copilot-swe-agent[bot]
ebecc19f81
Remove duplicated ReDoS fast-path filter from RegexGrammar; narrow at RegexFlowConfigs wrappers
2026-07-20 13:08:53 +00:00
copilot-swe-agent[bot]
645f2fdc3d
Move StdBasicRegex to shared StdRegex module; return ExploitableStringLiteral to flow layer
2026-07-20 12:49:45 +00:00
copilot-swe-agent[bot]
4fab077bbe
Extract C++ regex grammar/flag knobs into flow-free RegexGrammar module
2026-07-20 12:02:38 +00:00
copilot-swe-agent[bot]
db58698394
Fix C++ regex term source locations for raw and encoding-prefixed literals
2026-07-20 10:00:13 +00:00
copilot-swe-agent[bot]
9fdf8b7b8e
Add location tests for the C++ regex parse-tree view
2026-07-20 09:24:17 +00:00
copilot-swe-agent[bot]
c51dcddee7
Add CWE-1333 ReDoS queries to cpp query-suite .expected snapshots
2026-07-17 19:08:31 +00:00
copilot-swe-agent[bot]
2bab816913
Remove redundant CompileCheck.ql to resolve dead-code alerts
2026-07-17 19:00:36 +00:00
copilot-swe-agent[bot]
4be7ff07c3
Convert ReDoS query tests to inline test expectations
2026-07-17 18:27:51 +00:00
copilot-swe-agent[bot]
09938f0531
Revert "Resolve dead-code alerts: export RegexPatternFlowConfig module"
...
This reverts commit cc95e25e56
2026-07-17 18:09:25 +00:00
copilot-swe-agent[bot]
cc95e25e56
Resolve dead-code alerts: export RegexPatternFlowConfig module
...
The two "Dead code" alerts (100379, 100380) point at the isSource and
isSink predicates in `private module RegexPatternFlowConfig implements
DataFlow::ConfigSig` in cpp/ql/lib/semmle/code/cpp/regex/RegexFlowConfigs.qll.
Rationale (Case C): The predicates are genuine and correctly wired -
`RegexPatternFlowConfig` is consumed by
`TaintTracking::Global<RegexPatternFlowConfig>` on the very next line,
which drives the `usedAsRegex` / `regexMatchedAgainst` public predicates.
The DeadCode query cannot see through signature-parameterized modules and
therefore flags every implementation-side `isSource`/`isSink` inside a
private ConfigSig module (the same false positive is present on many
existing configs across the codebase). Removing the leftover `private`
qualifier on the config module resolves both alerts by making the
module publicly reachable; the taint-tracking alias below it remains
private, so no additional flow surface is exposed to consumers of this
library.
2026-07-17 18:04:25 +00:00
copilot-swe-agent[bot]
1c810ede03
Replace non-ASCII characters (em/en dash, arrow) with ASCII equivalents in regex files
2026-07-17 17:32:30 +00:00
copilot-swe-agent[bot]
6d07e4d619
Apply codeql query format to regex library files
2026-07-17 17:28:18 +00:00
Jeroen Ketema
b48b22cace
Merge branch 'main' into copilot/add-cpp-regular-expression-parser
2026-07-17 19:15:37 +02:00
Jeroen Ketema
14450f5bf3
Merge pull request #22211 from jketema/jketema/qldoc
...
Shared: Add missing QLdoc
2026-07-17 19:13:52 +02:00
Jeroen Ketema
a3eee6204b
Shared: Add missing QLdoc
2026-07-17 17:22:11 +02:00
copilot-swe-agent[bot]
9758d5260b
Fix Predicate QLDoc style: reword ecma_named_group_start doc to start with "Holds if"
2026-07-17 15:11:55 +00:00
copilot-swe-agent[bot]
4435279157
Replace omittable exists variables with don't-care _
2026-07-17 14:56:48 +00:00
copilot-swe-agent[bot]
96951956fb
Fix "modelled" -> "modeled" spelling in regex PR files
2026-07-17 14:39:10 +00:00
copilot-swe-agent[bot]
918d51c24b
Add QLdoc to TRegexGrammar branches
2026-07-17 14:13:15 +00:00
copilot-swe-agent[bot]
8b12f32dff
Add BRE query test coverage and change note; regenerate .expected
2026-07-17 13:51:06 +00:00
copilot-swe-agent[bot]
c1cb146f40
Add POSIX BRE grammar support: BreRegExp + shared-core refactor
2026-07-17 13:35:37 +00:00
copilot-swe-agent[bot]
bc5cecf7d4
Add end-to-end ERE ReDoS query tests
2026-07-17 13:17:57 +00:00
copilot-swe-agent[bot]
9a3613ea04
Add POSIX ERE grammar support to the C++ regex parser
2026-07-17 13:01:15 +00:00
copilot-swe-agent[bot]
e728c71f01
Refactor C++ regex parser into shared core + EcmaRegExp dialect hooks
2026-07-17 12:28:49 +00:00
copilot-swe-agent[bot]
e0cc6795dc
Add isBacktrackingEngine gate excluding awk/grep/egrep from C++ ReDoS queries
2026-07-17 12:06:30 +00:00
copilot-swe-agent[bot]
d9f380d446
POSIX bracket soundness: opaque punct/cntrl/print/graph; non-recursive gate; adversarial tests
2026-07-17 10:18:17 +00:00
Óscar San José
87835f7f3d
Merge pull request #22207 from github/codeql-spark-run-29493713448
...
Update changelog documentation site for codeql-cli-2.26.1
2026-07-17 12:10:28 +02:00
copilot-swe-agent[bot]
c1103b9b02
Fix C++ ECMAScript regex parser: recognize POSIX bracket sub-expressions; document multiline
2026-07-17 09:52:02 +00:00
copilot-swe-agent[bot]
00672d61c9
Expand cpp/polynomial-redos test coverage (Phase 3 follow-up)
2026-07-16 14:12:03 +00:00
copilot-swe-agent[bot]
8a8590c50c
Expand C++ ReDoS test coverage (Phase 4 follow-up)
2026-07-16 13:53:28 +00:00
copilot-swe-agent[bot]
d6c76aa261
Fix cpp/redos test: swap non-exponential (a|ab)* for (a*)* and populate expected
2026-07-16 13:32:37 +00:00
copilot-swe-agent[bot]
47969aece8
Add cpp/redos exponential ReDoS query (Phase 4)
2026-07-16 13:06:20 +00:00
copilot-swe-agent[bot]
84d7a2b585
Add cpp/polynomial-redos query (Phase 3)
2026-07-16 12:49:15 +00:00
copilot-swe-agent[bot]
f72bad70f9
Add C++ regex flow modeling and construction-site flags (Phase 2)
2026-07-16 11:21:29 +00:00
github-actions[bot]
e9e360ae44
update codeql documentation
2026-07-16 11:18:13 +00:00
Michael Nebel
2eb0158b09
Merge pull request #22193 from michaelnebel/csharp/diableuselessassignment
...
C#: Remove the query `cs/useless-assignment-to-local` from the `code-quality` suite.
2026-07-16 08:07:29 +02:00
copilot-swe-agent[bot]
239ac442a1
Fix change note category to 'minorAnalysis'
2026-07-15 21:50:12 +00:00
copilot-swe-agent[bot]
a27142d2d4
Add C++ regex parser and RegexTreeView (Phase 1)
2026-07-15 21:45:03 +00:00
copilot-swe-agent[bot]
232258d521
Initial plan
2026-07-15 21:24:11 +00:00
Jeroen Ketema
64df10409a
Merge pull request #22191 from jketema/jketema/swift-6.3.3
...
Swift: Update to Swift 6.3.3
2026-07-15 14:09:47 +02:00
Jeroen Ketema
a701922dbd
Swift: Update to Swift 6.3.3
2026-07-15 13:28:15 +02:00
Jeroen Ketema
303f81ee14
Merge pull request #22194 from github/jketema/kotlin-2.4.10
...
Kotlin: Support Kotlin 2.4.10
2026-07-15 11:46:21 +02:00
Michael Nebel
2c161e6b8f
Merge pull request #22180 from michaelnebel/csharp/rawurl
...
C#: Remove the RawUrl sanitizer.
2026-07-15 11:38:28 +02:00
Jeroen Ketema
574ef4d1ac
Kotlin: Support Kotlin 2.4.10
2026-07-15 10:17:58 +02:00
Michael Nebel
cb3f8a8394
C#: Add change-note.
2026-07-15 09:16:01 +02:00
Michael Nebel
2395053ed6
C#: Update integration test expected output.
2026-07-15 09:12:52 +02:00
Michael Nebel
b15c243eca
C#: Exclude cs/useless-assignment-to-local from the code-quality suite.
2026-07-15 09:12:49 +02:00
Owen Mansel-Chan
05734dcc38
Merge pull request #22175 from owen-mc/java/fix-path-sanitizer
...
Java: Fix `File.getName()` path sanitizer
2026-07-14 13:12:56 +01:00
Jeroen Ketema
8b477059fe
Merge pull request #22178 from jketema/jketema/go-recv
...
Go: Track whether a type parameter type was declared as part of a receiver
2026-07-14 10:49:52 +02:00
Jeroen Ketema
09da46d8bd
Go: Address review comments
2026-07-14 10:23:43 +02:00
