Repository navigation

Merge master into next - #676

Closed

asger-semmle wants to merge 136 commits into

github:nextfrom

asger-semmle:merge-master-next

Closed

Merge master into next#676
asger-semmle wants to merge 136 commits into
github:nextfrom
asger-semmle:merge-master-next

Commits on Nov 22, 2018
- CPP: Tag DuplicateBlock.ql.
  geoffw0
  committed
  a47db56
- CPP: Tag the JPL_C LOC-2 queries.
  geoffw0
  committed
  9cc39ae
- CPP: Tag the JPL_C LOC-3 queries.
  geoffw0
  committed
  17560cf
- CPP: Add a test of NonConstFunctionPointer.ql.
  geoffw0
  committed
  5d8e34a
Commits on Nov 23, 2018
- CPP: Add a test of FunctionPointerConversions.ql.
  geoffw0
  committed
  e6dddd9
- CPP: Tag the JPL_C LOC-4 queries.
  geoffw0
  committed
  0855543
Commits on Nov 27, 2018
- CPP: Add test cases.
  geoffw0
  committed
  7107cec
Commits on Nov 28, 2018
- JS: refactor isReactImportForJSX
  Esben Sparre Andreasen
  committed
  737a816
- JS: support `require` in isReactImportForJSX
  Esben Sparre Andreasen
  committed
  54e2215
- JS: add empty 1.20 change note
  Esben Sparre Andreasen
  committed
  f3c9011
- JS: add change note for js/unused-local-variable
  Esben Sparre Andreasen
  committed
  7209252
- Java: Add 2 double-checked-locking queries.
  aschackmull
  committed
  e2dd0ea
- Java: Normalize parentheses.
  aschackmull
  committed
  ae44b90
- JS: simplify `isReactImportForJSX` to `isReactForJSX`
  Esben Sparre Andreasen
  committed
  f3889e7
- CPP: Fix for virtual method calls.
  geoffw0
  committed
  0eb0bf9
- CPP: Add external/jpl tags.
  geoffw0
  committed
  1232694
- C#: Add test for guard inside a split CFG block
  hvitved
  committed
  1a25f0a
- C#: Account for split SSA definitions in guards library
  hvitved
  committed
  3eb163f
Commits on Nov 29, 2018
- C#: Include CFG splits in `Ssa::Definition::toString()`
  hvitved
  committed
  ab7a094
- JS: Range analysis library
  asger-semmle
  committed
  a374540
- JS: Compound assignments and update exprs in range analysis
  asger-semmle
  committed
  73cbdee
- JS: Support return value of x++
  asger-semmle
  committed
  09ca665
- JS: range analysis through phi nodes
  asger-semmle
  committed
  064b109
- JS: add constant constraints in range analysis
  asger-semmle
  committed
  6c53ad8
- JS: perform widening when adding operands of very different magnitude
  asger-semmle
  committed
  9d8d953
- JS: handle sharp inequalities directly
  asger-semmle
  committed
  20aa4e1
- JS: restrict bias to 30-bit range to avoid overflow
  asger-semmle
  committed
  feb8a8c
- JS: be conservative in presence of NaN comments
  asger-semmle
  committed
  43df953
- JS: Restrict constraint generation to relevant nodes
  asger-semmle
  committed
  d813635
- JS: Add UselessRangeCheck.ql
  asger-semmle
  committed
  344bec3
- JS: manually reorder extendedEdge and negativeEdge
  asger-semmle
  committed
  84ea4cf
- JS: improve join ordering in extendedEdge
  asger-semmle
  committed
  2d6bf0a
- JS: only warn about dead code
  asger-semmle
  committed
  5283c6c
- JS: more efficient encoding of unary constraints
  asger-semmle
  committed
  4a367d3
- JS: avoid extending self-edges
  asger-semmle
  committed
  f3020f7
- JS: address review comments
  asger-semmle
  committed
  76a69f4
- JS: fix links in qhelp file
  asger-semmle
  committed
  2870209
- JS: address some style comments
  asger-semmle
  committed
  2e65f6b
- JS: rename UselessRangeCheck -> UselessComparisonTest
  asger-semmle
  committed
  477be26
- JS: add to correctness-more suite
  asger-semmle
  committed
  6d7ac88
- JS: avoid joining on =0
  asger-semmle
  committed
  2c51f86
- JS: address comments
  asger-semmle
  committed
  8fd3a41
- JS: fix bug in foldedComparisonEdge
  asger-semmle
  committed
  d69e584
- JS: add test case
  asger-semmle
  committed
  959776b
- JS: add 1.20 change note
  asger-semmle
  committed
  b2a82ae
- JS: address review
  asger-semmle
  committed
  d4023fe
- C#: Fix bug in guards library when the guarded expression is in a loop
  hvitved
  committed
  a12a72e
Commits on Nov 30, 2018
- C#: Add CFG test for multiple-field Boolean splitting
  hvitved
  committed
  610be85
- JavaScript: Simplify an `if` condition.
  Max Schaefer
  committed
  dcad2a3
- Merge pull request #557 from esben-semmle/js/unused-react-variable
  semmle-qlci
  authored
  1c53222
- Merge branch 'master' into range-analysis
  Max Schaefer
  authored
  3ed40d5
- JavaScript: Add new query `DoubleEscaping`.
  Max Schaefer
  committed
  10166be
- C#: Handle multiple-field Boolean CFG splitting
  hvitved
  committed
  05b9519
- Merge pull request #579 from hvitved/csharp/guards-loop
  calumgrant
  authored
  ca72c8e
- C++: pragma[nomagic] on bbStrictlyDominates
  jbj
  committed
  ace8fa8
- C++: pragma[nomagic] on bbStrictlyPostDominates
  jbj
  committed
  4712a8f
- Merge pull request #532 from geoffw0/query-tags-3
  jbj
  authored
  60076cb
- Merge pull request #567 from hvitved/csharp/guards-splitting
  calumgrant
  authored
  08f5c2b
- Merge pull request #585 from xiemaisi/js/join-order-fiddling
  semmle-qlci
  authored
  dbeb2df
- Merge pull request #440 from asger-semmle/range-analysis
  Max Schaefer
  authored
  dfcf767
- Merge pull request #570 from hvitved/csharp/ssa/split-to-string
  calumgrant
  authored
  1c2dd3e
- Merge pull request #583 from jbj/bbStrictlyDominates-nomagic
  kevinbackhouse
  authored
  939db5a
- C#: Add more nullness tests
  hvitved
  committed
  d2a431e
- add qhelp style-guide
  james
  committed
  bebac21
- C#: Update nullness analyses
  hvitved
  committed
  80144a0
- C#: Teach guards library about conditional assignments
  hvitved
  committed
  ab9aa7d
- C#: Teach guards library about unique assignments
  hvitved
  committed
  3b0d159
- C#: Add change note
  hvitved
  committed
  d25bd59
- Merge branch 'master' into js/invalid-entity-transcoding
  Max Schaefer
  authored
  52b8a6b
- .gitattributes: DLLs are binary
  nickrolfe
  authored
  b173752
- Merge pull request #596 from Semmle/dll-binary
  adityasharad
  authored
  b638961
Commits on Dec 3, 2018
- JS: refactor Hapi::RouteSetup
  Esben Sparre Andreasen
  committed
  fd48927
- JS: add Hapi::RouteHandlerCandidate
  Esben Sparre Andreasen
  committed
  a3bd072
- JS: change note for tracked Hapi route handlers
  Esben Sparre Andreasen
  committed
  88c69e2
- JS: cleanup for all `HTTP::RouteHandlerCandidate`s
  Esben Sparre Andreasen
  committed
  104eafe
- Merge pull request #556 from xiemaisi/js/invalid-entity-transcoding
  Esben Sparre Andreasen
  authored
  2cc235d
- JS: add IncorrectSuffixCheck query
  asger-semmle
  committed
  0462eb4
- JS: fix typo in method name
  asger-semmle
  committed
  c4d7672
- JS: address comments
  asger-semmle
  committed
  374f7ab
- JS: add comment about arrays
  asger-semmle
  committed
  1130d0c
- Merge pull request #586 from hvitved/csharp/cfg/field-split
  calumgrant
  authored
  43d14ce
- CPP: Additional test cases.
  geoffw0
  committed
  dfbccc4
- CPP: * -> +
  geoffw0
  committed
  d8c7537
- Merge pull request #602 from esben-semmle/js/additional-route-handlers-from-context
  semmle-qlci
  authored
  b58c263
- C#: Fix a bug and generalize guards implication logic
  hvitved
  committed
  4739a63
- Merge pull request #562 from geoffw0/cpp-308
  jbj
  authored
  b80cf30
Commits on Dec 4, 2018
- Java: Update metadata.
  aschackmull
  committed
  e836fa7
- JS: add more React tests
  Esben Sparre Andreasen
  committed
  0d62191
- JS: introduce ReactComponent::getStaticMethod
  Esben Sparre Andreasen
  committed
  9ff3d2e
- JS: support React getDerivedStateFromProps
  Esben Sparre Andreasen
  committed
  417dac7
- JS: support React shouldComponentUpdate
  Esben Sparre Andreasen
  committed
  67b1487
- JS: support React getSnapshotBeforeUpdate
  Esben Sparre Andreasen
  committed
  a342fa3
- JS: move shared conjunct up
  Esben Sparre Andreasen
  committed
  679db19
- JS: add change note for improved React model
  Esben Sparre Andreasen
  committed
  b418968
- JS: address comments
  asger-semmle
  committed
  7121a18
- address anders' feedback
  james
  committed
  26f0300
- fix typo
  james
  committed
  bdda3ae
- C#: Update change note
  hvitved
  committed
  3bb3de2
- Merge pull request #553 from aschackmull/java/double-checked-locking
  yh-semmle
  authored
  0ba7633
- Merge pull request #587 from asger-semmle/incorrect-suffix-check
  semmle-qlci
  authored
  d05b11f
- Java: Fix FP in UseSSL.
  aschackmull
  committed
  d3fcfb0
- JS: add regression test for ODASA-7506
  Esben Sparre Andreasen
  committed
  d63d838
Commits on Dec 5, 2018
- Merge pull request #611 from aschackmull/java/usessl-fp-fix
  yh-semmle
  authored
  00779c5
- Merge pull request #607 from esben-semmle/js/more-react-methods
  Max Schaefer
  authored
  3c00d4b
- CPP: Add a test of UnusedStaticVariable.ql.
  geoffw0
  committed
  e7f19e9
- CPP: Fix false positive.
  geoffw0
  committed
  d85f4b5
- CPP: Change note.
  geoffw0
  committed
  d0a0d23
- CPP: Add query ID to change note.
  geoffw0
  committed
  f6a8757
- C#: Fix [INVALID_KEY] errors.
  calumgrant
  committed
  919d7cb
Commits on Dec 6, 2018
- JS: Fix syntax error in js/react/inconsistent-state-update example
  s0
  committed
  2ea1480
- Merge pull request #627 from samlanning/inconsistentStateExample
  Max Schaefer
  authored
  75842fe
- JavaScript: Teach Xss query about WinJS HTML injection functions.
  Max Schaefer
  committed
  ef347b3
- Merge pull request #617 from geoffw0/unusedstatic
  jbj
  authored
  0a496c1
- Merge pull request #628 from xiemaisi/js/setUnsafeHTML
  semmle-qlci
  authored
  3397533
- JS: add query js/incomplete-url-substring-sanitization
  Esben Sparre Andreasen
  committed
  229eea0
- JS: change notes for js/incomplete-url-substring-sanitization
  Esben Sparre Andreasen
  committed
  56fb63a
- JS: recognize HTTP URLs in js/incomplete-url-sanitization
  Esben Sparre Andreasen
  committed
  4f53411
- Merge pull request #560 from aschackmull/java/normalize-parentheses
  yh-semmle
  authored
  c2116f0
- Merge pull request #623 from esben-semmle/js/incomplete-url-sanitization
  semmle-qlci
  authored
  9e73ed7
Commits on Dec 7, 2018
- C#: Address review comments
  hvitved
  committed
  fce8058
- Merge pull request #621 from calumgrant/cs/invalid-key
  hvitved
  authored
  2a30dee
- Java: Add org.apache.commons.lang3.StringUtils.isBlank as a nullguard.
  aschackmull
  committed
  f09eb67
- Merge pull request #595 from jf205/qhelp-guide
  geoffw0
  authored
  9157825
- Merge pull request #593 from hvitved/csharp/nullness
  calumgrant
  authored
  67d4099
- CPP: Add a test.
  geoffw0
  committed
  02a060f
- CPP: Fix the issue.
  geoffw0
  committed
  0f268ca
- CPP: Change note.
  geoffw0
  committed
  d3c6d83
- CPP: Fix similar queries.
  geoffw0
  committed
  9857a85
- Merge pull request #643 from aschackmull/java/nullguard-isblank
  yh-semmle
  authored
  ba4fa0a
Commits on Dec 10, 2018
- remove hyphen from title and update some links
  james
  committed
  41f5d65
- Merge pull request #649 from jf205/qhelp-guide
  Felicity Chapman
  authored
  6ef16bb
- Merge pull request #644 from geoffw0/pointerscaling
  jbj
  authored
  1f73834
- CPP: Change note for #540.
  geoffw0
  committed
  6b7337d
- CPP: Change note for #562.
  geoffw0
  committed
  709fd63
- Merge pull request #653 from geoffw0/ex-ch-notes
  jbj
  authored
  a4b3b1e
Commits on Dec 12, 2018
- Merge branch 'master' into next
  asger-semmle
  committed
  12b4cc7

Commits

Commits on Nov 22, 2018

Commits on Nov 23, 2018

Commits on Nov 27, 2018

Commits on Nov 28, 2018

Commits on Nov 29, 2018

Commits on Nov 30, 2018

Commits on Dec 3, 2018

Commits on Dec 4, 2018

Commits on Dec 5, 2018

Commits on Dec 6, 2018

Commits on Dec 7, 2018

Commits on Dec 10, 2018