github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
58 799 коммитов 1 541 ветка 132 Теги 497 MiB
Граф коммитов

58799 Коммитов

Автор SHA1 Сообщение Дата
Geoffrey White 311daa2539 Swift: Accept fixed test case having merged in main. 2023-09-19 10:39:59 +01:00
Geoffrey White 037f246cda Merge branch 'main' into arraysteptest 2023-09-19 10:33:32 +01:00
Tony Torralba c45ca7212a
Merge pull request #14126 from intrigus-lgtm/patch-9 
Java: Fix alert message
 2023-09-19 09:52:42 +02:00
Tony Torralba 9340347799
Merge pull request #14253 from github/workflow/coverage/update 
Update CSV framework coverage reports
 2023-09-19 09:52:04 +02:00
github-actions[bot] 562dbf1b8d Add changed framework coverage reports 2023-09-19 00:15:19 +00:00
Rasmus Wriedt Larsen 3df36ec89c
Merge pull request #14245 from RasmusWL/minor-modeling-fixup 
Python: Modernize modeling of `BaseHTTPRequestHandler`
 2023-09-18 17:43:06 +02:00
Mathias Vorreiter Pedersen 6a2a029c4c
Merge pull request #14244 from MathiasVP/remove-unnecessary-size_t-cast 
C++: Remove unnecessary `size_t` cast from allocations
 2023-09-18 16:18:24 +01:00
Erik Krogh Kristensen 998237e8af
Merge pull request #13488 from erik-krogh/finalAlias 
Shared: use final class aliases to use `extends` instead of `instanceof` in the shared libraries
 2023-09-18 14:26:22 +02:00
yoff 4a37c2fc3a
Merge pull request #13778 from geoffw0/javaparsemode 
Java: Understand multiple parse mode flags specified in a regular expression string
 2023-09-18 14:22:59 +02:00
Paolo Tranquilli dc299fc9fa
Merge pull request #14208 from github/redsun82/swift-unordered-base-types 
Swift: rename `base_types` in `TypeDecl` to `inherited_types`
 2023-09-18 14:21:20 +02:00
Rasmus Wriedt Larsen ad1743ecde
Python: Modernize modeling of `BaseHTTPRequestHandler` 2023-09-18 14:13:27 +02:00
Tamás Vajk c4d7302f9e
Merge pull request #14228 from tamasvajk/standalone-implicit-usings 
C#: Generate source file with implicit usings in Standalone
 2023-09-18 13:26:09 +02:00
Tony Torralba bd31e1004a
Merge pull request #14063 from github/workflow/coverage/update 
Update CSV framework coverage reports
 2023-09-18 13:23:32 +02:00
Geoffrey White 4323bee243
Merge pull request #13980 from geoffw0/logfix 
Swift: Improvements related to the swift/cleartext-logging query.
 2023-09-18 12:18:40 +01:00
Tamas Vajk fa814a5276 Add test cases for implicit using parsing 2023-09-18 12:47:50 +02:00
Mathias Vorreiter Pedersen 0e9f5f6b8e C++: Accept test changes. 2023-09-18 11:46:19 +01:00
Mathias Vorreiter Pedersen 38b100531b C++: Only add conversion when necessary. 2023-09-18 11:46:11 +01:00
Mathias Vorreiter Pedersen 53561b7883 C++: Add tests for sized allocation without a need for a synthesized conversion. 2023-09-18 11:45:18 +01:00
intrigus-lgtm 874f91c7ae
Java: Further alert message improvement 
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
 2023-09-18 12:25:31 +02:00
Mathias Vorreiter Pedersen 734a91db9c
Merge pull request #14237 from MathiasVP/range-analysis-perf 
C++: Fix order of non-linear join in range analysis
 2023-09-18 10:38:19 +01:00
Geoffrey White 86b0fae77e Swift: Update uses of deprecated ArrayContent. 2023-09-18 10:28:45 +01:00
Geoffrey White d15420c42c Swift: Consequences of change in main on the test internals. 2023-09-18 10:07:23 +01:00
Geoffrey White c3ea0cea91 Merge branch 'main' into logfix 2023-09-18 10:00:16 +01:00
Tony Torralba b08e410f45
Merge pull request #14029 from atorralba/atorralba/apache-cxf-models 
Java: Add new Apache CXF models
 2023-09-18 10:54:05 +02:00
erik-krogh 9c0682848e
use final class aliases to use `extends` instead of `instanceof` in the shared libraries 2023-09-18 10:25:49 +02:00
Erik Krogh Kristensen a3e2e420f0
Merge pull request #14241 from github/dependabot/cargo/ql/chrono-0.4.31 
Bump chrono from 0.4.30 to 0.4.31 in /ql
 2023-09-18 08:41:25 +02:00
dependabot[bot] f3a746c324
Bump chrono from 0.4.30 to 0.4.31 in /ql 
Bumps [chrono](https://github.com/chronotope/chrono) from 0.4.30 to 0.4.31.
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chronotope/chrono/compare/v0.4.30...v0.4.31)

---
updated-dependencies:
- dependency-name: chrono
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-18 03:10:03 +00:00
github-actions[bot] 0ae4b628a3 Add changed framework coverage reports 2023-09-18 00:15:17 +00:00
Mathias Vorreiter Pedersen 46b15fa6f2 C++: Fix join of non-linear joins. 2023-09-16 01:33:16 +01:00
Mathias Vorreiter Pedersen cdf5872eb3
Merge pull request #14217 from alexet/is-trivial-built-in 
CPP:Make __is_trivial a builtin operation.
 2023-09-15 16:01:25 +01:00
Chris Smowton f160c6c646
Merge pull request #14195 from Kwstubbs/SQL_int_sanitizer 
Add Integer/Boolean Sanitizer to SQL injection Query
 2023-09-15 14:13:35 +01:00
Chris Smowton aaa230a791
Merge branch 'main' into SQL_int_sanitizer 2023-09-15 13:44:58 +01:00
Chris Smowton 062024b3d6
Merge pull request #14232 from smowton/smowton/fix/autoformat 
Fix formatting mistake
 2023-09-15 13:00:40 +01:00
Chris Smowton a63bb1bbed
Tidy 2023-09-15 12:58:44 +01:00
Chris Smowton e62fcf9a45 Fix formatting mistake 2023-09-15 12:37:34 +01:00
Tamas Vajk c34fef1eb6 Adjust integration tests after path changes and generating file with global usings 2023-09-15 13:35:25 +02:00
Chris Smowton 24dc09efad
Merge pull request #14206 from smowton/smowton/feature/add-java-miscompilation-tests 
Java: add tests for programs that don't compile
 2023-09-15 11:14:04 +01:00
Mathias Vorreiter Pedersen 6c7833f28c
Merge pull request #14223 from MathiasVP/add-explicit-dereferenced-by-operation-base-case-predicate 
C++: Add a `directDereferencedByOperation` predicate
 2023-09-15 10:19:26 +01:00
Tom Hvitved 14561c414b
Merge pull request #14225 from hvitved/ruby/fix-bad-join 
Ruby: Fix a bad join
 2023-09-15 10:59:24 +02:00
Tamas Vajk d725bd9169 C#: Generate source file with implicit usings in Standalone 2023-09-15 10:52:57 +02:00
Chris Smowton c5001a86f6 Fix test expectations 2023-09-14 20:45:54 +01:00
Tom Hvitved c83a29c27f Ruby: Fix a bad join 
Before
```
Evaluated relational algebra for predicate Sinatra#e09174a3::Sinatra::ErbLocalsAccessSummary#fff@22c05bb6 with tuple counts:
          212957   ~2195%    {1} r1 = JOIN _Constant#54e8b051::ConstantValue::getStringlikeValue#0#dispred#ff_Expr#6fb2af19::Expr::getConstantV__#shared WITH Expr#6fb2af19::Pair::getKey#0#dispred#ff_1#join_rhs ON FIRST 1 OUTPUT Lhs.1
        43862468   ~6045%    {2} r2 = JOIN r1 WITH Call#841c84e8::MethodCall::getMethodName#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.0
        43862468   ~6581%    {2} r3 = JOIN r2 WITH AST#a6718388::AstNode::getLocation#0#dispred#ff ON FIRST 1 OUTPUT Rhs.1, Lhs.1
        43844886  ~40661%    {2} r4 = JOIN r3 WITH locations_default ON FIRST 1 OUTPUT Rhs.1, Lhs.1
           15004   ~8295%    {3} r5 = JOIN r4 WITH project#Sinatra#e09174a3::Sinatra::ErbLocalsHashSyntheticGlobal#ffff_201#join_rhs ON FIRST 1 OUTPUT Rhs.2, Lhs.1, Rhs.1
           15004   ~8890%    {3} r6 = SCAN r5 OUTPUT ("sinatra_erb_locals_access()" ++ In.0 ++ "#" ++ In.1), In.2, In.1
                             return r6
```

After
```
Evaluated relational algebra for predicate Sinatra#e09174a3::Sinatra::ErbLocalsAccessSummary#fff@f6249cga with tuple counts:
         10237       ~0%    {3} r1 = JOIN locations_default_10#join_rhs WITH project#Sinatra#e09174a3::Sinatra::ErbLocalsHashSyntheticGlobal#ffff_201#join_rhs ON FIRST 1 OUTPUT Lhs.1, Rhs.1, Rhs.2
          4015       ~5%    {3} r2 = JOIN r1 WITH AST#a6718388::AstNode::getLocation#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2
           825      ~96%    {3} r3 = JOIN r2 WITH Call#841c84e8::MethodCall::getMethodName#0#dispred#ff ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2
           940       ~0%    {4} r4 = JOIN r3 WITH Constant#54e8b051::ConstantValue::getStringlikeValue#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2, Lhs.0
        325402       ~0%    {4} r5 = JOIN r4 WITH Expr#6fb2af19::Expr::getConstantValue#0#dispred#ff_10#join_rhs ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2, Lhs.3
        231819  ~133147%    {3} r6 = JOIN r5 WITH Expr#6fb2af19::Pair::getKey#0#dispred#ff_1#join_rhs ON FIRST 1 OUTPUT Lhs.2, Lhs.3, Lhs.1
        231819  ~138805%    {3} r7 = SCAN r6 OUTPUT ("sinatra_erb_locals_access()" ++ In.0 ++ "#" ++ In.1), In.2, In.1
                            return r7
```
 2023-09-14 21:34:17 +02:00
Ian Lynagh 730480360e
Merge pull request #14221 from igfoo/igfoo/gradle_seq 
Kotlin: Add more tests to the "gradle sequential" set
 2023-09-14 18:39:11 +01:00
Chris Smowton 5f6a40b9e8 Note Kotlin test no longer has CFG dead-ends if ErrorExpr participates in the CFG 2023-09-14 17:42:00 +01:00
Chris Smowton d9f7180b5c Add missing diagnostic expectations 2023-09-14 17:42:00 +01:00
Chris Smowton 8f940c311a Update expectations and add expected diagnostics 2023-09-14 17:42:00 +01:00
Chris Smowton a1a7640427 Give ErrorExpr default control flow 
This prevents a CFG dead-end because of one ErrorExpr
 2023-09-14 17:42:00 +01:00
Chris Smowton b1e128b5c1 Pretty-print a ClassInstanceExpr without a bound constructor nicely 2023-09-14 17:42:00 +01:00
Chris Smowton 9670f20bd7 Add test for method reference whose LHS has unknown type 
This can happen when imports or source classes are missing.
 2023-09-14 17:42:00 +01:00
Chris Smowton 6ea7b195db Add test for a module declaration made in a file named other than module-info.java 
This triggers a weird corner case in our extractor, which used to throw a null pointer exception.
 2023-09-14 17:42:00 +01:00