Alex Eyers-Taylor
652c048af5
Dataflow: Remove diff from overlay informed dataflow.
2025-08-21 19:49:48 +01:00
Alex Eyers-Taylor
eb31b1c0d3
Jave: Use force local to make parsing local after global regex finding.
2025-08-21 19:49:48 +01:00
Alex Eyers-Taylor
979df35109
QL: make a fastTC overlay_caller.
2025-08-21 19:49:47 +01:00
Jonas Jensen
93e3702555
TEMP: DataFlow: Java-only flow including base
...
This won't work for other languages until we can annotate a `forceLocal`
call with `local?`.
2025-08-21 19:49:47 +01:00
Jonas Jensen
1f265efac8
DataFlow: overlay-informed flow includes the diff
2025-08-21 19:49:47 +01:00
Jonas Jensen
8616943794
DataFlow:Run overlay-informed if not diff-informed
...
To ensure good performance, always run data flow overlay-informed unless
the configuration has opted in to being diff-informed. This change
affects only databases with an overlay and therefore has no immediate
production consequences.
2025-08-21 19:49:47 +01:00
Alex Eyers-Taylor
ee2de0170c
SSA global annotation
2025-07-25 12:17:17 +01:00
Geoffrey White
91ced7ea0c
Merge pull request #20109 from github/copilot/fix-20108
...
Rust: Remove sourceModelDeprecated, summaryModelDeprecated and sinkModelDeprecated
2025-07-23 14:33:22 +01:00
Mathias Vorreiter Pedersen
63e5c52d7e
Merge pull request #20107 from MathiasVP/add-overrun-write-barriers
...
C++: Add more barriers to `cpp/overrun-write`
2025-07-23 13:30:07 +01:00
Mathias Vorreiter Pedersen
3a977b86d4
Update cpp/ql/lib/semmle/code/cpp/security/ProductFlowUtils/ProductFlowUtils.qll
...
Co-authored-by: Idriss Riouak <idrissrio@github.com >
2025-07-23 12:27:38 +01:00
Mathias Vorreiter Pedersen
5d6c4a63bb
Update cpp/ql/lib/semmle/code/cpp/security/ProductFlowUtils/ProductFlowUtils.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-07-23 11:53:55 +01:00
Simon Friis Vindum
49ecc60c0f
Merge pull request #20076 from paldepind/rust/type-inference-cleanup-join
...
Rust: Type inference refactor and improve join orders
2025-07-23 12:53:43 +02:00
Mathias Vorreiter Pedersen
019447b681
C++: Add change note.
2025-07-23 11:49:07 +01:00
copilot-swe-agent[bot]
defd4a1d08
Add change note for removal of deprecated dataflow predicates
...
Co-authored-by: geoffw0 <40627776+geoffw0@users.noreply.github.com >
2025-07-23 10:41:31 +00:00
copilot-swe-agent[bot]
f1df63657b
Add CodeQL autoformatter instructions to copilot-instructions.md
...
Co-authored-by: geoffw0 <40627776+geoffw0@users.noreply.github.com >
2025-07-23 10:08:51 +00:00
Nick Rolfe
28d3a6b404
Merge pull request #20113 from github/post-release-prep/codeql-cli-2.22.2
...
Post-release preparation for codeql-cli-2.22.2
2025-07-23 06:05:34 -04:00
Nora Dimitrijević
766b0bf773
Merge pull request #20082 from d10c/d10c/diff-informed-phase-3-swift
...
Swift: Diff-informed queries: phase 3 (non-trivial locations)
2025-07-23 11:56:04 +02:00
github-actions[bot]
68a96a44d8
Post-release preparation for codeql-cli-2.22.2
2025-07-23 09:53:25 +00:00
Nick Rolfe
ff54dfe8aa
Merge pull request #20112 from github/release-prep/2.22.2
...
Release preparation for version 2.22.2
codeql-cli/v2.22.2
2025-07-23 05:40:18 -04:00
Nick Rolfe
2c03d1f14a
Tweak changenotes
2025-07-23 10:38:57 +01:00
copilot-swe-agent[bot]
2cc732e235
Apply QL autoformatter to ModelsAsData.qll
...
Co-authored-by: geoffw0 <40627776+geoffw0@users.noreply.github.com >
2025-07-23 09:38:10 +00:00
github-actions[bot]
26296c44d3
Release preparation for version 2.22.2
2025-07-23 09:32:53 +00:00
Nick Rolfe
a883db0935
Merge pull request #20110 from github/revert-20105-release-prep/2.22.2
...
Revert "Release preparation for version 2.22.2"
2025-07-23 05:30:33 -04:00
Nick Rolfe
12ebf717eb
Revert "Release preparation for version 2.22.2"
2025-07-23 10:09:23 +01:00
copilot-swe-agent[bot]
0245cd872c
Remove deprecated Rust dataflow predicates and associated classes
...
Co-authored-by: geoffw0 <40627776+geoffw0@users.noreply.github.com >
2025-07-23 08:49:24 +00:00
copilot-swe-agent[bot]
69d50e103f
Initial plan
2025-07-23 08:41:24 +00:00
Simon Friis Vindum
f432cf9c4d
Merge pull request #20041 from paldepind/rust/type-inference-tuples
...
Rust: Type inference for tuples
2025-07-23 08:21:27 +02:00
Ian Lynagh
09dd708086
Merge pull request #20031 from igfoo/igfoo/kotlin-tests-2.2.0
...
Kotlin: Run the tests with 2.2.0
2025-07-22 22:20:40 +01:00
Mathias Vorreiter Pedersen
1189665970
C++: Add barriers to 'cpp/overrun-write'.
2025-07-22 18:35:56 +01:00
Mathias Vorreiter Pedersen
a502bb1ac2
C++: Add a copy of 'isSinkPairImpl' (named 'isSinkPairImpl0') with a few more columns that we'll need.
2025-07-22 18:35:50 +01:00
Mathias Vorreiter Pedersen
e0eadc75dd
C++: Remove the ad-hoc code for keeping track of increments/decrements on pointers in the 'cpp/overrun-write' query.
2025-07-22 18:35:31 +01:00
Mathias Vorreiter Pedersen
a1f4246c5f
C++: Extract the barriers from 'cpp/invalid-pointer-deref' into a library.
2025-07-22 18:35:29 +01:00
Mathias Vorreiter Pedersen
92a730c9ac
C++: Add a false positive.
2025-07-22 18:35:21 +01:00
Ian Lynagh
cd3143f106
Kotlin: Disable the custom plugin test for now
2025-07-22 17:38:14 +01:00
Ian Lynagh
9a03f2eb26
Kotlin: Accept test changes in 2.2.0
2025-07-22 17:38:14 +01:00
Ian Lynagh
65bd1aff83
Kotlin: Update default version to 2.2.0
...
Changes the default version from 2.1.20 to 2.2.0 in the wrapper.py file.
2025-07-22 17:38:14 +01:00
Nick Rolfe
dd8d04bb94
Merge branch 'main' into post-release-prep/codeql-cli-2.22.2
2025-07-22 10:30:14 -04:00
github-actions[bot]
37cc78255a
Post-release preparation for codeql-cli-2.22.2
2025-07-22 14:22:20 +00:00
Nick Rolfe
320f75fa51
Merge pull request #20105 from github/release-prep/2.22.2
...
Release preparation for version 2.22.2
2025-07-22 10:11:13 -04:00
Nick Rolfe
43d14c28c2
Tweak changenotes
2025-07-22 15:06:09 +01:00
github-actions[bot]
997547b8ef
Release preparation for version 2.22.2
2025-07-22 14:04:14 +00:00
Nick Rolfe
5fb7541a94
Merge pull request #20104 from github/revert-20100-release-prep/2.22.2
...
Revert "Release preparation for version 2.22.2"
2025-07-22 10:01:12 -04:00
Nick Rolfe
825c813095
Revert "Release preparation for version 2.22.2"
2025-07-22 14:33:45 +01:00
Geoffrey White
6efc19daac
Merge pull request #18943 from geoffw0/constcrypto
...
Rust: new query rust/hardcoded-crytographic-value
2025-07-22 13:36:14 +01:00
Geoffrey White
f7d822b19c
Rust: Remove empty file.
2025-07-22 12:43:22 +01:00
Nick Rolfe
96a32c0179
Merge pull request #20103 from github/post-release-prep/codeql-cli-2.22.2
...
Post-release preparation for codeql-cli-2.22.2
2025-07-22 06:01:34 -04:00
github-actions[bot]
deb035cf4e
Post-release preparation for codeql-cli-2.22.2
2025-07-22 09:36:07 +00:00
Nick Rolfe
0b7111b867
Merge pull request #20100 from github/release-prep/2.22.2
...
Release preparation for version 2.22.2
2025-07-22 04:55:58 -04:00
Nick Rolfe
74cd982aca
Tweak changenotes
2025-07-22 09:51:52 +01:00
Simon Friis Vindum
6b366d8384
Merge branch 'main' into rust/type-inference-tuples
2025-07-22 10:45:41 +02:00