github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
59 946 коммитов 1 544 Ветки 131 Тег 485 MiB
Граф коммитов

59946 Коммитов

Автор SHA1 Сообщение Дата
Mathias Vorreiter Pedersen bbf9bcde2a
Merge pull request #14482 from MathiasVP/additional-call-targets-for-cpp 
C++: Add an abstract class that can be used to extend `viableCallable`
 2023-10-17 14:57:21 +01:00
Mathias Vorreiter Pedersen e264bddb25
Update docs/codeql/codeql-language-guides/advanced-dataflow-scenarios-cpp.rst 
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
 2023-10-17 15:51:20 +02:00
Mathias Vorreiter Pedersen fa3053f7fa
Update docs/codeql/codeql-language-guides/advanced-dataflow-scenarios-cpp.rst 
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
 2023-10-17 15:50:55 +02:00
AlexDenisov 401639e10b
Merge pull request #14528 from github/alexdenisov/debug-notes-on-db-upgrades 
Docs: add a note on db migration scripts debugging
 2023-10-17 15:49:39 +02:00
Alex Denisov 057172c391 Docs: add a note on db migration scripts debugging 2023-10-17 14:55:35 +02:00
Rasmus Wriedt Larsen 28bedda5ea
Merge pull request #14513 from RasmusWL/yield-modeling 
Python: Improve `yield` modeling
 2023-10-17 14:15:01 +02:00
Stephan Brandauer 9d719aa44e
Merge pull request #13444 from github/java/update-mad-decls-after-triage-2023-06-13T14-50-57 
Java: Update MaD Declarations after Triage
 2023-10-17 13:54:10 +02:00
Mathias Vorreiter Pedersen 68f2501bf0
Merge pull request #14496 from geoffw0/memberinittest 
Swift: Add data flow tests for member initialization.
 2023-10-17 12:35:07 +01:00
Mathias Vorreiter Pedersen 9a2c1daebe C++: Add tests for 'AdditionalCallTarget'. 2023-10-17 11:48:44 +01:00
Geoffrey White 5ffb773568 Swift: Explore instantiated / not instantiated classes. 2023-10-17 11:30:03 +01:00
Mathias Vorreiter Pedersen 0ad338f04a
Merge pull request #14521 from geoffw0/defaultstep 
Swift: Add CollectionContent to defaultImplicitTaintRead
 2023-10-17 11:07:10 +01:00
Tony Torralba 96d6e8e3f2 Update change note 2023-10-17 11:57:53 +02:00
Tony Torralba 3cd06b0026 More review suggestions 2023-10-17 11:54:32 +02:00
Tony Torralba 62a9ffd277
Apply suggestions from code review 2023-10-17 11:51:55 +02:00
Mathias Vorreiter Pedersen 75a8f01f65 C++: Add more documentation about dataflow through indirections. 2023-10-17 09:53:40 +01:00
Tony Torralba 4ecda9cccd Add consistency check exception 2023-10-17 10:18:19 +02:00
Rasmus Wriedt Larsen 80506f1028
Python: Accept `.expected` changes 2023-10-17 10:11:39 +02:00
Rasmus Wriedt Larsen 62a992473f
Python: Update QLDoc 2023-10-17 10:09:19 +02:00
Rasmus Wriedt Larsen 2bf4c32433
Python: Add syntactic support for yield in `contextlib.contextmanager` 2023-10-17 09:51:20 +02:00
Rasmus Wriedt Larsen 2399793c8a
Python: Expand contextmanager test even more 2023-10-17 09:41:30 +02:00
Chris Smowton 3145c53a19 Accept test changes for JDK21 2023-10-16 22:00:41 +01:00
Chris Smowton bd77f572f1 Compile collections test for Java 11 2023-10-16 21:54:09 +01:00
Geoffrey White 0a96eb0a40 Swift: Change note. 2023-10-16 21:43:55 +01:00
Geoffrey White 2679d1fdb5 Swift: Add models. 2023-10-16 21:40:38 +01:00
Erik Krogh Kristensen 24e779b826
Merge pull request #14520 from github/dependabot/cargo/ql/regex-1.10.2 
Bump regex from 1.10.0 to 1.10.2 in /ql
 2023-10-16 22:27:50 +02:00
Geoffrey White 451d779f4a Swift: Test String.decodeCString. 2023-10-16 21:22:03 +01:00
Geoffrey White 459b006244 Swift: Test StringProtocol.appendingFormat. 2023-10-16 21:22:03 +01:00
Dave Bartolomeo 8e890571ed
Merge pull request #14519 from github/release-prep/2.15.1 
Release preparation for version 2.15.1
 2023-10-16 13:55:45 -04:00
dependabot[bot] cf0173acad
Bump regex from 1.10.0 to 1.10.2 in /ql 
Bumps [regex](https://github.com/rust-lang/regex) from 1.10.0 to 1.10.2.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.10.0...1.10.2)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-10-16 17:49:47 +00:00
github-actions[bot] 3b3c036626 Release preparation for version 2.15.1 2023-10-16 17:49:39 +00:00
Michael B. Gale d15c60ba76
Merge pull request #14516 from github/mbg/go/fix-dependabot-yml-again 2023-10-16 18:48:26 +01:00
Geoffrey White c6ff42986d Swift: Change note. 2023-10-16 18:43:03 +01:00
Geoffrey White 990c40c8c8 Swift: Barrier for duplicate results in constant queries, resulting from sources like [1, 2, 3]. 2023-10-16 18:28:51 +01:00
Geoffrey White 6108f787dd Swift: Effect on query tests. 2023-10-16 18:28:51 +01:00
Geoffrey White 0509c0fdf3 Swift: Effect on dataflow tests. 2023-10-16 18:28:50 +01:00
Geoffrey White 89867d6214 Swift: Default content read step. 2023-10-16 18:28:50 +01:00
Robert Marsh efb04f6db4 Swift: update generated files list 2023-10-16 17:22:52 +00:00
Robert Marsh d0ec2fd643
Swift: fix QLDoc typos 
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
 2023-10-16 13:20:41 -04:00
Dave Bartolomeo e4e472ee74
Merge pull request #14512 from MathiasVP/fix-size-in-invalid-ptr-deref 
C++: Fix size deduction in `cpp/invalid-pointer-deref`
 2023-10-16 11:22:41 -04:00
Alex Ford 25c416ec8a
Merge pull request #14061 from maikypedia/maikypedia/ruby-jwt 
Ruby: JWT Security Queries (CWE-347)
 2023-10-16 15:42:31 +01:00
Edward Minnix III 21bea38ec8
Merge pull request #14472 from egregius313/egregius313/sync-local-and-remote-queries 
Java: Synchronize `*Local` versions of queries with their remote counterpart
 2023-10-16 10:31:40 -04:00
Ed Minnix c65d407937 Remove old `DataFlow2` import 2023-10-16 10:30:00 -04:00
Tony Torralba d08ee76b16 Java: Improve java/spring-disabled-csrf-protection 2023-10-16 16:01:14 +02:00
Michael B. Gale 8c818a8657
`group` => `groups` 2023-10-16 14:53:03 +01:00
Mathias Vorreiter Pedersen 26a665369b C++: Add QLDoc. 2023-10-16 14:15:55 +01:00
Michael B. Gale 822f37156e
Merge pull request #14483 from github/mbg/go/dependabot 
Go: Improve Dependabot configuration
 2023-10-16 14:05:36 +01:00
Alex Ford 22850b28df Ruby: update alert message test output 2023-10-16 13:08:49 +01:00
Alex Ford 66d230a207 ruby: qlformat 2023-10-16 12:45:46 +01:00
Alex Ford 3dd042c38a Merge remote-tracking branch 'origin/main' into maikypedia/ruby-jwt 2023-10-16 12:42:19 +01:00
Mathias Vorreiter Pedersen 79947956bc
Merge pull request #14509 from MathiasVP/tag-redundant-null-check-simple-as-security 
C++: Mark `cpp/redundant-null-check-simple` as a security query
 2023-10-16 11:58:21 +01:00