github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
55 127 коммитов 1 534 Ветки 130 Теги 471 MiB
Граф коммитов

55127 Коммитов

Автор SHA1 Сообщение Дата
Maiky 40450a2792
typo 2023-05-24 17:02:48 +02:00
Kasper Svendsen 92b408fbc1
Merge pull request #13274 from kaspersv/kaspersv/late-inline-member-preds-doc 
Docs: Late inlining now supported for member predicates
 2023-05-24 16:19:42 +02:00
Kasper Svendsen 770e76a04d Docs: Late inlining now supported for member predicates 2023-05-24 14:02:58 +02:00
Jeroen Ketema 9a467f9d4e
C++: Add `cpp/invalid-pointer-deref` FP test case 2023-05-24 13:52:19 +02:00
Jeroen Ketema af378df712
C++: Add `cpp/invalid-pointer-deref` FP test case 2023-05-24 12:29:55 +02:00
Jeroen Ketema 3a3d9bc505
Swift: Rewrite inline expectation tests to use the parameterized module 2023-05-24 11:38:22 +02:00
Tom Hvitved 05f3934042
Merge pull request #13251 from hvitved/ruby/call-graph-self-param 
Ruby: Include both `self` parameters and SSA definitions in call graph construction
 2023-05-24 11:10:34 +02:00
Jeroen Ketema 2276890cec
C++: Rewrite inline expectation tests to use the parameterized module 2023-05-24 11:10:05 +02:00
Asger F 818753e922
Merge pull request #13265 from asgerf/rb/delete-name-clash 
Ruby: fix some name clashes between summarized callables
 2023-05-24 11:08:56 +02:00
Erik Krogh Kristensen 796e71f8be
Merge pull request #13176 from MaxSchlueter/fixquery12 
Fix "Introducing the JavaScript libraries" query12.qll and add test case
 2023-05-24 10:56:53 +02:00
Tony Torralba 7d0b02e267
Merge pull request #13248 from atorralba/atorralba/java/nio-files-copy-models-fix 
Java: Tweak java.nio.file.Files.copy models
 2023-05-24 10:55:15 +02:00
Jeroen Ketema 5dc3789df2
Merge pull request #13266 from MathiasVP/modernize-print-ir-local-flow 
C++: Modernize `PrintIR` for local dataflow
 2023-05-24 10:54:10 +02:00
Michael Nebel 95916450d8
Merge pull request #13085 from michaelnebel/csharp/dbsetsummaries 
C#: Entity framework. Convert DbSet summaries to MaD models.
 2023-05-24 10:45:40 +02:00
Tom Hvitved b486a4d52c
Merge pull request #13255 from hvitved/ruby/ssa-param-capture-input 
Ruby: Include underlying SSA parameter definition in `localFlowSsaParamCaptureInput`
 2023-05-24 10:40:54 +02:00
Asger F 8bd6f6c450 Ruby: change note 2023-05-24 10:22:22 +02:00
Asger F 6d1a4451fb Ruby: update a test expectation 2023-05-24 10:15:51 +02:00
Jeroen Ketema eea972b205
Merge pull request #13261 from jketema/inline-legacy-classes 
Add forgotten classes related to the legacy `InlineExpectationsTest`class
 2023-05-24 10:13:19 +02:00
Asger F 5b7f69cf0a QL4QL: Fix a warning about repeating alert location 2023-05-24 09:55:09 +02:00
Maiky 27c1e47ece
Update ruby/ql/lib/change-notes/2023-05-06-pg.md 
Co-authored-by: Jorge <46056498+jorgectf@users.noreply.github.com>
 2023-05-24 01:44:51 +02:00
Mathias Vorreiter Pedersen e1223d0b21 C++: Add security severity. 2023-05-23 15:01:33 -07:00
Mathias Vorreiter Pedersen 0dfc9b996d C++: Promote 'cpp/overrun-write' out of experimental. 2023-05-23 14:57:42 -07:00
Robert Marsh bad72c42c5
Merge pull request #13244 from MathiasVP/promote-product-flow 
C++: Promote the product-dataflow library out of experimental
 2023-05-23 16:23:59 -04:00
Robert Marsh 86ab9608cd C++: add test comments 2023-05-23 16:15:43 -04:00
Mathias Vorreiter Pedersen 8daa8d78ff
Merge pull request #13246 from MathiasVP/fix-pointer-pointee-conflation-2 
C++: Fix more pointer/pointee conflation
 2023-05-23 12:03:29 -07:00
Maiky 8dca585207 Expected 2023-05-23 20:04:34 +02:00
Maiky ad5355a04a Pg Library, change note and Frameworks.qll 2023-05-23 19:49:03 +02:00
Arthur Baars e33f3a6668
Merge pull request #13154 from aibaars/sync-dbscheme-py 
JS/Ruby/QL/Python: sync dbscheme fragments
 2023-05-23 19:14:29 +02:00
Mathias Vorreiter Pedersen 4b92a2a3d0 C++: Fix Code Scanning error. 2023-05-23 10:13:19 -07:00
Mathias Vorreiter Pedersen 43459c16fd C++: Modernize the PrintIRStoreSteps (and rename it to PrintIRFieldFlowSteps) after the use-use flow changes. 2023-05-23 10:02:54 -07:00
Mathias Vorreiter Pedersen 8ee7694e7d C++: Modernize the PrintIRLocalFlow after the use-use flow changes. 2023-05-23 10:02:30 -07:00
Mathias Vorreiter Pedersen 0519ceeeaa C++/C#: Sync identical files. 2023-05-23 10:00:26 -07:00
Mathias Vorreiter Pedersen ccc9e09dbd C++: Add mechanism to hide specific instructions and operands from PrintIR. 2023-05-23 10:00:09 -07:00
Mathias Vorreiter Pedersen 81dbfecbfc C++: Promote the product-dataflow library out of experimental. 2023-05-23 09:48:50 -07:00
Mathias Vorreiter Pedersen 6fca8dfd39
Merge pull request #13260 from jketema/test-config-sig 
C++: Rewrite flow test common to use inline expectation test module
 2023-05-23 09:38:43 -07:00
Sim4n6 90c174de4e
Updated the .expected file accordingly 2023-05-23 17:36:50 +01:00
Philip Ginsbach 71a6e62c75
Merge pull request #13264 from github/ginsbach/MoveSignaturesSection 
move section on signatures in the QL specification
 2023-05-23 17:22:01 +01:00
Philip Ginsbach 1179f20d88
Merge pull request #13263 from github/ginsbach/DocumentAnnotationsForParameterised 
update QL specification on annotations for parameterised modules
 2023-05-23 17:20:26 +01:00
Asger F e4e52e77f7 QL4QL: Add query to warn about name clashes between summarized callables 2023-05-23 18:01:31 +02:00
Jeroen Ketema 1be9463297
Add forgotten classes related to the legacy `InlineExpectationsTest` class 2023-05-23 17:39:01 +02:00
Asger F 0592c8ba99 Ruby: avoid name clash for "assoc" summary 2023-05-23 17:34:19 +02:00
Philip Ginsbach 3e7389e1f8 move section on signatures in the QL specification 2023-05-23 16:29:35 +01:00
Philip Ginsbach f884473447 be more explicit about annotation caveats 2023-05-23 16:23:17 +01:00
Philip Ginsbach 10a02d6387 Signatures column for pragmas table 2023-05-23 16:23:17 +01:00
Philip Ginsbach 846dffb5ff Signatures column for simple annotations table 2023-05-23 16:23:16 +01:00
Philip Ginsbach 6f4b02ef14 add documentation for extensible annotation 2023-05-23 16:08:38 +01:00
Philip Ginsbach 89d246ba34 add documentation for additional annotation 2023-05-23 16:06:57 +01:00
Edward Minnix III 52340802bb
Merge pull request #13097 from egregius313/egregius313/java/webgoat/ssrf-regex-fix 
Java: Add constraint to `HostnameSanitizingPrefix` to prevent false negatives in SSRF queries
 2023-05-23 10:50:43 -04:00
Asger F 50a7b21928 Ruby: fix a name clash for summaries called "delete" 2023-05-23 16:49:17 +02:00
Jeroen Ketema aeb6293757
C++: Rewrite flow test common to use inline expectation test module 
This also rewrites all uses of flow test common to use `DataFlow::ConfigSig`.

Note that the removed deprecated aliases are 14 months old by now and, hence,
can be safely removed.
 2023-05-23 16:34:41 +02:00
Jeroen Ketema ee36d32ef0
Merge pull request #12789 from jketema/inline 
Turn inline expectation test into a parameterized module
 2023-05-23 14:58:48 +02:00