Skip to content
Permalink
main
Switch branches/tags

Commits on Oct 11, 2022

  1. Merge pull request #10731 from erik-krogh/rb-last-msg

    Ruby: fix some more style-guide violations in the alert-messages
    erik-krogh committed Oct 11, 2022
  2. Merge pull request #10763 from hvitved/ruby/move-summarized-callable-…

    …from-model
    
    Ruby: Move `SummarizedCallableFromModel` into `ModelsAsData.qll`
    hvitved committed Oct 11, 2022
  3. update expected output

    erik-krogh committed Oct 11, 2022
  4. reintroduce Psych

    erik-krogh committed Oct 11, 2022
  5. fix casing in alert-message

    Co-authored-by: Arthur Baars <aibaars@github.com>
    erik-krogh and aibaars committed Oct 11, 2022
  6. Merge pull request #10754 from hvitved/dataflow/non-hidden-succ-fast-tc

    Data flow: Improve `fastTC` bound in `PathNodeImpl::getANonHiddenSuccessor`
    hvitved committed Oct 11, 2022

Commits on Oct 10, 2022

  1. Merge pull request #10670 from tyage/property-stringify

    JS: Improve detection of XSS when JSON.stringify()
    asgerf committed Oct 10, 2022
  2. Merge pull request #10737 from smowton/smowton/fix/type-instance-with…

    …in-default-value-erasure
    
    Kotlin: fix type variable erasure inside default function values
    smowton committed Oct 10, 2022
  3. Merge pull request #10723 from tamasvajk/kotlin-generated-files

    Kotlin: Recognize generated files
    tamasvajk committed Oct 10, 2022
  4. JS: Edit change note

    asgerf committed Oct 10, 2022
  5. JS: Performance tweak

    asgerf committed Oct 10, 2022
  6. Merge pull request #10732 from smowton/smowton/fix/kotlin-enum-corres…

    …ponding-classes
    
    Koltin: Extract the corresponding classes of enum entries
    smowton committed Oct 10, 2022
  7. Merge pull request #10753 from aibaars/fix-qhelp-job

    CI: fix qhelp preview
    aibaars committed Oct 10, 2022
  8. Data flow: Sync files

    hvitved committed Oct 10, 2022
  9. Data flow: Improved fastTC bound in `PathNodeImpl::getANonHiddenSuc…

    …cessor`
    
    Before
    ```
    [2022-10-10 14:34:54] Evaluated non-recursive predicate __DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff_DataFlowImplForRegExp__#higher_order_body@4bb14aoj in 262ms (size: 2418048).
    Evaluated relational algebra for predicate __DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff_DataFlowImplForRegExp__#higher_order_body@4bb14aoj with tuple counts:
            4141389  ~75%    {1} r1 = SCAN _DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff_DataFlowImplForRegExp#__#shared OUTPUT In.1
                             return r1
    
    [2022-10-10 14:34:57] Evaluated non-recursive predicate boundedFastTC:DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorIfHidden#0#dispred#ff:__DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff_DataFlowImplForRegExp__#higher_order_body@fb66bb06 in 2754ms (size: 7448123).
    [2022-10-10 14:35:09] Evaluated non-recursive predicate DataFlowImplForRegExp#43df744e::PathNodeImpl::getANonHiddenSuccessor#0#dispred#ff@77ff066b in 10892ms (size: 2830055).
    Evaluated relational algebra for predicate DataFlowImplForRegExp#43df744e::PathNodeImpl::getANonHiddenSuccessor#0#dispred#ff@77ff066b with tuple counts:
              4141389   ~0%    {3} r1 = SCAN _DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff_DataFlowImplForRegExp#__#shared OUTPUT In.0, In.1, In.1
              2192551   ~4%    {3} r2 = r1 AND NOT DataFlowImplForRegExp#43df744e::PathNodeImpl::isHidden#0#dispred#f(Lhs.2)
              2192551   ~4%    {2} r3 = SCAN r2 OUTPUT In.0, In.2
    
              4141389   ~0%    {2} r4 = SCAN _DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff_DataFlowImplForRegExp#__#shared OUTPUT In.1, In.0
            147138810   ~0%    {3} r5 = JOIN r4 WITH boundedFastTC:DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorIfHidden#0#dispred#ff:__DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff_DataFlowImplForRegExp__#higher_order_body ON FIRST 1 OUTPUT Lhs.1, Lhs.0, Rhs.1
               637649   ~3%    {3} r6 = r5 AND NOT DataFlowImplForRegExp#43df744e::PathNodeImpl::isHidden#0#dispred#f(Lhs.2)
               637649   ~2%    {2} r7 = SCAN r6 OUTPUT In.0, In.2
    
              2830200   ~0%    {2} r8 = r3 UNION r7
                               return r8
    ```
    
    After
    ```
    [2022-10-10 14:59:08] Evaluated non-recursive predicate boundedFastTC:DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorIfHidden#0#dispred#ff_10#higher_order_body:_DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorIfHidden#0#dispred#ff_DataFlowImplForReg__#higher_order_body@98a323ne in 384ms (size: 671076).
    [2022-10-10 14:59:09] Evaluated non-recursive predicate DataFlowImplForRegExp#43df744e::PathNodeImpl::getANonHiddenSuccessor0#ff@69f158pf in 222ms (size: 2805795).
    Evaluated relational algebra for predicate DataFlowImplForRegExp#43df744e::PathNodeImpl::getANonHiddenSuccessor0#ff@69f158pf with tuple counts:
            2155019   ~0%    {1} r1 = DataFlowImplForRegExp#43df744e::PathNodeImpl#class#f AND NOT DataFlowImplForRegExp#43df744e::PathNodeImpl::isHidden#0#dispred#f(Lhs.0)
            2155019   ~0%    {2} r2 = SCAN r1 OUTPUT In.0, In.0
    
             650776   ~0%    {2} r3 = boundedFastTC:DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorIfHidden#0#dispred#ff_10#higher_order_body:_DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorIfHidden#0#dispred#ff_DataFlowImplForReg__#higher_order_body AND NOT DataFlowImplForRegExp#43df744e::PathNodeImpl::isHidden#0#dispred#f(Lhs.0)
             650776   ~0%    {2} r4 = SCAN r3 OUTPUT In.1, In.0
    
            2805795   ~0%    {2} r5 = r2 UNION r4
                             return r5
    
    [2022-10-10 14:59:09] Evaluated non-recursive predicate DataFlowImplForRegExp#43df744e::PathNodeImpl::getANonHiddenSuccessor#0#dispred#ff@5ae9fc5n in 445ms (size: 2830062).
    Evaluated relational algebra for predicate DataFlowImplForRegExp#43df744e::PathNodeImpl::getANonHiddenSuccessor#0#dispred#ff@5ae9fc5n with tuple counts:
            4141389  ~5%    {2} r1 = DataFlowImplForRegExp#43df744e::PathNodeImpl::getASuccessorImpl#0#dispred#ff AND NOT DataFlowImplForRegExp#43df744e::PathNodeImpl::isHidden#0#dispred#f(Lhs.0)
            4141389  ~0%    {2} r2 = SCAN r1 OUTPUT In.1, In.0
            2830200  ~0%    {2} r3 = JOIN r2 WITH DataFlowImplForRegExp#43df744e::PathNodeImpl::getANonHiddenSuccessor0#ff ON FIRST 1 OUTPUT Lhs.1, Rhs.1
                            return r3
    ```
    hvitved committed Oct 10, 2022
  10. CI: fix qhelp preview

    The command to gather the changed files uses NULL character terminated "lines",
    therefore we should supply the `-z` flag to `basename` as well. Otherwise we
    end up calling `git grep -l "\n"` which would list all files containing a newline.
    aibaars committed Oct 10, 2022
  11. Merge pull request #10750 from RasmusWL/pyhton-typo

    Python: Fix typo in qldoc
    RasmusWL committed Oct 10, 2022
  12. Merge pull request #10704 from erik-krogh/rbMeta

    RB: add some more meta queries for Ruby evaluations
    erik-krogh committed Oct 10, 2022
  13. Merge pull request #10706 from geoffw0/vaheuristic

    C++: Tune cpp/unterminated-variadic-call
    geoffw0 committed Oct 10, 2022
  14. Merge pull request #10744 from hvitved/dataflow/has-flow-to-no-fast-tc

    Data flow: Avoid call to `pathSuccPlus` in `Configuration::hasFlowTo(Expr)`
    hvitved committed Oct 10, 2022
  15. Merge pull request #10741 from hvitved/ruby/no-full-fast-tc

    Ruby: Avoid computing full `fastTC` for `AstNode::getParent`
    hvitved committed Oct 10, 2022
  16. Merge pull request #10718 from tamasvajk/kotlin-internal-repr

    Kotlin: ignore properties in `java/internal-representation-exposure` check
    tamasvajk committed Oct 10, 2022
  17. Merge pull request #10728 from tamasvajk/kotlin-missing-override-sam

    Kotlin: Extract `override` modifier on SAM methods
    tamasvajk committed Oct 10, 2022
  18. Merge pull request #10720 from tamasvajk/kotlin-equals-fix

    Kotlin: Consider `::class` type check in `java/unchecked-cast-in-equals`
    tamasvajk committed Oct 10, 2022
  19. Python: Fix typo in qldoc

    RasmusWL committed Oct 10, 2022
  20. Merge pull request #10745 from hvitved/ruby/cache-library-flow

    Ruby: Cache use of `DataFlowImplFor(Pathname|HttpClientLibraries)`
    hvitved committed Oct 10, 2022
  21. Merge pull request #10629 from RasmusWL/fix-flask-source

    Python: Fix flask request modeling
    RasmusWL committed Oct 10, 2022
Older