Jeroen Ketema
574ef4d1ac
Kotlin: Support Kotlin 2.4.10
2026-07-15 10:17:58 +02:00
Owen Mansel-Chan
05734dcc38
Merge pull request #22175 from owen-mc/java/fix-path-sanitizer
...
Java: Fix `File.getName()` path sanitizer
2026-07-14 13:12:56 +01:00
Owen Mansel-Chan
2d0095826b
Address review comment
2026-07-13 19:40:31 +01:00
Michael Nebel
42843f155e
Merge pull request #22159 from aschackmull/java/join-order-effnonvirt
...
Java: Improve join order.
2026-07-13 16:45:54 +02:00
Owen Mansel-Chan
6057b4b6e9
Fix path sanitizer
2026-07-11 07:28:14 +01:00
Anders Schack-Mulligen
33261f441e
Java: Improve join order.
...
Before:
```
[2026-07-10 15:15:58] Evaluated non-recursive predicate ControlFlowGraph::NonReturningCalls::EffectivelyNonVirtualMethod.getAnAccess/0#dispred#efac59ed@090459qt in 4303ms (size: 186002).
Evaluated relational algebra for predicate ControlFlowGraph::NonReturningCalls::EffectivelyNonVirtualMethod.getAnAccess/0#dispred#efac59ed@090459qt with tuple counts:
790592 ~0% {2} r1 = JOIN `Expr::MethodCall.getMethod/0#dispred#41989dc9_10#join_rhs` WITH `Member::Method.getSourceDeclaration/0#dispred#93e6cdf8` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
539755681 ~2% {2} | JOIN WITH `Member::SrcMethod.getAPossibleImplementationOfSrcMethod/0#dispred#4f4317e6#bf` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
186002 ~2% {2} | JOIN WITH ControlFlowGraph::NonReturningCalls::EffectivelyNonVirtualMethod#86c19e07 ON FIRST 1 OUTPUT Lhs.0, Lhs.1
return r1
```
After:
```
[2026-07-10 15:29:39] Evaluated non-recursive predicate ControlFlowGraph::NonReturningCalls::EffectivelyNonVirtualMethod.getAnAccess/0#dispred#efac59ed@32fb2e61 in 10ms (size: 186002).
Evaluated relational algebra for predicate ControlFlowGraph::NonReturningCalls::EffectivelyNonVirtualMethod.getAnAccess/0#dispred#efac59ed@32fb2e61 with tuple counts:
122765 ~0% {2} r1 = SCAN ControlFlowGraph::NonReturningCalls::EffectivelyNonVirtualMethod#86c19e07 OUTPUT In.0, In.0
122766 ~0% {2} | JOIN WITH `Member::SrcMethod.getAPossibleImplementationOfSrcMethod/0#dispred#4f4317e6_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
126911 ~0% {2} | JOIN WITH `Member::Method.getSourceDeclaration/0#dispred#93e6cdf8_10#join_rhs` ON FIRST 1 OUTPUT Rhs.1, Lhs.1
186002 ~2% {2} | JOIN WITH `Expr::MethodCall.getMethod/0#dispred#41989dc9_10#join_rhs` ON FIRST 1 OUTPUT Lhs.1, Rhs.1
return r1
```
2026-07-10 15:32:44 +02:00
Jack Nørskov Jørgensen
d5712ef19a
Merge pull request #22130 from github/jacknojo/apache_poi_mads
...
Add MaDs for Apache POI @ bd97feb849ab86670fe5b5513d4066c46b599797
2026-07-09 08:56:54 +02:00
Owen Mansel-Chan
134e30260d
Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization
...
Java: fix `@Pattern` sanitization for `java/path-injection`
2026-07-08 11:37:15 +01:00
Jack Nørskov Jørgensen
6c7b9f71d6
Remove main entries
2026-07-08 09:28:47 +02:00
Owen Mansel-Chan
8363d2d66d
Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink
...
Java: Model Spring reactive `WebClient.uri` as a request forgery sink
2026-07-08 00:40:33 +01:00
Luis Azanza
b8f8370c33
Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md
...
Update change note to be more technically accurate
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-07-07 16:21:09 -07:00
Luis Azanza
6ff2a4c0d6
Apply suggestion from @owen-mc
...
Removing Apple Inc notice per feedback provided by GitHub
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-07-07 16:10:05 -07:00
Luis Azanza
1db31327a7
Java: Model Spring reactive WebClient.uri as a request forgery sink
2026-07-07 13:30:48 -07:00
Owen Mansel-Chan
a812e4aa99
Refactor creating barriers with annotations
2026-07-07 12:44:19 +01:00
Jack Nørskov Jørgensen
0ca353dc7f
Add Changenote
2026-07-06 20:40:08 +02:00
Owen Mansel-Chan
e5bd62dbd3
Add change note
2026-07-03 11:34:11 +01:00
Owen Mansel-Chan
76b4f4f223
Fix @Pattern sanitizer for TaintedPath
2026-07-03 11:34:06 +01:00
Mathias Vorreiter Pedersen
4f4cdf434b
Merge pull request #22061 from MathiasVP/mad-write-through-model
...
Shared: Support flow summaries from `ReturnValue`s
2026-07-02 12:38:44 +01:00
Owen Mansel-Chan
7263c00b00
Fix misnamed MaD models files
2026-07-01 13:13:01 +01:00
Jack Nørskov Jørgensen
4328031ff7
Add MaDs for Apache POI
2026-07-01 13:17:56 +02:00
Mathias Vorreiter Pedersen
b7b731bab7
Merge branch 'main' into mad-write-through-model
2026-06-30 15:12:02 +01:00
github-actions[bot]
456e33773b
Post-release preparation for codeql-cli-2.26.0
2026-06-25 16:24:06 +00:00
github-actions[bot]
237c5639e2
Release preparation for version 2.26.0
2026-06-25 15:27:00 +00:00
Jeroen Ketema
b8c78fdcb7
Merge pull request #21970 from github/andersfugmann/kotlin-2.4-v2
...
Kotlin: add Kotlin 2.4.0 support
2026-06-24 16:40:40 +02:00
Mathias Vorreiter Pedersen
9865b66308
Java: Fixes after changes to the flow summary API.
2026-06-23 20:33:17 +01:00
Anders Schack-Mulligen
41297c588c
Cfg: Change AST/CFG for CatchClauses to use a pattern.
2026-06-23 14:28:44 +02:00
Jeroen Ketema
cd23341dab
Merge branch 'main' into andersfugmann/kotlin-2.4-v2
2026-06-23 11:45:17 +02:00
Anders Schack-Mulligen
f844cd3754
Java/C#: Adapt to signature change.
2026-06-18 11:00:30 +02:00
Anders Fugmann
e10743bd08
Kotlin: add extractor support for 2.4.0
...
Add the Kotlin 2.4.0 compiler plugin variant (component registrar,
IR compatibility shims, and version-specific utilities), bundle the
2.4.0 compiler dependencies, and update the build wiring, supported
version metadata and the too-new diagnostic bound.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-06-16 16:24:42 +02:00
Tom Hvitved
d287f0cf0b
Merge pull request #21987 from hvitved/type-flow-ranking
...
Java: Fix performance issue in type flow library
2026-06-16 09:39:30 +02:00
Tom Hvitved
686e98c6ff
Update java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2026-06-15 11:37:14 +02:00
Tom Hvitved
651770b412
Java: Fix performance issue in type flow library
2026-06-15 10:35:16 +02:00
Anders Schack-Mulligen
ff61344afa
Cfg: Add support for until-statements.
2026-06-12 13:55:05 +02:00
Anders Schack-Mulligen
f3ec7087e3
Cfg: Fix type.
2026-06-12 10:02:48 +02:00
Anders Schack-Mulligen
01173bf383
Cfg: Fold getTryInit into indexed getBody.
2026-06-08 14:03:12 +02:00
Sotiris Dragonas
d6892eaf0d
Merge pull request #21900 from github/bazookamusic/range-analysis-bound-move-to-shared
...
Bound.qll - Replace utility for range analysis duplicate across java and cs with shared file
2026-06-04 12:45:11 +02:00
BazookaMusic
d2972cb53f
Add back alias for module
2026-06-04 11:08:49 +02:00
Owen Mansel-Chan
52f2a5825a
Merge pull request #21804 from github/copilot/add-tests-for-models
...
Java: Update CWE-918 model coverage for Apache HttpClient `execute` sinks
2026-06-03 12:55:56 +01:00
BazookaMusic
f34275636c
No duplicate Ssa and remove release changenot
2026-06-03 11:54:24 +02:00
BazookaMusic
0a801440b9
review comments
2026-06-03 10:48:50 +02:00
Sotiris Dragonas
019a5c01ad
Merge branch 'main' into bazookamusic/range-analysis-bound-move-to-shared
2026-06-01 18:10:02 +02:00
BazookaMusic
71a363545a
formatting
2026-06-01 15:24:06 +02:00
github-actions[bot]
cfb18c2477
Post-release preparation for codeql-cli-2.25.6
2026-05-29 12:04:35 +00:00
github-actions[bot]
8b6f969cdb
Release preparation for version 2.25.6
2026-05-29 11:27:54 +00:00
Henry Mercer
9bc0c1b1ab
Revert "Release preparation for version 2.25.6"
2026-05-29 12:13:50 +01:00
Owen Mansel-Chan
8937e22735
Add summary models for org.apache.http.client.methods.RequestBuilder
...
Generated by GPT 5.3-codex, verified by me.
2026-05-28 10:56:37 +01:00
BazookaMusic
acb5c0e70f
missed changes
2026-05-27 17:23:45 +02:00
BazookaMusic
6042adebae
move identical java and cs bound.qll to shared library
2026-05-27 17:23:28 +02:00
github-actions[bot]
44a914e40f
Release preparation for version 2.25.6
2026-05-25 10:23:26 +00:00
Óscar San José
996e79131e
Merge branch 'main' into post-release-prep/codeql-cli-2.25.5
2026-05-22 16:32:30 +02:00
