github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
71 949 коммитов 1 534 Ветки 130 Теги 471 MiB
Граф коммитов

941 Коммитов

Автор SHA1 Сообщение Дата
Cornelius Riemenschneider a66f8209f9 Rust: Vendor 3rdparty dependencies. 
We've been observing some performance issues using crate_universe on CI.
Therefore, we're moving to vendor the auto-generated BUILD files
in our repository. This should provide a nice speed boost, while
getting rid of the complexity of the "rust cache" job we've been using
when we had a lot of git dependencies.

This PR includes a vendor script, and I'll put up a CI job internally
that runs that vendor script on Cargo.toml and Cargo.lock changes, to check
that the vendored files are in sync.
 2024-11-13 13:22:14 +01:00
Cornelius Riemenschneider e8aa5db07a Rust: Update cargo dependencies. 
There was a recent round of tree-sitter-* package releases,
so the latest code is now a) released and b) available on crates.io.

Therefore, move away from the (super slow on CI) git dependencies to released crates instead.
This also includes a run of `cargo update`, so there's a bunch of more changes to the lockfile.
 2024-11-11 12:13:14 +01:00
Tom Hvitved a35a4b2d98
Merge pull request #17887 from hvitved/dataflow/provenance-order 
Data flow: Order provenance output by textual representation
 2024-11-07 14:19:18 +01:00
Michael Nebel fc8d8bbbb1
Merge pull request #17742 from michaelnebel/csharp/higherordermodels 
C#: Models for higher order methods.
 2024-11-07 11:12:46 +01:00
Tom Hvitved 26b048a645 Address review comment 2024-11-07 10:40:03 +01:00
Geoffrey White b3f7a8a46f
Merge pull request #17908 from geoffw0/dfcons 
Rust: Expose counts of data flow inconsistencies
 2024-11-06 19:11:04 +00:00
Michael Nebel e9c9519d90 C#: Address review comments. 2024-11-06 16:29:20 +01:00
Michael Nebel 55cfbccd43 C#/Java: Exclude summaries using callbacks in fields, properties and synthetic fields. 2024-11-06 16:29:19 +01:00
Michael Nebel fe854812ec C#: Add read and store steps for delegate calls. 2024-11-06 16:29:13 +01:00
Anders Schack-Mulligen 4df4a1e6c6
Merge pull request #17863 from aschackmull/shared/universal-flow 
Shared: Add a Universal Flow library and refactor TypeFlow to use it.
 2024-11-06 13:46:13 +01:00
Geoffrey White a645a9e829 Rust: Add getInconsistencyCounts predicate to the shared DataFlowImplConsistency.qll, so it's possibly to access inconsistency data as a whole. 2024-11-04 18:52:20 +00:00
github-actions[bot] f107d16b4e Post-release preparation for codeql-cli-2.19.3 2024-11-04 17:20:08 +00:00
github-actions[bot] cc7b724123 Release preparation for version 2.19.3 2024-11-04 16:37:28 +00:00
Tom Hvitved 8b8b721788 Data flow: Order provenance output by textual representation 2024-11-04 08:47:30 +01:00
Anders Schack-Mulligen bae61875cd UniversalFlow: Fixup some qldoc. 2024-11-01 14:04:27 +01:00
Tom Hvitved 2b37c6cd32
Merge pull request #17548 from hvitved/shared/inline-test-post-process 
Shared: Post-processing query for inline test expectations
 2024-10-31 11:40:11 +01:00
Tom Hvitved c936468b17
Merge pull request #17739 from hvitved/dataflow/big-step-quadratic 2024-10-31 08:16:16 +01:00
Anders Schack-Mulligen b556590ef8
Merge pull request #17663 from aschackmull/dataflow/speculative-flow 
Dataflow: Add support for speculative taint flow.
 2024-10-31 08:12:43 +01:00
Anders Schack-Mulligen 570b042645 Dataflow: Rename SpeculativeFlow to SpeculativeGlobal. 2024-10-30 15:23:15 +01:00
Anders Schack-Mulligen b005973317 UniversalFlow: Skip property propagation to null nodes. 2024-10-30 14:08:38 +01:00
Tom Hvitved 495c92df38 Shared: Also take query ID into account in `PathProblemSourceTestInput` 2024-10-30 10:54:40 +01:00
Tom Hvitved e7a3e6bfed Shared: Post-processing query for inline test expectations 2024-10-29 13:35:29 +01:00
Tom Hvitved b111194fbc Shared: Simplify `PrettyPrintModels.ql` 2024-10-29 13:35:28 +01:00
Anders Schack-Mulligen 1d3bad1358 UniversalFlow: More renaming. 2024-10-29 08:53:18 +01:00
Anders Schack-Mulligen 7d98d391b7 UniversalFlow: Rename FlowScc. 2024-10-28 16:28:28 +01:00
Anders Schack-Mulligen d41b86a87d UniversalFlow: Tweak visibility and add qldoc. 2024-10-28 16:27:27 +01:00
Anders Schack-Mulligen 6680537e93 UniversalFlow: Minor tweak to isNull and autoformat. 2024-10-28 16:25:30 +01:00
Anders Schack-Mulligen d6e420bd0e UniversalFlow: Rename node type. 2024-10-28 16:23:44 +01:00
Anders Schack-Mulligen 1aecdb44dc UniversalFlow: Move Universal Flow library to its own file. 2024-10-28 16:20:16 +01:00
Anders Schack-Mulligen ea458c09a0 TypeFlow: Extract a universal flow library abstraction from TypeFlow. 2024-10-28 15:48:29 +01:00
Anders Schack-Mulligen fba4d09e65 TypeFlow: Simplify interface. 2024-10-28 15:09:09 +01:00
Anders Schack-Mulligen 3939eff260 TypeFlow: Rename step to uniqStep. 2024-10-28 15:00:05 +01:00
Tom Hvitved 7c4d5981dd Shared: Add missing spaces in inline test expectation output 2024-10-25 13:23:03 +02:00
Tom Hvitved 2e7b71c28d Data flow: Prevent quadratic blowup in `Stage6Param::localStep` 2024-10-23 10:41:12 +02:00
Tom Hvitved c4c936d6fa Rust: Speedup `SummaryStats.ql` 2024-10-21 15:21:13 +02:00
Chuan-kai Lin 41e811773c
Merge pull request #17648 from github/cklin/dataflow-diff-informed-filtering 
Dataflow: apply diff-informed filtering consistently
 2024-10-18 06:02:28 -07:00
Chuan-kai Lin 1aa3eb527f Dataflow: apply diff-informed filtering consistently 2024-10-17 10:23:38 -07:00
Anders Schack-Mulligen c20f12fa6c Add qldoc. 2024-10-16 14:35:23 +02:00
Anders Schack-Mulligen 6c6b6061bc Dataflow: Add consistency check. 2024-10-16 14:35:19 +02:00
Anders Schack-Mulligen 7d123296f8 Dataflow: Add speculative flow modules. 2024-10-16 14:35:18 +02:00
Anders Schack-Mulligen c80627a3d3 Dataflow: add plumbing for adding provenance to state-steps. 2024-10-16 14:35:18 +02:00
github-actions[bot] 079ab77a38 Post-release preparation for codeql-cli-2.19.2 2024-10-15 12:16:59 +00:00
github-actions[bot] 255f55cf1a Release preparation for version 2.19.2 2024-10-15 10:29:25 +00:00
Tom Hvitved 4df9cd88ef
Merge pull request #17658 from hvitved/shared/cfg-conditional-splitting 
Shared `ConditionalCompletionSplitting` implementation
 2024-10-10 13:21:38 +02:00
Tom Hvitved 6a87eb0c73
Merge pull request #17696 from hvitved/rust/captured-variables 
Rust: Account for captured variables
 2024-10-09 19:42:03 +02:00
Tom Hvitved aa7215bbd5 Address review comments 2024-10-09 17:22:16 +02:00
Michael Nebel 79871aa51e
Merge pull request #17687 from michaelnebel/modelgen/removeduplicatedf 
C#/Java: Avoid `df` and `dfc` overlap in model generation.
 2024-10-09 14:04:31 +02:00
Michael Nebel 5d4ceeebb5 Shared: Only generate df summary model in the mixed query in case no context sensitive model exist. 2024-10-09 13:04:32 +02:00
Tom Hvitved 3d95369608 Shared `ConditionalSplitting` implementation 2024-10-09 11:02:13 +02:00
Tom Hvitved 9952997b48 Shared: Add `DenseRank` library 2024-10-09 10:16:59 +02:00