Tom Hvitved
3fb8758ae1
Merge pull request #19886 from hvitved/rust/dataflow-caching
...
Rust: Cache `DataFlow::Node.{toString,getLocation}`
2025-06-27 10:33:50 +02:00
Michael Nebel
2f208bddb6
Merge pull request #19877 from michaelnebel/csharp/microsoftdatasqlclient
...
C#: Models for Microsoft.Data.SqlClient.
2025-06-27 10:24:38 +02:00
Nora Dimitrijević
f568d41264
Merge pull request #19888 from d10c/d10c/missing-diff-informed-tests
...
Java, Ruby: add missing .qlref tests
2025-06-27 09:28:41 +02:00
Paolo Tranquilli
c88049a9f4
Create copilot-instructions.md
2025-06-27 09:06:08 +02:00
Tom Hvitved
db0fc7be5d
Merge pull request #19881 from hvitved/rust/dataflow-traits
...
Rust: Data flow through trait methods
2025-06-27 08:55:48 +02:00
Kasper Svendsen
2863c7094a
Overlay: Add overlay annotation to shared lib
2025-06-27 08:54:05 +02:00
Jonas Jensen
b446fe74c2
Merge pull request #19846 from jbj/diff-informed-CleartextStorageCookie
...
Java: Diff-informed CleartextStorageCookie.ql
2025-06-27 08:45:11 +02:00
Kasper Svendsen
f0125e574c
Merge branch 'main' into kaspersv/overlay-annotations-script-ci
2025-06-27 08:31:34 +02:00
Kasper Svendsen
e6ef6a3326
Merge branch 'main' into kaspersv/overlay-java-discarding
2025-06-27 08:28:34 +02:00
Kasper Svendsen
da1b99b921
Merge pull request #19779 from github/kaspersv/overlay-java-annotations
...
Overlay: Add overlay annotations to Java & shared libraries
2025-06-27 08:26:33 +02:00
Joe Farebrother
4cbaeb10e9
Merge pull request #19641 from joefarebrother/python-qual-file-not-closed
...
Python: Improve performance of FileNotClosed query by using basic block reachability
2025-06-26 23:35:38 +01:00
Jeroen Ketema
0996e6083e
C++: Pretty print MaD ids in test output
2025-06-26 23:38:32 +02:00
REDMOND\brodes
0aee4f76f9
Crypto: Minor change to force CI/CD checks to restart, prior ql check failures do not make sense.
2025-06-26 16:35:01 -04:00
REDMOND\brodes
dc8d22a468
Crypto: Fix JCA to account for new key gen instance API in model.qll.
2025-06-26 15:48:10 -04:00
REDMOND\brodes
505d8806c7
Crypto: Add key input support for the graph for key generation operations.
2025-06-26 11:51:49 -04:00
Taus
cd0e46314c
Python: Add change note
2025-06-26 15:36:02 +00:00
Taus
ad53518644
Python: Regenerate parser files
2025-06-26 15:34:44 +00:00
Taus
e04821e9e3
Python: Allow use of match as an identifier
...
This previously only worked in certain circumstances. In particular,
assignments such as `match[1] = ...` or even just `match[1]` would fail
to parse correctly.
Fixing this turned out to be less trivial than anticipated. Consider the
fact that
```
match [1]: case (...)
```
can either look the start of a `match` statement, or it could be a type
ascription, ascribing the value of `case(...)` (a call) to the item at
index 1 of `match`.
To fix this, then, we give `match` the identifier and `match` the
statement the same precendence in the grammar, and additionally also
mark a conflict between `match_statement` and `primary_expression`. This
causes the conflict to be resolved dynamically, and seems to do the
right thing in all cases.
2025-06-26 15:33:00 +00:00
Florin Coada
0103ee2872
Add changelog entry for CodeQL CLI version 2.22.1
2025-06-26 15:50:23 +01:00
Nicolas Will
c54e68c855
Merge branch 'main' into pr/19880
2025-06-26 16:47:38 +02:00
Jeroen Ketema
ec09d36667
Merge pull request #19832 from ebickle/feature/oracle-model
...
C++: Support SQL Injection sinks for Oracle Call Interface (OCI)
2025-06-26 16:33:55 +02:00
Nicolas Will
0a97357216
Merge pull request #19814 from bdrodes/codescanning_fixes_cpp
...
Crypto: Fix QL-for-QL alerts and refactor type standardization
2025-06-26 16:33:19 +02:00
Paolo Tranquilli
4799861225
Merge branch 'redsun82/codegen-new-parent-child' into redsun82/rust-item-reorg
2025-06-26 16:29:42 +02:00
Owen Mansel-Chan
2ed451c9e3
Reformat references
2025-06-26 15:20:07 +01:00
Owen Mansel-Chan
10bb88825e
Add full stop at the end of each reference
2025-06-26 15:20:06 +01:00
Owen Mansel-Chan
297cdb53aa
Update guide to specify a full stop at the end of each reference
2025-06-26 15:20:04 +01:00
Eric Bickle
1142efbc03
Merge branch 'main' into feature/oracle-model
2025-06-26 06:48:40 -07:00
Eric Bickle
3083bdb0b4
C++: Update MaD line numbers in flow.expected
2025-06-26 06:47:24 -07:00
Owen Mansel-Chan
9f0f40d6ce
Add "Correct Usage" and "Incorrect Usage" headings
2025-06-26 14:40:49 +01:00
Owen Mansel-Chan
9521994adc
Fix format of markdown query help files
2025-06-26 14:40:07 +01:00
REDMOND\brodes
6e5734adca
Crypto: Fix openssl padding to propery link async padding to hashing configs.
2025-06-26 09:18:30 -04:00
Tom Hvitved
9a48459951
Add change note
2025-06-26 15:14:08 +02:00
Nicolas Will
652e7ba15b
Merge branch 'main' into codescanning_fixes_cpp
2025-06-26 14:54:36 +02:00
Michael Nebel
37b3ca036a
Python: Freeze the quality queries in the security-and-quality suite.
2025-06-26 14:45:05 +02:00
Michael Nebel
d926a6a47d
Go: Freeze the quality queries in the security-and-quality suite.
2025-06-26 14:35:21 +02:00
Michael Nebel
7fecf7466f
Ruby: Freeze the quality queries in the security-and-quality suite.
2025-06-26 14:26:28 +02:00
Michael Nebel
145ada53f2
C#/Java/JavaScript: Re-factor query suites to use the new selector.
2025-06-26 14:19:27 +02:00
Nick Rolfe
5a176d6fbd
Merge pull request #19878 from github/nickrolfe/ql-overlay
...
Ruby/Rust/QL: simplify generation of overlay-related tables/predicates
2025-06-26 08:10:10 -04:00
Michael Nebel
3efbed56b0
Shared: Modify the frozen selector to only include security queries.
2025-06-26 14:09:43 +02:00
Michael Nebel
1fbf3a39fb
Shared: Add a copy of the security-and-quality selector.
2025-06-26 14:05:46 +02:00
Tom Hvitved
b70aa804e5
Rust: Cache DataFlow::Node.{toString,getLocation}
2025-06-26 13:49:37 +02:00
Nora Dimitrijević
89f1ee0301
Ruby: add meta/TaintedNodes.ql test
2025-06-26 13:22:07 +02:00
Nora Dimitrijević
e0b3a2c5f9
Java: convert ArbitraryApkInstallation test to .qlref
2025-06-26 13:22:05 +02:00
Kasper Svendsen
712e64e4a8
Overlay: Add overlay annotations to shared Guards library
2025-06-26 13:19:49 +02:00
Kasper Svendsen
9d2dd782d9
Merge remote-tracking branch 'github/main' into kaspersv/overlay-java-annotations
2025-06-26 13:18:25 +02:00
Jeroen Ketema
a5737dded3
Merge branch 'main' into feature/oracle-model
2025-06-26 12:48:55 +02:00
Tamás Vajk
ae36f94d5e
Merge pull request #19844 from tamasvajk/tamasvajk/threadpoolexecutor
...
Java: Add `java/javautilconcurrentscheduledthreadpoolexecutor` query for zero thread pool size
2025-06-26 12:36:09 +02:00
Paolo Tranquilli
de72e68d2c
Merge branch 'main' into redsun82/codegen-new-parent-child
2025-06-26 12:14:53 +02:00
Paolo Tranquilli
afc78ced50
Merge pull request #19874 from github/redsun82/codegen-use-one-test-file
...
Codegen: use one generated test file per directory
2025-06-26 11:59:40 +02:00
Anders Schack-Mulligen
321a4afd5c
Merge pull request #19883 from aschackmull/java/fix-assert-cfg
...
Java: Fix assert CFG by properly tagging the false successor.
2025-06-26 11:43:27 +02:00
