Commit Graph

82643 Commits

Author SHA1 Message Date
Paolo Tranquilli
abea647bb1 Bazel: update rules_kotlin to 2.1.3 2025-05-13 14:42:03 +01:00
Chris Smowton
08aad90346 Add 2.2.0-Beta1 deps 2025-05-13 14:42:02 +01:00
Mathias Vorreiter Pedersen
f255fc2fd5 C++: Drive-by join order fix. Before:
```
Evaluated relational algebra for predicate SsaInternals::getDefImpl/1#1ed4f567@65628fbv with tuple counts:
          4935102  ~5%    {4} r1 = SCAN `SsaInternals::SsaImpl::Definition.definesAt/3#dispred#7eea4c8f` OUTPUT In.2, In.3, In.0, In.1
        104274503  ~1%    {3}    | JOIN WITH `SsaInternals::DefImpl.hasIndexInBlock/2#dispred#30a6c29f_120#join_rhs` ON FIRST 2 OUTPUT Rhs.2, Lhs.3, Lhs.2
          4921319  ~2%    {2}    | JOIN WITH `SsaInternals::DefImpl.getSourceVariable/0#dispred#72437659` ON FIRST 2 OUTPUT Lhs.2, Lhs.0
                          return r1
```
After:
```
Evaluated relational algebra for predicate SsaInternals::SsaImpl::Definition.definesAt/3#dispred#7eea4c8f_1230#join_rhs@b280fb5h with tuple counts:
        4935102  ~3%    {4} r1 = SCAN `SsaInternals::SsaImpl::Definition.definesAt/3#dispred#7eea4c8f` OUTPUT In.1, In.2, In.3, In.0
                        return r1

Evaluated relational algebra for predicate SsaInternals::DefImpl.hasIndexInBlock/3#dispred#31d295aa_1230#join_rhs@2be655s4 with tuple counts:
        5634706  ~1%    {4} r1 = SCAN `SsaInternals::DefImpl.hasIndexInBlock/3#dispred#31d295aa` OUTPUT In.1, In.2, In.3, In.0
                        return r1

Evaluated relational algebra for predicate SsaInternals::getDefImpl/1#1ed4f567@8afa36uu with tuple counts:
        4921319  ~2%    {2} r1 = JOIN `SsaInternals::SsaImpl::Definition.definesAt/3#dispred#7eea4c8f_1230#join_rhs` WITH `SsaInternals::DefImpl.hasIndexInBlock/3#dispred#31d295aa_1230#join_rhs` ON FIRST 3 OUTPUT Lhs.3, Rhs.3
                        return r1
```
2025-05-13 14:21:28 +01:00
yoff
774b1820c2 ruby: also insert capturedExitRead-nodes by exceptional exits 2025-05-13 15:11:00 +02:00
yoff
73bae1627b ruby: test for DeadStore and captured variables 2025-05-13 15:08:01 +02:00
Tom Hvitved
ae54c62001 Simplify using non-capturing groups 2025-05-13 15:06:43 +02:00
Michael Nebel
b8f85b3f29 C#: Update integration test expected output. 2025-05-13 14:50:23 +02:00
Asger F
aea676df3c Merge pull request #19445 from asgerf/js/summaries-with-fallback
JS: Generate flow summaries from summaryModels; only generate steps as a fallback
2025-05-13 14:49:38 +02:00
Michael Nebel
f5903eaf2d C#: Add cs/call-to-gc to the code quality suite. 2025-05-13 14:46:29 +02:00
Michael Nebel
fcecc5a3af Cpp: Update model generator implementation. 2025-05-13 13:44:44 +01:00
Michael Nebel
6712cce1d7 Rust: Update model generator implementation. 2025-05-13 13:44:43 +01:00
Michael Nebel
ee83ca9125 Java: Update model generator implementation and test expected output. 2025-05-13 13:44:42 +01:00
Michael Nebel
09dc3c88b3 C#: Update model generator implementation and test expected output. 2025-05-13 13:44:40 +01:00
Michael Nebel
a94cffa27e Shared: Adjust the printing of heuristic value summaries (and fix a minor issue with output printing in captureSink). 2025-05-13 13:44:39 +01:00
Michael Nebel
6c9f248fdb Shared: Avoid generating taint based heuristic summaries when a content sensitive summary can be generated. 2025-05-13 13:44:38 +01:00
Mathias Vorreiter Pedersen
0836f0b413 C++: Cache and fix join order in 'hasIncompleteSsa'. 2025-05-13 13:41:15 +01:00
Tom Hvitved
7494eac35c Address review comments 2025-05-13 14:26:09 +02:00
Michael Nebel
3449a34018 C#: Address review comments. 2025-05-13 14:20:06 +02:00
Geoffrey White
20a012d5f1 Merge pull request #19454 from geoffw0/deref
Rust: Add Operation class
2025-05-13 13:17:14 +01:00
yoff
1c863b1bd4 Merge pull request #19476 from yoff/ruby/DeadStoreOfLocal-precision-high
ruby: adjust precision of `rb/useless-assignment-to-local`
2025-05-13 13:56:22 +02:00
Mathias Vorreiter Pedersen
c3c18bdbd2 C++: Add change note. 2025-05-13 11:28:25 +01:00
Mathias Vorreiter Pedersen
9d2eb3d9b8 C++: Filter out instructions with incomplete SSA in range analysis. 2025-05-13 10:54:22 +01:00
Mathias Vorreiter Pedersen
510df38da2 C++: Add an 'hasIncompleteSsa' predicate to check whether a function has correctly modelled SSA information. 2025-05-13 10:54:20 +01:00
Simon Friis Vindum
4cc9c24940 Merge pull request #19452 from paldepind/shared-model-generator-script
Shared: Remove the language-specific model generator scripts
2025-05-13 10:17:37 +02:00
Geoffrey White
b3dc7a21b3 Apply suggestions from code review
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
2025-05-13 09:06:25 +01:00
Geoffrey White
2b6e428c37 Merge pull request #19466 from geoffw0/web
Rust: Add tests for web frameworks as taint sources
2025-05-13 09:02:46 +01:00
Simon Friis Vindum
014e7dc4bc Shared: Remove change note for internal MaD generator 2025-05-13 09:50:07 +02:00
Simon Friis Vindum
14bdc1ab22 Shared: Minor tweaks to model generator script
Co-authored-by: Michael Nebel <michaelnebel@github.com>
2025-05-13 09:31:50 +02:00
Michael Nebel
0c0e1d0c46 Merge pull request #19456 from 5idg5/5idg5-update-cs-stubs
Add new stubs definitions to System.Web
2025-05-13 08:56:06 +02:00
Sid Gawri
eb4711e884 Merge branch '5idg5-update-cs-stubs' of https://github.com/5idg5/codeql into 5idg5-update-cs-stubs 2025-05-12 17:41:32 -04:00
5idg5
6a5ce39930 Merge branch 'github:main' into 5idg5-update-cs-stubs 2025-05-12 17:39:33 -04:00
Michael Nebel
5faaa4f0f3 C#: Cleanup test options files. 2025-05-12 17:36:52 -04:00
Michael Nebel
05dc9b6d34 C#: Remove dependency to ASP.NET in the System.Web.cs stub file. 2025-05-12 17:36:10 -04:00
Michael Nebel
60d26e522e C#: Cleanup test options files. 2025-05-12 17:36:08 -04:00
Michael Nebel
82cf472f8a C#: Fix ASP tests. 2025-05-12 17:33:22 -04:00
Michael Nebel
ffd6b2677c C#: Cleanup test options files. 2025-05-12 17:33:21 -04:00
yoff
a50167812d ruby: adjust precision of rb/useless-assignment-to-local
from `medium` to `high`
2025-05-12 23:26:21 +02:00
Owen Mansel-Chan
c933ab4ae2 Apply suggestions from code review
Co-authored-by: Chris Smowton <smowton@github.com>
2025-05-12 16:24:56 -04:00
Mathias Vorreiter Pedersen
f1b4e05579 C++: Expose 'isBusyDef'. 2025-05-12 19:45:19 +01:00
Mathias Vorreiter Pedersen
e51cb478af C++: Expose 'MemoryLocation0'. 2025-05-12 19:43:19 +01:00
Tom Hvitved
cd01bd0e07 Rust: Add LiteralExpr sub classes 2025-05-12 20:35:00 +02:00
Nicolas Will
d3282a9470 Merge pull request #19469 from nicolaswill/quantum-experimental
Add CodeQL Quantum models and queries (Java, C++) to experimental
2025-05-12 19:25:34 +02:00
Geoffrey White
f04d6fd8c8 Rust: Accept minor test changes for the cleartext logging query. 2025-05-12 17:45:00 +01:00
Geoffrey White
a2944cdb61 Rust: Make usage of Impl more consistent with other Impl modules. 2025-05-12 16:48:06 +01:00
Geoffrey White
9160036e41 Rust: Rename OperationImpl -> Impl. 2025-05-12 16:45:41 +01:00
Geoffrey White
7c98fa87da Rust: One more bit of cleanup. 2025-05-12 16:34:08 +01:00
Geoffrey White
402a84f755 Update rust/ql/test/library-tests/dataflow/sources/web_frameworks.rs
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
2025-05-12 16:17:26 +01:00
Geoffrey White
bf8cdffffa Update rust/ql/test/library-tests/dataflow/sources/web_frameworks.rs
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
2025-05-12 16:06:33 +01:00
Geoffrey White
08fcf6114f Apply suggestions from code review
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
2025-05-12 16:01:52 +01:00
Geoffrey White
6678dc490a Merge pull request #19449 from geoffw0/alloc-size-sev
Rust: Update query severities
2025-05-12 15:57:02 +01:00