github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
62 152 коммитов 1 541 ветка 132 Теги 497 MiB
Граф коммитов

62152 Коммитов

Автор SHA1 Сообщение Дата
Jeroen Ketema 12abf07d1d
C++: Remove unneeded extractor option 2023-12-20 09:58:32 +01:00
Michael Nebel 6831775a8d
Merge pull request #15154 from michaelnebel/csharp/morestubs 
C#: Replace more hand written stubs with generated ones.
 2023-12-20 09:54:19 +01:00
Óscar San José b55c299533
Merge pull request #15112 from fossilet/upstream_main 
Fix sphinx.add_lexer.
 2023-12-19 21:28:24 +01:00
Edward Minnix III 06544e989e
Merge pull request #15126 from egregius313/egregius313/java/minor/add-replace-to-mapmutator 
Java: Add the `Map#replace` and `Map#replaceAll` methods to `MapMutator` in `Maps.qll`
 2023-12-19 12:10:34 -05:00
Ed Minnix a93d6dd956 Change note 2023-12-19 10:28:23 -05:00
Ed Minnix ce130c6ed5 Add replace to MapMutator 2023-12-19 10:23:06 -05:00
Jeroen Ketema 4009b42891
Merge pull request #15146 from jketema/almost-empty-pch 
C++: Update test after extractor changes
 2023-12-19 16:20:35 +01:00
Michael Nebel 681ac7e5f0 C#: Update tests (and expected output) to use the generated EntityFramework stubs. 2023-12-19 15:22:45 +01:00
Michael Nebel 80f3c6cc2b C#: Manual changes to the project dependecies to avoid conflicts when multiple projects are loaded from source. 2023-12-19 15:21:56 +01:00
Michael Nebel 272f3265ea C#: Delete the handwritten EntityFramework stubs. 2023-12-19 15:20:53 +01:00
Mathias Vorreiter Pedersen cfaa2d881a
Merge pull request #15152 from MathiasVP/fix-unnecessary-evaluation-of-debug-strings 
C++: Fix unnecessary evaluation of debug strings
 2023-12-19 13:59:20 +01:00
Mathias Vorreiter Pedersen 95cd31fce3 C++: Silence warnings. 2023-12-19 12:29:16 +01:00
Mathias Vorreiter Pedersen 4844c43f06 C++: Cleanup now that we're back to an abstract class. 2023-12-19 12:11:38 +01:00
Mathias Vorreiter Pedersen 937e0ee8d2 C++: Go back to abstract classes. 2023-12-19 12:10:57 +01:00
Michael Nebel 37b510cac0 C#: Add stubs for entity framework. 2023-12-19 11:52:59 +01:00
Mathias Vorreiter Pedersen b6974d674c
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DebugPrinting.qll 
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
 2023-12-19 11:47:46 +01:00
Michael Nebel e12165707f C#: Delete the hand written stub System.Data.cs. 2023-12-19 11:37:33 +01:00
Michael Nebel 19a4cf3a7b C#: Update test cases that depends on System.Data.cs to use generated stubs. 2023-12-19 11:37:32 +01:00
Michael Nebel 7cb758a61b C#: Add stubs for System.Data.OleDb. 2023-12-19 11:37:32 +01:00
Mathias Vorreiter Pedersen 8230a90db6 C++: No need for another 'stars' predicate in 'PrintIRUtilities'. 2023-12-19 11:22:27 +01:00
Rasmus Wriedt Larsen 2305d55967
Merge pull request #15101 from yoff/python/update-InlineTaintTestPaths-to-new-api 
Python: update to new API update is in a comment, so compilation never failed in CI.
 2023-12-19 11:10:55 +01:00
Mathias Vorreiter Pedersen 9b25834771 C++: Use parameterized modules instead of abstract classes and predicates to handle debug printing. 2023-12-19 11:08:41 +01:00
Mathias Vorreiter Pedersen 501645920f C++: Move private stuff from 'DataFlowUtil' to public stuff 'DataFlowPrivate'. Also make 'PostUpdateNodeImpl' public in 'DataFlowUtil'. Sadly, this means that it's visible at the query level (as DataFlow::PostUpdateNodeImpl), but I've added a big INTERNAL QLDoc on it to make sure people don't use it. 2023-12-19 10:41:35 +01:00
Jeroen Ketema 180e752a23
C++: Update test after extractor changes 
Also remove incorrect FP comment. clang does not support `#pragma hdrstop` in
its non-cl-emulation mode.
 2023-12-18 23:30:13 +01:00
yoff f50817e92a
Merge pull request #15104 from RasmusWL/fewer-meta-queries 
Python: Remove `@tags meta` from internal debug queries
 2023-12-18 21:27:33 +01:00
yoff e0c027f13c
Merge pull request #14848 from hvitved/python/shared-type-tracking 
Python: Adopt shared type tracking library
 2023-12-18 21:14:42 +01:00
Mathias Vorreiter Pedersen 41c49ae05b
Merge pull request #15136 from MathiasVP/fix-joins-in-use-after-free 2023-12-18 17:18:06 +01:00
Edward Minnix III 56921a6e21
Merge pull request #14040 from egregius313/egregius313/weak-hashing-properties 
Java: Add support for algorithm names specified in `.properties` files to `java/potentially-weak-cryptographic-algorithm`
 2023-12-18 09:38:58 -05:00
Tamás Vajk d5f47a3d75
Merge pull request #15124 from tamasvajk/feature/telemetry/extraction-information 
C#: Add telemetry query to report extractor information
 2023-12-18 15:30:35 +01:00
Tamás Vajk c5cf0641bf
Merge pull request #15131 from tamasvajk/standalone/file-name 
C#: Exclude not existing or problematic files from standalone extraction
 2023-12-18 15:30:01 +01:00
Mathias Vorreiter Pedersen d308bb40a0
Merge pull request #15132 from MathiasVP/fix-joins-in-isModifiableAtImpl 
C++: Fix joins in `isModifiableAtImpl`
 2023-12-18 15:01:36 +01:00
Mathias Vorreiter Pedersen aafde4d18d C++: Fix joins in 'cpp/use-after-free'. 2023-12-18 14:49:09 +01:00
Tamas Vajk f9c6d5e808 Ensure files are only enumerated once 2023-12-18 14:39:02 +01:00
Tamas Vajk b14d26ab62 C#: Exclude not existing or problematic files from extraction 2023-12-18 14:10:56 +01:00
Tom Hvitved a776132a10 Python: Deprecate more predicates 2023-12-18 13:05:17 +01:00
Tamas Vajk 1a8857dab8 Create problematic additional file in integration test 2023-12-18 12:32:24 +01:00
Mathias Vorreiter Pedersen 50b754b6c1
Merge pull request #15129 from MathiasVP/fix-joins-in-wrong-type-format-argument 
C++: Fix joins in `cpp/wrong-type-format-argument`
 2023-12-18 12:17:17 +01:00
Mathias Vorreiter Pedersen f5c52ac496 C++: Fix joins in 'isModifiableAtImpl'. 2023-12-18 12:02:33 +01:00
Michael Nebel d8fdba009a
Merge pull request #15119 from michaelnebel/csharp/stubgenimprovements 
C#: Escape method names in stub generation.
 2023-12-18 11:35:29 +01:00
Michael Nebel b10137c24c C#: Pick the first version number encountered. 2023-12-18 11:02:49 +01:00
Tamas Vajk de1134ac48 C#: Add linux-only integration test 2023-12-18 10:55:11 +01:00
Mathias Vorreiter Pedersen 8ed9fbb295
Merge pull request #15123 from MathiasVP/fix-fps-in-double-free 
C++: Fix FPs in `cpp/double-free` and `cpp/use-after-free`
 2023-12-18 10:44:18 +01:00
Mathias Vorreiter Pedersen e88c6888bc
Merge pull request #15121 from MathiasVP/fix-joins-in-av-rule-145 
C++: Fix joins in `AV Rule 145`
 2023-12-18 10:42:46 +01:00
Tamas Vajk 3f843d820c Add telemetry query for known/unknown expression kinds 2023-12-18 10:02:32 +01:00
Mathias Vorreiter Pedersen 3897befbe2 C++: Fix joins in 'cpp/wrong-type-format-argument'. 2023-12-18 09:49:34 +01:00
Tony Torralba 9446249e94
Merge pull request #15012 from atorralba/atorralba/java/fix-missing-pinning-fp 
Java: Fix FPs in Missing certificate pinning
 2023-12-18 09:37:18 +01:00
Tony Torralba 0524289a73
Update java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql 2023-12-18 08:50:10 +01:00
Tom Hvitved 020a049d30
Merge pull request #15103 from hvitved/ruby/simple-pattern-flow 
Ruby: Model simple pattern matching as value steps instead of taint steps
 2023-12-18 08:49:11 +01:00
Mathias Vorreiter Pedersen 2eda5927d9
Merge pull request #15125 from geoffw0/launchoptions 
Swift: Add more test cases for application(...launchOptions...).
 2023-12-18 08:42:50 +01:00
Geoffrey White 1908575386 Swift: Add more test cases for launchOptions as a source. 2023-12-15 18:11:28 +00:00