github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
60 479 коммитов 1 532 Ветки 130 Теги 474 MiB
Граф коммитов

60479 Коммитов

Автор SHA1 Сообщение Дата
Cornelius Riemenschneider 465eb00228 More fine-grained dependency on internal extractors. 2023-11-06 13:44:28 +01:00
Rasmus Wriedt Larsen f6ae7523b5
Merge pull request #14591 from RasmusWL/minor-stringpool-improvement 
Python: Minor cleanup for string pool interaction
 2023-11-06 13:13:27 +01:00
Geoffrey White 4e214e1c7c
Merge pull request #14691 from geoffw0/webview2 
Swift: Add a webview test case
 2023-11-06 11:08:09 +00:00
Chris Smowton c6193ebc0c
Merge pull request #14687 from github/dependabot/go_modules/go/extractor/extractor-dependencies-a562808574 
Bump the extractor-dependencies group in /go/extractor with 1 update
 2023-11-06 10:05:44 +00:00
Geoffrey White 838a00bbc9 Swift: Add a webview test case from a branch that didn't make it. 2023-11-06 09:44:53 +00:00
Erik Krogh Kristensen 2abdf7dbbd
Merge pull request #14686 from erik-krogh/delete-yarn 
JS: remove the remaining yarn files
 2023-11-06 10:37:06 +01:00
dependabot[bot] 2d9ff85753
Bump the extractor-dependencies group in /go/extractor with 1 update 
Bumps the extractor-dependencies group in /go/extractor with 1 update: [golang.org/x/mod](https://github.com/golang/mod).

- [Commits](https://github.com/golang/mod/compare/v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-11-06 03:19:42 +00:00
erik-krogh abcb5a7a95
remove the remaining yarn files 2023-11-05 19:24:59 +01:00
Geoffrey White c6bc1a3f3a
Merge pull request #14684 from geoffw0/testsfix 
Swift: Fix failing tests
 2023-11-03 19:24:03 +00:00
Geoffrey White 07eba4e3b1 Swift: Fix some failing tests, looks like this could be the result of some recently merged PRs interacting (positively!) 2023-11-03 17:08:05 +00:00
yoff f969274a29
Merge pull request #14644 from yoff/python/filter-local-self-loops 
Python: filter local self loops
 2023-11-03 15:45:09 +01:00
yoff 8d3ed68b68
Merge pull request #14653 from yoff/python/add-aws-to-supported-frameworks 
Python: Add AWS Lambda as a supported framework
 2023-11-03 13:14:30 +01:00
Paolo Tranquilli 506b911767
Merge pull request #14629 from github/redsun82/rework-resource-dir 
Swift: rework resource dir
 2023-11-03 11:14:49 +01:00
Michael Nebel 4009f03087
Merge pull request #14665 from michaelnebel/csharp/projectreference 
C#: Update DependencyManager logic to exclude commented out references.
 2023-11-03 10:30:03 +01:00
Tom Hvitved 9807a8e1d3
Merge pull request #14675 from hvitved/csharp/split-generated-mad-files-take2 
C#: Split `generated/dotnet_runtime.yml` into separate files (take 2)
 2023-11-03 10:24:38 +01:00
Tom Hvitved af524f0043 Revert "C#: Temporary changes to model generator" 
This reverts commit 0f6cea6bd6ecd61139dc09e7b68bf0b8ebc009fe.
 2023-11-03 09:51:40 +01:00
Tom Hvitved 894f9ab8fa C#: Split `generated/dotnet_runtime.yml` into separate files 2023-11-03 09:51:40 +01:00
Tom Hvitved 7082efa037 C#: Temporary changes to model generator 2023-11-03 09:51:40 +01:00
Tom Hvitved c34ad25cf9
Merge pull request #14674 from github/revert-14663-csharp/split-generated-mad-files 
Revert "C#: Split `generated/dotnet_runtime.yml` into separate files"
 2023-11-03 09:51:22 +01:00
Tom Hvitved 13e60d7b11
Revert "C#: Split `generated/dotnet_runtime.yml` into separate files" 2023-11-03 09:07:54 +01:00
Anders Schack-Mulligen 132cc03e3b
Merge pull request #14664 from aschackmull/shared/modulus-step 
RangeAnalysis: Improve bounds that rely on relative modulus.
 2023-11-03 08:16:48 +01:00
Mathias Vorreiter Pedersen 679d64f0e8
Merge pull request #14647 from microsoft/24-odbc-model-instantiation-upstream2 
C++: Adding a model implementation for ODBC.
 2023-11-02 19:42:27 +00:00
Benjamin Rodes 30a512c96b Formatting 2023-11-02 15:01:15 -04:00
Robert Marsh 81d77bf37c
Merge pull request #14578 from geoffw0/stringwith 
Swift: Models for String methods involving closures.
 2023-11-02 13:53:22 -04:00
Benjamin Rodes 947e0274c7 Adding sql injection test for ODBC. 2023-11-02 13:27:42 -04:00
Benjamin Rodes f404d7a5f8 Changes to address pr comments. 2023-11-02 13:11:23 -04:00
Michael Nebel 0bf2d77a7e C#: Update integration tests. 2023-11-02 15:46:54 +01:00
Michael Nebel a161d6e666 C#: Update unit tests. 2023-11-02 15:46:39 +01:00
Michael Nebel 9ea6ef06ef C#: Commented out references in project files should not be used. 2023-11-02 15:45:30 +01:00
Anders Schack-Mulligen f2b52650d5 Rangeanalysis: Filter useless modulo results. 2023-11-02 15:29:56 +01:00
Tom Hvitved a35bda2946
Merge pull request #14663 from hvitved/csharp/split-generated-mad-files 
C#: Split `generated/dotnet_runtime.yml` into separate files
 2023-11-02 14:36:48 +01:00
Tom Hvitved f82f1df5d6
Merge pull request #14657 from hvitved/csharp/qualified-name 
C#: Move qualified name computation into `QualifiedName.qll`
 2023-11-02 14:36:13 +01:00
Anders Schack-Mulligen 7bf271fb6c RangeAnalysis: Improve bounds that rely on relative modulus. 2023-11-02 12:51:48 +01:00
Tom Hvitved a9e2f55b61 C#: Split `generated/dotnet_runtime.yml` into separate files 2023-11-02 12:45:47 +01:00
Anders Schack-Mulligen 484d0fe4cd
Merge pull request #14659 from aschackmull/shared/modulus-analysis 
Java/C++: Share modulus analysis
 2023-11-02 12:45:35 +01:00
Tom Hvitved 12d856737a Address review comments 2023-11-02 12:38:35 +01:00
Tony Torralba 8f4509f434
Merge pull request #14651 from github/workflow/coverage/update 
Update CSV framework coverage reports
 2023-11-02 10:48:32 +01:00
Geoffrey White 431d9d58f1
Merge pull request #14639 from geoffw0/anchorquery 
Swift: New query for Missing Regular Expression Anchor
 2023-11-02 09:20:19 +00:00
Geoffrey White 242399817a Swift: Remove 'only'. 2023-11-02 08:32:36 +00:00
yoff fd757b0089 Update python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPrivate.qll 
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
 2023-11-02 09:31:28 +01:00
Rasmus Lerchedahl Petersen 58bf70d61b Python: filter self steps from use-use flow 
Factor out use-use flow in order to do this.
Also improve names and comments.

I also wanted to change the types in `difinitionFlowStep`, but
that broke the module instantiation.
 2023-11-02 09:31:28 +01:00
Rasmus Lerchedahl Petersen 613831b2e1 Python: add test for post-update loop flow 2023-11-02 09:31:28 +01:00
Geoffrey White c937230f1a
Apply suggestions from code review 
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
 2023-11-02 08:30:53 +00:00
yoff c26c68c286
Merge pull request #14617 from yoff/python/module-for-import-time-flow 
Python: module for import time flow
 2023-11-02 09:28:51 +01:00
Anders Schack-Mulligen 7c3684dbb7 RangeAnalysis: Rename semExprModulus to exprModulus. 2023-11-02 08:19:23 +01:00
Anders Schack-Mulligen 400910e4d3 C++: Fix modulus analysis test. 2023-11-02 08:19:23 +01:00
github-actions[bot] 155073c498 Add changed framework coverage reports 2023-11-02 00:16:04 +00:00
Geoffrey White 727a7e804c
Update swift/ql/src/queries/Security/CWE-020/MissingRegexAnchor.qhelp 
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
 2023-11-01 16:32:25 +00:00
Anders Schack-Mulligen f8ab64dff0 Java: Switch to shared modulus analysis. 2023-11-01 16:34:28 +01:00
Tom Hvitved c717e346fb C#: Move qualified name computation into `QualifiedName.qll` 2023-11-01 16:21:55 +01:00