Commits

Breadcrumbs

History for

onf5c3242

User selector

All users

All time

Commit History

Commits on Apr 26, 2019

• Python points-to: Handle list, dict and float literals as instances.

  markshannon

  committed
  f5c3242

  Copy full SHA for f5c3242

• Python points-to: Improve handling of 'type' object.

  markshannon

  committed
  48297e2

  Copy full SHA for 48297e2

• Python points-to: make 'self' instances distinct from other instances.

  markshannon

  committed
  85a9016

  Copy full SHA for 85a9016

• Python points-to: Add support for tuples.

  markshannon

  committed
  12853cc

  Copy full SHA for 12853cc

• Python points-to: Port old API classes to use new points-to.

  markshannon

  committed
  dd83149

  Copy full SHA for dd83149

• Python points-to: Further types and flow.

  markshannon

  committed
  aa30745

  Copy full SHA for aa30745

• Python points-to: Simplify handling of booleans and comparisons.

  markshannon

  committed
  e3ed8c6

  Copy full SHA for e3ed8c6

• Python points-to: Add generic instances and handle returns for builtin functions. Move attribute lookup handling to objects.

  markshannon

  committed
  84c9866

  Copy full SHA for 84c9866

• Python points-to: Add support for some more ESSA definitions.

  markshannon

  committed
  ce9d0f1

  Copy full SHA for ce9d0f1

• Python points-to: Convert two pairs of predicates to methods on booleans.

  markshannon

  committed
  ec151e9

  Copy full SHA for ec151e9

• Python: Add support for bound-methods.

  markshannon

  committed
  39b9723

  Copy full SHA for 39b9723

• Python: Add better class support, including inheritance.

  markshannon

  committed
  bf692f4

  Copy full SHA for bf692f4

• Python: Add ADTs for ints and strings. Add some global data-flow.

  markshannon

  committed
  5a46df2

  Copy full SHA for 5a46df2

• Python: Break-up internal object modules.

  markshannon

  committed
  051683f

  Copy full SHA for 051683f

• Python: First draft of ADT based objects and attendant points-to.

  markshannon

  committed
  c48d63f

  Copy full SHA for c48d63f

• Merge pull request #1271 from markshannon/python-fix-fp-http-prefix

  Show description for 7d2c17f
  taus-semmle

  authored
  7d2c17f

  Copy full SHA for 7d2c17f

Commits on Apr 25, 2019

• Python: Fix false positive in 'Incomplete URL substring sanitization' query.

  markshannon

  committed
  2879944

  Copy full SHA for 2879944

• Python: Add missing `override` annotations.

  taus-semmle

  committed
  c8cbae3

  Copy full SHA for c8cbae3

Commits on Apr 23, 2019

• Add test confirming correct handling of zope.interface.Interface in query.

  markshannon

  committed
  6a9bb5c

  Copy full SHA for 6a9bb5c

Commits on Apr 16, 2019

• Mergeback: rc/1.20 into Semmle/master

  

  Esben Sparre Andreasen

  committed
  c80ee3d

  Copy full SHA for c80ee3d

Commits on Apr 12, 2019

• Python: Fix semantic merge conflict between #1206 and #1240.

  markshannon

  committed
  d6ba729

  Copy full SHA for d6ba729

• Merge pull request #1240 from markshannon/python-avoid-ssa-defns-in-tests

  Show description for 707b73c
  taus-semmle

  authored
  707b73c

  Copy full SHA for 707b73c

• Merge pull request #1206 from markshannon/python-taint-flow-classless

  Show description for 607b5fb
  taus-semmle

  authored
  607b5fb

  Copy full SHA for 607b5fb

Commits on Apr 11, 2019

• Python: Remove callsite refinement ESSA definition when call in a test defining a pi-node.

  markshannon

  committed
  ca6e03f

  Copy full SHA for ca6e03f

Commits on Apr 9, 2019

• Merge pull request #1203 from markshannon/python-taint-tracking-configuration-2

  Show description for adf8cdc
  taus-semmle

  authored
  adf8cdc

  Copy full SHA for adf8cdc

Commits on Apr 8, 2019

• Fix typo.

  markshannon

  committed
  52b3f77

  Copy full SHA for 52b3f77

Commits on Apr 5, 2019

• Python: Fix up dataflow configuration to act as expected. Keep undocumented for now.

  markshannon

  committed
  df2000e

  Copy full SHA for df2000e

Commits on Apr 4, 2019

• Merge pull request #1128 from taus-semmle/python-paramiko-unsafe-host-key-validation

  Show description for 2ba1223
  markshannon

  authored
  2ba1223

  Copy full SHA for 2ba1223

• Fix CWE tag for Code injection query.

  markshannon

  committed
  c2e814a

  Copy full SHA for c2e814a

• Python change 'SimpleHttpResponseTaintSink' to 'HttpResponseTaintSink'.

  markshannon

  committed
  3bcd445

  Copy full SHA for 3bcd445

• Python taint-tracking: If taint has no class allow it flow through both branches of isinstance test.

  markshannon

  committed
  e2a3d91

  Copy full SHA for e2a3d91

• Python: make sure unsafe deserialization query is using correct sources and that pickle is included in sinks.

  markshannon

  committed
  8b01bac

  Copy full SHA for 8b01bac

• Python: make sure code injection query is using correct sources.

  markshannon

  committed
  bc19769

  Copy full SHA for bc19769

• Python revert .getNode() to .getSink()/.getSource() to keep expected test output the same.

  markshannon

  committed
  35e82dc

  Copy full SHA for 35e82dc

• Python: make sure all django and flask request sources conform to interface.

  markshannon

  committed
  f8c43ca

  Copy full SHA for f8c43ca