Alexander Köplinger
458f8570e8
Fix KeyError: 'name' in python/extractor/imp.py on Python 3.14
...
Follow-up to https://github.com/github/codeql/pull/20630
The fix didn't fully work since when we raise the ImportError in `find_module` we don't pass a named argument into the format string which causes a `KeyError`.
We need to use a format string without named arguments, like Python 3.13 and earlier did.
2025-11-25 12:38:55 +01:00
Geoffrey White
1c2d8bb70e
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
...
Rust: Improve rust/access-invalid-pointer
2025-11-25 09:49:07 +00:00
Simon Friis Vindum
411d1fa861
Rust: Fix grammar and typos
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-25 09:31:00 +01:00
Simon Friis Vindum
ce25def71e
Rust: Update integration test expected files
2025-11-25 08:23:52 +01:00
Geoffrey White
daead038ab
Merge pull request #20829 from geoffw0/cert-checks
...
Rust: New Query rust/disabled-certificate-check
2025-11-24 15:21:58 +00:00
Mathias Vorreiter Pedersen
eb6b08591d
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 15:01:09 +00:00
Mathias Vorreiter Pedersen
2e53370716
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 15:01:00 +00:00
Simon Friis Vindum
597c81d659
Rust: Add change note for XSS query
2025-11-24 15:46:27 +01:00
Simon Friis Vindum
9c2858d69b
Rust: Add qhelp for XSS query
2025-11-24 15:46:26 +01:00
Simon Friis Vindum
9e2bf76a7f
Rust: Add XSS sinks for Actix and Warp
2025-11-24 15:46:25 +01:00
Simon Friis Vindum
ae9c753371
Rust: Add XSS query
2025-11-24 15:46:24 +01:00
Simon Friis Vindum
0f4561efc3
Rust: Add XSS examples
2025-11-24 15:46:23 +01:00
Ian Lynagh
555301cec7
Merge pull request #20874 from igfoo/igfoo/overlay
...
C++: Add the beginnings of overlay support
2025-11-24 14:11:09 +00:00
Owen Mansel-Chan
1a59839f3c
Range library recognises long literals now
2025-11-24 14:10:54 +00:00
Owen Mansel-Chan
e37336d550
No need for getUnderlyingExpr to look through casts
2025-11-24 14:10:20 +00:00
Mathias Vorreiter Pedersen
0487e0622a
C++: Accept test changes from tests that use getAQlClass.
2025-11-24 14:04:35 +00:00
Mathias Vorreiter Pedersen
6bae58e29c
C++: Accept more test changes.
2025-11-24 12:35:19 +00:00
Mathias Vorreiter Pedersen
ecb80cb4fc
C++: Represent field content using a column that is shared by all template instantiations.
2025-11-24 12:29:49 +00:00
Mathias Vorreiter Pedersen
fd566780a6
Update cpp/ql/lib/semmle/code/cpp/dataflow/ExternalFlow.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 12:17:06 +00:00
Tom Hvitved
43111b8eaa
Merge pull request #20716 from hvitved/rust/path-resolution-variable-impl
...
Rust: Path resolution before variable resolution
2025-11-24 13:08:53 +01:00
Mathias Vorreiter Pedersen
98879d0f1a
C++: Accept test changes.
2025-11-24 12:06:38 +00:00
Mathias Vorreiter Pedersen
732e55df11
C++: Ignore template non-type parameters in MaD signature matching.
2025-11-24 12:06:24 +00:00
Tom Hvitved
ac644b257a
Merge pull request #20848 from hvitved/rust/ranked-forex-rename
...
Rust: Use `ToIndex` instead of `FromIndex` in ranked `forex` predicates
2025-11-24 13:05:58 +01:00
Tom Hvitved
c7a0411c55
Merge pull request #20892 from hvitved/rust/builtin-mut-placeholders
...
Rust: Add placeholder declarations for `&mut` and `*mut`
2025-11-24 13:05:15 +01:00
Mathias Vorreiter Pedersen
c9e9322143
C++: Add an example of missing MaD supporrt for non-type template parameters.
2025-11-24 12:02:54 +00:00
Eliav2
192f254b41
Merge branch 'main' into 20823-globalVarRef-document-defaultView
2025-11-23 22:03:30 +02:00
Tom Hvitved
17e1e1713e
Rust: Add placeholder declarations for &mut and *mut
2025-11-23 20:56:07 +01:00
Tom Hvitved
b16f8c20a9
Update rust/ql/lib/codeql/rust/internal/PathResolution.qll
...
Co-authored-by: Simon Friis Vindum <paldepind@github.com >
2025-11-23 19:05:24 +01:00
Geoffrey White
b62968fa0f
Rust: Spelling.
2025-11-22 09:22:33 +00:00
Geoffrey White
993154ed57
Rust: Avoid duplicating sinks.
2025-11-21 19:34:16 +00:00
Geoffrey White
0ea28b4026
Rust: Test .expected changes.
2025-11-21 18:57:06 +00:00
Geoffrey White
ff8032a4ec
Rust: Fix after merge.
2025-11-21 18:53:57 +00:00
Geoffrey White
eb674d08d6
Rust: Reinstate the original function names model but call it a heuristic now.
2025-11-21 18:46:12 +00:00
Geoffrey White
2ce4c47646
Rust: More sinks from the MRVA-1000.
2025-11-21 18:43:35 +00:00
Geoffrey White
80615056c0
Merge remote-tracking branch 'upstream/main' into cert-checks
2025-11-21 18:40:40 +00:00
Geoffrey White
988aca1f85
Rust: Correct QLDoc comment.
2025-11-21 18:13:08 +00:00
Geoffrey White
03fc4cb0aa
Merge remote-tracking branch 'upstream/main' into access-invalid-pointer-fp
2025-11-21 17:39:56 +00:00
Geoffrey White
9db1722060
Rust: Accept consistency check changes.
2025-11-21 17:35:34 +00:00
Geoffrey White
e01c871b70
Rust: Accept changes to the dataflow/sources/file test.
2025-11-21 17:12:23 +00:00
Geoffrey White
3ad014b2f9
Rust: Additional sinks found in MRVA-1000.
2025-11-21 16:33:59 +00:00
Geoffrey White
ace7a77fd6
Rust: Switch to MaD models.
2025-11-21 16:27:52 +00:00
Geoffrey White
785754ec65
Rust: Switch the query to taint flow, since some taint summaries are relevant now.
2025-11-21 15:02:29 +00:00
Geoffrey White
89a9c46547
Rust: Second change note.
2025-11-21 15:02:27 +00:00
Geoffrey White
aca7877be2
Rust: Add some missing path / file metadata models.
2025-11-21 15:02:25 +00:00
Geoffrey White
8145264b77
Rust: Add threat model sources as additional sources for the query.
2025-11-21 14:40:11 +00:00
Geoffrey White
2da0814f65
Rust: Add test case involving taint.
2025-11-21 14:39:15 +00:00
Anders Schack-Mulligen
b1ed72d760
Merge pull request #20886 from aschackmull/java/rangeanalysis-longliterals
...
Java: Recognize int-sized long literals.
2025-11-21 13:35:14 +01:00
Owen Mansel-Chan
d2fc6a7b5b
Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers
2025-11-21 12:20:04 +00:00
Asger F
51e1bda608
JS: Move isTypeOnly() check into a direct check, instead of an override
2025-11-21 13:10:32 +01:00
Anders Schack-Mulligen
298e4cfcc5
Java: Recognize int-sized long literals.
2025-11-21 12:53:39 +01:00
