Michael Nebel

C#: SQL Injection improvements for SQLite.

14

The content on this PR is to address the issue: https://github.com/github/codeql-csharp-team/issues/172 Following the link to the original ticket it is worth noticing that 1. The project referenced on the ticket...

C#: Negative summaries (ie. no flow through)

8

In this PR we introduce the concept of `negative` flow summaries, which is a summary of a callable stating that there is no flow via this callable. The implementation introduces...

In this PR we introduce the following improvements to the the stub generator. - Enums are now explicitly typed and enum values are assigned. - Support for function pointers types....

C#: Dynamically create type based summaries

1

This is an experimental branch, where we dynamically create type based summaries for all library code not already covered by a summary.

The change is to align the naming in Java and C#.

C#: Only use generated models.

1

This is branch to allow testing of generated models. We will perform an experiment and compare against the branch, where no models are included.

This is an experimental branch for disabling all flow summaries to check the effect it has on the produced alerts.