copilot-swe-agent[bot]
6e4ac3915d
Address code review: remove ECMAScript-incompatible comment groups, fix comments
...
- Remove `(?#...)` comment group support from ParseRegExp.qll (not in ECMAScript)
- Remove `commentGroupStart` predicate
- Remove `#` from `nonCapturingGroupStart` character list
- Remove `commentGroupStart` call from `groupStart`
- Fix misleading comment in test.cpp line 64
- Clarify RegExpConfig.qll documentation to accurately describe `any()` behavior
2026-07-21 09:07:28 +00:00
copilot-swe-agent[bot]
cc12bba930
Add C++ ECMAScript regex parser and tree view (initial implementation)
...
Ports the Ruby regex library to C++/ECMAScript (`std::regex` default dialect):
- `cpp/ql/lib/semmle/code/cpp/regex/internal/ParseRegExp.qll`: ECMAScript-adapted parser over `StringLiteral`
- `cpp/ql/lib/semmle/code/cpp/regex/RegexTreeView.qll`: tree view implementing `RegexTreeViewSig`
- `cpp/ql/lib/qlpack.yml`: add `codeql/regex` dependency (already present)
- `cpp/ql/test/library-tests/regex/`: hermetic test corpus (test.cpp with std:: stubs), parse.ql, regexp.ql, RegExpConfig.qll
- `cpp/ql/lib/change-notes/released/12.1.0.md`: minorAnalysis change note
Note: .expected files are placeholders; run `codeql test run --accept` after database generation to populate them.
2026-07-21 09:01:50 +00:00
Owen Mansel-Chan
a2c5d4c818
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
Mathias Vorreiter Pedersen
4f4cdf434b
Merge pull request #22061 from MathiasVP/mad-write-through-model
...
Shared: Support flow summaries from `ReturnValue`s
2026-07-02 12:38:44 +01:00
Mathias Vorreiter Pedersen
dbbcc1741c
C++: Delete now-unsupported MaD rows.
2026-06-30 17:48:31 +01:00
Mathias Vorreiter Pedersen
f37b3e77ff
Merge branch 'main' into remove-mad-support-for-variables
2026-06-30 17:38:37 +01:00
Mathias Vorreiter Pedersen
b7b731bab7
Merge branch 'main' into mad-write-through-model
2026-06-30 15:12:02 +01:00
Mathias Vorreiter Pedersen
0e05ea5153
C++: Remove whitespace.
2026-06-30 12:41:29 +01:00
Mathias Vorreiter Pedersen
449a3ac870
C++: Delete tests which are no longer relevant.
2026-06-30 12:39:31 +01:00
Mathias Vorreiter Pedersen
fc954c3e1a
C++: Remove support for marking variables as sources and sinks in MaD.
2026-06-30 12:30:40 +01:00
Mathias Vorreiter Pedersen
caaed72288
C++: Hide summary nodes that should be hidden and accept test changes.
2026-06-29 18:30:03 +01:00
Mathias Vorreiter Pedersen
08c383df6a
C++: Accept test changes.
2026-06-29 18:20:10 +01:00
Mathias Vorreiter Pedersen
49bde567dd
C++: Add tests with qualified names in MaD.
2026-06-29 18:02:17 +01:00
Mathias Vorreiter Pedersen
933338f627
C++: Accept test changes.
2026-06-23 20:33:34 +01:00
Mathias Vorreiter Pedersen
03c3ef9528
C++: Add tests with missing reverse flow.
2026-06-23 19:48:21 +01:00
Jeroen Ketema
6d0968744b
C++: Fix NameQualifyingElement db inconsistency
2026-06-10 14:35:36 +02:00
Jeroen Ketema
98f147556a
C++: Add namequalifier test with inconsistency
...
While where the remove the file restriction in QL.
2026-06-10 14:27:56 +02:00
Mathias Vorreiter Pedersen
22b08f1ea4
C++: Add a test with a kind of "partial function template" instantiation.
2026-05-31 12:47:31 +02:00
Mathias Vorreiter Pedersen
e18448dd59
C++: Add more tests.
2026-05-29 18:22:13 +02:00
Mathias Vorreiter Pedersen
9f211cebd5
C++: Accept test changes.
2026-05-28 13:34:16 +02:00
Jeroen Ketema
35364a087a
C++: Update expected test results after extractor changes
2026-05-27 10:23:16 +02:00
Mathias Vorreiter Pedersen
a7405bddaa
Merge pull request #21856 from MathiasVP/scanf-safe-functions
...
C++: Model secure versions of `scanf` as flow sources
2026-05-22 12:34:54 +01:00
Mathias Vorreiter Pedersen
a33af09244
C++: Add models for _fscanf_s_l, fwscanf_s and _fwscanf_s_l.
2026-05-20 18:59:04 +01:00
Mathias Vorreiter Pedersen
25d20399f3
C++: Add models for _scanf_s_l, wscanf_s and _wscanf_s_l.
2026-05-20 18:43:07 +01:00
Mathias Vorreiter Pedersen
e6c5f944ba
C++: Add missing format string part in test.
2026-05-20 18:13:35 +01:00
Mathias Vorreiter Pedersen
157424cca3
Merge pull request #21836 from MathiasVP/uncertain-def-more-complete
...
C++: Support reasoning about whether a phi node overwrites the entire buffer
2026-05-20 13:04:37 +01:00
Mathias Vorreiter Pedersen
f5113b1932
C++: Fix internal SCC edges and accept test changes.
2026-05-19 15:39:32 +01:00
Mathias Vorreiter Pedersen
f77d426706
C++: Add test demonstrating broken phi cycle certain'ness.
2026-05-19 15:35:20 +01:00
Mathias Vorreiter Pedersen
5f10a88208
C++: Handle size arguments in 'getOutputArgument'.
2026-05-18 14:06:18 +01:00
Mathias Vorreiter Pedersen
5add24be59
C++: Add scanf_s models.
2026-05-18 14:06:16 +01:00
Jeroen Ketema
c2e2770bbf
C++: Simplify type alias class naming
2026-05-18 14:22:04 +02:00
Mathias Vorreiter Pedersen
2902a19a50
C++: Add more scanf testing.
2026-05-18 10:58:50 +01:00
Jeroen Ketema
d47ee6bed9
C++: Update test results after extractor changes
2026-05-14 20:22:47 +02:00
Mathias Vorreiter Pedersen
f40d42c575
C++: Perform an SCC reduction to simulate greatest fixed-point semantics.
2026-05-13 13:14:20 +01:00
Mathias Vorreiter Pedersen
8585bb616d
C++: Some writes are always certain regardless of the address.
2026-05-13 13:14:13 +01:00
Mathias Vorreiter Pedersen
6d5d57acca
C++: Add missing overrides.
2026-05-13 13:09:10 +01:00
Mathias Vorreiter Pedersen
e77d85f23e
C++: Add a new test to test assignment certainty (i.e., whether the entire buffer is overwritten).
2026-05-13 13:09:08 +01:00
Mathias Vorreiter Pedersen
b753e7d228
C++: Make 'toString' on 'Ssa::Definition' more clear.
2026-05-13 13:09:01 +01:00
Mathias Vorreiter Pedersen
8e25240282
C++: Add a FP caused by missing certainty around SSA writes from Uninitialized instructions.
2026-05-13 13:07:56 +01:00
Mathias Vorreiter Pedersen
1ba9601257
Merge pull request #21764 from github/add-strsafe.h-models
...
C++: Add `Strsafe.h` models
2026-04-28 12:10:26 +01:00
Mathias Vorreiter Pedersen
86d8e362a1
C++: Accept test changes.
2026-04-28 10:50:50 +01:00
Mathias Vorreiter Pedersen
e29efc7d2c
C++: Add tests with missing flow.
2026-04-28 10:50:39 +01:00
Jeroen Ketema
f50bbdb9af
C++: Update expected test results after extractor changes
2026-04-23 10:13:57 +02:00
Mathias Vorreiter Pedersen
dc8dc61196
C++: Fix type name.
2026-03-31 13:54:30 +01:00
Mathias Vorreiter Pedersen
9e97e0433e
C++: Accept test changes.
2026-03-31 11:30:41 +01:00
Mathias Vorreiter Pedersen
c6d1ec5f64
C++: Add examples that need taint inheriting content.
2026-03-31 11:30:37 +01:00
Mathias Vorreiter Pedersen
21ea7ebe40
C++: Model a few more remote flow sources from 'http.h' and accept test changes.
2026-03-31 11:30:35 +01:00
Mathias Vorreiter Pedersen
18a25c5071
C++: Add tests with missing flow sources.
2026-03-31 11:30:33 +01:00
Mathias Vorreiter Pedersen
5db069eb56
C++: Fix more consistency errors.
2026-03-30 12:08:08 +01:00
Mathias Vorreiter Pedersen
29768bbed4
Update cpp/ql/test/library-tests/dataflow/dataflow-tests/type-bugs.ql
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-30 11:26:24 +01:00