Commit Graph

83874 Commits

Author SHA1 Message Date
Tom Hvitved
7a9cb64e2e Java: Treat x.matches(regexp) as a sanitizer for request forgery 2025-10-24 09:06:57 +02:00
Anders Schack-Mulligen
3542cdab43 Merge pull request #20677 from aschackmull/csharp/disable-exc-split
C#: Delete exception splitting.
2025-10-24 08:46:33 +02:00
Tom Hvitved
eb9df008b0 JS: Remove two invalid QHelp links 2025-10-24 08:45:12 +02:00
Tom Hvitved
ff31f0e3df Address review comments 2025-10-23 20:17:28 +02:00
Geoffrey White
7acd214d7b Merge pull request #20673 from geoffw0/sourcestest
Rust: Split up the dataflow/sources test
2025-10-23 13:08:43 +01:00
Anders Schack-Mulligen
6f72234fec Merge pull request #20680 from aschackmull/shared/align-ssa-interface
Shared: Align SSA interfaces in Guards and ControlFlowReachability with shared SSA
2025-10-23 13:12:31 +02:00
Anders Schack-Mulligen
ebb50cd402 C#: Accept qltest changes. 2025-10-23 12:48:44 +02:00
Paolo Tranquilli
d11b44599e Merge pull request #20679 from github/redsun82/fix-rust-vendor-check
Bazel: upgrade `rules_rust`
2025-10-23 12:14:32 +02:00
Anders Schack-Mulligen
72d83cc966 ControlFlowReachability: Align the SSA signature with the one from shared SSA. 2025-10-23 10:57:21 +02:00
Paolo Tranquilli
8f5f65e5fa Bazel: upgrade rules_rust 2025-10-23 10:49:51 +02:00
Anders Schack-Mulligen
f257c7a570 Guards: Align the SSA signature with the one from shared SSA. 2025-10-23 10:23:22 +02:00
Anders Schack-Mulligen
f6cddc9db7 Merge pull request #20678 from aschackmull/shared/rename-cfg-reach
Shared/Java: Rename ControlFlowReachability library.
2025-10-23 10:22:15 +02:00
Geoffrey White
47334fbab7 Rust: Accept changes to the web_frameworks results. 2025-10-23 09:06:11 +01:00
Anders Schack-Mulligen
20147cdd2b Shared/Java: Rename ControlFlowReachability library. 2025-10-23 09:07:34 +02:00
Anders Schack-Mulligen
dff327ea16 C#: Delete exception splitting. 2025-10-23 08:56:56 +02:00
Anders Schack-Mulligen
8a3f62b9b6 Merge pull request #20558 from aschackmull/csharp/guards3
C#: Instantiate shared Guards and shared ControlFlowReachability and replace nullness
2025-10-23 08:43:14 +02:00
Nicolas Will
c7ef8a5ab3 Merge pull request #20605 from bdrodes/santander-java-crypto-check
Crypto: Add Java Cryptographic Analysis Queries
2025-10-23 01:30:50 +02:00
REDMOND\brodes
bdad95d810 Crypto: Fixed alphabetical ordering issue in not_included_in_qls.expected 2025-10-22 15:56:14 -04:00
REDMOND\brodes
08379393b3 Crypto: Fix off by one column issue in unit tests. 2025-10-22 15:50:33 -04:00
REDMOND\brodes
3561d01144 Crytpo: Trying to fix in pipeline test failure, experimentally altering a line to see if this forces the test to pass. The test is off by one column in the piepline 2025-10-22 14:16:12 -04:00
Tom Hvitved
65b706ab80 Rust: Non-symmetric type propagation for lub coercions 2025-10-22 19:57:38 +02:00
Tom Hvitved
00bf049c85 Rust: Add more type inference tests 2025-10-22 19:57:37 +02:00
Tom Hvitved
c84cec9d29 Merge pull request #20664 from hvitved/rust/callable-get-body
Rust: Add `Callable.getBody()`
2025-10-22 19:57:14 +02:00
Geoffrey White
e18bf1661a Rust: Accept result de-regression. 2025-10-22 17:52:12 +01:00
Geoffrey White
6b08297c2a Rust: Repair after merge. 2025-10-22 17:46:25 +01:00
Geoffrey White
bc4d8a8425 Merge branch 'main' into sourcestest 2025-10-22 17:31:25 +01:00
Ben Rodes
e16543ab6d Merge branch 'main' into santander-java-crypto-check 2025-10-22 11:51:13 -04:00
Geoffrey White
5d2ddbfa8e Merge pull request #20670 from geoffw0/missingmetric
Rust: Add expressions with known type metric
2025-10-22 15:42:48 +01:00
Tom Hvitved
4b6c39004f Rust: Add DB downgrade script 2025-10-22 16:40:56 +02:00
Tom Hvitved
8b10f68e28 Rust: Add DB upgrade scripts 2025-10-22 16:40:54 +02:00
Tom Hvitved
944ebc5267 Rust: Add Callable.getBody() 2025-10-22 16:40:53 +02:00
Tom Hvitved
7d0509b6af Merge pull request #20282 from hvitved/rust/type-inference-method-call-resolution-rework
Rust: Rework call resolution and type inference for calls
2025-10-22 16:37:26 +02:00
REDMOND\brodes
db6d3ad054 Crypto: Fix typo in not_included_in_qls.expected. 2025-10-22 10:31:19 -04:00
REDMOND\brodes
dd60cf9395 Crypto: Adjust output of bad mac order queries, update associated bad mac order expected results, fix erroneous change to ID for a slicing query, update model to specify elliptic curve type as a property, update associated graph test expected files, update the not_included_in_qls.expected to reflect all queries now under quantum. 2025-10-22 10:29:31 -04:00
Florin Coada
83f9fb14b9 Merge pull request #20660 from github/changedocs/2.23.3
Add changelog entry for CodeQL CLI version 2.23.3
2025-10-22 14:58:00 +01:00
Anders Schack-Mulligen
7d0e4f58f3 C#: Fix join-order issue in ConstantCondition. 2025-10-22 15:52:51 +02:00
Anders Schack-Mulligen
f172e36eee C#: Address more review comments. 2025-10-22 15:50:10 +02:00
Paolo Tranquilli
35990586ae Merge pull request #20672 from github/redsun82/copilot
Copilot: move instructions to path-specific files
2025-10-22 15:41:28 +02:00
Michael Nebel
83343e1031 Merge pull request #20663 from michaelnebel/csharp/dotnet10rc2traced
C#: Tracer support for invoking `csc` directly.
2025-10-22 15:36:34 +02:00
Tom Hvitved
cf05414a93 Address review comments (iv) 2025-10-22 15:29:57 +02:00
Geoffrey White
6878a43223 Rust: Add missing file. 2025-10-22 14:18:16 +01:00
Paolo Tranquilli
f0c56edfc7 Update .github/instructions/expected-files.instructions.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-10-22 15:14:51 +02:00
Paolo Tranquilli
31627b4eb9 Copilot: move instructions to path-specific files
This is now supported. See

https://docs.github.com/en/copilot/how-tos/configure-custom-instructions/add-repository-instructions

for details.
2025-10-22 14:54:37 +02:00
Geoffrey White
8336a956c0 Rust: Add consistency check failures. 2025-10-22 13:50:49 +01:00
Michael Nebel
47c751be32 C#: Only run integration test on windows and linux. 2025-10-22 14:12:17 +02:00
Michael Nebel
6a02649334 Merge pull request #20555 from michaelnebel/csharp/staridlocationsbuildless
C#: `*` on Source locations in BMN.
2025-10-22 13:28:11 +02:00
Michael Nebel
7a414089e4 C#: Use autobuilder instead of supplying build command. 2025-10-22 13:25:23 +02:00
Michael Nebel
e14879ba33 C#: Add integration test for DB creation using .NET 10 RC 2. 2025-10-22 12:59:40 +02:00
Michael Nebel
d5ff9bf5d0 C#: Collapse tracer cases for csc, csc.exe and mcs.exe and remote quoting. 2025-10-22 11:58:02 +02:00
Owen Mansel-Chan
50e0ca8cb4 Merge pull request #20622 from owen-mc/docs/fix-dataflow-examples
Docs: add path query example to data flow docs
2025-10-22 10:57:42 +01:00