Commits

Breadcrumbs

History for

on40eab18

User selector

All users

All time

Commit History

Commits on Jul 28, 2023

• Merge pull request #13823 from github/kaeluka/support-argument-this-in-frameworkmode-metadata-extraction

  Show description for 40eab18
  

  Stephan Brandauer

  authored
  40eab18

  Copy full SHA for 40eab18

• Merge pull request #13713 from pwntester/java/struts2_source_taint_inheriting

  Show description for 08cba7d
  atorralba

  authored
  08cba7d

  Copy full SHA for 08cba7d

• Merge pull request #13822 from owen-mc/dataflow/mergepathgraph3-signature-fix

  Show description for a020189
  owen-mc

  authored
  a020189

  Copy full SHA for a020189

• Merge pull request #13712 from pwntester/java/new_struts2_models

  Show description for 2dff0ce
  atorralba

  authored
  2dff0ce

  Copy full SHA for 2dff0ce

• Java: fix QL-for-QL alert

  

  Stephan Brandauer

  committed
  8bf960b

  Copy full SHA for 8bf960b

• Java: format

  

  Stephan Brandauer

  committed
  021eedf

  Copy full SHA for 021eedf

• Java: support Argument[this] in NotAModelApiParameter

  

  Stephan Brandauer

  committed
  82fd0e4

  Copy full SHA for 82fd0e4

• Java: use a newtype for framework mode candidates

  

  Stephan Brandauer

  committed
  a9d2f43

  Copy full SHA for a9d2f43

• Java: Framework mode extraction now uses a custom class for endpoints, so we can support both Argument[this] and interface-method parameters

  

  Stephan Brandauer

  committed
  8ed773b

  Copy full SHA for 8ed773b

• Java: Support Argument[this] in framework mode metadata extraction

  

  Stephan Brandauer

  committed
  09c64e8

  Copy full SHA for 09c64e8

• Account for public fields/setters

  

  Alvaro Muñoz

  committed
  c3a2ae2

  Copy full SHA for c3a2ae2

Commits on Jul 27, 2023

• Changed Struts2ActionSupportClassFieldReadSource to be a FieldValueNode instead of a field read

  atorralba

  committed
  c239a43

  Copy full SHA for c239a43

• add change note

  

  Alvaro Muñoz

  authored and

  atorralba

  committed
  97a4230

  Copy full SHA for 97a4230

• implement field taint inheritance for Struts2 unmarshalled objects

  

  Alvaro Muñoz

  authored and

  atorralba

  committed
  f3fc562

  Copy full SHA for f3fc562

• Merge pull request #13817 from atorralba/atorralba/java/non-static-fieldvaluenode-step

  Show description for 9d6bc76
  atorralba

  authored
  9d6bc76

  Copy full SHA for 9d6bc76

Commits on Jul 26, 2023

• Sync files

  owen-mc

  committed
  9b2b58a

  Copy full SHA for 9b2b58a

• Merge pull request #13793 from github/post-release-prep/codeql-cli-2.14.1

  Show description for c69a9ea
  smowton

  authored
  c69a9ea

  Copy full SHA for c69a9ea

• Add tests

  atorralba

  committed
  8685242

  Copy full SHA for 8685242

• Merge pull request #13818 from github/kaeluka/fix-erroneous-endpoints-that-are-sinks-and-summary-neutrals

  Show description for 24cdc96
  

  Stephan Brandauer

  authored
  24cdc96

  Copy full SHA for 24cdc96

• Update partial flow test expectations

  atorralba

  committed
  602eb43

  Copy full SHA for 602eb43

Commits on Jul 25, 2023

• Merge pull request #13751 from igfoo/igfoo/getCompilationInfo

  Show description for 532552a
  igfoo

  authored
  532552a

  Copy full SHA for 532552a

• Java: Automodel extraction fix for application mode

  

  Stephan Brandauer

  committed
  08f5774

  Copy full SHA for 08f5774

• Java: Automodel extraction fix; previously, we treated endpoints that were marked as sinks, as well as summary-neutrals as 'erroneous'

  

  Stephan Brandauer

  committed
  698b8d3

  Copy full SHA for 698b8d3

• Java: Allow flow out of FieldValueNodes for non-static fields

  atorralba

  committed
  b8b38e4

  Copy full SHA for b8b38e4

• Remove generated sinks and sources

  atorralba

  committed
  c9fc5a5

  Copy full SHA for c9fc5a5

Commits on Jul 24, 2023

• Merge pull request #13747 from github/tausbn/exclude-qualifier-argument-for-existing-models

  Show description for 2582b08
  

  Stephan Brandauer

  authored
  2582b08

  Copy full SHA for 2582b08

• Java: review suggestions from @atorralba

  

  Stephan Brandauer

  committed
  13027a1

  Copy full SHA for 13027a1

• Java: drive-by change: remove obsolete custom queries from application mode characteristics

  

  Stephan Brandauer

  committed
  2f2f507

  Copy full SHA for 2f2f507

Commits on Jul 21, 2023

• Post-release preparation for codeql-cli-2.14.1

  

  github-actions[bot]

  committed
  f91b7a9

  Copy full SHA for f91b7a9

• Java: only assume that _manual_ MaD sinks have been fully modeled

  

  Stephan Brandauer

  committed
  79da723

  Copy full SHA for 79da723

• Merge pull request #13769 from atorralba/atorralba/java/avoid-inputstream-low-confidence-dispatch

  Show description for 3d515b1
  atorralba

  authored
  3d515b1

  Copy full SHA for 3d515b1

Commits on Jul 20, 2023

• Release preparation for version 2.14.1

  

  github-actions[bot]

  committed
  c936a92

  Copy full SHA for c936a92

Commits on Jul 19, 2023

• Add change note

  atorralba

  committed
  238cb26

  Copy full SHA for 238cb26

• Change InputStream.read from neutral to summary

  atorralba

  committed
  29543f5

  Copy full SHA for 29543f5

• Merge pull request #13717 from aschackmull/dataflow/neverskipadditionalsteps

  Show description for a9c76d4
  aschackmull

  authored
  a9c76d4

  Copy full SHA for a9c76d4