Skip to content
Permalink
main
Switch branches/tags

Commits on Sep 30, 2022

  1. Merge pull request #10620 from hvitved/ruby/call-graph-protected-methods

    Ruby: Account for `protected` methods in call graph
    hvitved committed Sep 30, 2022
  2. Merge pull request #10627 from hvitved/ruby/synthesis-reduce-non-line…

    …ar-rec
    
    Ruby: Reduce size of input predicate for non-linear recursion
    hvitved committed Sep 30, 2022
  3. Merge pull request #10617 from tamasvajk/kotlin-op-calls

    Kotlin: extract operator expression when operator is in method call form
    tamasvajk committed Sep 30, 2022
  4. Merge pull request #10642 from github/aibaars-patch-2

    Run QLHelp preview for all languages
    aibaars committed Sep 30, 2022
  5. Merge pull request #10375 from asgerf/rb/summarize-loads-v2

    Ruby: type-tracking and API edges through simple library callables
    asgerf committed Sep 30, 2022
  6. Merge pull request #10641 from github/nickrolfe/a_an

    JS/Python/Ruby: s/a HTML/an HTML/
    nickrolfe committed Sep 30, 2022
  7. Merge pull request #10634 from yoff/python/rewrite-typetrackers

    Approved by tausbn
    codeql-ci committed Sep 30, 2022
  8. Merge pull request #10624 from tamasvajk/kotlin-java-fn-equivalence-r…

    …emove
    
    Kotlin: find java-kotlin equivalent functions by erased parameter types
    tamasvajk committed Sep 30, 2022
  9. Merge pull request #10630 from igfoo/igfoo/ver0

    Kotlin: Make newerThan symmetric
    igfoo committed Sep 30, 2022
  10. Merge pull request #10625 from github/henti/ql_jobrunson

    Added job.getRunsOn
    henti committed Sep 30, 2022
  11. Merge pull request #10636 from erik-krogh/fixHardcoded

    JS: recognize another kind of dummy passwords to fix an FP in hardcoded-credentials
    erik-krogh committed Sep 30, 2022
  12. Merge pull request #10622 from michaelnebel/ruby/postupdateassignexpr

    Ruby: Postupdate notes for assignment expressions.
    michaelnebel committed Sep 30, 2022
  13. Merge pull request #10594 from michaelnebel/csharp/postupdatenotes

    C#: Postupdate notes for ternary expressions.
    michaelnebel committed Sep 30, 2022
  14. Merge pull request #10598 from hmac/hmac/actioncontroller-metal

    Ruby: Identify ActionController::Metal controllers
    hmac committed Sep 30, 2022

Commits on Sep 29, 2022

  1. update expected output

    erik-krogh committed Sep 29, 2022
  2. Merge pull request #10539 from yoff/python/improve-API-graphs

    Python: add subscript to API graphs
    yoff committed Sep 29, 2022
  3. python: rewrite type tracker for ldap operations

    There are several other clean ups I would like to do in this file,
    but this can wait until we promote the query.
    yoff committed Sep 29, 2022
  4. python: rewrite type tracker for compiled regexes

    we have the option to use `regex.getAValueReachingSink`
    rather than `regex.asSink`, but it will likely be used as a
    sink for data flow.
    yoff committed Sep 29, 2022
  5. Merge pull request #10632 from jf205/lgtm-updates

    Remove a mentions of LGTM.com from the README and style guides
    jf205 committed Sep 29, 2022
  6. Merge pull request #10613 from github/henrymercer/atm-update-expected…

    …-output
    
    ATM: Update expected test output
    henrymercer committed Sep 29, 2022
  7. Kotlin: Make newerThan symmetric

    "0.0 last-modified 0" and "0.0 last-modified 123" were giving
    different comparisons depending on which way round they were.
    igfoo committed Sep 29, 2022
  8. Merge pull request #10609 from MathiasVP/overrun-write-only-flag-over…

    …running-write
    
    C++: Make `OverrunWriteProductFlow` raise alerts on overflows
    rdmarsh2 committed Sep 29, 2022
  9. Ruby: Reduce size of input predicate for non-linear recursion

    Before, we would be recursive in all of `MethodCall::getMethodName`:
    
    ```
    Evaluated named local Synthesis#d9ff06b1::AssignOperationDesugar::SetterAssignOperation::getCallKind#ffff#shared#3@Synthesi in 9803ms on iteration 14 (size: 31006941).
    Evaluated relational algebra for predicate Synthesis#d9ff06b1::AssignOperationDesugar::SetterAssignOperation::getCallKind#ffff#shared#3@Synthesi on iteration 14 running pipeline main with tuple counts:
              256419  ~1%    {2} r1 = SCAN Call#841c84e8::MethodCall::getMethodName#0#dispred#ff#prev_delta OUTPUT In.1, In.0
            31006941  ~8%    {4} r2 = JOIN r1 WITH Synthesis#d9ff06b1::MethodCallKind#ffff#prev ON FIRST 1 OUTPUT Lhs.1, Rhs.1, Rhs.2, Rhs.3
                             return r2
    ```
    
    Now, we have restricted that to only the relevant method names.
    hvitved committed Sep 29, 2022
  10. Python: sync TypeTracker.qll

    asgerf committed Sep 29, 2022
  11. Added JobRunson

    henti committed Sep 29, 2022
Older