github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
2 549 коммитов 1 541 ветка 132 Теги 497 MiB
Граф коммитов

2549 Коммитов

Автор SHA1 Сообщение Дата
calum d73b28efe4 C#: Address review comments. 
Add more tests for duplicated entities, and fix some duplicated entities.
    Update the TupleTypes output - some extraneous results gone so it's probably better.
 2018-12-20 20:23:12 +00:00
Tom Hvitved af38a2b9c5
Merge branch 'master' into csharp/autoformat/tests 2018-12-20 20:59:10 +01:00
Dave Bartolomeo a7cb2d6d7c C++: Ignore `Unreached` blocks in IR Guards 2018-12-20 11:57:25 -08:00
calumgrant a6003533a4
Merge pull request #692 from hvitved/csharp/maybe-null-as-expression 
C#: Consider `as` expressions as maybe-`null` in `cs/dereferenced-value-may-be-null`
 2018-12-20 18:49:33 +00:00
calumgrant 7dd263b413
Merge pull request #689 from hvitved/csharp/remove-get-url 
C#: Remove `getUrl()` predicates
 2018-12-20 18:49:15 +00:00
calum f5cfd93d8d C#: Use pattern matching. 2018-12-20 14:38:49 +00:00
Tom Hvitved 9f375de716 C#: Improve logic for looking up .NET runtime in standalone mode 
Instead of only considering a fixed set of paths for `dotnet` and `mono`,
first attempt to lookup the paths based on the `PATH` environment variable.
This change also fixes a potential `System.IO.DirectoryNotFoundException` exception,
which could be thrown when the `shared/Microsoft.NETCore.App` folder was not
present.
 2018-12-20 15:34:15 +01:00
Tom Hvitved 33fcbc958d C#: Consider `as` expressions as maybe-`null` in `cs/dereferenced-value-may-be-null` 2018-12-20 14:54:48 +01:00
Tom Hvitved ccda1c8d3d C#: Add nullness test using an `as` expression 2018-12-20 14:54:48 +01:00
Tom Hvitved c66f67dfac C#: Address review comment 2018-12-20 14:49:56 +01:00
calum d687dd9deb C#: Address review comments. Replace GetHashValue() with MetadataTokens.GetToken(). 
C#: Make path IDs consistent.
 2018-12-20 13:02:25 +00:00
calumgrant 1710f8db7c
Merge pull request #661 from hvitved/csharp/maybe-null-path-query 
C#: Make `cs/dereferenced-value-may-be-null` a path query
 2018-12-20 12:30:07 +00:00
Tom Hvitved 231465143d C#: Autoformat QL tests 2018-12-20 10:19:59 +01:00
Tom Hvitved 546d750045 C#: Reintroduce `getURL()` 
It turns out that we still need `getURL()` to account for cases where there is no
`getLocation()`. Not having `getURL()` for entities without a `getLocation()` results
in a `file://0:0:0:0` URL, which is not rendered in QL4E, unlike a `""` URL.
 2018-12-19 20:47:33 +01:00
Tom Hvitved b2500a0c26
Merge branch 'master' into csharp/maybe-null-path-query 2018-12-19 20:22:19 +01:00
semmle-qlci 83ccddff7a
Merge pull request #707 from hvitved/csharp/bounded-fast-tc 
Approved by calumgrant
 2018-12-19 19:20:42 +00:00
calum efe2fb502e C#: Convert libraries to use `matchesHandle` instead of `getLabel`. 2018-12-19 15:22:53 +00:00
calum 2acde22f43 C#: Add QL and tests for handles. 2018-12-19 15:22:53 +00:00
calum 0ee209e6a4 C#: Update db stats. 2018-12-19 15:22:53 +00:00
calum fb8895bdc7 C#: Extract metadata handle information. 2018-12-19 15:22:53 +00:00
Esben Sparre Andreasen c57f8a6d6e
Merge pull request #691 from asger-semmle/sendfile-root 
JS: Recognize 'root' option in Express res.sendFile
 2018-12-19 16:06:15 +01:00
semmle-qlci 495a1fcf3b
Merge pull request #698 from asger-semmle/remove-cookie-as-source 
Approved by esben-semmle
 2018-12-19 15:05:44 +00:00
semmle-qlci b11b714152
Merge pull request #696 from esben-semmle/js/host-request-forgery 
Approved by asger-semmle
 2018-12-19 15:04:08 +00:00
Tom Hvitved 10627738d0 C#: Introduce `Ssa::Definition::getElement()` and `AssignableDefinition::getElement()` 2018-12-19 14:56:56 +01:00
calumgrant e15481a622
Merge pull request #702 from hvitved/csharp/remove-deprecated 
C#: Remove deprecated predicates
 2018-12-19 12:10:49 +00:00
Asger F ce18aca62b JS: update expected output 2018-12-19 11:30:46 +00:00
Asger F 60ae3e58b8 JS: update change note 2018-12-19 11:26:37 +00:00
Asger F 78334af354 JS: remove cookie source; rely on persistent flow steps instead 2018-12-19 11:23:51 +00:00
calum 6a54a6d3e5 C#: Fix changed unit tests. 2018-12-19 11:03:05 +00:00
Asger F 9440aab3d0 TS: add change note 2018-12-19 10:42:02 +00:00
calum 93ce34ad58 C#: Add a new object->entity cache. 2018-12-19 10:40:07 +00:00
calum 88734f1f8a C#: Fix label conflicts. 
C#: Remove unnecessary code from Property.
 2018-12-19 10:40:07 +00:00
calum a7cdf528dd C#: Improve performance by mapping directly from entities to labels. 2018-12-19 10:40:06 +00:00
Asger F a91599e7fd TS: bump extractor version string 2018-12-19 10:37:27 +00:00
Tom Hvitved e5cbac5c13 C#: Replace a use of `boundedFastTC` with `fastTC` 2018-12-19 11:37:22 +01:00
Asger F f9da1dc03e JS: add change note 2018-12-19 10:25:49 +00:00
Asger F 0e40717358 JS: recognize res.sendfile root option 2018-12-19 10:25:15 +00:00
Asger F f84301e476 JS: add tests with res.sendFile root option 2018-12-19 10:25:15 +00:00
Asger F f9d7f8ba11 JS: fix links in qhelp 2018-12-19 10:10:56 +00:00
semmle-qlci 595634126f
Merge pull request #706 from asger-semmle/jquery-location-sink 
Approved by esben-semmle
 2018-12-18 21:14:08 +00:00
Asger F f57454951b JS: move <ul> outside of <p> element 2018-12-18 14:15:12 +00:00
Asger F 1246de466a JS: add change note 2018-12-18 13:58:03 +00:00
Asger F 7f538e82c0 JS: add test case for non-whitelisted use of location 2018-12-18 13:55:05 +00:00
Asger F 02978c97f1 JS: whitelist $(location) in simple cases 2018-12-18 13:11:42 +00:00
Asger F c17eca90a1 JS: add test case for $(location) 2018-12-18 13:06:12 +00:00
calumgrant b051b7546d
Merge pull request #638 from hvitved/csharp/split-dominance-performance 
C#: Speedup `Assertions::strictlyDominates()` and `ControlFlowElement::controlsBlock()`
 2018-12-18 13:05:36 +00:00
ian-semmle d2d119eb75
Merge pull request #700 from jbj/mergeback-20181217 
Mergeback master -> next
 2018-12-18 12:18:54 +00:00
Tom Hvitved edf1df1577 C#: Remove tests for deprecated predicates 2018-12-18 10:43:12 +01:00
semmle-qlci c37d655fe8
Merge pull request #697 from esben-semmle/js/fix-heuristics-compilation-time 
Approved by asger-semmle
 2018-12-18 09:07:36 +00:00
semmle-qlci 7fd1d64d97
Merge pull request #699 from esben-semmle/js/add-lastIndexOf 
Approved by asger-semmle
 2018-12-18 09:07:17 +00:00