Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge changes from develop to master, to publish TC #30 (2019-01-09). #1264

Merged
merged 32 commits into from
Feb 6, 2019

Commits on Nov 14, 2018

  1. Configuration menu
    Copy the full SHA
    9d2f619 View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2018

  1. Configuration menu
    Copy the full SHA
    5841151 View commit details
    Browse the repository at this point in the history

Commits on Dec 4, 2018

  1. Fix #1138: Add validation rule: contextRegion requires region (#1142)

    Also:
    
    - Enhance the "new-style" verification so that we no longer require the file "Invalid_Expected.sarif". Each file can now contain a property that specifies the expected locations of all the validation results.
    Larry Golding authored Dec 4, 2018
    Configuration menu
    Copy the full SHA
    b389a3e View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2018

  1. Configuration menu
    Copy the full SHA
    7536475 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    fc9ccee View commit details
    Browse the repository at this point in the history
  3. Mark result.message as required in the schema (#1147)

    * Mark result.message as required in the schema
    
    * Update release history with result.message breaking change.
    
    * Fix typo in testoutput.
    michaelcfanning authored Dec 5, 2018
    Configuration menu
    Copy the full SHA
    41cd5c4 View commit details
    Browse the repository at this point in the history

Commits on Dec 6, 2018

  1. Configuration menu
    Copy the full SHA
    b015513 View commit details
    Browse the repository at this point in the history
  2. Upgrade more validator functional tests (#1149)

    We apply the new functional test pattern to four more rules:
    - `EndColumnMustNotBeLessThanStartColumn`
    - `EndLineMustNotBeLessThanStartLine`
    - `EndTimeMustBeAfterStartTime` (which is misnamed, and in a future PR we will rename it to `EndTimeMustNotBeBeforeStartTime`)
    - `MessageShouldEndWithPeriod`
    
    In addition, we remove the test data for a rule that no longer exists, `HashAlgorithmsMustBeUnique` (which no longer applies because `file.hashes` is now an object keyed by the hash algorithm).
    
    Because there are so many properties of type `message`, exhaustively testing the rule `MessageShouldEndWithPeriod` revealed many holes in the visitor class `SarifValidationSkimmerBase`, which I plugged. As we have discussed, we should generate this class from the schema.
    
    After this, there are only two more rules to convert:
    - `UriBaseIdRequiresRelativeUri`
    - `UseAbsolutePathsForNestedFileUriFragments`
    
    ... but this PR is already large enough.
    Larry Golding authored Dec 6, 2018
    Configuration menu
    Copy the full SHA
    c75aa9b View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    7c40bc5 View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2018

  1. Emit column kind default explicitly for Windows SDK SARIF emit. (#1160)

    * Emit column kind default explicitly for Windows SDK SARIF emit.
    
    * Update release notes
    
    * More column kind test fixes
    
    * Change behavior to always serialize column kind.
    
    * Always serialize column kind
    michaelcfanning authored Dec 7, 2018
    Configuration menu
    Copy the full SHA
    8043741 View commit details
    Browse the repository at this point in the history

Commits on Dec 8, 2018

  1. Finish validator functional test upgrade (#1159)

    * Rename rule EndTimeMustBeAfterStartTime => ...MustNotBeBefore...
    
    * Upgrade UriBaseIdRequiresRelativeUri tests.
    
    * Remove obsolete rule UseAbsolutePathsForNestedFileUriFragments.
    
    * Remove support for old test design.
    Larry Golding authored and michaelcfanning committed Dec 8, 2018
    Configuration menu
    Copy the full SHA
    4cbb5fd View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    8f108ea View commit details
    Browse the repository at this point in the history
  3. Fortify FPR converter improvements + unit tests (#1161)

    * Improvements and corrections
    
    Populate originalUriBaseIds from <SourceBasePath>
    Populate tFL.kind from <Action type="...">
    Add default node to result.locations
    
    * Add location annotation for Action elements with no type attribute
    
    * Support node annotations + uribasepath + test updates
    
    * Update FortifyTest.fpr.sarif
    
    * Add converter tests & assets + opportunistic code cleanup
    
    * PR feedback
    EasyRhinoMSFT authored Dec 8, 2018
    Configuration menu
    Copy the full SHA
    ebbcbc7 View commit details
    Browse the repository at this point in the history

Commits on Dec 26, 2018

  1. Logical locations dictionaries to arrays (#1170)

    The core change here is the transformation of `run.logicalLocations` from a dictionary (which is keyed, generally, by the fully qualified name of a logical location) to an array of logical locations. Result locations now reference logical locations by a logical location index. This changes removes the necessity of resolving key name collisions for logical locations that differ only by type (a namespace that collides with the fully qualified name of a type being the classic example).
    
    In addition to making the core change, we have also authored a transformation that converts existing pre-release SARIF v2 files to the new design. We accomplish this by creating dictionaries, with value type comparison for keys, that are keyed by logical locations. This processing requires that any parent keys already exist in the array (so that a logical location can populate its parent logical location index, if any).
    
    In addition to the core functionality and any transformation of individual log files, result matching presents special complications. In a result matching scenario, the logical location index of a result is not relevant to its identify: only the contents of the logical location this index points to are relevant. Furthermore, when merging a baseline file (which can contain results that are exclusive to a single log file within the matching domain), logical location indices are subject to change and must be updated.
    For this scenario and at least one other, we use a visitor pattern to update indices. The reason is that locations are pervasive in the format and the visitor provides a convenient mechanism to put common location processing logical. This visitor uses puts additional pressure on the transformation logic, as it entails additional deserialization of the JSON. With more time/effort, we could have exhaustively updated all locations using the JParser/JObject/etc. API domain. Oh well.
    
    Finally, we must update the logical that transforms v1 to v2 and vice versa.
    
    Whew. If that was not already sufficiently intrusive, this work revealed some minor flaws in various converters (the ones that handle logical locations): AndroidStudio, FxCop and PREfast.
    This change is complex but valuable. Logical locations are now expressed as coherent objects in their table. In the main, I have preferred to leave `result.fullyQualifiedName` populated (in addition to `result.logicalLocationIndex`, to support easily looking up matching logical locations).
    michaelcfanning authored and Larry Golding committed Dec 26, 2018
    Configuration menu
    Copy the full SHA
    12cbea4 View commit details
    Browse the repository at this point in the history
  2. Add result.rank and ruleConfiguration.defaultRank (#1167)

    As we discussed offline with @fishoak, the design is good as it stands. The only change is that the default should be -1. I filed oasis-tcs/sarif-spec#303 for that, and put it on the agenda for TC #30.
    Larry Golding authored Dec 26, 2018
    Configuration menu
    Copy the full SHA
    81b8f39 View commit details
    Browse the repository at this point in the history
  3. Logical locations notes (#1184)

    * Respond to a small # of PR comments related to recent logical locations change.
    
    * Fix visibility on helper
    michaelcfanning authored Dec 26, 2018
    Configuration menu
    Copy the full SHA
    d3fff39 View commit details
    Browse the repository at this point in the history

Commits on Dec 28, 2018

  1. Logical locations notes (#1185)

    * Respond to a small # of PR comments related to recent logical locations change.
    
    * Fix visibility on helper
    
    * Fix up v1 transformation with keys that collide
    
    * Preserve decorated name data
    
    * Rebaseline test for decorated name propagation
    
    * Respond to PR feedback. Update tests to close test holes.
    
    * Rebaseline updated test
    
    * Test key collision in annotated code locations.
    
    * Update baseline
    michaelcfanning authored Dec 28, 2018
    Configuration menu
    Copy the full SHA
    b1ed2c7 View commit details
    Browse the repository at this point in the history

Commits on Jan 1, 2019

  1. Incorporate "provenance" schema changes and fix package licenses (#1193)

    * Add autogenerated RuleConfiguration.cs missed from earlier commit.
    
    * Upgrade to NuGet.exe 4.9.2 to handle new license tag.
    
    * Remove unused 'Owners' element from build.props.
    
    * Add package Title.
    
    * Use packageLicenseExpression to specify package license.
    
    * Suppress NU5105 (about SemVer 2.0.0 strings) for "dotnet pack" packages.
    
    NuGet.exe still warns for ".nuspec" packages.
    
    * Incorporate latest "provenance" schema changes.
    
    * Address PR feedback.
    Larry Golding authored and michaelcfanning committed Jan 1, 2019
    Configuration menu
    Copy the full SHA
    a8d21ed View commit details
    Browse the repository at this point in the history

Commits on Jan 2, 2019

  1. External property files (#1194)

    * Update spec for externalPropertiesFile object.
    
    * Add external property files to schema.
    
    * Finish merge of provenance changes.
    
    * Update release notes.
    
    * Remove vertical whitespace.
    
    * PR feedback. Fix 'properties' to refer to an external file not an actual properties bag.
    
    * Remove code gen hint that makes external property files a property bag holder.
    
    * Introduce missing brace. Fix up code emit for 'properties' property that isn't a property bag.
    michaelcfanning authored Jan 2, 2019
    Configuration menu
    Copy the full SHA
    db240db View commit details
    Browse the repository at this point in the history
  2. Incorporate schema changes for versionControlDetails.mappedTo and rul…

    …e.deprecatedIds (#1198)
    
    * Incorporate "versionControlDetails.mappedTo" schema change.
    
    * Incorporate "rule.deprecatedIds" schema change.
    
    * Revert updates to comprehensive.sarif (to allow transformer to continue to use this as test content).
    Larry Golding authored and michaelcfanning committed Jan 2, 2019
    Configuration menu
    Copy the full SHA
    9210681 View commit details
    Browse the repository at this point in the history

Commits on Jan 3, 2019

  1. Array scrub part 1: everything but anyOf-or-null properties. (#1201)

    NOTE: For explicitness, I added schema attributes even when they matched the JSON schema defaults, namely: `"minItems": 0` and `"uniqueItems": false`.
    Larry Golding authored Jan 3, 2019
    Configuration menu
    Copy the full SHA
    9eac091 View commit details
    Browse the repository at this point in the history

Commits on Jan 8, 2019

  1. Fix v1->v2 hash transformation (#1203)

    CreateHash must be called to handle algorithm names that aren't in our translation table. Also updated a unit test to cover this case.
    EasyRhinoMSFT authored and michaelcfanning committed Jan 8, 2019
    Configuration menu
    Copy the full SHA
    9372d0f View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2019

  1. Integrate jschema 0.61.0 into SDK (#1204)

    michaelcfanning authored and Larry Golding committed Jan 9, 2019
    Configuration menu
    Copy the full SHA
    95ea5f3 View commit details
    Browse the repository at this point in the history

Commits on Jan 28, 2019

  1. Merging arrays transformations back into 'develop' branch (#1236)

    * Fix up tests
    
    * Conversion to files array. WIP. Core SARIF component build complete except for SarifLogger tail.
    
    * Add fileIndex property to file object (#1186)
    
    * Fix up tests
    
    * PR feedback to improve schema comment
    
    * Logical locations notes (#1185) (#1187)
    
    * Respond to a small # of PR comments related to recent logical locations change.
    
    * Fix visibility on helper
    
    * Fix up v1 transformation with keys that collide
    
    * Preserve decorated name data
    
    * Rebaseline test for decorated name propagation
    
    * Respond to PR feedback. Update tests to close test holes.
    
    * Rebaseline updated test
    
    * Test key collision in annotated code locations.
    
    * Update baseline
    
    * Reduced files array build (#1191)
    
    * Sarif and Sarif.Converters now building
    
    * Files array (#1188)
    
    * Add fileIndex property to file object (#1186)
    
    * Fix up tests
    
    * PR feedback to improve schema comment
    
    * Logical locations notes (#1185) (#1187)
    
    * Respond to a small # of PR comments related to recent logical locations change.
    
    * Fix visibility on helper
    
    * Fix up v1 transformation with keys that collide
    
    * Preserve decorated name data
    
    * Rebaseline test for decorated name propagation
    
    * Respond to PR feedback. Update tests to close test holes.
    
    * Rebaseline updated test
    
    * Test key collision in annotated code locations.
    
    * Update baseline
    
    * DRY out converters to isolate shared code.
    
    * Restore essential change in schema that converts files dictionary to an array.
    
    * Simplify ShouldSerialize logic
    
    * Remove unused namespaces
    
    * Respond to PR feedback.
    
    * Respond to PR feedback
    
    * End-to-end build works. Now we can author core transformation and fix tests. (#1192)
    
    * Fix up merge from 'develop' branch.
    
    * Update supporting test code for processing checked in files. (#1202)
    
    * Update supporting test code for processing checked in files.
    
    * Update nested files test to contain single file.
    
    * Files array basic transform (#1205)
    
    * Update supporting test code for processing checked in files.
    
    * Update nested files test to contain single file.
    
    * WIP. Furhter progress
    
    * Fix up samples build
    
    * Fix up merge from basic transform branch
    
    * Mime type validation (#1206)
    
    * Fix up merge from basic transform branch
    
    * Fix up mime test
    
    * Start work on v1 <-> v2 transformation (#1208)
    
    * Restore TransformCommand and first (unaffected) unit test
    
    * Restore "minimal prerelease v2 to current v2" test.
    
    * estore "minimal v1 to current v2" test.
    
    * Restore remaining TransformCommand unit tests.
    
    * Uncomment v2 => v1 tests to observe failures.
    
    * Uncomment 'transform' command.
    
    * Restore MakeUrisAbsoluteVisitor tests (#1210)
    
    This change updates the visitor that expands URIs in the presence of `originalUriBaseIds`. Turns out there was technical debt here, because our tests provided `originalUriBaseIds` equivalents in the property bag (because we had no official SARIF slot for them). I did not notice this gap when we made the schema change to add `originalUriBaseIds`.
    
    * Get v2 -> v1 transform working with files array (#1211)
    
    Test failure count is down to 32; will be 28 when you merge your fix.
    
    There is not -- and never was -- a test case for fileLocations that use uriBaseId (never was one). I know for a fact that there is no code to support that case. You’ll see a comment to that effect in the code. I will take care of that next. Then I will move on to v1 -> v2 transform.
    
    As part of this change, the `SarifCurrentToVersionOneVisitorTests` are now based on the `RunTest` helper method from the base class `FileDiffingTests`.
    
    * Convert debug assert to exception to make test execution more deterministic (#1214)
    
    * Update insert optional data tests and update indices visitor. (#1212)
    
    * Update insert optional data tests and update indices visitor.
    
    * Delete speculatively needed file
    
    * Remove erroneous override of base visit method.
    
    * Rework summary comment on DeletesOutputsDirectoryOnClassInitializationFixture.
    
    * Update clang analyzer name. Flow converter log verification through JToken comparison. (#1213)
    
    * The multiool, core sarif, and validation test binaries now all pass (#1215)
    
    * The multiool, core sarif, and validation test binaries now all pass completely.
    
    * Remove unwanted assert that may fire during unit testing.
    
    * Merge from files-array
    
    * PR feedback.
    
    * PR feedback tweaks
    
    * Accept PR feedback from previous change. (#1216)
    
    Use LINQ IEnuemrable.Except in the unit test, which improves readability without compromising efficiency (because Except uses a Set to do its work in O(N) time).
    
    * Fix Sarif.Driver and Sarif.Functional tests. (#1217)
    
    * Fix Sarif.Driver and Sarif.Functional tests.
    
    * Restore test file
    
    * Fix Semmle tests and Fortify converter: all tests now pass. (#1218)
    
    * Sarif converters fixups (#1219)
    
    * Fix semmle tests and fority.
    
    * Final test fixups
    
    * Invoke appveyor for files-array branch.: (#1220)
    
    * Update SarifVersionOneToCurrentVisitor for run.files array (#1221)
    
    * Uncomment v1 -> v2 tests; 3/14 fail.
    
    * Move test data to locations expected by FileDiffingTests.
    
    * Fix up some IDE C#7 code cleanups.
    
    * Use FileDiffingTests helper.
    
    * Fix bug in FileDiffingTests that caused a test failure.
    
    * Remove default-valued argument from a call to RunTest.
    
    * Create basic files array
    
    Does not yet have fileIndex, parentIndex, or response file handling.
    
    * Revert incorrect change in FileDiffingTests.
    
    * Fix one unit test with spot fix to "expected" file.
    
    * Fix up some C#7 IDE warnings
    
    * Force update in FileDiffing tests to avoid deserialization errors from out of date "expected" files.
    
    * Fix missing "modified" flag sets in PreRelCompatTransformer.
    
    * Populate fileIndex in run.files array.
    
    * Fix unit test by fixing fileLocation creation.
    
    * Restore response file handling.
    
    * Populate fileIndex on fileLocations as appropriate.
    
    * Fix last test failure by reworking response file handling.
    
    * Feedback: Introduce transformer helper PopulatePropertyIfAbsent.
    
    * Feedback: Tighten platform-independent string compare.
    
    Also:
    - Reformat unit test lines.
    
    * Feedbakc: Revert FileDiffingTest change; downgrade affected test files to provoke transform
    
    * Basic rules transformation (except for v1 <-> v2 conversion) (#1223)
    
    * Basic rules transformation (except for v1 <-> v2 conversion)
    
    * Respond to very excellent PR feedback.
    
    * PR feedback
    
    * Add files array tests for nested files and uriBaseIds (#1226)
    
    * Add failing v1 -> v2 nested files test
    
    * Fix existing mis-handling of analysisTarget and resultFile.
    
    * Get nested files test case working.
    
    * Add failing v1 => v2 uriBaseId test.
    
    * Populate v2 uriBaseId.
    
    * Fix up expected v2 fileLocation.properties: test passes.
    
    * Enhance uriBaseIds test case.
    
    * Implement v2->v1 conversion for rules dictionary (#1228)
    
    * Notification rule index (#1229)
    
    * Add notification.ruleIndex and increase flatten messages testing
    
    * Notification message tests + add notification.ruleIndex to schema
    
    * Notification rule index (#1230)
    
    * Add notification.ruleIndex and increase flatten messages testing
    
    * Notification message tests + add notification.ruleIndex to schema
    
    * Missed feedback from previous PR (#1231)
    
    * Implement v1->v2 conversion for rules dictionary (#1232)
    
    * Partial implementation
    
    * Get last test working.
    
    * Somebody missed checking in a generated file.
    
    * Schema changes from TC #30 (#1233)
    
    * Add source language, fix rank default.
    
    * Adjust rank minimum to accommoodate default.
    
    * Fix broken test.
    
    * Remove unnecessary None items from project file.
    
    * PR feedback
    
    * Files array results matching (#1234)
    
    * WIP preliminary results matching
    
    * Restore results matching for files array
    
    * Add back autogenerated (unused) namespace directive
    michaelcfanning authored Jan 28, 2019
    Configuration menu
    Copy the full SHA
    7170b5f View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2019

  1. Configuration menu
    Copy the full SHA
    7ffee76 View commit details
    Browse the repository at this point in the history
  2. Mention rules array change in release history. (#1243)

    Larry Golding authored and michaelcfanning committed Jan 29, 2019
    Configuration menu
    Copy the full SHA
    0def4c5 View commit details
    Browse the repository at this point in the history

Commits on Jan 30, 2019

  1. Baseline states (#1245)

    * Add 'updated' state to baselineState and rename 'existing' to 'unchanged'
    
    * Update prerelease transformer
    
    * Enable appveyor build + test. Correct version constant.
    
    * Update test. Respond to PR feedback.
    michaelcfanning authored Jan 30, 2019
    Configuration menu
    Copy the full SHA
    07811fd View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2019

  1. Fix #1251 #1252 #1253 (#1254)

    * Fixes + test coverage + cleanup
    
    * Update SDK version
    
    * Update version in test assets
    EasyRhinoMSFT authored Feb 1, 2019
    Configuration menu
    Copy the full SHA
    6d819cd View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2019

  1. Configuration menu
    Copy the full SHA
    503c659 View commit details
    Browse the repository at this point in the history

Commits on Feb 6, 2019

  1. Revert unintentional change to BaselineState (#1262)

    The `develop` branch should match TC <span>#</span>30, but we inadvertently introduced a change from  TC <span>#</span>31: replacing `BaselineState.Existing` with `.Unchanged` and `Updated`.
    
    I did not revert the entire change. Some things (like having AppVeyor build the `tc-31` branch instead of the defunct `files-array` branch, and some C# 7 updates to the `PrereleaseCompatibilityTransformer`) were good, and I kept them.
    
    Also:
    - Update the version to `2019-01-09` in preparation for merge to `master`.
    Larry Golding authored Feb 6, 2019
    Configuration menu
    Copy the full SHA
    1fc5557 View commit details
    Browse the repository at this point in the history
  2. Transfer Bogdan's point fix (analysisTarget handling) from master to …

    …develop (#1263)
    
    In preparation for merging `develop` to `master` for the publication of version 2019-01-09 (TC <span>#</span>30), we apply the recent changes in `master` to the `develop` branch. These changes fixed two bugs in the handling of `analysisTarget` in the v1-to-v2 converter (`SarifVersionOneToCurrentVisitor`).
    
    Now `develop` is completely up to date, and when we merge `develop` to `master`, we _should_ be able to simply take the "incoming" changes on all conflicting files.
    
    * Cherry-pick: v1 transformer analysis target region persistence fix. (#1238)
    * Mention NuGet publishing changes in release history.
    * Cherry pick: Don't emit v2 analysisTarget if there is no v1 resultFile. (#1247)
    Larry Golding authored Feb 6, 2019
    Configuration menu
    Copy the full SHA
    8197315 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    cc6ae25 View commit details
    Browse the repository at this point in the history