Geoffrey White
6f05fd4839
C++: Autoformat.
2021-06-07 11:01:00 +01:00
Tony Torralba
52f1930e1d
Add key-read-steps as local additional taint steps
2021-06-07 11:37:05 +02:00
Mathias Vorreiter Pedersen
3923acb5e0
Merge pull request #6017 from github/dbartol/pack/extra-queries-xml
...
C++: Replace an odd `queries.xml` with `qlpack.yml`
2021-06-07 10:58:19 +02:00
Rasmus Wriedt Larsen
e82ad6fc22
Python: Add missing QLDoc
2021-06-07 10:13:26 +02:00
Rasmus Wriedt Larsen
9dcb26d151
Python: Autoformat
...
I had not set up the pre-commit hook properly
2021-06-07 10:05:48 +02:00
Anders Schack-Mulligen
96da85449d
Merge pull request #5823 from atorralba/promote-jexl-injection
...
Java: Promote JEXL Injection query from experimental
2021-06-07 10:03:12 +02:00
Alex Denisov
17be6e1271
C++: Fix string literal expectation
2021-06-07 09:47:26 +02:00
Tamás Vajk
1a1b74cfcc
Merge pull request #5998 from tamasvajk/fix/tuple-members
...
C#: Fix container type extraction of tuple members
2021-06-07 09:18:05 +02:00
Erik Krogh Kristensen
5961dd1459
add another test for the resolve library
2021-06-06 22:54:12 +02:00
Erik Krogh Kristensen
0adc001df0
add taint-step for serialize-javascript
2021-06-06 22:48:53 +02:00
Erik Krogh Kristensen
dd2fe2a489
add the resolve library as a sink to js/path-injection
2021-06-06 22:04:32 +02:00
Dave Bartolomeo
ac3ded7d5a
Replace an odd queries.xml with qlpack.yml
...
This one C++ test has its own `queries.xml` to make "outside-of-source" path filtering work, as detailed in commit 2550788598
2021-06-06 09:04:18 -04:00
Dave Bartolomeo
e276e2684e
Merge pull request #5986 from MathiasVP/side-effects-for-nonconst-smart-pointers
...
C++: Fix `hasDefaultSideEffect` for non-const smart pointers
2021-06-04 13:57:44 -04:00
Tom Hvitved
962768e7c0
Disambiguate toStrings for nested synthetic local variables
2021-06-04 19:20:11 +02:00
Mathias Vorreiter Pedersen
8e8c2e677a
C++: Accept test changes.
2021-06-04 18:49:20 +02:00
Mathias Vorreiter Pedersen
27586d77f8
C++: Copy isDeeplyConst{Below} into SideEffects and modify it so that it works for smart pointers.
2021-06-04 18:46:52 +02:00
Mathias Vorreiter Pedersen
f2d7988d72
C++: Add tests involving various non-const and const smart pointers.
2021-06-04 18:46:05 +02:00
Geoffrey White
799e19bdc2
C++: Update the other version as well.
2021-06-04 16:21:04 +01:00
CodeQL CI
eb0491598a
Merge pull request #6009 from erik-krogh/whatwg-fetch
...
Approved by esbena
2021-06-04 08:19:36 -07:00
Geoffrey White
3c6a1f165b
Update cpp/ql/src/semmle/code/cpp/Location.qll
...
Co-authored-by: Jonas Jensen <jbj@github.com >
2021-06-04 16:19:11 +01:00
Tom Hvitved
82fbc03889
Merge pull request #200 from github/hvitved/dataflow/call-sensitivity
...
Data flow: Call-sensitive resolution of lambda/block calls
2021-06-04 16:25:13 +02:00
Felicity Chapman
919555cae4
Remove info for legacy tools
2021-06-04 15:13:24 +01:00
Chris Smowton
4ddf4558a7
Merged simplified query
2021-06-04 16:07:15 +02:00
Mathias Vorreiter Pedersen
f21e949898
Merge pull request #6007 from geoffw0/weak_crypto2
...
C++: Combine results for cpp/weak-cryptographic-algorithm
2021-06-04 16:06:29 +02:00
Tom Hvitved
3c7c10a424
Merge pull request #5991 from hvitved/java/shared-external-source-sink
...
Java: Move common CSV logic for sources and sinks into shared library
2021-06-04 16:04:25 +02:00
Alex Ford
ec326bfcb7
Merge pull request #201 from github/perm-file-report-source
...
Report rb/weak-file-permission alerts at source rather than sink and improve alert message
2021-06-04 14:52:48 +01:00
Rasmus Wriedt Larsen
7f119dd5a9
Python: Add change-note
2021-06-04 15:27:36 +02:00
Geoffrey White
b24dc810c9
C++: Combine results from cpp/weak-cryptographic-algorithm that are in the same file.
2021-06-04 14:04:02 +01:00
Tamas Vajk
b3a2998d96
Fix failing test after rebase
2021-06-04 14:34:45 +02:00
Tamas Vajk
75060baaa3
Add change note
2021-06-04 14:33:12 +02:00
Tamas Vajk
33daa2c41d
Fix container type extraction of tuple members
2021-06-04 14:33:12 +02:00
Tamas Vajk
4f4bf59cd4
C#: Add tuple member tests
2021-06-04 14:33:12 +02:00
Tom Hvitved
42202402a4
Address review comments
2021-06-04 14:32:37 +02:00
Felicity Chapman
2a9904d1fd
Make minimal changes to CodeQL docs
2021-06-04 13:27:23 +01:00
Alex Ford
8a3ffb6dca
add missing toString
2021-06-04 13:25:03 +01:00
Alex Ford
b2d36babc4
report rb/weak-file-permission alerts at source rather than sink and improve alert message
2021-06-04 13:10:18 +01:00
Geoffrey White
a93246d28b
C++: Fix maxCols.
2021-06-04 13:05:13 +01:00
Geoffrey White
ea96826810
C++: Add a test of charLoc and subsumes.
2021-06-04 13:05:07 +01:00
Nick Rolfe
523a0b1f12
Merge pull request #197 from github/upgrade-pack
2021-06-04 13:03:39 +01:00
Tamas Vajk
f98781db63
Fix non-constructed generic extension method extraction
2021-06-04 13:34:19 +02:00
Tamas Vajk
127d66ccd1
Remove unneeded ReducedExtension method handling
2021-06-04 13:34:19 +02:00
Tamas Vajk
e05e2365ea
C#: Extract correct method symbol as target of extension method calls
2021-06-04 13:34:19 +02:00
Tamas Vajk
fc0fc740ac
C#: Add test for extension method calls
2021-06-04 13:32:03 +02:00
Nick Rolfe
6203c9019a
Remove reference to deleted upgrades qlpack from manifest
2021-06-04 12:15:36 +01:00
Erik Krogh Kristensen
46f90006c2
add model for whatwg-fetch
2021-06-04 13:13:13 +02:00
Tom Hvitved
61e35ddae1
Data flow: Call-sensitive resolution of lambda/block calls
2021-06-04 12:58:38 +02:00
Tom Hvitved
77146e4e04
Data flow: Reduce caching
...
These predicates are now cached in the shared implementation.
2021-06-04 12:53:47 +02:00
Tom Hvitved
f9eecfb59f
Bump codeql submodule
2021-06-04 12:52:05 +02:00
Anders Schack-Mulligen
f73960da8f
Merge pull request #5788 from Marcono1234/marcono1234/stmt-toString
...
Java: Override toString() for statements
2021-06-04 12:41:03 +02:00
Anders Schack-Mulligen
60377a8f86
Merge pull request #5383 from smowton/smowton/feature/strbuilder-fluent-methods
...
Java: Add models for StrBuilder's fluent methods
2021-06-04 12:33:24 +02:00
