Tom Hvitved 9dde1ce76a C#: No taint-tracking steps for ternary conditionals ...

Ternary conditionals `b ? x : y` mistakenly had taint-tracking steps from both
`b`, `x`, and `y` to the conditional expression itself. Flow from `b` was not
intented, and flow from `x` and `y` is already part of ordinary data flow.

2019-12-17 13:53:39 +01:00

..

Capture.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

Common.qll

C#: Revert to using GuardedDataFlowNode in TaintedPath.qll

2019-08-30 09:37:23 +02:00

DataFlow.expected

C#: Only track taint through conversion operators defined in libraries

2019-11-28 15:21:04 +01:00

DataFlow.ql

C#: Revert to using GuardedDataFlowNode in TaintedPath.qll

2019-08-30 09:37:23 +02:00

DataFlowStep.expected

C#: Update qltest output.

2019-12-06 12:41:20 +00:00

DataFlowStep.ql

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

LocalDataFlow.cs

C#: Only track taint through conversion operators defined in libraries

2019-11-28 15:21:04 +01:00

Splitting.cs

C#: Add data flow test with CFG splitting

2019-01-16 10:29:26 +01:00

SSA.cs

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

TaintTracking.expected

C#: Only track taint through conversion operators defined in libraries

2019-11-28 15:21:04 +01:00

TaintTracking.ql

C#: Revert to using GuardedDataFlowNode in TaintedPath.qll

2019-08-30 09:37:23 +02:00

TaintTrackingStep.expected

C#: No taint-tracking steps for ternary conditionals

2019-12-17 13:53:39 +01:00

TaintTrackingStep.ql

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00