Tom Hvitved
2cc8b7f6dd
Address review comments (iii)
2025-10-22 11:07:20 +02:00
Anders Schack-Mulligen
c44e6fc3f0
C#: Qldoc tweaks.
2025-10-22 10:22:26 +02:00
Geoffrey White
9b11ec53d4
Rust: Merge InlineFlow.ql test queries using .qlrefs.
2025-10-22 09:02:18 +01:00
Geoffrey White
4893f53607
Rust: Fix a comment.
2025-10-22 09:02:15 +01:00
Geoffrey White
42224fe642
Rust: Clean up the sources test directory.
2025-10-22 09:02:14 +01:00
Geoffrey White
7efd4d26a0
Rust: Accept result regression.
...
Presumably because of a change in context, e.g. the module wrapping
this test now, or the different inputs. Either way we *should* be
able to get the result, and what we *actually* get in our analysis
doesn't change here either. We've just slightly changed the test
and exposed a gap.
2025-10-22 09:02:12 +01:00
Geoffrey White
8a7e206401
Rust: Move the remaining test_futures_io test into net.
2025-10-22 09:02:11 +01:00
Geoffrey White
8c02cb2ed1
Rust: Split off sources/web_frameworks.
2025-10-22 09:02:10 +01:00
Geoffrey White
5ba331e986
Rust: Splits off sources/net.
2025-10-22 09:01:34 +01:00
Geoffrey White
7ddd441e5f
Rust: Split off sources/database test.
2025-10-22 09:00:42 +01:00
Geoffrey White
81132beec0
Rust: Split off sources/stdin test.
2025-10-22 09:00:18 +01:00
Geoffrey White
0cc9331abf
Rust: Split off sources/file test.
2025-10-22 08:59:50 +01:00
Geoffrey White
a631130030
Rust: Split off sources/env test.
2025-10-22 08:58:59 +01:00
Tom Hvitved
5550da4870
Address review comments (ii)
2025-10-21 20:53:39 +02:00
Tom Hvitved
41602d3efa
Address review comments
2025-10-21 18:44:42 +02:00
Tom Hvitved
c2ba4ba3fc
Rust: Add change note
2025-10-21 18:44:41 +02:00
Tom Hvitved
ee0467d74c
Rust: Update expected output
2025-10-21 18:44:37 +02:00
Tom Hvitved
2f2c6866c4
Rust: Use doublyBoundedFastTC in TraitIsVisible
2025-10-21 17:58:54 +02:00
Tom Hvitved
4b70d20cd6
Rust: Rework call resolution and type inference for calls
2025-10-21 17:58:52 +02:00
Tom Hvitved
e12e9045a3
Rust: Add more type inference tests
2025-10-21 17:58:51 +02:00
Owen Mansel-Chan
c8c1c6e592
Address review comments
2025-10-21 16:54:28 +01:00
REDMOND\brodes
b374ba3d0c
Crypto: Updating java 'location' information to be just a location's toString to be more verbose/precise.
2025-10-21 11:48:37 -04:00
Paolo Tranquilli
6d31c6abe0
Merge branch 'main' into redsun82/fix-pytest-build-as-test-windows
2025-10-21 17:04:57 +02:00
REDMOND\brodes
ddeb42cddb
Crypto: Adding false positive to BadMacUse.java, we have no way to avoid this FP currently but should note it exists in the test case.
2025-10-21 11:04:57 -04:00
Paolo Tranquilli
a0d2005e1f
Merge pull request #20655 from github/redsun82/rust-file-semantics-predicates
...
Rust: introduce `ExtractedFile::hasSemantics` and `::isSkippedByCompilation`
2025-10-21 17:02:28 +02:00
REDMOND\brodes
c50175bc9b
Crypto: ql-for-ql alert fixes.
2025-10-21 10:32:00 -04:00
Geoffrey White
edabfa73bf
Rust: Delete a no-longer-used test file.
2025-10-21 15:30:32 +01:00
Simon Friis Vindum
f207404b0d
C++: Accept test changes
2025-10-21 16:03:12 +02:00
Geoffrey White
7da00b3e9d
Rust: Change note.
2025-10-21 13:33:17 +01:00
Geoffrey White
751d62aefb
Rust: Add the metric to rust/diagnostic/database-quality (with a very low threshold for the time being).
2025-10-21 13:29:46 +01:00
Geoffrey White
a4aa397ea0
Merge pull request #20634 from geoffw0/mysql2
...
Rust: Model mysql and mysql_async sources
2025-10-21 13:23:03 +01:00
yoff
9e77e5b046
java: add test with deeper paths
...
also format test files
2025-10-21 14:02:36 +02:00
yoff
f183a7223f
java: add test for notFullyMonitored
2025-10-21 13:40:29 +02:00
yoff
f4878b3806
java: make as many predicates private as possible
2025-10-21 13:25:26 +02:00
yoff
de05bfbce3
java: address review comments
...
- do not use `getQualifiedName`
- use camelCase
- rework alert predicates
2025-10-21 13:25:26 +02:00
Michael Nebel
def522d122
C#: Make sure that the file exists before attempting to get version info.
2025-10-21 13:12:21 +02:00
Michael Nebel
af5622a60e
C#: Address review comments.
2025-10-21 13:03:53 +02:00
Geoffrey White
d691c3215f
Rust: Add expressions with unknown type metric (expected by DCA).
2025-10-21 12:00:25 +01:00
yoff
715acefacc
Apply suggestions from code review
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2025-10-21 12:52:59 +02:00
Anders Schack-Mulligen
414e5ecbce
Merge pull request #20646 from aschackmull/ssa/ssa-sig
...
SSA: Add a shared signature for SSA and a module to implement it.
2025-10-21 12:14:08 +02:00
Paolo Tranquilli
316225bb88
Csharp: rename predicate
2025-10-21 11:47:54 +02:00
Paolo Tranquilli
6f8b1f6f4c
Csharp: address review
2025-10-21 11:43:58 +02:00
Michael Nebel
6bc15bcedc
C#: Add change-note.
2025-10-21 11:42:19 +02:00
Michael Nebel
e560ac197f
C#: Tracer support for invoking csc directly.
2025-10-21 11:16:55 +02:00
Paolo Tranquilli
c728503517
Merge branch 'main' into redsun82/csharp-fix-xframe-options-in-location
2025-10-21 11:15:46 +02:00
Anders Schack-Mulligen
242f12d4be
SSA: Remove variable capture reference from shared class.
2025-10-21 10:52:49 +02:00
Simon Friis Vindum
0badcfd663
C++: Address review comments
2025-10-21 09:47:58 +02:00
REDMOND\brodes
22c0f9fa91
Crypto: Adding a proof of concept bad mac ordering predicate that takes in an ArtifactNode to be used for graph generation to intercept nodes with known mac ordering issues, in order to format the node and output error messages in the graph.
2025-10-20 16:24:31 -04:00
REDMOND\brodes
eff94ef91f
Crypto: To allow for graph generation to have properties informed by assessments, altering a few queries weak/vuln/bad crypto to have qll files that can be accessed for other purposes, like graph generation. Also altering weak symmetric cipher to look for non-aes algorithms to be more comprehensive.
2025-10-20 15:51:07 -04:00
REDMOND\brodes
cc436e897d
Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check
2025-10-20 15:24:40 -04:00
