Asger F
|
a54e732aab
|
Merge pull request #18572 from asgerf/rb/diff-informed2
Ruby: fix and improve diff-informed queries
|
2025-01-24 11:05:46 +01:00 |
|
Asger F
|
1b7977bf90
|
Merge pull request #18466 from asgerf/js/view-component-inputs
JS: Add view-component-input threat model
|
2025-01-24 10:59:25 +01:00 |
|
Asger F
|
60f9160822
|
Merge pull request #18574 from asgerf/js/diff-informed2
JS: fix and improve diff-informed queries
|
2025-01-24 10:58:22 +01:00 |
|
Simon Friis Vindum
|
a6cd53eeb8
|
Merge pull request #18497 from paldepind/shared-basic-block-library
Add shared basic block library
|
2025-01-24 10:49:33 +01:00 |
|
Owen Mansel-Chan
|
57fad4a837
|
Allow type parameters on alias types
|
2025-01-24 09:40:58 +00:00 |
|
Rasmus Wriedt Larsen
|
bafed4e098
|
Merge pull request #18560 from JarLob/downloadartifact
Actions: Fix version range for known vulnerable actions
|
2025-01-24 10:39:53 +01:00 |
|
Simon Friis Vindum
|
e13a7a224f
|
Merge branch 'main' into shared-basic-block-library
|
2025-01-24 09:54:26 +01:00 |
|
Simon Friis Vindum
|
b84adec407
|
Merge pull request #18568 from paldepind/rust-container
Rust: Change array element content type into a general collection element content type
|
2025-01-24 09:40:46 +01:00 |
|
Simon Friis Vindum
|
e7ad091b0f
|
Rust: Remove unnecessary characteristic predicate
|
2025-01-24 08:56:41 +01:00 |
|
Tom Hvitved
|
10f55133fe
|
Merge pull request #18482 from hvitved/rust/nested-functions
Rust: Take nested functions into account when resolving variables
|
2025-01-24 08:41:34 +01:00 |
|
Chris Smowton
|
e27d8c1672
|
Amend extractor information expectation
codeql-cli/v2.20.3
|
2025-01-23 15:36:37 -05:00 |
|
Chris Smowton
|
660922fe4d
|
Don't expect logged properties files in source archives
|
2025-01-23 15:36:27 -05:00 |
|
Paolo Tranquilli
|
91132b94a9
|
Swift: drop indisciminate printing of the env
|
2025-01-23 14:45:47 -05:00 |
|
Geoffrey White
|
037d496a68
|
Rust: Fix some more tests (MaD ID changes and extraction consistency issues).
|
2025-01-23 19:14:28 +00:00 |
|
Geoffrey White
|
814118d3e8
|
Merge remote-tracking branch 'upstream/main' into logging
|
2025-01-23 19:04:25 +00:00 |
|
Geoffrey White
|
f5459d7ba8
|
Rust: Accept changes to integration test results.
|
2025-01-23 18:48:51 +00:00 |
|
Geoffrey White
|
44b9a1188b
|
Rust: Another .qhelp fix.
|
2025-01-23 18:46:35 +00:00 |
|
Geoffrey White
|
951d1fc9e0
|
Rust: Add missing file.
|
2025-01-23 18:38:48 +00:00 |
|
Geoffrey White
|
d27a71eaaf
|
Rust: Minor fixes.
|
2025-01-23 18:21:27 +00:00 |
|
Geoffrey White
|
55705232f6
|
Update rust/ql/src/queries/security/CWE-312/CleartextLoggingBad.rs
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-01-23 18:18:05 +00:00 |
|
Geoffrey White
|
613a1656f3
|
Rust: Simplify QL slightly.
|
2025-01-23 18:13:59 +00:00 |
|
Geoffrey White
|
4214c837b8
|
Rust: Clean up the query message.
|
2025-01-23 18:03:25 +00:00 |
|
Geoffrey White
|
ccc124360e
|
Rust: Add .qhelp and examples.
|
2025-01-23 17:46:04 +00:00 |
|
Geoffrey White
|
e70816727b
|
Rust: Add the sinks to metrics.
|
2025-01-23 17:17:25 +00:00 |
|
Geoffrey White
|
59c3ac6f80
|
Rust: Allow flow through reference taking (&).
|
2025-01-23 17:17:07 +00:00 |
|
Geoffrey White
|
78c58aa5f1
|
Rust: Allow implicit taint reads from tuple contents at sinks.
|
2025-01-23 17:17:05 +00:00 |
|
Geoffrey White
|
64444940a6
|
Rust: Add taint sinks for target and key-value arguments.
|
2025-01-23 17:17:04 +00:00 |
|
Geoffrey White
|
2bbf493991
|
Rust: Model assert_failed.
|
2025-01-23 17:17:03 +00:00 |
|
Geoffrey White
|
484331c303
|
Rust: Model StdoutLock, StderrLock methods and String.as_bytes.
|
2025-01-23 17:17:02 +00:00 |
|
Geoffrey White
|
1d2950c70c
|
Rust: Add some sinks.
|
2025-01-23 17:17:00 +00:00 |
|
Geoffrey White
|
4297d05c05
|
Rust: Implement the query.
|
2025-01-23 17:16:59 +00:00 |
|
Geoffrey White
|
173cfd5c7b
|
Rust: Add test cases for various std:: bits.
|
2025-01-23 17:16:58 +00:00 |
|
Simon Friis Vindum
|
9a6d651fee
|
Rust: More renaming and adjusting for generic element content type
|
2025-01-23 18:15:17 +01:00 |
|
aegilops
|
c9a775d737
|
Merge branch 'angular-sources-sinks' of https://github.com/aegilops/codeql into angular-sources-sinks
|
2025-01-23 17:07:02 +00:00 |
|
aegilops
|
522f3d1337
|
Merge
|
2025-01-23 17:00:56 +00:00 |
|
Paul Hodgkinson
|
eacc322d4f
|
Update Angular Renderer2 XSS sink details in change note
|
2025-01-23 16:39:18 +00:00 |
|
Simon Friis Vindum
|
a537f347d3
|
Shared: Tweak basic block documentation
|
2025-01-23 17:21:46 +01:00 |
|
Jeroen Ketema
|
4311553fa0
|
Merge pull request #18578 from aschackmull/cpp/join-order-fix-taintedallocationsize
C++: Fix join order problem in TaintedAllocationSize.
|
2025-01-23 17:16:03 +01:00 |
|
Chris Smowton
|
9c779c3cc9
|
Merge pull request #18573 from smowton/smowton/admin/remove-properties-file-expectations
Java: Don't expect logged properties files in source archives
|
2025-01-23 16:12:25 +00:00 |
|
Mathias Vorreiter Pedersen
|
ccb28ed0b3
|
Merge pull request #18556 from MathiasVP/remove-conflation-from-pure-functions
C++: Remove pointer/pointee conflation from models of "pure" functions
|
2025-01-23 15:50:39 +00:00 |
|
Paolo Tranquilli
|
13f1f8fdff
|
Merge branch 'main' into redsun82/env-dump-integration-test
|
2025-01-23 15:55:26 +01:00 |
|
Paolo Tranquilli
|
e096bdb701
|
Merge pull request #18468 from github/redsun82/rust-readme
Rust: give more options for building in `README.md`
|
2025-01-23 15:54:45 +01:00 |
|
Tom Hvitved
|
d60a81dac1
|
Merge pull request #18576 from hvitved/rust/translate-mad-ids
|
2025-01-23 15:44:29 +01:00 |
|
Jeroen Ketema
|
8b2cfa9133
|
Merge pull request #18561 from jketema/jketema/scanf
C++: Fix join-order problem found on `IncorrectCheckScanf.ql`
|
2025-01-23 15:00:24 +01:00 |
|
Mathias Vorreiter Pedersen
|
7792839a25
|
C++: Add a 'isLocaleParameter' and clean up the model a bit.
|
2025-01-23 13:56:00 +00:00 |
|
Mathias Vorreiter Pedersen
|
67e3b69996
|
C++: Move comment.
|
2025-01-23 13:49:13 +00:00 |
|
Mathias Vorreiter Pedersen
|
fb12847360
|
Update cpp/ql/lib/semmle/code/cpp/models/implementations/Pure.qll
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
|
2025-01-23 13:48:44 +00:00 |
|
Mathias Vorreiter Pedersen
|
2cdb52cad2
|
C++: Accept test changes after previous commit.
|
2025-01-23 13:46:47 +00:00 |
|
Tom Hvitved
|
33e07edcbf
|
Rust: Translate more MaD IDs in tests
|
2025-01-23 14:45:33 +01:00 |
|
Mathias Vorreiter Pedersen
|
e0f2f1dd80
|
Update cpp/ql/test/library-tests/dataflow/taint-tests/taint.cpp
Co-authored-by: Simon Friis Vindum <paldepind@github.com>
|
2025-01-23 13:41:48 +00:00 |
|