hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-22 19:52:02 +02:00
Code Issues Packages Projects Releases Wiki Activity
88,607 Commits 1,811 Branches 171 Tags
copilot/add-cpp-regular-expression-parser
Commit Graph

4335 Commits

Author SHA1 Message Date
copilot-swe-agent[bot]
ebecc19f81 Remove duplicated ReDoS fast-path filter from RegexGrammar; narrow at RegexFlowConfigs wrappers 2026-07-20 13:08:53 +00:00
copilot-swe-agent[bot]
645f2fdc3d Move StdBasicRegex to shared StdRegex module; return ExploitableStringLiteral to flow layer 2026-07-20 12:49:45 +00:00
copilot-swe-agent[bot]
4fab077bbe Extract C++ regex grammar/flag knobs into flow-free RegexGrammar module 2026-07-20 12:02:38 +00:00
copilot-swe-agent[bot]
db58698394 Fix C++ regex term source locations for raw and encoding-prefixed literals 2026-07-20 10:00:13 +00:00
copilot-swe-agent[bot]
09938f0531 Revert "Resolve dead-code alerts: export RegexPatternFlowConfig module" 
This reverts commit cc95e25e56.
 2026-07-17 18:09:25 +00:00
copilot-swe-agent[bot]
cc95e25e56 Resolve dead-code alerts: export RegexPatternFlowConfig module 
The two "Dead code" alerts (100379, 100380) point at the isSource and
isSink predicates in `private module RegexPatternFlowConfig implements
DataFlow::ConfigSig` in cpp/ql/lib/semmle/code/cpp/regex/RegexFlowConfigs.qll.

Rationale (Case C): The predicates are genuine and correctly wired -
`RegexPatternFlowConfig` is consumed by
`TaintTracking::Global<RegexPatternFlowConfig>` on the very next line,
which drives the `usedAsRegex` / `regexMatchedAgainst` public predicates.
The DeadCode query cannot see through signature-parameterized modules and
therefore flags every implementation-side `isSource`/`isSink` inside a
private ConfigSig module (the same false positive is present on many
existing configs across the codebase). Removing the leftover `private`
qualifier on the config module resolves both alerts by making the
module publicly reachable; the taint-tracking alias below it remains
private, so no additional flow surface is exposed to consumers of this
library.
 2026-07-17 18:04:25 +00:00
copilot-swe-agent[bot]
1c810ede03 Replace non-ASCII characters (em/en dash, arrow) with ASCII equivalents in regex files 2026-07-17 17:32:30 +00:00
copilot-swe-agent[bot]
6d07e4d619 Apply codeql query format to regex library files 2026-07-17 17:28:18 +00:00
Jeroen Ketema
b48b22cace Merge branch 'main' into copilot/add-cpp-regular-expression-parser 2026-07-17 19:15:37 +02:00
copilot-swe-agent[bot]
9758d5260b Fix Predicate QLDoc style: reword ecma_named_group_start doc to start with "Holds if" 2026-07-17 15:11:55 +00:00
copilot-swe-agent[bot]
4435279157 Replace omittable exists variables with don't-care _ 2026-07-17 14:56:48 +00:00
copilot-swe-agent[bot]
96951956fb Fix "modelled" -> "modeled" spelling in regex PR files 2026-07-17 14:39:10 +00:00
copilot-swe-agent[bot]
918d51c24b Add QLdoc to TRegexGrammar branches 2026-07-17 14:13:15 +00:00
copilot-swe-agent[bot]
8b12f32dff Add BRE query test coverage and change note; regenerate .expected 2026-07-17 13:51:06 +00:00
copilot-swe-agent[bot]
c1cb146f40 Add POSIX BRE grammar support: BreRegExp + shared-core refactor 2026-07-17 13:35:37 +00:00
copilot-swe-agent[bot]
9a3613ea04 Add POSIX ERE grammar support to the C++ regex parser 2026-07-17 13:01:15 +00:00
copilot-swe-agent[bot]
e728c71f01 Refactor C++ regex parser into shared core + EcmaRegExp dialect hooks 2026-07-17 12:28:49 +00:00
copilot-swe-agent[bot]
e0cc6795dc Add isBacktrackingEngine gate excluding awk/grep/egrep from C++ ReDoS queries 2026-07-17 12:06:30 +00:00
copilot-swe-agent[bot]
d9f380d446 POSIX bracket soundness: opaque punct/cntrl/print/graph; non-recursive gate; adversarial tests 2026-07-17 10:18:17 +00:00
copilot-swe-agent[bot]
c1103b9b02 Fix C++ ECMAScript regex parser: recognize POSIX bracket sub-expressions; document multiline 2026-07-17 09:52:02 +00:00
copilot-swe-agent[bot]
47969aece8 Add cpp/redos exponential ReDoS query (Phase 4) 2026-07-16 13:06:20 +00:00
copilot-swe-agent[bot]
84d7a2b585 Add cpp/polynomial-redos query (Phase 3) 2026-07-16 12:49:15 +00:00
copilot-swe-agent[bot]
f72bad70f9 Add C++ regex flow modeling and construction-site flags (Phase 2) 2026-07-16 11:21:29 +00:00
copilot-swe-agent[bot]
239ac442a1 Fix change note category to 'minorAnalysis' 2026-07-15 21:50:12 +00:00
copilot-swe-agent[bot]
a27142d2d4 Add C++ regex parser and RegexTreeView (Phase 1) 2026-07-15 21:45:03 +00:00
github-actions[bot]
9acbbb8049 Release preparation for version 2.26.1 2026-07-09 16:48:01 +00:00
Mathias Vorreiter Pedersen
4f4cdf434b Merge pull request #22061 from MathiasVP/mad-write-through-model 
Shared: Support flow summaries from `ReturnValue`s
 2026-07-02 12:38:44 +01:00
Mathias Vorreiter Pedersen
f37b3e77ff Merge branch 'main' into remove-mad-support-for-variables 2026-06-30 17:38:37 +01:00
Mathias Vorreiter Pedersen
b7b731bab7 Merge branch 'main' into mad-write-through-model 2026-06-30 15:12:02 +01:00
Mathias Vorreiter Pedersen
06f54d1bbb C++: Add a TODO comment to remove support for unqualified field names. 2026-06-30 13:55:26 +01:00
Mathias Vorreiter Pedersen
396bea6e6a Update cpp/ql/lib/semmle/code/cpp/dataflow/internal/FlowSummaryImpl.qll 
Co-authored-by: Tom Hvitved <hvitved@github.com>
 2026-06-30 13:44:14 +01:00
Mathias Vorreiter Pedersen
8657c8b26e C++: Add change note. 2026-06-30 12:39:34 +01:00
Mathias Vorreiter Pedersen
fc954c3e1a C++: Remove support for marking variables as sources and sinks in MaD. 2026-06-30 12:30:40 +01:00
Mathias Vorreiter Pedersen
81ed5c59d7 C++: Add change note. 2026-06-30 11:54:58 +01:00
Mathias Vorreiter Pedersen
caaed72288 C++: Hide summary nodes that should be hidden and accept test changes. 2026-06-29 18:30:03 +01:00
Mathias Vorreiter Pedersen
2625c304bf C++: Support fully qualified field names in MaD. 2026-06-29 18:02:20 +01:00
github-actions[bot]
456e33773b Post-release preparation for codeql-cli-2.26.0 2026-06-25 16:24:06 +00:00
github-actions[bot]
237c5639e2 Release preparation for version 2.26.0 2026-06-25 15:27:00 +00:00
Mathias Vorreiter Pedersen
662f522032 C++: Properly instantiate the new reverse flow feature. 2026-06-23 20:33:31 +01:00
Mathias Vorreiter Pedersen
076b01cbfc C++: Fixes after changes to the flow summary API. 2026-06-23 20:33:08 +01:00
Idriss Riouak
ec91865a7f Merge pull request #22030 from github/idrissrio/cpp/update-stats-file 
C/C++: Update stats file
 2026-06-23 10:26:52 +02:00
idrissrio
0a41157d77 C/C++: update stats file 2026-06-22 10:27:21 +02:00
Jeroen Ketema
ef00aa2567 C++: Add upgrade and downgrade scripts 2026-06-10 14:38:15 +02:00
Jeroen Ketema
6d0968744b C++: Fix NameQualifyingElement db inconsistency 2026-06-10 14:35:36 +02:00
Jeroen Ketema
ab4a575243 Merge pull request #21899 from MathiasVP/use-new-prototype-extensionals 
C++: Use the new `prototype`-related extensionals in MaD
 2026-06-01 10:24:19 +02:00
Henry Mercer
a16f1c555c Merge pull request #21912 from github/post-release-prep/codeql-cli-2.25.6 
Post-release preparation for codeql-cli-2.25.6
 2026-05-29 14:43:56 +01:00
github-actions[bot]
cfb18c2477 Post-release preparation for codeql-cli-2.25.6 2026-05-29 12:04:35 +00:00
github-actions[bot]
8b6f969cdb Release preparation for version 2.25.6 2026-05-29 11:27:54 +00:00
Henry Mercer
9bc0c1b1ab Revert "Release preparation for version 2.25.6" 2026-05-29 12:13:50 +01:00
Mathias Vorreiter Pedersen
2d581504f7 C++: Fix Copilot comments. 2026-05-28 13:34:18 +02:00