Simon Friis Vindum
|
ff80b249ca
|
Merge pull request #17917 from paldepind/rust-df-types
Rust: Fix unique type data flow inconsistency
|
2024-11-06 14:02:00 +01:00 |
|
Simon Friis Vindum
|
60986d8c9b
|
Rust: Fix unique type data flow inconsistency
|
2024-11-06 13:48:10 +01:00 |
|
Anders Schack-Mulligen
|
4df4a1e6c6
|
Merge pull request #17863 from aschackmull/shared/universal-flow
Shared: Add a Universal Flow library and refactor TypeFlow to use it.
|
2024-11-06 13:46:13 +01:00 |
|
Tom Hvitved
|
f8058e40af
|
Merge pull request #17915 from hvitved/rust/pat-literal-cfg
Rust: Include literals in the CFG for literal patterns
|
2024-11-06 13:09:49 +01:00 |
|
Geoffrey White
|
8a35e151d1
|
Rust: Move the function pointer parameter exclusion into VariableImpl.qll.
|
2024-11-06 10:51:41 +00:00 |
|
Tom Hvitved
|
9392bf796a
|
Rust: Include literals in the CFG for literal patterns
|
2024-11-06 09:21:52 +01:00 |
|
Paolo Tranquilli
|
51f7129c79
|
Swift: accept integration test change
|
2024-11-06 08:40:29 +01:00 |
|
Paolo Tranquilli
|
02a0021a26
|
Swift: tweak mangling of extensions
|
2024-11-06 08:40:12 +01:00 |
|
Paolo Tranquilli
|
9e1e56f769
|
Swift: remove obsolete bazel definitions
|
2024-11-06 08:39:53 +01:00 |
|
Paolo Tranquilli
|
afd4585561
|
Merge branch 'main' into redsun82/swift-6
|
2024-11-06 08:05:52 +01:00 |
|
Paolo Tranquilli
|
c875667980
|
Swift: update to 6.0.2
|
2024-11-06 08:05:14 +01:00 |
|
Simon Friis Vindum
|
6054855edb
|
Merge pull request #17888 from paldepind/rust-data-flow-consistency
Rust: Data flow additions
|
2024-11-05 21:29:18 +01:00 |
|
Geoffrey White
|
1a5d2e1f5d
|
Rust: Correct a comment and autoformat.
|
2024-11-05 15:22:46 +00:00 |
|
Geoffrey White
|
93836a55e2
|
Rust: Clean up code / clarify responsibilities and fix the issue in rust/unused-value as well.
|
2024-11-05 15:16:59 +00:00 |
|
Geoffrey White
|
bb5ee525fc
|
Merge pull request #17757 from geoffw0/unusedvar7
Rust: Remove the workaround in rust/unused-variable.
|
2024-11-05 15:06:48 +00:00 |
|
Mikaël Barbero
|
881fe0ba57
|
fix: add "actions" tag to ActionsArtifactLeak
Similar to javascript/ql/src/Security/CWE-094/ExpressionInjection.ql
|
2024-11-05 15:58:46 +01:00 |
|
Geoffrey White
|
278760c735
|
Rust: Add another exception to rust/unused-variable.
|
2024-11-05 14:46:32 +00:00 |
|
Simon Friis Vindum
|
262a9f0cfa
|
Rust: Make fixes in data flow based on PR feedback
|
2024-11-05 15:37:44 +01:00 |
|
Geoffrey White
|
35ffd0cc9c
|
Rust: Add more test cases for unused variables (inspired by real world FPs).
|
2024-11-05 14:07:10 +00:00 |
|
Geoffrey White
|
3091083705
|
Rust: Call all the test cases.
|
2024-11-05 11:02:38 +00:00 |
|
Geoffrey White
|
088dd50f1f
|
Rust: Update tests.
|
2024-11-05 10:30:41 +00:00 |
|
Napalys Klicius
|
5e8b1b061f
|
Update javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2024-11-05 10:29:22 +01:00 |
|
Napalys Klicius
|
7825a46085
|
Merge branch 'github:main' into napalys/matchAll-support
|
2024-11-05 09:31:30 +01:00 |
|
Napalys
|
b239bfabf1
|
Added tests forIncompleteHostnameRegExp and normalizedPaths using matchAll
|
2024-11-05 09:22:26 +01:00 |
|
Paolo Tranquilli
|
87a08fe5fa
|
Merge pull request #17891 from geoffw0/swift6models
Swift: Update models for better Swift 6 compatibility.
|
2024-11-05 08:55:26 +01:00 |
|
Napalys
|
ccee34d6d3
|
Added support for matchAll in CWE-020 including new test cases
|
2024-11-05 08:51:24 +01:00 |
|
Geoffrey White
|
c8c747a110
|
Rust: Add total data flow inconsistencies to rust/summary/summary-statistics.
|
2024-11-04 19:10:44 +00:00 |
|
Geoffrey White
|
30cc55005d
|
Rust: Add rust/diagnostics/data-flow-consistency-counts query for data flow inconsistency counts.
|
2024-11-04 19:09:30 +00:00 |
|
Simon Friis Vindum
|
c7b4e7c30a
|
Rust: Small improvements to data flow
The predicate `ssaDefAssigns` was definitely broken before
|
2024-11-04 20:01:58 +01:00 |
|
Simon Friis Vindum
|
d9636b37b6
|
Rust: Add data flow test with assignment to mutable variable
|
2024-11-04 20:00:36 +01:00 |
|
Geoffrey White
|
91ebc0eb45
|
Rust: Add metadata to the DataFlowConsistency.ql query.
|
2024-11-04 18:53:34 +00:00 |
|
Geoffrey White
|
a645a9e829
|
Rust: Add getInconsistencyCounts predicate to the shared DataFlowImplConsistency.qll, so it's possibly to access inconsistency data as a whole.
|
2024-11-04 18:52:20 +00:00 |
|
Chuan-kai Lin
|
3cdf94e83a
|
Merge pull request #17904 from github/post-release-prep/codeql-cli-2.19.3
Post-release preparation for codeql-cli-2.19.3
|
2024-11-04 10:14:12 -08:00 |
|
Calum Grant
|
397bf7c5e2
|
C++: Fix FPs caused by a syntax error
|
2024-11-04 17:38:16 +00:00 |
|
Calum Grant
|
496efeed7e
|
C++: Add a test for cpp/wrong-number-format-arguments
|
2024-11-04 17:36:23 +00:00 |
|
github-actions[bot]
|
f107d16b4e
|
Post-release preparation for codeql-cli-2.19.3
|
2024-11-04 17:20:08 +00:00 |
|
Kylie Stradley
|
0e94777b13
|
Merge branch 'master' into immutable-actions
|
2024-11-04 11:57:06 -05:00 |
|
Chuan-kai Lin
|
39a67b6e2e
|
Merge pull request #17903 from github/release-prep/2.19.3
Release preparation for version 2.19.3
codeql-cli/v2.19.3
|
2024-11-04 08:42:12 -08:00 |
|
github-actions[bot]
|
cc7b724123
|
Release preparation for version 2.19.3
|
2024-11-04 16:37:28 +00:00 |
|
Kylie Stradley
|
5bf02e73ea
|
Update ql/src/Security/CWE-829/UnpinnedActionsTag.ql
Co-authored-by: Alvaro Muñoz <pwntester@github.com>
|
2024-11-04 11:30:29 -05:00 |
|
Simon Friis Vindum
|
8d59b9289b
|
Rust: Make improvements to data flow based on PR feedback
|
2024-11-04 16:42:05 +01:00 |
|
Geoffrey White
|
5a34c166b7
|
Rust: Remove the workaround in rust/unused-variable.
|
2024-11-04 15:31:43 +00:00 |
|
Simon Friis Vindum
|
2818893010
|
Rust: Refactor AstCfgNode to use a field
Co-authored-by: Tom Hvitved <hvitved@github.com>
|
2024-11-04 15:01:25 +01:00 |
|
Florin Coada
|
7418d8ed24
|
Merge pull request #17832 from github/changedocs/2.19.2
CodeQL 2.19.2 changedocs
|
2024-11-04 13:56:28 +00:00 |
|
Tom Hvitved
|
0aee809697
|
Merge pull request #17899 from hvitved/accept-changes-multi-jobs
Handle matrix jobs in accept changes script
|
2024-11-04 14:54:21 +01:00 |
|
Alvaro Muñoz
|
ae6856ab5a
|
models: add new control check model
|
2024-11-04 14:44:13 +01:00 |
|
Rasmus Wriedt Larsen
|
5f20f1984c
|
expected-changes: Use set constructor
|
2024-11-04 14:14:15 +01:00 |
|
Rasmus Wriedt Larsen
|
8f80c24270
|
Merge pull request #17256 from RasmusWL/js-threat-models
JS: Add support for threat models
|
2024-11-04 14:04:12 +01:00 |
|
Simon Friis Vindum
|
34e8ea17d8
|
Merge pull request #17898 from paldepind/rust-cfg-refactor
Rust: CFG classes are in expression module iff they correspond to exp…
|
2024-11-04 13:01:15 +01:00 |
|
Tom Hvitved
|
95e9d013cc
|
Update expected test output
|
2024-11-04 12:07:06 +01:00 |
|