -07:00 |
|
Ziemowit Laski
|
b205951e6d
|
[CPP-370] Reformat test cases so that the .expect files line up with what was
checked in initially. Check for DataFlow::DefinitionByReferenceNode
when computing isSource() for our taint analysis.
|
2019-05-21 06:18:31 -07:00 |
|
Ziemowit Laski
|
ed67c9fd5a
|
[CPP-370] Rewrite of NonConstantFormat.ql using the taint tracking library.
|
2019-05-21 06:18:31 -07:00 |
|
Ziemowit Laski
|
a962cff5df
|
[CPP-370] Intermediate commit, file not in usable state.
|
2019-05-21 06:18:31 -07:00 |
|
Ziemowit Laski
|
fae55d5493
|
[CPP-370] First attempt at isAdditionalFlowStep().
|
2019-05-21 06:18:30 -07:00 |
|
Ziemowit Laski
|
012140fcd3
|
[CPP-370] Reformat query.
|
2019-05-21 06:18:30 -07:00 |
|
Ziemowit Laski
|
775861c386
|
[CPP-370] Minor textual tweaks.
|
2019-05-21 06:18:30 -07:00 |
|
Ziemowit Laski
|
de10598dd6
|
[CPP-370] NonConstantFormat.expected changed for some reason.
|
2019-05-21 06:18:30 -07:00 |
|
Ziemowit Laski
|
ffddc5bff6
|
[CPP-370] Update the NonConstantFormat.expected result template.
|
2019-05-21 06:18:30 -07:00 |
|
Ziemowit Laski
|
0c86d4c112
|
[CPP-370] Tentative implementation of NonConstantFormat.ql using the global
DataFlow library. This is intended solely for further discussion.
|
2019-05-21 06:18:30 -07:00 |
|
Ziemowit Laski
|
21eb00a5df
|
[CPP-370] Minor fix to QHELP file.
|
2019-05-21 06:18:30 -07:00 |
|
Asger F
|
faa47029d5
|
JS: Mark exceptional nodes as incomplete
|
2019-05-21 13:51:59 +01:00 |
|
Asger F
|
68ae409947
|
JS: Test for mismatch between taint and type inference
|
2019-05-21 13:26:02 +01:00 |
|
Edoardo Pirovano
|
9d2580f778
|
JS: Fix performance regression of query.
|
2019-05-21 12:26:11 +01:00 |
|
semmle-qlci
|
8cd3cb501a
|
Merge pull request #1346 from xiemaisi/js/revert-1078
Approved by esben-semmle
|
2019-05-21 12:19:57 +01:00 |
|
Max Schaefer
|
cf22761ccc
|
JavaScript: Add CWE-1022 to TargetBlank.
|
2019-05-21 12:16:32 +01:00 |
|
semmle-qlci
|
fe920ecfaa
|
Merge pull request #1331 from asger-semmle/destructuring-assignment-fix
Approved by xiemaisi
|
2019-05-21 11:32:36 +01:00 |
|
semmle-qlci
|
2b5b8751ea
|
Merge pull request #1316 from asger-semmle/incorrect-suffix-check-fps
Approved by esben-semmle, xiemaisi
|
2019-05-21 11:30:37 +01:00 |
|
Esben Sparre Andreasen
|
3af3c5413b
|
Merge pull request #1318 from asger-semmle/prototype-pollution-query2
Move prototype pollution query into suite
|
2019-05-21 12:23:41 +02:00 |
|