github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
57 274 коммитов 1 532 Ветки 130 Теги 474 MiB
Граф коммитов

57274 Коммитов

Автор SHA1 Сообщение Дата
Maiky f301e46175 Remove `isEmptyPassword` predicate 2023-08-22 12:23:32 +02:00
Maiky 5f502ec6bb
rename change-note 2023-08-16 15:32:53 +02:00
Maiky 97f8d1fca9 add `getValue()` method 2023-08-10 00:39:35 +02:00
Maiky e60fa6f1a7 Remove unnecesary } 2023-08-10 00:25:47 +02:00
Maiky c5c2df4593 fix `Singleton set literal` 2023-08-10 00:13:02 +02:00
Maiky 0cd1c1e2e5
Make private 
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
 2023-08-03 17:08:50 +02:00
Maiky 0dec4876f1
Replace cast to `DataFlow::CallNode` 
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
 2023-08-03 17:08:35 +02:00
Maiky 6f1b406b3a
typo 
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
 2023-08-03 17:08:10 +02:00
Maiky 0237f37842
typo 
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
 2023-08-03 17:07:58 +02:00
Maiky c54561e775
Merge branch 'main' into maikypedia/ldap-improper-auth 2023-08-03 16:49:30 +02:00
Maiky fd649c1702 Fix `getHost()` (ldap.host = ip is not covered) 2023-08-03 16:37:48 +02:00
Maiky f7a662814d simplify `usesSsl()` 2023-08-03 16:20:20 +02:00
Maiky 2d87489dfa change `useSsl()` to `usesSsl()` 2023-08-03 16:18:44 +02:00
Tom Hvitved e011480114
Merge pull request #13509 from hvitved/cfg-pack 
Convert shared CFG construction library to a parameterized module
 2023-08-03 14:11:56 +02:00
Mathias Vorreiter Pedersen 9ed8dec87f
Merge pull request #13877 from jketema/constant-doc 
C++: Improve the QL doc of `isConstant`
 2023-08-03 13:41:44 +02:00
Paolo Tranquilli 67cd25184a
Merge pull request #12433 from github/alexdenisov+redsun82/tuple-mangling 
Swift: properly identify types and declarations in trap files via mangling
 2023-08-03 13:27:07 +02:00
Jeroen Ketema 48048d6f38
Merge pull request #13874 from jketema/use-after-free 
C++: Improve use-after-free example code
 2023-08-03 13:21:12 +02:00
Owen Mansel-Chan 00c704201c
Merge pull request #13871 from github/rc/3.10 
Merge `rc/3.10` into `main`
 2023-08-03 11:24:07 +01:00
Jeroen Ketema 7ff6f09626
C++: Improve the QL doc of `isConstant` 2023-08-03 12:16:12 +02:00
Jeroen Ketema 0c0720a962
C++: Improve use-after-free example code 
* Remove the mismatch between `new` and `free` and use `delete` instead
* Make the function `void`, so people copying the code will not forget
  to add a `return`.
* Balance out the `...` for omitted code.
 2023-08-03 11:06:15 +02:00
Tom Hvitved 2ac646770e Merge `ControlFlowTreeBase` and `AstNode` 2023-08-03 10:59:26 +02:00
Jeroen Ketema 1ad533a4f8
Merge pull request #13873 from jketema/ir-range-test 
C++: Add semantic range analysis test as IR test
 2023-08-03 10:58:24 +02:00
Chris Smowton 8702efda1e
Merge pull request #13835 from github/smowton/fix/logrus-with-context 
Don't treat logrus' WithContext method as a logging function
 2023-08-03 09:57:30 +01:00
Tom Hvitved 525ed65b0b Rename `getNode` to `getAstNode` 2023-08-03 10:56:50 +02:00
Jeroen Ketema f7923d93f1
C++: Add semantic range analysis test as IR test 
The range analysis test currently fails with the frontend update, because the
generated IR is incorrect after the update.
 2023-08-03 10:13:23 +02:00
Asger F 5950865b55
Merge pull request #13755 from github/max-schaefer/js-server-crash-help 
JavaScript: Improve qhelp for js/server-crash.
 2023-08-03 10:04:08 +02:00
Asger F c38cbe859d
Merge pull request #13737 from asgerf/dynamic/fuzzy-models 
Dynamic: add Fuzzy token
 2023-08-03 09:58:24 +02:00
Tom Hvitved 2f3e52646c Add class wrappers around `newtype` in `Cfg.qll` 2023-08-03 09:39:30 +02:00
Tom Hvitved 5d69e14cc1 Rename `ControlFlowElement` to `AstNode` 2023-08-03 09:39:30 +02:00
Tom Hvitved 1988397f93 Make shared CFG construction library a parameterized module 2023-08-03 09:39:30 +02:00
Tom Hvitved 5049aafdd8 Copy existing `ControlFlowGraphImplShared` into new shared `controlflow` pack 2023-08-03 09:32:37 +02:00
Mathias Vorreiter Pedersen 89aa86a1d6
Merge pull request #13741 from rdmarsh2/rdmarsh2/swift/array-content-flow 
Swift: add DataFlow::Content for arrays
 2023-08-02 17:37:40 +02:00
Owen Mansel-Chan ff5409fec7
Merge pull request #13785 from owen-mc/go/change-golangSpecificParamArgFilter 
Go: Avoid using getTarget() as it may not exist
 2023-08-02 15:40:40 +01:00
Alexandre Boulgakov 0dafe2d757 Swift: Mangle `ArchetypeType`s with different superclasses in different extensions. 2023-08-02 15:18:52 +01:00
Anders Schack-Mulligen 7bc8bf616f
Merge pull request #13863 from aschackmull/dataflow/pack4 
Dataflow: Move the shared library to a properly shared qlpack.
 2023-08-02 14:19:49 +02:00
Mathias Vorreiter Pedersen 7bea18773c
Merge pull request #13857 from github/alexdenisov/unresolved-dot-exprs-patterns 
Swift: SubExpr may yield unresolved nodes in certain cases while MatchedExpr is always resolved
 2023-08-02 09:35:06 +02:00
Anders Schack-Mulligen 1ad51e754e Dataflow: Rename change note to proper format. 2023-08-02 08:50:51 +02:00
Sarita Iyer 0bd87f9f86
Merge pull request #13840 from github/si-10115-docs-update 
Update supported frameworks
 2023-08-01 13:05:32 -04:00
Max Schaefer 5124310f14
Update javascript/ql/src/Security/CWE-730/ServerCrash.qhelp 
Co-authored-by: Asger F <asgerf@github.com>
 2023-08-01 17:03:05 +01:00
Stephan Brandauer cb55b10edc
Merge pull request #13788 from github/kaeluka/automodel-telemetry-testing 
Java: Tests for Automodel Extraction Queries
 2023-08-01 15:30:26 +02:00
Alex Denisov 9d643ae1ed Swift: record CFG incosistency 2023-08-01 15:06:04 +02:00
Anders Schack-Mulligen 405a3a73d1 Java: Remove irrelevant import. 2023-08-01 14:31:30 +02:00
Anders Schack-Mulligen 15da4ee009
Merge pull request #13856 from aschackmull/java/maybebrokencrypto-barrier 
Java: Make the barrier in java/potentially-weak-cryptographic-algorithm less restrictive
 2023-08-01 14:20:44 +02:00
Alex Denisov 6667d9e45c Swift: SubExpr may yield unresolved nodes in certain cases while MatchedExpr is always resolved 2023-08-01 14:15:33 +02:00
Anders Schack-Mulligen 199d1431d7 Dataflow: Add change note. 2023-08-01 14:02:34 +02:00
Anders Schack-Mulligen 5946d5e806 Dataflow: Remove sync. 2023-08-01 14:02:34 +02:00
Anders Schack-Mulligen 0544205594 Swift: Adjust to use the qlpack data-flow api. 2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen 73d4b126cf Ruby: Adjust to use the qlpack data-flow api. 2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen b27a3a81bc Python: Adjust to use the qlpack data-flow api. 2023-08-01 14:02:33 +02:00
Anders Schack-Mulligen 21eb78ea5e Go: Adjust to use the qlpack data-flow api. 2023-08-01 14:02:33 +02:00