hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 09:43:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
11,886 Commits 1,672 Branches 157 Tags
codeql-cli-2.1.4-cloudbuild
Commit Graph

11886 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dave Bartolomeo
a65174af86 Fix path transformer handling of extensionless files 2020-10-06 10:53:19 -04:00
Tom Hvitved
ac370760b4 C#: Construct File::TransformedPathLazy lazily 
This avoids calling the path transformer for `GeneratedFile`s.
 2020-09-14 11:05:06 +02:00
Tom Hvitved
d6f348ae45 Remove nullness annotations 2020-09-10 15:34:53 +02:00
Tom Hvitved
d1b496d3d3 Address review comments 2020-09-10 15:31:27 +02:00
Tom Hvitved
3f1b3e0c56 C#: Implement support for path transformers 2020-09-10 15:31:17 +02:00
Tom Hvitved
5379690961 C#: Support wild-cards in file patterns 
Implements the specification at https://wiki.semmle.com/display/SDmaster/project-layout+format
by compiling file path specifications to regular expressions.
 2020-09-10 15:29:35 +02:00
Tom Hvitved
df72141fd1 C#: Rename Layout.Condition to FilePattern and move to separate file 2020-09-10 15:29:27 +02:00
Shati Patel
eaec2d722c Merge pull request #3888 from shati-patel/go-docs 
Learning CodeQL: Add new library modeling guide (Go)
 2020-07-07 09:54:39 +01:00
Shati Patel
f98491a052 Apply suggestions from code review 
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com>
 2020-07-06 18:30:01 +01:00
Arthur Baars
f917b9e3cb Merge pull request #3608 from aschackmull/java/backport-switchexpr-cfg-fix 
Java: Backport missing CFG edge fix for switch expressions
 2020-07-06 11:43:16 +02:00
Shati Patel
45bd492161 Learning CodeQL: Add new library modeling guide (Go) 2020-07-03 08:10:44 +01:00
James Fletcher
d5c6433245 Merge pull request #3849 from asger-semmle/js/vue-support-rc 
JS: Add Vue to list of supported frameworks
 2020-06-30 15:43:04 +01:00
Asger Feldthaus
472501bd6f JS: Add Vue to list of supported frameworks 2020-06-30 13:47:25 +01:00
semmle-qlci
c2de54f5ca Merge pull request #3685 from shati-patel/ast-go-edits 
Approved by felicitymay, owen-mc
 2020-06-11 12:43:20 +01:00
Shati Patel
2874050503 CodeQL for Go: Edit AST reference 2020-06-11 10:49:19 +01:00
Max Schaefer
cee248520e Merge pull request #3675 from owen-mc/ast-class-reference-for-go 
AST class reference for go
 2020-06-11 08:05:41 +01:00
Owen Mansel-Chan
d8900448ec Add references to the AST class reference for go 2020-06-10 17:32:41 +01:00
Owen Mansel-Chan
48ff00832c Add a reference to the AST class reference for go 2020-06-10 17:24:40 +01:00
Owen Mansel-Chan
5b2c0fbb04 AST class reference for go 
The master copy of this file is in the codeql-go repository
 2020-06-10 16:42:03 +01:00
Anders Schack-Mulligen
a969dbc6ca Java: Fix missing CFG edge for switch expressions. 2020-06-03 10:49:08 +02:00
Shati Patel
9afbd5b5eb Merge pull request #3565 from shati-patel/53-style-guides 
Docs: Update markdown files with 1.24 title changes
v1.24.0 		2020-05-26 15:58:04 +01:00
Shati Patel
bdecda22f7 Merge pull request #3538 from shati-patel/sd-86 
QL language: Clarify use of query modules
 2020-05-26 11:30:17 +01:00
Shati Patel
c12fd6fba6 Add links to Go queries 2020-05-26 11:08:11 +01:00
Shati Patel
495c6715cd Update contributing guide with premigration changes 2020-05-26 11:08:11 +01:00
Shati Patel
bdfb8a337e Update style guides with premigration changes 2020-05-26 11:08:11 +01:00
Shati Patel
e990f1b53d Merge pull request #3546 from aschackmull/java/tutorial-bug-fix 
Java: Fix bug in tutorial.
 2020-05-22 17:23:58 +01:00
Anders Schack-Mulligen
6228e7670b Java: Fix bug in tutorial. 2020-05-22 14:44:24 +02:00
Shati Patel
cf13992552 Merge pull request #3544 from shati-patel/code-typo 
CodeQL docs: Fix error in code snippet [cherry-pick]
 2020-05-22 08:42:41 +01:00
syang-ng
ca8c3dabda fix an error in the code snippet of the documentation about global-data-flow-java 2020-05-22 08:00:52 +01:00
Shati Patel
c021dcd1e8 Ql language: Clarify use of query modules 2020-05-21 15:30:40 +01:00
James Fletcher
e0e9535f08 Merge pull request #3530 from jf205/sd-109 
CodeQL docs: refine two article titles
 2020-05-21 08:55:10 +01:00
james
edc5d36274 docs: refine some article titles 2020-05-20 16:16:14 +01:00
Felicity Chapman
cca3922d00 Merge pull request #3517 from felicitymay/1.24/SD-54-update-contact 
CodeQL 1.24: Update information on support
 2020-05-19 18:57:34 +01:00
Felicity Chapman
70d642a956 Update information on support 2020-05-19 18:17:17 +01:00
Alexander Eyers-Taylor
57dbe5793f Merge pull request #3501 from jbj/dispatch-global-union 
C++: Fix struct field conflation in IR data flow
 2020-05-19 12:29:25 +01:00
Jonas Jensen
76e194c8be C++: Fix struct field conflation in IR data flow 
The virtual-dispatch code for globals was missing any relationship
between the union field access and the global variable, which meant it
propagated function-pointer flow between any two fields of a global
struct. This resulted in false positives from
`cpp/tainted-format-string` on projects using SDL, such as
WohlSoft/PGE-Project.

In addition to fixing that bug, this commit also brings the code up to
date with the new style of modeling flow through global variables:
`DataFlow::Node.asVariable()`.
 2020-05-18 16:24:22 +02:00
Jonas Jensen
f2402c5abb C++: Test virtual dispatch field conflation 
This test demonstrates that IR data flow conflates unrelated fields of a
global struct-typed variable and that this bug is not present in the old
AST-based implementation of `semmle.code.cpp.security.TaintTracking`.
 2020-05-18 15:37:22 +02:00
James Fletcher
bd6d2d899d Merge pull request #3495 from jf205/java-article-fix 
CodeQL docs: remove stray GH variable
 2020-05-18 10:23:22 +01:00
james
06f465bae7 docs: remove gh variable 2020-05-18 10:12:40 +01:00
Jonas Jensen
cc00f0f584 C++: Move identical declarations to shared.h file 
This cleans up the test results, which were confusing because functions
like `sink` had multiple locations.

There are some additional results now involving casts to `const char *`
because previously it varied whether `sink` used `const`, and now it
always does.
 2020-05-18 10:42:52 +02:00
Shati Patel
3af98aaf44 Merge pull request #3469 from shati-patel/delete-spec 
CodeQL docs migration: Delete `ql-spec` Sphinx project
 2020-05-14 11:12:19 +01:00
Shati Patel
cb2f7c4b15 CodeQL docs migration: Delete ql-spec Sphinx project 2020-05-14 10:32:01 +01:00
James Fletcher
a6c03a4350 Merge pull request #3449 from jf205/sd-38 
CodeQL docs: remove information about metric queries
 2020-05-12 12:21:09 +01:00
James Fletcher
85ebe04a1c Update docs/language/learn-ql/writing-queries/query-metadata.rst 
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
 2020-05-12 12:11:22 +01:00
james
cf03e61e3a docs remove info about metrics from codeql docs 2020-05-12 11:33:22 +01:00
James Fletcher
46140c3c1f Merge pull request #3440 from jf205/sd-68-2 
CodeQL docs: more updates to "Further reading" sections
 2020-05-11 16:33:29 +01:00
James Fletcher
7f952963e1 Update docs/language/learn-ql/writing-queries/debugging-queries.rst 
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
 2020-05-11 14:58:46 +01:00
james
148c7eb34d docs: further reading ql training 2020-05-11 11:40:58 +01:00
james
3a00c4838e docs: further reading QL tutorials 2020-05-11 11:40:58 +01:00
james
5292051c3e docs: further reading for codeql queries section 2020-05-11 11:40:50 +01:00