Geoffrey White
|
8145264b77
|
Rust: Add threat model sources as additional sources for the query.
|
2025-11-21 14:40:11 +00:00 |
|
Tom Hvitved
|
489fff9572
|
Rust: Base DataFlow::Node on AST instead of CFG
|
2025-11-19 19:37:39 +01:00 |
|
Paolo Tranquilli
|
48ee9dd149
|
Merge branch 'main' into post-release-prep/codeql-cli-2.23.6
|
2025-11-18 12:18:09 +01:00 |
|
github-actions[bot]
|
5ee45af3aa
|
Post-release preparation for codeql-cli-2.23.6
|
2025-11-18 09:53:12 +00:00 |
|
Geoffrey White
|
9ab7f87603
|
Merge pull request #20776 from geoffw0/rustexamples
Rust: Add example queries
|
2025-11-18 09:34:48 +00:00 |
|
github-actions[bot]
|
18fa6799ce
|
Release preparation for version 2.23.6
|
2025-11-17 16:38:07 +00:00 |
|
Geoffrey White
|
7c8e44db8e
|
Rust: Change note.
|
2025-11-17 15:09:57 +00:00 |
|
Geoffrey White
|
725899389b
|
Rust: Clean up the query slightly.
|
2025-11-17 15:08:53 +00:00 |
|
Tom Hvitved
|
8455663255
|
Rust: Speedup AccessAfterLifetime.ql
|
2025-11-15 15:21:03 +01:00 |
|
Geoffrey White
|
15fa99a288
|
Rust: Clarify some confusing text in the .qhelp.
|
2025-11-13 09:00:46 +00:00 |
|
Geoffrey White
|
42aca4a171
|
Apply suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2025-11-13 08:51:41 +00:00 |
|
Geoffrey White
|
0675a29ae6
|
Rust: Minor corrections.
|
2025-11-12 19:26:45 +00:00 |
|
Tom Hvitved
|
467bd541d2
|
Merge pull request #20770 from hvitved/rust/attribute-macro-expansion-filter
Rust: Remove elements superseded by attribute macro expansions
|
2025-11-12 19:52:09 +01:00 |
|
Geoffrey White
|
7a62642ed7
|
Rust: Change note.
|
2025-11-12 18:17:12 +00:00 |
|
Geoffrey White
|
49063ac8a9
|
Rust: Cut down the example for readability.
|
2025-11-12 18:13:02 +00:00 |
|
Geoffrey White
|
dcae0ef975
|
Rust: I prefer the original certificates reference from the Go .qhelp.
|
2025-11-12 18:10:44 +00:00 |
|
Geoffrey White
|
87d66c69a3
|
Rust: Clean up the .qhelp a little.
|
2025-11-12 18:10:02 +00:00 |
|
Geoffrey White
|
bb78fdf150
|
Rust: Add qhelp and examples (translated from Go, by Copilot).
|
2025-11-12 16:50:50 +00:00 |
|
Geoffrey White
|
c77eef39e2
|
Rust: Convert the query to a path-problem with global data flow.
|
2025-11-12 16:21:46 +00:00 |
|
Geoffrey White
|
209f394b5e
|
Rust: Fix the alert message.
|
2025-11-12 15:51:03 +00:00 |
|
Geoffrey White
|
f6b7aeaaca
|
Rust: Add prototype query.
|
2025-11-11 16:01:10 +00:00 |
|
Tom Hvitved
|
c81f5f5190
|
Rust: Remove elements superseded by attribute macro expansions
|
2025-11-10 09:18:58 +01:00 |
|
Geoffrey White
|
61481b51e7
|
Rust: Change note.
|
2025-11-07 16:55:35 +00:00 |
|
Geoffrey White
|
1e7acc5e1a
|
Merge branch 'main' into copilot/add-secure-cookie-test-cases
|
2025-11-05 17:53:02 +00:00 |
|
Michael B. Gale
|
046db0419f
|
Merge pull request #20758 from github/post-release-prep/codeql-cli-2.23.4
Post-release preparation for codeql-cli-2.23.4
|
2025-11-05 10:45:51 +00:00 |
|
Geoffrey White
|
ff06181e4b
|
Rust: We actually want barriers on set_secure(false) as well as set_secure(true), to prevent excessive flow paths.
|
2025-11-04 19:30:35 +00:00 |
|
github-actions[bot]
|
4014df9a6e
|
Post-release preparation for codeql-cli-2.23.4
|
2025-11-04 17:57:52 +00:00 |
|
Geoffrey White
|
077bcf6b92
|
Merge pull request #20740 from geoffw0/rustbarriers
Rust: Add numeric type barriers for three queries
|
2025-11-04 10:08:46 +00:00 |
|
github-actions[bot]
|
64fcdd1f2f
|
Release preparation for version 2.23.4
|
2025-11-03 14:52:23 +00:00 |
|
Geoffrey White
|
34f75952d0
|
Rust: Change note.
|
2025-10-31 16:40:02 +00:00 |
|
Geoffrey White
|
0e7d410163
|
Merge branch 'main' into macrometric2
|
2025-10-30 10:19:11 +00:00 |
|
Geoffrey White
|
7a864c5244
|
Rust: Implement suggestion from review.
|
2025-10-29 12:13:12 +00:00 |
|
Geoffrey White
|
5ca0bd071d
|
Rust: Exclude skipped files from CallTargetStats and ExprTypeStats as well.
|
2025-10-29 10:42:04 +00:00 |
|
Geoffrey White
|
25e4b790a3
|
Rust: Exclude skipped files from MacroCallTargetStats.
|
2025-10-29 10:42:03 +00:00 |
|
Nora Dimitrijević
|
8e0c453c37
|
Rust/InsecureCookie
|
2025-10-28 09:42:14 +01:00 |
|
Nora Dimitrijević
|
4952cb27fb
|
Rust/AccessAfterLifetime
|
2025-10-28 09:42:11 +01:00 |
|
Geoffrey White
|
7da00b3e9d
|
Rust: Change note.
|
2025-10-21 13:33:17 +01:00 |
|
Geoffrey White
|
751d62aefb
|
Rust: Add the metric to rust/diagnostic/database-quality (with a very low threshold for the time being).
|
2025-10-21 13:29:46 +01:00 |
|
Geoffrey White
|
d691c3215f
|
Rust: Add expressions with unknown type metric (expected by DCA).
|
2025-10-21 12:00:25 +01:00 |
|
Geoffrey White
|
7b32cd4868
|
Merge pull request #20649 from geoffw0/mv1
Rust: Move rust/weak-sensitive-data-hashing
|
2025-10-20 10:17:40 +01:00 |
|
Owen Mansel-Chan
|
66f95bcbcd
|
Merge pull request #20603 from owen-mc/update-broken-algo-qhelp
Many languages: Update broken algo qhelp
|
2025-10-17 12:30:43 +01:00 |
|
Geoffrey White
|
9dcc0a0d81
|
Rust: Move rust/weak-sensitive-data-hashing to CWE-327.
|
2025-10-15 15:14:16 +01:00 |
|
github-actions[bot]
|
6dd07790ac
|
Post-release preparation for codeql-cli-2.23.3
|
2025-10-14 11:16:33 +00:00 |
|
github-actions[bot]
|
33542f7d40
|
Release preparation for version 2.23.3
|
2025-10-14 09:30:24 +00:00 |
|
Owen Mansel-Chan
|
2f22acdd06
|
Remove hashing example when not covered by query
|
2025-10-08 16:48:57 +01:00 |
|
Owen Mansel-Chan
|
0bcdb91639
|
Improve qhelp for broken crypto algo queries
Previously it focussed too much on the risk of data being decrypted,
and didn't explain why using weak algorithms is a problem in other
contexts.
|
2025-10-08 14:10:54 +01:00 |
|
Owen Mansel-Chan
|
2a1c9d8ec1
|
Remove erroneous comma
|
2025-10-08 14:08:36 +01:00 |
|
Geoffrey White
|
d9955ce93c
|
Merge pull request #20503 from geoffw0/cookie
Rust: New query rust/insecure-cookie
|
2025-09-30 15:26:37 +01:00 |
|
github-actions[bot]
|
a7a4e43991
|
Post-release preparation for codeql-cli-2.23.2
|
2025-09-29 15:10:19 +00:00 |
|
github-actions[bot]
|
d2130a589b
|
Release preparation for version 2.23.2
|
2025-09-29 10:28:45 +00:00 |
|