main
Commits on Sep 30, 2022
-
Merge pull request #10620 from hvitved/ruby/call-graph-protected-methods
Ruby: Account for `protected` methods in call graph
-
-
Merge pull request #10627 from hvitved/ruby/synthesis-reduce-non-line…
…ar-rec Ruby: Reduce size of input predicate for non-linear recursion
-
Merge pull request #10617 from tamasvajk/kotlin-op-calls
Kotlin: extract operator expression when operator is in method call form
-
Merge pull request #10642 from github/aibaars-patch-2
Run QLHelp preview for all languages
-
Merge pull request #10375 from asgerf/rb/summarize-loads-v2
Ruby: type-tracking and API edges through simple library callables
-
-
Merge pull request #10641 from github/nickrolfe/a_an
JS/Python/Ruby: s/a HTML/an HTML/
-
Merge pull request #10634 from yoff/python/rewrite-typetrackers
Approved by tausbn
-
-
Merge pull request #10624 from tamasvajk/kotlin-java-fn-equivalence-r…
…emove Kotlin: find java-kotlin equivalent functions by erased parameter types
-
Merge pull request #10630 from igfoo/igfoo/ver0
Kotlin: Make newerThan symmetric
-
-
Merge pull request #10625 from github/henti/ql_jobrunson
Added job.getRunsOn
-
Merge pull request #10636 from erik-krogh/fixHardcoded
JS: recognize another kind of dummy passwords to fix an FP in hardcoded-credentials
-
-
Merge pull request #10622 from michaelnebel/ruby/postupdateassignexpr
Ruby: Postupdate notes for assignment expressions.
-
Merge pull request #10594 from michaelnebel/csharp/postupdatenotes
C#: Postupdate notes for ternary expressions.
-
Merge pull request #10598 from hmac/hmac/actioncontroller-metal
Ruby: Identify ActionController::Metal controllers
Commits on Sep 29, 2022
-
-
Merge pull request #10539 from yoff/python/improve-API-graphs
Python: add subscript to API graphs
-
python: rewrite type tracker for ldap operations
There are several other clean ups I would like to do in this file, but this can wait until we promote the query.
-
python: rewrite type tracker for compiled regexes
we have the option to use `regex.getAValueReachingSink` rather than `regex.asSink`, but it will likely be used as a sink for data flow.
-
Merge pull request #10632 from jf205/lgtm-updates
Remove a mentions of LGTM.com from the README and style guides
-
Merge pull request #10613 from github/henrymercer/atm-update-expected…
…-output ATM: Update expected test output
-
-
-
Kotlin: Make newerThan symmetric
"0.0 last-modified 0" and "0.0 last-modified 123" were giving different comparisons depending on which way round they were.
-
Merge pull request #10609 from MathiasVP/overrun-write-only-flag-over…
…running-write C++: Make `OverrunWriteProductFlow` raise alerts on overflows
-
Ruby: Reduce size of input predicate for non-linear recursion
Before, we would be recursive in all of `MethodCall::getMethodName`: ``` Evaluated named local Synthesis#d9ff06b1::AssignOperationDesugar::SetterAssignOperation::getCallKind#ffff#shared#3@Synthesi in 9803ms on iteration 14 (size: 31006941). Evaluated relational algebra for predicate Synthesis#d9ff06b1::AssignOperationDesugar::SetterAssignOperation::getCallKind#ffff#shared#3@Synthesi on iteration 14 running pipeline main with tuple counts: 256419 ~1% {2} r1 = SCAN Call#841c84e8::MethodCall::getMethodName#0#dispred#ff#prev_delta OUTPUT In.1, In.0 31006941 ~8% {4} r2 = JOIN r1 WITH Synthesis#d9ff06b1::MethodCallKind#ffff#prev ON FIRST 1 OUTPUT Lhs.1, Rhs.1, Rhs.2, Rhs.3 return r2 ``` Now, we have restricted that to only the relevant method names. -
-
-