Tom Hvitved
4068cc9c3a
Shared SSA: Sync files
2021-11-19 11:31:28 +01:00
Tom Hvitved
bc80c9b013
Ruby: Move SSA consistency queries into shared SSA library
2021-11-19 11:31:28 +01:00
ihsinme
21ab8b0f63
Update IncorrectPrivilegeAssignment.ql
2021-11-19 13:06:08 +03:00
Benjamin Muskalla
fb9b16325d
Add diagnostic query for framework coverage
2021-11-19 10:30:59 +01:00
Tom Hvitved
fd0e318eb1
C#: Document inconsistency in one test
2021-11-19 09:43:51 +01:00
Tom Hvitved
923ca134e8
Shared CFG: Add "dead end" consistency query
2021-11-19 09:14:38 +01:00
ihsinme
fd73f4094f
Update FindIncorrectlyUsedExceptions.ql
2021-11-19 10:54:02 +03:00
ihsinme
6168b15bbc
Update cpp/ql/src/experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2021-11-19 08:56:21 +03:00
luchua-bc
b6a6ed5ba3
Add a recommendation category query for local user input and check Apache file upload
2021-11-19 04:23:19 +00:00
Erik Krogh Kristensen
62730e7a4b
Merge pull request #7174 from erik-krogh/fixCSharpImport
...
C#: move Linq/Helpers.qll to the lib folder
2021-11-18 19:40:53 +01:00
Tom Hvitved
a4538de3a3
Shared CFG: Rename TNode to TCfgNode
...
This is in order to avoid name clash with the often so-named IPA type for data-
flow nodes. The name clash is not problematic because they are both in scope,
but because (cached) IPA types with overlapping names are known to sometimes
result in re-evaluation of cached stages, when one of the IPA types gets an
internal `#2` suffix in one query run, and the other IPA type gets the suffix
in another run.
2021-11-18 19:15:36 +01:00
Tom Hvitved
2f7250a0b3
Merge pull request #7160 from hvitved/csharp/cfg/static-scope
...
C#: Extend `(Annotated)ExitNode` to also cover static fields
2021-11-18 19:15:06 +01:00
Erik Krogh Kristensen
1a0379a894
introduce type resolution consistency checks
2021-11-18 18:44:34 +01:00
Erik Krogh Kristensen
d89e430db2
QL: introduce type resolution consistency checks
2021-11-18 18:44:34 +01:00
Erik Krogh Kristensen
15b56585f9
update inefficientStringComparison, to avoid underscores
2021-11-18 18:43:54 +01:00
Erik Krogh Kristensen
37c2db240c
QL: update inefficientStringComparison, to avoid underscores
2021-11-18 18:43:54 +01:00
Erik Krogh Kristensen
63ecae5426
update imports
2021-11-18 17:31:17 +01:00
Erik Krogh Kristensen
2d78cce7a5
move Linq/Helpers to the lib folder
2021-11-18 16:59:34 +01:00
Erik Krogh Kristensen
ee858d840e
get ReDoSUtil in sync for ruby
2021-11-18 16:49:34 +01:00
Tom Hvitved
2218516685
Ruby: Remove CP in EnsureSplitImpl::exit/3
2021-11-18 16:05:09 +01:00
Henry Mercer
46958e5bff
Merge pull request #7168 from erik-krogh/useMinInsteadofRank1
...
ATM: use min() instead of rank[1]
2021-11-18 14:56:49 +00:00
Erik Krogh Kristensen
af55f172ae
use A/An/The to start qlDoc for classes
2021-11-18 15:42:45 +01:00
Erik Krogh Kristensen
011fc20963
use matches instead of regexpMatch
2021-11-18 15:41:25 +01:00
Alex Ford
1ec935dee6
Ruby: make documentation of IOReader and FileReader less ambiguous
2021-11-18 14:35:44 +00:00
Anders Schack-Mulligen
6815a13a00
Merge pull request #6931 from hvitved/dataflow/restrict-derived-summaries
...
Data flow: Restrict derived flow summaries
2021-11-18 15:31:55 +01:00
Alex Ford
bd940712de
Update ruby/ql/lib/codeql/ruby/frameworks/Files.qll
...
Co-authored-by: Harry Maclean <hmac@github.com >
2021-11-18 14:18:39 +00:00
Erik Krogh Kristensen
036d749378
Merge pull request #126 from github/erik-krogh/update-sources
...
update sources
2021-11-18 14:32:01 +01:00
Erik Krogh Kristensen
44ffc7e155
QL: Merge pull request #126 from github/erik-krogh/update-sources
...
update sources
2021-11-18 14:32:01 +01:00
Erik Krogh Kristensen
2af7817691
use min() instead of rank[1]
2021-11-18 14:26:55 +01:00
Erik Krogh Kristensen
a0bf13007c
remove codeql-ruby sources
2021-11-18 14:15:19 +01:00
Erik Krogh Kristensen
9a6c9c4d77
QL: remove codeql-ruby sources
2021-11-18 14:15:19 +01:00
Erik Krogh Kristensen
e3c0e190d9
Add codeql-go sources ( 4cae4b23fc)
2021-11-18 14:14:20 +01:00
Erik Krogh Kristensen
fe097783a7
QL: Add codeql-go sources ( 4cae4b23fc)
2021-11-18 14:14:20 +01:00
Erik Krogh Kristensen
61b71807df
Add codeql sources ( 6c2713dd8b)
2021-11-18 14:14:17 +01:00
Erik Krogh Kristensen
fa54855995
QL: Add codeql sources ( 6c2713dd8b)
2021-11-18 14:14:17 +01:00
Erik Krogh Kristensen
fb40b8a032
update import script
2021-11-18 14:13:47 +01:00
Erik Krogh Kristensen
c07d55325e
QL: update import script
2021-11-18 14:13:47 +01:00
Erik Krogh Kristensen
349b556c26
Merge pull request #129 from github/erik-krogh/cartesian
...
various new improvements and queries
2021-11-18 13:16:53 +01:00
Erik Krogh Kristensen
1b070f1dd8
QL: Merge pull request #129 from github/erik-krogh/cartesian
...
various new improvements and queries
2021-11-18 13:16:53 +01:00
Erik Krogh Kristensen
38b925b19c
rename "use matches" query, and refactor into Query.qll
2021-11-18 13:05:41 +01:00
Erik Krogh Kristensen
d64c7fc638
QL: rename "use matches" query, and refactor into Query.qll
2021-11-18 13:05:41 +01:00
Erik Krogh Kristensen
89604deb8d
add redundant inline cast query
2021-11-18 12:23:55 +01:00
Erik Krogh Kristensen
d8bf7ed6e0
QL: add redundant inline cast query
2021-11-18 12:23:55 +01:00
Erik Krogh Kristensen
97461d1f11
add var unused in disjunct query
2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
12a3fa77f6
QL: add var unused in disjunct query
2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
112cd9d29c
move use-set-literal implementation to Query.qll file
2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
1cbacc41d7
QL: move use-set-literal implementation to Query.qll file
2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
33d363eb94
move use-instanceof implementation to Query.qll, and rename the .ql file
2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
f320414b1c
QL: move use-instanceof implementation to Query.qll, and rename the .ql file
2021-11-18 12:23:09 +01:00
Erik Krogh Kristensen
45def1b124
move implementation of implicit-this to Query.qll file
2021-11-18 12:23:09 +01:00
