CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Перейти к файлу
Jonas Jensen 2324ce77ae C++ IR: Fix soundness of ConstantAnalysis
Now that `PhiInstruction.getAnInput` only has results for congruent
operands, a previous optimization I made to `getConstantValue` is no
longer sound. We have to check that all phi inputs give the same value,
not just the congruent ones. After this change, if there are any
non-congruent operands on a phi instruction, the whole aggregate will
have no result.
2019-07-11 15:51:09 +02:00
change-notes Merge pull request #1529 from xiemaisi/js/getter-summaries 2019-07-02 06:16:34 +01:00
config C#: Add shared data flow files 2019-05-06 14:54:11 +02:00
cpp C++ IR: Fix soundness of ConstantAnalysis 2019-07-11 15:51:09 +02:00
csharp Merge pull request #1521 from hvitved/csharp/constant-condition-fp 2019-07-01 10:52:14 +01:00
docs docs: address review comments 2019-05-29 11:53:53 +01:00
java Java: Don't report lambdas (or other anon classes) as dead. 2019-06-28 12:59:54 +02:00
javascript Merge pull request #1527 from esben-semmle/js/classify-more-generated-and-tests 2019-07-02 07:38:10 +01:00
misc Add simple mode for highlighting QL dbschemes 2019-02-19 09:56:39 +00:00
python Merge pull request #1518 from Semmle/rc/1.21 2019-06-28 13:52:18 -04:00
.editorconfig Normalize all text files to LF 2018-09-23 16:24:31 -07:00
.gitattributes .gitattributes: PDB files are binary 2019-03-13 10:42:28 +00:00
.gitignore Don't .gitignore .vs/VSWorkspaceSettings.json 2018-09-26 15:52:44 +02:00
.lgtm.yml JS: Exclude test cases from extraction 2019-05-07 14:36:35 +01:00
CODEOWNERS Add Alistair as code owner for *.qhelp within cpp 2019-06-26 12:10:22 +02:00
CODE_OF_CONDUCT.md Introduce code of conduct 2018-08-07 12:19:02 +01:00
CONTRIBUTING.md Update CONTRIBUTING.md and README.md to link the the QL Style Guide. 2018-08-20 11:06:22 +01:00
COPYRIGHT QL code and tests for C#/C++/JavaScript. 2018-08-02 17:53:23 +01:00
LICENSE QL code and tests for C#/C++/JavaScript. 2018-08-02 17:53:23 +01:00
README.md docs: add link to style guides in readme 2019-05-28 21:33:36 +01:00

README.md

Semmle QL

This open source repository contains the standard QL libraries and queries that power LGTM, and the other products that Semmle makes available to its customers worldwide.

How do I learn QL and run queries?

There is extensive documentation on getting started with writing QL. You can use the interactive query console on LGTM.com or the QL for Eclipse plugin to try out your queries on any open-source project that's currently being analyzed.

Contributing

We welcome contributions to our standard library and standard checks. Do you have an idea for a new check, or how to improve an existing query? Then please go ahead and open a pull request! Before you do, though, please take the time to read our contributing guidelines. You can also consult our style guides to learn how to format your QL for consistency and clarity, how to write query metadata, and how to write query help documentation for your query.

License

The QL queries in this repository are licensed under Apache License 2.0 by Semmle.