Commit Graph

82643 Commits

Author SHA1 Message Date
Óscar San José
9bd116fcf8 Add actions to codeql analysis workflow 2025-02-11 16:02:40 +01:00
Simon Friis Vindum
608c1523d2 Rust: Add a few tests for modeled flow for Option 2025-02-11 16:02:04 +01:00
Geoffrey White
8a3a0ef24d Rust: Use Future in the other models as well. 2025-02-11 14:54:52 +00:00
Geoffrey White
f61c157c0a Rust: Repair test after merging main. 2025-02-11 14:47:42 +00:00
Geoffrey White
e594074421 Merge branch 'main' into http 2025-02-11 14:38:58 +00:00
Nicolas Will
4d44755945 Refactor Model and CBOM print queries 2025-02-11 15:37:15 +01:00
Jonas Jensen
76440120d1 Merge pull request #18737 from jbj/NumericCastTaintedQuery-selectedLocation
Java: precise diff-informed NumericCastTainted
2025-02-11 15:33:28 +01:00
Simon Friis Vindum
5a49390615 Merge pull request #18685 from paldepind/rust-future-content
Rust: Basic support for future content and `.await`
2025-02-11 15:27:32 +01:00
Simon Friis Vindum
a09b37edc3 Rust: Expand on toString of IdentPat 2025-02-11 15:25:54 +01:00
Simon Friis Vindum
0aa08a3553 Rust: Add CFG test with identifier pattern containing sub pattern, ref, and mut 2025-02-11 15:09:10 +01:00
Arthur Baars
7e569b4fb2 Merge pull request #18713 from github/aibaars-patch-2
TreeSitter extractors: log fewer lines
2025-02-11 14:36:36 +01:00
Simon Friis Vindum
58d86fd2a9 Merge pull request #18714 from paldepind/rust-pointer
Rust: Handle writes to references and add encoding of reference content
2025-02-11 14:12:56 +01:00
Simon Friis Vindum
c7412cc839 Merge pull request #18696 from paldepind/shared-bb-dominates
Shared: Use edge dominance terminology in basic block library
2025-02-11 14:12:07 +01:00
Asger F
7e3f89842d JS: Provide more precise related locations 2025-02-11 14:12:03 +01:00
Simon Friis Vindum
4c3a2cd111 Change note creation script uses EDITOR environment variable
Changes the script for creating change notes to read the EDITOR environment variable, and use the editor specified therein. This makes the script more convenient when used from a terminal. The VSCode task is updated to the set EDITOR to `code -r` which preserves the current behavior.
2025-02-11 14:04:46 +01:00
Taus
a69e3f5236 Python: Add change note
Co-authored-by: yoff <yoff@github.com>
2025-02-11 13:02:09 +00:00
Taus
918c05c538 Python: Don't prune any MatchLiteralPatterns
Extends the mechanism introduced in
https://github.com/github/codeql/pull/18030
to behave the same for _all_ `MatchLiteralPattern`s, not just the ones
that happen to be the constant `True` or `False`.

Co-authored-by: yoff <yoff@github.com>
2025-02-11 12:58:52 +00:00
Jonas Jensen
71c078dbdd Java: precise diff-informed NumericCastTainted
It was discovered by the upcoming support for exact locations matching
in diff-informed testing that this data-flow configuration did not
correspond exactly to the query.
2025-02-11 13:49:15 +01:00
Michael Nebel
83f8a4057c C#: Address review comments. 2025-02-11 13:46:28 +01:00
Michael Nebel
fbbdea09a2 C#: Add change note. 2025-02-11 13:42:48 +01:00
Michael Nebel
5d72b29fe9 C#: Update flow summaries test expected output. 2025-02-11 13:42:46 +01:00
Michael Nebel
ff74024f50 C#: Re-generate .NET Runtime models based on .NET 9. 2025-02-11 13:42:45 +01:00
Michael Nebel
54345044ad C#: Consider properties that has any auto declaration as an auto property in terms of field store. 2025-02-11 13:42:43 +01:00
Michael Nebel
dde28a1bed C#: Only disregard generated summaries in case there is a static call target in source code. 2025-02-11 13:42:40 +01:00
Michael Nebel
7476d9ed6b Merge pull request #18734 from michaelnebel/csharp/launchjson
C#: Add the standard library to the list of references for debugging …
2025-02-11 13:16:29 +01:00
Asger F
eedfa4dbb2 Merge pull request #18341 from asgerf/py/diff-informed
Python: enable diff-informed data flow queries
2025-02-11 13:15:44 +01:00
Simon Friis Vindum
efb5b9b27c Rust: Add a comment to clearify test 2025-02-11 13:15:32 +01:00
Asger F
56ff9351f2 JS: Update test output again 2025-02-11 12:59:11 +01:00
Asger F
967c0860f9 Test: support queries that don't select a Location 2025-02-11 12:58:49 +01:00
Asger F
5b0eb0f6cc JS: Move an Alert annotation to its correct line 2025-02-11 12:58:47 +01:00
Asger F
84c02d0863 JS: Enable test post-processing 2025-02-11 12:58:46 +01:00
Asger F
fb79ab1c8c JS: Update line numbers 2025-02-11 12:58:45 +01:00
Asger F
a1c3dca5de JS: Convert OK-style to $-style expectations in one test 2025-02-11 12:58:44 +01:00
yoff
0912e3b024 ruby: use inline expectation tests 2025-02-11 12:51:25 +01:00
Simon Friis Vindum
003058c44a Shared/Ruby: Use e for edges in documentation 2025-02-11 12:48:28 +01:00
Simon Friis Vindum
d6e8acd080 C#/Ruby/Swift: Tweaks to documentation
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
2025-02-11 12:44:19 +01:00
Paolo Tranquilli
4a9be40e1f Merge pull request #18710 from github/redsun82/rules_rust-update
Bazel: update `rules_rust`
2025-02-11 12:22:56 +01:00
Paolo Tranquilli
eee82f1700 Merge branch 'main' into redsun82/rules_rust-update 2025-02-11 12:07:08 +01:00
Paolo Tranquilli
71de5a2d3d Rust: remove obsolete comment 2025-02-11 12:06:39 +01:00
Michael Nebel
ad05c4598d C#: Add the standard library to the list of references for debugging the traced extractor. 2025-02-11 11:30:45 +01:00
Owen Mansel-Chan
4bb7559c18 Merge pull request #18732 from github/dependabot/go_modules/go/extractor/extractor-dependencies-a262e8450e
Bump golang.org/x/tools from 0.29.0 to 0.30.0 in /go/extractor in the extractor-dependencies group
2025-02-11 10:24:13 +00:00
Tom Hvitved
a061b1e00f Merge pull request #16900 from hvitved/java/shared-ssa
Java: Adopt shared SSA library
2025-02-11 11:04:11 +01:00
Geoffrey White
72a8ab3411 Update rust/ql/lib/codeql/rust/frameworks/http.model.yml
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
2025-02-11 09:55:04 +00:00
Simon Friis Vindum
8eadd11d28 C#/Swift/Ruby: Fix grammar in change note
Co-authored-by: Tom Hvitved <hvitved@github.com>
2025-02-11 10:42:36 +01:00
Asger F
45242977a4 JS: Model query-string parsers that strip off ? or # 2025-02-11 10:41:23 +01:00
Asger F
b123a3c57a JS: Add test 2025-02-11 10:40:04 +01:00
Tom Hvitved
eaaf510b29 Merge pull request #18728 from hvitved/rust/path-resolution-namespaces
Rust: Model namespaces in path resolution
2025-02-11 10:29:57 +01:00
Tom Hvitved
e5e88435bc Java: Remove ExitBasicBlock from SsaInput 2025-02-11 10:07:18 +01:00
Tom Hvitved
6fbb1e2571 Apply suggestions from code review
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
2025-02-11 10:06:50 +01:00
Anders Schack-Mulligen
e955f58eb1 Java: Bugfix for samevar in useReaches. 2025-02-11 10:06:49 +01:00