aegilops
ce136684e6
Fixed formatting
2025-11-20 17:39:32 +00:00
aegilops
e904520779
Fixed formatting
2025-11-20 17:34:42 +00:00
aegilops
29a5b27b13
Removed bounds checking and only using literals - bounded() predicate did not work
2025-11-20 17:31:56 +00:00
Paolo Tranquilli
794b328802
Bazel: remove unneeded file from registry
2025-11-20 17:07:09 +01:00
Paolo Tranquilli
195a7234d3
Merge branch 'main' into redsun82/update-fmt
2025-11-20 17:06:24 +01:00
Tom Hvitved
132f02c51b
Update rust/ql/lib/codeql/rust/internal/PathResolution.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-20 14:34:02 +01:00
Eliav2
6df789d114
Merge branch 'main' into 20823-globalVarRef-document-defaultView
2025-11-20 15:18:15 +02:00
eliav
91451b73ef
javascript: Update expected results for global variable references
2025-11-20 15:15:06 +02:00
Mathias Vorreiter Pedersen
14f9997eb3
Merge pull request #20862 from MathiasVP/union-content-field-content-common-base-class
...
C++: Create a common base class for 'FieldContent' and 'UnionContent'
2025-11-20 13:14:29 +00:00
Paul Hodgkinson
801cd72965
Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers
2025-11-20 12:24:22 +00:00
aegilops
1e67907516
Merge commit
2025-11-20 12:22:39 +00:00
aegilops
62ee6d3a33
Made changes requested by reviewers - bounded() for range checking, style and better comments
2025-11-20 11:46:42 +00:00
Paolo Tranquilli
240c637e7a
Merge pull request #20868 from github/redsun82/java-doc
...
Java: add missing QLDoc
2025-11-20 12:08:16 +01:00
Owen Mansel-Chan
05085a8e82
Merge pull request #20666 from owen-mc/go/promote-weak-crypto-algorithm
...
Go: promote `go/weak-crypto-algorithm`
2025-11-20 11:03:05 +00:00
Tom Hvitved
0f40b3ccb8
Merge pull request #20842 from hvitved/rust/path-resolution-extern-crate-visibility
...
Rust: Handle `pub extern crate` in path resolution
2025-11-20 11:59:05 +01:00
Tom Hvitved
4d4a677da0
Merge pull request #20869 from hvitved/rust/dataflow-ast
...
Rust: Base `DataFlow::Node` on AST instead of CFG
2025-11-20 11:34:40 +01:00
Asger F
613895e0c0
Merge pull request #20424 from asgerf/js/overlay-manual-v4
...
JS: Add overlay annotations
2025-11-20 11:10:46 +01:00
Tom Hvitved
d4fdf956a0
Address review comments
2025-11-20 11:03:53 +01:00
Paolo Tranquilli
b54abc7a6d
C++: move -DFMT_UNICODE into a module patch
2025-11-20 10:47:54 +01:00
eliav
08dfb95155
javascript: Add change note for document.defaultView aliasing window
...
Introduced a new change note detailing that `DataFlow::globalVarRef` now recognizes `document.defaultView` as an alias of `window`, enhancing the modeling of data flows involving `history` in queries.
2025-11-20 00:17:14 +02:00
Mingjie Shen
b293dfe3a6
C++: Fix CWE-119 memcpy tests
...
sizeof(pointer) only gives the pointer size, not the buffer
size, so use explicit 10/20 lengths in tests.cpp and update
OverflowBuffer.expected to accept the resulting memcpy diagnostics.
Signed-off-by: Mingjie Shen <shen497@purdue.edu >
2025-11-19 22:06:06 +00:00
Tom Hvitved
e4853ab060
Add change note
2025-11-19 19:37:41 +01:00
Tom Hvitved
d2bb53a81e
Rust: Run codegen
2025-11-19 19:37:40 +01:00
Tom Hvitved
489fff9572
Rust: Base DataFlow::Node on AST instead of CFG
2025-11-19 19:37:39 +01:00
Ian Lynagh
42f0ce74ca
C++: Enable overlay compilation
2025-11-19 17:34:06 +00:00
Mathias Vorreiter Pedersen
6c4def13b4
C++: Add change note.
2025-11-19 17:24:30 +00:00
Mathias Vorreiter Pedersen
4c09e554fc
Merge branch 'main' into union-content-field-content-common-base-class
2025-11-19 17:17:45 +00:00
Jeroen Ketema
0c43f2c4f0
Merge pull request #20870 from jketema/exp-arg-fix
...
C++: `getExpandedArgument` fixes
2025-11-19 17:10:56 +01:00
Owen Mansel-Chan
a70d74220f
Add test for good password hashing
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
f562b3d26e
Make line differences in test comments relative
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
349e8ca589
Remove unnecessary import
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
adbc1efe59
Fix diff-informed predicates
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
7d7af193dc
Fix small mistake in Ruby query help
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
8d7b2757bf
Add query help examples
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
69ecdcb4cd
Fix capitalization of class names
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
970b5d7496
Fix query suite integration tests
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
2cfafe53ca
Fix failing ruby crypto test that lists all algorithms
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
d2033ca1d5
Add change note
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
52d7e2dd18
Add query for hashing sensitive data with weak hashing algorithm
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
713e19f6f1
Make non-path query for encryption only
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
f34a625ac2
Model cryptographic operations
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
fac5296efc
Avoid duplicate results using in-barriers
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
34b2e3e2bf
Copy the structure of the Javascript query
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
5c403d374e
Move crypto qll files from query pack to library pack
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
92a3bccfd6
Align metadata with related queries
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
188b25f11f
Remove experimental tag from query metadata
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
a71bb4ba9a
Convert test to inline expectations
2025-11-19 14:36:26 +00:00
Owen Mansel-Chan
2c20d3ffeb
Move weak crypto algorithm query out of experimental
2025-11-19 14:36:26 +00:00
Paolo Tranquilli
83b3711973
Swift: update fmt
2025-11-19 14:32:37 +01:00
Simon Friis Vindum
4d9ab7b573
Merge pull request #20871 from paldepind/rust/string-literal
...
Rust: Handle string literals with line breaks
2025-11-19 14:05:43 +01:00
