Paolo Tranquilli
1c20e78593
Docs: replace build mode: none with build-mode: none
2026-05-04 10:26:50 +02:00
Mathias Vorreiter Pedersen
154d213fd2
Merge pull request #21768 from github/speed-up-unchecked-leap-year-after-modification
...
C++: Speed up `cpp/leap-year/unchecked-after-arithmetic-year-modification`
2026-04-30 16:06:17 +01:00
Mathias Vorreiter Pedersen
96d6ee61ff
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2026-04-29 10:55:02 +01:00
Mathias Vorreiter Pedersen
dfd85c321c
C++: Compute 'IgnorableOperationToOperationSourceCandidateConfig' after an initial round of the query to reduce the number of sinks.
2026-04-28 22:02:32 +01:00
Jeroen Ketema
e0ce5bcf40
Merge pull request #21699 from jketema/join-fix
...
C++: Fix `isCompiledAsC` join order
2026-04-13 16:03:38 +02:00
Jeroen Ketema
bee39c9d51
C++: Fix isCompiledAsC join order
...
Before on Abseil Windows for `cpp/too-few-arguments:`:
```
Pipeline standard for TooFewArguments::isCompiledAsC/1#52fe29e8@994f9bgp was evaluated in 12 iterations totaling 2ms (delta sizes total: 50).
1198778 ~3% {1} r1 = JOIN `TooFewArguments::isCompiledAsC/1#52fe29e8#prev_delta` WITH `Element::Element.getFile/0#2b8c8740_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1
83 ~26% {1} | JOIN WITH includes ON FIRST 1 OUTPUT Rhs.1
50 ~4% {1} | AND NOT `TooFewArguments::isCompiledAsC/1#52fe29e8#prev`(FIRST 1)
return r1
```
After:
```
Pipeline standard for #File::File.getAnIncludedFile/0#dispred#e8d44cd1Plus#bf@b8d290i6 was evaluated in 11 iterations totaling 0ms (delta sizes total: 43).
47 ~0% {2} r1 = SCAN `#File::File.getAnIncludedFile/0#dispred#e8d44cd1Plus#bf#prev_delta` OUTPUT In.1, In.0
78 ~28% {2} | JOIN WITH `File::File.getAnIncludedFile/0#dispred#e8d44cd1` ON FIRST 1 OUTPUT Lhs.1, Rhs.1
43 ~0% {2} | AND NOT `#File::File.getAnIncludedFile/0#dispred#e8d44cd1Plus#bf#prev`(FIRST 2)
return r1
[2026-04-13 11:05:25] Evaluated non-recursive predicate TooFewArguments::isCompiledAsC/1#52fe29e8@4a3eb9jk in 0ms (size: 49).
Evaluated relational algebra for predicate TooFewArguments::isCompiledAsC/1#52fe29e8@4a3eb9jk with tuple counts:
1 ~0% {3} r1 = CONSTANT(unique int, unique string, unique string)[1,"compiled as c","1"]
1 ~0% {1} | JOIN WITH #fileannotationsMerge_1230#join_rhs ON FIRST 3 OUTPUT Rhs.3
48 ~0% {1} r2 = JOIN r1 WITH `#File::File.getAnIncludedFile/0#dispred#e8d44cd1Plus#bf` ON FIRST 1 OUTPUT Rhs.1
49 ~0% {1} r3 = r1 UNION r2
return r3
```
2026-04-13 11:13:52 +02:00
Geoffrey White
b9226a359a
Merge pull request #21633 from geoffw0/intmultlong2
...
C++: Upgrade cpp/integer-multiplication-cast-to-long to high precision
2026-04-10 14:02:34 +01:00
Geoffrey White
814c0ae7a8
Merge pull request #21632 from geoffw0/wrongtype2
...
C++: Upgrade cpp/wrong-type-format-argument to high precision
2026-04-10 14:01:07 +01:00
Geoffrey White
56af9a84ab
Update cpp/ql/src/Likely Bugs/Underspecified Functions/ImplicitFunctionDeclaration.qhelp
2026-04-02 11:40:51 +01:00
Geoffrey White
9eabfc5fdc
Update cpp/ql/src/Likely Bugs/Underspecified Functions/ImplicitFunctionDeclaration.ql
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2026-04-02 11:39:45 +01:00
Geoffrey White
e83658ed06
C++: Upgrade query precision.
2026-04-02 11:38:09 +01:00
Geoffrey White
b41a4ff5e4
C++: Upgrade query precision.
2026-04-02 11:28:19 +01:00
Geoffrey White
84c01bc255
C++: Upgrade query precision.
2026-04-02 11:26:49 +01:00
Geoffrey White
a9cce1c0fa
C++: Undo increasing query precision.
2026-03-27 17:32:03 +00:00
Geoffrey White
50681a3c42
C++: Add note to the .qhelp.
2026-03-27 16:47:31 +00:00
Geoffrey White
bb9873dc8f
C++: Increase the query precision to high.
2026-03-27 16:40:45 +00:00
Geoffrey White
5a77128a8b
C++: Disable cpp/implicit-function-declaration on BMN databases.
2026-03-23 11:27:15 +00:00
Geoffrey White
a57f803b37
C++: Address false positive results.
2026-03-16 19:03:10 +00:00
Geoffrey White
6552c849f0
C++: Fix BMN issue in cpp/integer-multiplication-cast-to-long.
2026-03-11 17:49:36 +00:00
Mathias Vorreiter Pedersen
26e8701ae3
C++: Fix a few qualifiers.
2026-02-27 16:22:51 +00:00
Mathias Vorreiter Pedersen
cdb41588a9
C++: Fix some imports.
2026-02-27 16:22:49 +00:00
Mathias Vorreiter Pedersen
1dba99f47d
Merge pull request #21292 from microsoft/UncheckedLeaprYearAfterModification_Refactor_Upstream
...
C++: Refactor of UncheckedLeapYearAfterModification
2026-02-20 12:11:45 +00:00
Ben Rodes
ea0d1bf262
Apply suggestion from @bdrodes
2026-02-17 12:38:59 -05:00
Ben Rodes
0106072b88
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-17 12:35:27 -05:00
Ben Rodes
779fd757a3
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-17 12:35:15 -05:00
Ben Rodes
1072d6a7b7
Apply suggestion from @geoffw0
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-17 10:49:58 -05:00
Ben Rodes
c811fae876
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-17 10:14:11 -05:00
Ben Rodes
549dcb31be
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-17 10:13:55 -05:00
Jeroen Ketema
26a1f4888a
C++: Modernize MustFlow using parameterized modules
2026-02-16 17:27:41 +01:00
REDMOND\brodes
d1811bc1fe
C++: Removing unnecessary post update node.
2026-02-12 11:19:24 -05:00
REDMOND\brodes
febc82dc19
Merge branch 'UncheckedLeaprYearAfterModification_Refactor_Upstream' of https://github.com/microsoft/codeql into UncheckedLeaprYearAfterModification_Refactor_Upstream
2026-02-12 11:12:01 -05:00
REDMOND\brodes
4a7395b017
C++ Suggested code clean up.
2026-02-12 11:11:43 -05:00
Ben Rodes
9bbbbefd34
Apply suggestion from @geoffw0
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-12 10:20:59 -05:00
Ben Rodes
36e4efe77e
Apply suggestion from @geoffw0
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-12 10:20:32 -05:00
Ben Rodes
f5a38b4701
Apply suggestion from @geoffw0
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-12 10:17:56 -05:00
Ben Rodes
b39732ba02
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-12 10:10:11 -05:00
Ben Rodes
dfe6ed2171
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-12 10:09:25 -05:00
REDMOND\brodes
c64a6762d0
Merge branch 'UncheckedLeaprYearAfterModification_Refactor_Upstream' of https://github.com/microsoft/codeql into UncheckedLeaprYearAfterModification_Refactor_Upstream
2026-02-12 09:52:49 -05:00
REDMOND\brodes
f7231f40eb
C++: misc comment clean up per PR suggestions. Unified additional flow steps for two similar flows into a common additional step predicate.
2026-02-12 09:52:19 -05:00
Ben Rodes
d1eb9ab5d2
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-02-12 09:36:36 -05:00
REDMOND\brodes
e2ad1f6511
C++: Updating comment per PR reveiw suggestions.
2026-02-12 09:20:55 -05:00
REDMOND\brodes
8e36316ebf
C++: Addressing Copilot PR suggestions.
2026-02-09 10:42:34 -05:00
REDMOND\brodes
ca18179bd2
C++: Correct false positive. Only TimeConversionFunction that do not auto correct for leap year should be considered.
2026-02-06 16:07:07 -05:00
REDMOND\brodes
95d4a541bc
C++: Refactor leap year logic for UncheckedLeapYearAfterYearModification. Includes new logic for detecting leap year checks, new forms of leap year checks detected, and various heuristics to remove false postives. Move TimeConversionFunction into LeapYear.qll and refactored to separate conversion functions that are expected to be checked for failure from those that auto correct leap year dates if feb 29 is provided on a non-leap year. Increas the set of known TimeConversionFunctions.
2026-02-06 16:03:37 -05:00
Jeroen Ketema
5117b5906b
C++: Exclude comparisons from enum constants in `cpp/constant-comparison
2026-01-06 13:53:44 +01:00
Jeroen Ketema
90d6c9fc56
C++: Exclude more comparisons from cpp/constant-comparison
2026-01-06 13:53:40 +01:00
Nora Dimitrijević
f7a1a4cf75
C++/NonConstantFormat
2025-10-28 09:41:38 +01:00
Mathias Vorreiter Pedersen
5e82eb9b24
C++: Fixup queries which assumes that a guard is always an expression.
2025-09-18 12:16:21 +01:00
Ian Lynagh
b3f4c68a1d
C++: Remove the BMN filter from some queries, but reduce precision to medium
...
Remove the `not any(Compilation c).buildModeNone() and` clause from:
cpp/wrong-type-format-argument
cpp/comparison-with-wider-type
cpp/integer-multiplication-cast-to-long
cpp/implicit-function-declaration
cpp/suspicious-add-sizeof
but reduce their precision to `medium`.
2025-09-11 13:32:11 +01:00
Michael Nebel
83d53baf82
C++: Fix some Ql4Ql violations.
2025-09-03 08:19:18 +02:00