Commits

Breadcrumbs

History for

onf29dfa5

User selector

All users

All time

Commit History

Commits on Jun 14, 2019

• Python: Add clarifying comment and pragma.

  markshannon

  committed
  f29dfa5

  Copy full SHA for f29dfa5

Commits on Jun 13, 2019

• Python (pruning): Fix up handling of integer inequality.

  markshannon

  committed
  00fa803

  Copy full SHA for 00fa803

• Python (pruning): Refactor a bit and all comments for clarity.

  markshannon

  committed
  a3d50e8

  Copy full SHA for a3d50e8

• Python: Fix logic in pruning for tests like 'x != 0' as that does not imply that 'x is None' is false.

  markshannon

  committed
  e1fb1d2

  Copy full SHA for e1fb1d2

Commits on May 17, 2019

• Python: Avoid bad magic.

  markshannon

  committed
  f975b8b

  Copy full SHA for f975b8b

Commits on May 15, 2019

• Python: Fix CP in pruner and cache to avoid re-evaluation.

  markshannon

  committed
  d7558e8

  Copy full SHA for d7558e8

Commits on May 10, 2019

• Python QL: Clean up pruning code, renaming and adding comments for clarity.

  markshannon

  committed
  75feab5

  Copy full SHA for 75feab5

Commits on May 9, 2019

• Python: do pruning in QL.

  markshannon

  committed
  bbf7ff9

  Copy full SHA for bbf7ff9

Commits on Apr 16, 2019

• Mergeback: rc/1.20 into Semmle/master

  

  Esben Sparre Andreasen

  committed
  c80ee3d

  Copy full SHA for c80ee3d

Commits on Apr 12, 2019

• Merge pull request #1240 from markshannon/python-avoid-ssa-defns-in-tests

  Show description for 707b73c
  taus-semmle

  authored
  707b73c

  Copy full SHA for 707b73c

• Merge pull request #1206 from markshannon/python-taint-flow-classless

  Show description for 607b5fb
  taus-semmle

  authored
  607b5fb

  Copy full SHA for 607b5fb

Commits on Apr 11, 2019

• Python: Remove callsite refinement ESSA definition when call in a test defining a pi-node.

  markshannon

  committed
  ca6e03f

  Copy full SHA for ca6e03f

Commits on Apr 9, 2019

• Merge pull request #1203 from markshannon/python-taint-tracking-configuration-2

  Show description for adf8cdc
  taus-semmle

  authored
  adf8cdc

  Copy full SHA for adf8cdc

Commits on Apr 8, 2019

• Fix typo.

  markshannon

  committed
  52b3f77

  Copy full SHA for 52b3f77

Commits on Apr 5, 2019

• Python: Fix up dataflow configuration to act as expected. Keep undocumented for now.

  markshannon

  committed
  df2000e

  Copy full SHA for df2000e

Commits on Apr 4, 2019

• Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation

  Show description for 2ba1223
  markshannon

  authored
  2ba1223

  Copy full SHA for 2ba1223

• Fix CWE tag for Code injection query.

  markshannon

  committed
  c2e814a

  Copy full SHA for c2e814a

• Python change 'SimpleHttpResponseTaintSink' to 'HttpResponseTaintSink'.

  markshannon

  committed
  3bcd445

  Copy full SHA for 3bcd445

• Python taint-tracking: If taint has no class allow it flow through both branches of isinstance test.

  markshannon

  committed
  e2a3d91

  Copy full SHA for e2a3d91

• Python: make sure unsafe deserialization query is using correct sources and that pickle is included in sinks.

  markshannon

  committed
  8b01bac

  Copy full SHA for 8b01bac

• Python: make sure code injection query is using correct sources.

  markshannon

  committed
  bc19769

  Copy full SHA for bc19769

• Python revert .getNode() to .getSink()/.getSource() to keep expected test output the same.

  markshannon

  committed
  35e82dc

  Copy full SHA for 35e82dc

• Python: make sure all django and flask request sources conform to interface.

  markshannon

  committed
  f8c43ca

  Copy full SHA for f8c43ca

• Python: Use new taint-tracking query in unsafe deserialization query.

  markshannon

  committed
  61e6ae7

  Copy full SHA for 61e6ae7

• Python: Use new taint-tracking query in code-injection query.

  markshannon

  committed
  3c1a5bb

  Copy full SHA for 3c1a5bb

• Python: Use new taint-tracking query in reflected-xss query.

  markshannon

  committed
  64e8be6

  Copy full SHA for 64e8be6

• Python: Use new taint-tracking query in SQL-injection query.

  markshannon

  committed
  7fc5d69

  Copy full SHA for 7fc5d69

Commits on Mar 27, 2019

• Merge branch 'master' into python-encapsulate-builtins

  taus-semmle

  authored
  eb5927a

  Copy full SHA for eb5927a

Commits on Mar 26, 2019

• Merge pull request #1170 from Semmle/rc/1.20

  Show description for 046a485
  taus-semmle

  authored
  046a485

  Copy full SHA for 046a485

• Merge pull request #1169 from markshannon/python-speedup-flow-step

  Show description for 52d8ca0
  taus-semmle

  authored
  52d8ca0

  Copy full SHA for 52d8ca0

• Merge pull request #1142 from taus-semmle/python-use-new-moduleobject-api

  Show description for 058ae7b
  markshannon

  authored
  058ae7b

  Copy full SHA for 058ae7b

• Python taint-tracking: Avoid computing many redundant copies of flow step for dicts and sequences.

  markshannon

  committed
  1e1903b

  Copy full SHA for 1e1903b

• Merge pull request #1166 from Semmle/rc/1.20

  Show description for 702fc80
  taus-semmle

  authored
  702fc80

  Copy full SHA for 702fc80

Commits on Mar 25, 2019

• Python: Tweak wording of qldoc.

  markshannon

  committed
  2f0bb82

  Copy full SHA for 2f0bb82

Commits on Mar 22, 2019

• Python taint-tracking. Handle early exit and 'not' correctly for 'falsey' taints.

  markshannon

  committed
  2edde1f

  Copy full SHA for 2edde1f