- 08 Sep, 2021 1 commit
-
-
Iago Abal authored
test plan: make test # tests included
-
- 06 Sep, 2021 1 commit
-
-
Emma Jin authored
* Fix AST to IL translation for ternary operators The originating expression for the value of a ternary expression should be that ternary expression, not the condition. Test plan: make test * Changelog
-
- 05 Sep, 2021 1 commit
-
-
Yoann Padioleau authored
Convert Ast_cpp.program to AST_generic.program test plan: make
-
- 03 Sep, 2021 4 commits
-
-
Emma Jin authored
* Free tree-sitter tree when done * Remove parallel.invoke * Remove helper semgrep rule * Remove the parallel.set, now unnecessary * Include comments * Update ocaml-tree-sitter-core
-
Yoann Padioleau authored
This will be useful for cpp_to_generic.ml to record type qualifiers for types. test plan: make test
-
Yoann Padioleau authored
Adding cpp_to_generic.ml boilerplate this was generated thx to ocamltarzan -choice map_todo test plan: make test
-
Iago Abal authored
1. The error message now specficies rule and target file. 2. Only the key info is displayed in red, the error trace will be white/gray, to avoid overwhelming the user with internal details. Closes #3774 test plan: % cat test.yaml rules: - id: test languages: - py message: Match Found! pattern: x severity: WARNING % cat test.py def test(): return x } % semgrep -c test.yaml test.py
-
- 02 Sep, 2021 3 commits
-
-
Brendon Go authored
Release 0.64.0
-
Yoann Padioleau authored
Finish all todos in Parse_cpp_tree_sitter.ml test plan: make test
-
Martin Jambon authored
* Filter input targets using Guess_lang * Move all the logic to find and filter targets to a single module and single function Find_target.files_of_dirs_or_files * Avoid non-tailrec functions * Add (restore?) '-max_target_bytes' option. * Treat '0' as no limit for max target size * Detect and filter out minified files in semgrep-core * Update changelog
-
- 01 Sep, 2021 9 commits
-
-
Emma Jin authored
-
Emma Jin authored
-
Emma Jin authored
-
Emma Jin authored
-
Yoann Padioleau authored
More todos in Parse_cpp_tree_sitter.ml test plan: make test
-
Yoann Padioleau authored
More todos test plan: make test
-
Martin Jambon authored
* Filter input targets using Guess_lang * Move all the logic to find and filter targets to a single module and single function Find_target.files_of_dirs_or_files * Identify Hack files with the '.php' extension * Use latest pfff * Update pfff * typo * Avoid non-tailrec functions * Add (restore?) '-max_target_bytes' option. * Treat '0' as no limit for max target size
-
Brendon Go authored
-
Iago Abal authored
Closes #3742 test plan: make test # test included
-
- 31 Aug, 2021 2 commits
-
-
Yoann Padioleau authored
More todos. This will help PA-14 test plan: make test
-
Yoann Padioleau authored
-
- 30 Aug, 2021 3 commits
-
-
Yoann Padioleau authored
* Add attributes to directives to support Java import static This closes https://github.com/returntocorp/semgrep/issues/3772 An alternative would be to add an argument to the Import and ImportAll constructs, but this seems more general. This also handles attributes on OCaml directives. test plan: test file included * changelog
-
Eli Block authored
While debugging a slow-running semgrep usage, I discovered that files included in the `.gitignore` were being scanned because `git` was not available in the container running the scan (note: not the official semgrep container). Add a log message when this occurs to help others debug this in the future.
-
Christian Bruckmayer authored
-
- 27 Aug, 2021 2 commits
-
-
Martin Jambon authored
Release 0.63.0
-
Martin Jambon authored
* Move semgrep-core response type definitions out of spacegrep to its own library that everything else can depend on. * Add a 'skipped' field alongside 'matches' and 'errors' to semgrep-core's json output. * Correctly merge two 'skipped' fields instead of discarding one. * Fix another 'skipped' field
-
- 26 Aug, 2021 4 commits
-
-
Sabrina Brogren authored
-
Iago Abal authored
test plan: % make test % semgrep --time -c semgrep-rules/javascript/angular/security \ semgrep/parsing-stats/lang/javascript/tmp/* # ^ using https://github.com/returntocorp/semgrep-rules/pull/1403 # the taint-mode rules are now basically as fast as the previous # fake-taint rules but yield ~5x more findings
-
Iago Abal authored
Closes #3741 test plan: make test # test included
-
Sabrina Brogren authored
-
- 25 Aug, 2021 2 commits
-
-
Sabrina Brogren authored
-
Sjoerd Langkemper authored
-
- 23 Aug, 2021 2 commits
-
-
Iago Abal authored
This probably won't have a huge perf impact overall due to parsing being the main bottle neck. However it does help perf and it's a fairly simple optimization. test plan: % make test % semgrep-core -lang js -config ~/semgrep-rules/typescript/react/security/audit/react-css-injection.yaml ~/semgrep/perf/bench/big-js/input/big-js #^ Now takes about ~19s (vs ~27s, or ~1.4x faster) # -profile reports matching time is ~2s (vs ~10s, or ~5x faster) % semgrep-core -profile -lang js \ -config semgrep-rules/typescript/react/security/audit/react-props-injection.yaml \ semgrep/parsing-stats/lang/javascript/tmp/mui-org-material-ui/test/bundling/fixtures/next-webpack5 #^ Now takes about ~0.1s (vs ~1.5s, or ~12x faster) % semgrep -j1 --time --max-target-bytes=250000 --config semgrep-rules/typescript/react/security/audit/react-props-injection.yaml semgrep/parsing-stats/lang/javascript/tmp/* #^ Match time dropped from ~20s to ~10 (2x faster), but overall # there is not much of a speed up since parsing takes ~80% of # the time.
-
Iago Abal authored
test plan: make test # test included
-
- 20 Aug, 2021 1 commit
-
-
Brendon Go authored
-
- 18 Aug, 2021 2 commits
-
-
raghavjain3 authored
-
raghavjain3 authored
-
- 17 Aug, 2021 3 commits
-
-
Martin Jambon authored
-
David Frankel authored
-
Brendon Go authored
-