{"push_id":2837277884,"size":174,"distinct_size":5,"ref":"refs/heads/js/taint-kinds","head":"deebaf87d21cd08ee84d172f41159dc6c6034e7d","before":"d27a703c8c5fff3e44657124dce4904ebb12bf82","commits":[{"sha":"7492dabde0fc4e0eb8d854ffbe447a7a6fdccbcc","author":{"name":"Denis Levin","email":"e38b65d5874eec8c1d17ae8e0ef489f9e229d140@microsoft.com"},"message":"cs: Don't Install Root Certificate (CWE-327)","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/7492dabde0fc4e0eb8d854ffbe447a7a6fdccbcc"},{"sha":"72e690764ecb58c331adf5903ce6bf2c81e07bb9","author":{"name":"calum","email":"594630747e894b1326053d4218229b733e7fe066@semmle.com"},"message":"Add the QL Style Guide.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/72e690764ecb58c331adf5903ce6bf2c81e07bb9"},{"sha":"68d8b66a1fe02bc4d8fdccb01464bfbca39e9947","author":{"name":"calum","email":"594630747e894b1326053d4218229b733e7fe066@semmle.com"},"message":"Minor edits.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/68d8b66a1fe02bc4d8fdccb01464bfbca39e9947"},{"sha":"2a46a26d9e5b044b8c4ef9d8b251eeea89ce99fc","author":{"name":"Denis Levin","email":"e38b65d5874eec8c1d17ae8e0ef489f9e229d140@microsoft.com"},"message":"Update addressing review comments","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/2a46a26d9e5b044b8c4ef9d8b251eeea89ce99fc"},{"sha":"f4a060099b702c70b46c0ed938348aaea81cd0d3","author":{"name":"Dave Bartolomeo","email":"bfcdf3e6ca6cef45543bfbb57509c92aec9a39fb@semmle.com"},"message":"C++: Handle casts to `void` in IR\n\nCasts to `void` did not have a semantic conversion type in the AST, so they also weren't getting generated correctly in the IR. I've added a `VoidConversion` class to the AST, along with tests. I've also added IR translation for such conversions, using a new `ConvertToVoid` opcode. I'm not sure if it's really necessary to generate an instruction to represent this, but it may be useful for detecting values that are explicitly unused (e.g. return value from a call).\n\nI added two new sanity queries for the IR to detect the following:\n- IR blocks with no successors, which usually indicates bad IR translation\n- Phi instruction without an operand for one of the predecessor blocks.\n\nThese sanity queries found another subtle IR translation bug. If an expression that is normally translated as a condition (e.g. `&&`, `||`, or parens in certain contexts) has a constant value, we were not creating a `TranslatedExpr` for the expression at all. I changed it to always treat a constant condition as a non-condition expression.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/f4a060099b702c70b46c0ed938348aaea81cd0d3"},{"sha":"4dc1462b6b9f76fc1ba794759804bce27bfb645e","author":{"name":"Asger F","email":"d92cc882c6132ba9ff885d4f9b805f6cbed15752@semmle.com"},"message":"JavaScript: fix performance issue in ServerSideUrlRedirect.qll","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/4dc1462b6b9f76fc1ba794759804bce27bfb645e"},{"sha":"2a665850281e97a5c515ea818c84b0ba788ca8bc","author":{"name":"calum","email":"594630747e894b1326053d4218229b733e7fe066@semmle.com"},"message":"Address some review comments, apart from the bullet format.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/2a665850281e97a5c515ea818c84b0ba788ca8bc"},{"sha":"c2ad56adce887df5fe858ca4083fedcbd0f1e724","author":{"name":"calumgrant","email":"d3fb9bd765c297415f18eab7b30d61487b2a3753@users.noreply.github.com"},"message":"Fix table format","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/c2ad56adce887df5fe858ca4083fedcbd0f1e724"},{"sha":"276deee68c05924eefb37a488be9b6d1c4764d08","author":{"name":"Denis Levin","email":"e38b65d5874eec8c1d17ae8e0ef489f9e229d140@microsoft.com"},"message":"Added comments to the test file. Fixed a typo.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/276deee68c05924eefb37a488be9b6d1c4764d08"},{"sha":"650539dbb679f0794b0738fefc8e749b11c52271","author":{"name":"Dave Bartolomeo","email":"bfcdf3e6ca6cef45543bfbb57509c92aec9a39fb@semmle.com"},"message":"C++: IR sanity query `unnecessaryPhiInstruction`\n\nHave `Instruction.getResultSize()` return zero for `void`.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/650539dbb679f0794b0738fefc8e749b11c52271"},{"sha":"332e944c16d1445939b64fe98212ee61d969793d","author":{"name":"Dave Bartolomeo","email":"bfcdf3e6ca6cef45543bfbb57509c92aec9a39fb@semmle.com"},"message":"C++: Remove `ConvertToVoid`, replace with `Convert`","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/332e944c16d1445939b64fe98212ee61d969793d"},{"sha":"804c06bd59f0dfe2071d83df6bd88557786b6731","author":{"name":"Esben Sparre Andreasen","email":"da90c138e4a9573086862393cde34fa33d74f6e5@semmle.com"},"message":"JS: add models of logging frameworks","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/804c06bd59f0dfe2071d83df6bd88557786b6731"},{"sha":"b4952e7bfdb46f49a2402229b81a94a5824136e5","author":{"name":"Esben Sparre Andreasen","email":"da90c138e4a9573086862393cde34fa33d74f6e5@semmle.com"},"message":"JS: improve and expose SensitiveActions::HeuristicNames","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/b4952e7bfdb46f49a2402229b81a94a5824136e5"},{"sha":"0c4fb15651c083a7c1914c0675d6a7df7d3771fa","author":{"name":"Esben Sparre Andreasen","email":"da90c138e4a9573086862393cde34fa33d74f6e5@semmle.com"},"message":"JS: add query js/cleartext-logging","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/0c4fb15651c083a7c1914c0675d6a7df7d3771fa"},{"sha":"1365761f728117a3f0f075839d399fd1b09e70f8","author":{"name":"Tom Hvitved","email":"96835dd8bfa718bd6447ccc87af89ae1675daeca@semmle.com"},"message":"C#: Change `toString()` for `FinallySplitControlFlowNode`","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/1365761f728117a3f0f075839d399fd1b09e70f8"},{"sha":"529dbe08c8faa594af7829b68e34893634afce41","author":{"name":"calum","email":"594630747e894b1326053d4218229b733e7fe066@semmle.com"},"message":"Address review comments. Reformat bullet lists with capitals and remove trailing punctuation.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/529dbe08c8faa594af7829b68e34893634afce41"},{"sha":"08d0718eccd3f5d51b5597d58a13641cb324a68f","author":{"name":"calum","email":"594630747e894b1326053d4218229b733e7fe066@semmle.com"},"message":"Update CONTRIBUTING.md and README.md to link the the QL Style Guide.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/08d0718eccd3f5d51b5597d58a13641cb324a68f"},{"sha":"80e4815125c1bc4f0f1a89b45402c1e3bbf118f3","author":{"name":"Luke Cartey","email":"6b3799be4300e44489a08090123f3842e6419da5@semmle.com"},"message":"C#: Extract ZipSlip library","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/80e4815125c1bc4f0f1a89b45402c1e3bbf118f3"},{"sha":"a705b3afa50576cd27f401277f1134e14d1fea88","author":{"name":"Tom Hvitved","email":"96835dd8bfa718bd6447ccc87af89ae1675daeca@semmle.com"},"message":"C#: Generic control flow graph splitting\n\nRefactor existing logic for splitting control flow nodes belonging to a `finally`\nblock. A `Split` defines (1) when to enter the split, (2) when to stay in the split,\nand (3) when to leave the split. With only these definitions, control flow splitting\nis achieved by tagging each control flow element with the set of splits that apply\nto it.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/a705b3afa50576cd27f401277f1134e14d1fea88"},{"sha":"91ed11173565b22edf45f31d69fa5f54371653a2","author":{"name":"Tom Hvitved","email":"96835dd8bfa718bd6447ccc87af89ae1675daeca@semmle.com"},"message":"C#: Improve CFG for exception handlers\n\nUse generic CFG splitting to add a new type of split for exception handlers,\n`ExceptionHandlerSplit`, which tags eachs node belonging to a `catch` clause\nwith the type of exception being caught. This allows for a more accurate CFG\nfor `try-catch` statements, where exception filters are handled properly.","distinct":false,"url":"https://api.github.com/repos/xiemaisi/ql/commits/91ed11173565b22edf45f31d69fa5f54371653a2"}]}
{"actor":{"display_login":"xiemaisi"}}