github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
61 816 коммитов 1 534 Ветки 130 Теги 471 MiB
Граф коммитов

61816 Коммитов

Автор SHA1 Сообщение Дата
Anders Schack-Mulligen 3bf6c0fe02 Rangeanalysis: Focus pre-bound calculation. 2023-12-11 14:07:10 +01:00
Anders Schack-Mulligen c14d917a76 Rangeanalysis: Prune range calculation. 2023-12-11 14:07:10 +01:00
Anders Schack-Mulligen 58d463dd33 Rangeanalysis: Minor refactor for bound steps. 2023-12-11 14:07:10 +01:00
Anders Schack-Mulligen 73671b6da3 Rangeanalysis: Refactor base bounds. 2023-12-11 14:07:10 +01:00
Anders Schack-Mulligen 6b178fb64a Rangeanalysis: Preparatory refactor for bounds sharing. 2023-12-11 14:07:10 +01:00
Mathias Vorreiter Pedersen d8f53e5524
Merge pull request #14925 from geoffw0/flows 
Swift: Imprecise Taint Flows
 2023-12-11 10:06:01 +00:00
Geoffrey White 17cd22f9d0
Merge pull request #14972 from geoffw0/cryptoprimitives 
C++: Experimental query for implementation of a cryptographic primitive
 2023-12-11 09:47:46 +00:00
Tom Hvitved 29a1cd110c
Merge pull request #15041 from github/workflow/coverage/update 
Update CSV framework coverage reports
 2023-12-11 09:04:43 +01:00
github-actions[bot] da48d81489 Add changed framework coverage reports 2023-12-11 00:16:52 +00:00
Tom Hvitved 7819dcf0a7
Merge pull request #15043 from hvitved/ql/redundant-import 
QL4QL: Improvements to `RedundantImport` query
 2023-12-09 12:15:09 +01:00
erik-krogh e8f9e366d5
remove redundant imports for JS 2023-12-08 16:56:54 +01:00
Anders Schack-Mulligen 0618568cdc
Merge pull request #15045 from aschackmull/java/fix-cp 
Java: Fix accidental cartesian product.
 2023-12-08 15:43:01 +01:00
Anders Schack-Mulligen 1ea2f89e27
Merge pull request #15046 from aschackmull/dataflow/deprecation-changenote 
Dataflow: Add change note about deprecation.
 2023-12-08 15:42:34 +01:00
Jeroen Ketema db6b1e5f5e
Merge pull request #14912 from jketema/dep-userinput 
C++: Deprecate `isUserInput`, `userInputArgument`, and `userInputReturned`
 2023-12-08 15:04:23 +01:00
Anders Schack-Mulligen 64eb4ff753
Merge pull request #14983 from aschackmull/dataflow/deprecate-old-api 
Data Flow: Deprecate old data flow api.
 2023-12-08 14:27:25 +01:00
Anders Schack-Mulligen 75d8da9007 Dataflow: Add change note about deprecation. 2023-12-08 14:25:20 +01:00
Jeroen Ketema c6b0a2363a
C++: Add change note 2023-12-08 13:31:32 +01:00
Anders Schack-Mulligen 7ee3068fe7 Java: Fix accidental cartesian product. 2023-12-08 13:27:05 +01:00
Jeroen Ketema 5165999e9e
C++: Deprecate `isUserInput`, `userInputArgument`, and `userInputReturned` 2023-12-08 13:21:31 +01:00
Mathias Vorreiter Pedersen 30c67ba6e7
Merge pull request #15040 from MathiasVP/fewer-dataflow-branches 
C++: Fix dataflow inconsistencies
 2023-12-08 12:14:49 +00:00
Harry Maclean 1dc0a063b0
Merge pull request #14679 from hmac/hmac-model-editor-ruby 
Ruby: Experimental model editor support
 2023-12-08 11:03:38 +00:00
Mathias Vorreiter Pedersen 90a62b27f5 Merge branch 'main' into fewer-dataflow-branches 2023-12-08 10:35:33 +00:00
Geoffrey White 6a48e6ed5e
Merge pull request #15038 from geoffw0/mmmmodels 
Swift: Model Manual Memory Management closure functions and withMemoryRebound variants
 2023-12-08 10:25:58 +00:00
Mathias Vorreiter Pedersen 7b83947383 Merge branch 'main' into fewer-dataflow-branches 2023-12-08 09:30:01 +00:00
Mathias Vorreiter Pedersen 1c73d43b4f C++: Accept more test changes. 2023-12-08 09:29:48 +00:00
Tom Hvitved 0361b2e6e8 QL4QL: Improvements to `RedundantImport` query 2023-12-08 10:19:04 +01:00
Harry Maclean 199c6b224d Ruby: fix warnings 2023-12-08 09:16:17 +00:00
Jeroen Ketema 9a555ba16e
Merge pull request #14909 from jketema/rm-dtt 
C++: Remove `DefaultTaintTracking` library
 2023-12-08 10:08:55 +01:00
Mathias Vorreiter Pedersen e648058d30 C++: Accept test changes. 2023-12-07 23:11:28 +00:00
Mathias Vorreiter Pedersen d6871c7cf9 C++: Merge 'PostUpdateFieldNode' and 'IndirectArgumentOutNode' into a single IPA branch. 2023-12-07 23:11:28 +00:00
Geoffrey White 801878bff2 Swift: I believe flow through withUnsafeMutableBytes should always be taint flow, as it changes the type of elements to bytes. 2023-12-07 16:42:35 +00:00
Geoffrey White ea68af8b7f Swift: Change note. 2023-12-07 16:42:34 +00:00
Geoffrey White 8818b3d22d Swift: Model withMemoryRebound, assumingMemoryRebound, bindMemory. 2023-12-07 16:03:01 +00:00
Geoffrey White db3dfdc9a0 Swift: Model Manual Memory Management closure functions. 2023-12-07 15:55:00 +00:00
Michael Nebel 2e6e2eabf2
Merge pull request #15036 from michaelnebel/csharp/intptrdefaultssimple 
C#: Parameter defaults for `nint` and `nuint` in compiled code.
 2023-12-07 16:20:41 +01:00
Geoffrey White 1de9919193 Swift: Test Manual Memory Management closure functions. 2023-12-07 15:10:41 +00:00
Harry Maclean 1b29ed2a81 Ruby: Address review comments 2023-12-07 14:31:27 +00:00
Harry Maclean 79a83ec74b Ruby: elaborate placeholder query 2023-12-07 14:26:15 +00:00
Tamás Vajk 51adcf5e10
Merge pull request #15010 from tamasvajk/fix/stringbuilder-interpolation 
C#: Support interpolated strings in `StringBuilder.Append`
 2023-12-07 15:25:44 +01:00
Anders Schack-Mulligen 9fafa973d8 C++: Remove irrelevant test. 2023-12-07 14:13:42 +01:00
Tamas Vajk 75fa67726e Fix models to support fluent chaining 2023-12-07 14:10:16 +01:00
Michael Nebel d9c6d4e6cb C#: Update Parameters expected output. 2023-12-07 13:14:24 +01:00
Michael Nebel aac3ec81f2 C#: Add generated cast expression for nuint and nint parameter defaults. 2023-12-07 13:14:24 +01:00
Geoffrey White 32fdf4fc9f
Merge pull request #15007 from geoffw0/sensitivekeytests 
Swift: Add some tests and model SecKeyCopyExternalRepresentation
 2023-12-07 10:50:13 +00:00
Tamas Vajk e0c9be371f Add change note 2023-12-07 10:57:18 +01:00
Tamas Vajk 89df59a083 C#: Add missing models and fix interpolated string flow into `StringBuilder` 2023-12-07 10:56:59 +01:00
Geoffrey White 028326abad Swift: Correct US spellings. 2023-12-07 09:54:01 +00:00
Tamas Vajk 2c624c23ed Add test cases for missing flow with interpolated strings and `StringBuilder` 2023-12-07 10:32:01 +01:00
Tamas Vajk 9f24b026fb C#: Move `StringBuilder` dataflow tests to separate file 2023-12-07 10:31:50 +01:00
Tamás Vajk 3431fcf9af
Merge pull request #15025 from tamasvajk/feature/change-stringbuilder-modeling 
C#: Change `StringBuilder` flow models to not use `Element` access path
 2023-12-07 10:29:54 +01:00