hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 20:25:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'master' into alistairs-docs-preparation-1

Browse Source
This commit is contained in:
Alistair Christie
2020-03-02 11:17:42 +00:00
parent fab7955c75 dcb41a139c
commit fe9f974353
171 changed files with 4465 additions and 1084 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/language/learn-ql/java/dataflow.rst
View File

@@ -115,7 +115,7 @@ Then we can make the source more specific, for example an access to a public par
where
fileReader.getDeclaringType().hasQualifiedName("java.io", "FileReader") and
call.getCallee() = fileReader and
DataFlow::localFlow(DataFlow::parameterNode(p), DataFlow::exprNode(fc.getArgument(0)))
DataFlow::localFlow(DataFlow::parameterNode(p), DataFlow::exprNode(call.getArgument(0)))
select p
This query finds calls to formatting functions where the format string is not hard-coded.

8
docs/language/ql-spec/language.rst
View File

@@ -502,7 +502,7 @@ Identifiers are used in following syntactic constructs:
simpleId ::= lowerId | upperId
modulename ::= simpleId
classname ::= upperId
dbasetype ::= atlowerId
dbasetype ::= atLowerId
predicateRef ::= (moduleId "::")? literalId
predicateName ::= lowerId
varname ::= simpleId
@@ -1804,7 +1804,7 @@ The complete grammar for QL is as follows:
::
ql ::= moduleBody ;
ql ::= moduleBody
module ::= annotation* "module" modulename "{" moduleBody "}"
@@ -1976,11 +1976,11 @@ The complete grammar for QL is as follows:
simpleId ::= lowerId | upperId
modulename :: = simpleId
modulename ::= simpleId
classname ::= upperId
dbasetype ::= atlowerId
dbasetype ::= atLowerId
predicateRef ::= (moduleId "::")? literalId