13744 Commits

Author	SHA1	Message	Date
Jeroen Ketema	896a802194	C++: Add upgrade and downgrade scripts	2025-08-26 23:12:15 +02:00
Jeroen Ketema	e20ce57023	C++: Expose PCH file creation as usage in QL	2025-08-26 22:12:27 +02:00
Jeroen Ketema	e9b00f1e0d	C++: Add tables that represent the creation and use of PCH files ... This allows a use to be linked to a creation.	2025-08-26 22:12:12 +02:00
REDMOND\brodes	938b47c2ad	Crypto: Debug missing hashes associated with HMAC. EVP_PKEY_get1_RSA is now just a passthrough, it is not a known implicit operation call. Some final operations generating null outputs are now removed from possible final operartions (typically used to determine buffer lenghth and not actually performing the operation). Misc. false positive/error fixes and code clean up, and added missing models.	2025-08-26 16:07:04 -04:00
REDMOND\brodes	422352c632	Crypto: Continued refactoring of operation steps and bug fixes.	2025-08-26 11:49:26 -04:00
REDMOND\brodes	48dc280e6c	Crypto: Fix issue with OAEP padding edges regressing.	2025-08-26 08:51:52 -04:00
Jeroen Ketema	54f264851a	Merge branch 'main' into cpp/use-flow-state-inout-barriers	2025-08-26 11:24:32 +02:00
Jeroen Ketema	75786e9a71	C++: Revert changes to cpp/constant-array-overflow ... It is not clear that this does what we want here, and the query is severly broken in any case.	2025-08-26 10:43:54 +02:00
REDMOND\brodes	5d29240f27	Crypto: OperationStep overhaul to account for errors and missing interproc flow.	2025-08-25 16:59:09 -04:00
Jeroen Ketema	a104600d4d	Merge branch 'main' into cpp/use-flow-state-inout-barriers	2025-08-25 17:04:30 +02:00
Jeroen Ketema	0752c07bc1	C++: Update expected test results after extractor changes	2025-08-25 15:56:00 +02:00
REDMOND\brodes	b7ceeb399f	Crypto: nodes.expected update and removed dead code from Language.qll	2025-08-22 14:50:31 -04:00
REDMOND\brodes	ec7e41cb30	Crypto: Fixed issues in CBOM representations (gaps in the underlying model) and simplified unit tests in terms of the graph complexity to aid visual assessments of model correctness.	2025-08-21 15:05:45 -04:00
Chris Smowton	1829060fab	Merge remote-tracking branch 'origin/main' into smowton/admin/merge-rc319-into-main	2025-08-21 16:33:37 +01:00
Mathias Vorreiter Pedersen	dfda5a0793	Merge pull request #20249 from MathiasVP/type-tracking-for-cpp-3 ... C++: Use the shared type-tracking library for virtual dispatch resolution	2025-08-21 11:14:12 +02:00
Kristen Newbury	cf0342410d	Merge branch 'knewbury01/add-uniform-Customizations' of https://github.com/knewbury01/codeql into knewbury01/add-uniform-Customizations	2025-08-20 13:19:16 -04:00
Kristen Newbury	854a5b5871	Add changenotes customizations addition	2025-08-20 13:18:17 -04:00
Ben Rodes	65ff72719e	Merge branch 'main' into signature_model_refactor	2025-08-20 12:34:06 -04:00
Mathias Vorreiter Pedersen	70d3e69ce5	C++: Rename 'lambda' to 'virtual'.	2025-08-20 10:38:22 +02:00
Jeroen Ketema	c9f0e3a377	Apply suggestions from code review	2025-08-20 08:07:10 +02:00
Kristen Newbury	d630e32ce9	Format Customizations.qll	2025-08-19 15:27:29 -04:00
Kristen Newbury	49ef6939d4	Add extra Customizations files	2025-08-19 14:49:31 -04:00
Mathias Vorreiter Pedersen	02bf923f7e	C++: Add change note.	2025-08-19 13:57:15 +02:00
Mathias Vorreiter Pedersen	0631bd7466	C++: Add object/flow conflation for unions when resolving function pointers.	2025-08-19 13:57:13 +02:00
Mathias Vorreiter Pedersen	16508b1800	C++: Fix off-by-one error in getType on 'FinalGlobalValue' nodes and accept test changes.	2025-08-19 13:57:11 +02:00
Mathias Vorreiter Pedersen	302d35bedc	C++: Accept test changes.	2025-08-19 13:57:10 +02:00
Mathias Vorreiter Pedersen	cca5bd9ada	C++: Update 'mayBenefitFromCallContext' to not use the old virtual dispatch local flow predicate.	2025-08-19 13:57:07 +02:00
Mathias Vorreiter Pedersen	383799ce67	C++: Perform 6 rounds of virtual dispatch resolution like Java.	2025-08-19 13:57:05 +02:00
Mathias Vorreiter Pedersen	d4188d59a8	C++: Instantiate the type tracking module inside a reusable module like it's done in Java.	2025-08-19 13:57:03 +02:00
Mathias Vorreiter Pedersen	caf7464f3b	C++: Prefix with 'DataflowPrivate'.	2025-08-19 12:46:12 +02:00
Mathias Vorreiter Pedersen	fdb9f7ba2a	C++: Move these predicates to make the diff smaller.	2025-08-19 12:42:15 +02:00
Mathias Vorreiter Pedersen	42fcfca849	C++: Remove the old virtual dispatch case from 'defaultViableCallable' and slightly reorganize the code in preparation for the next commit.	2025-08-19 12:39:26 +02:00
Mathias Vorreiter Pedersen	c1b91db37a	C++: Add more virtual dispatch tests.	2025-08-19 12:32:09 +02:00
Mathias Vorreiter Pedersen	af00e46fc8	C++: Mark fprintf and friends as a partial write of the stream argument.	2025-08-18 18:15:14 +02:00
Mathias Vorreiter Pedersen	6a57da79de	C++: Add a test with missing flow.	2025-08-18 18:12:52 +02:00
Mathias Vorreiter Pedersen	4551875e2e	C++: Drive-by improvement: Use 'partialFlowFunc' since it is in scope anyway.	2025-08-18 18:10:35 +02:00
github-actions[bot]	42e3d31c49	Post-release preparation for codeql-cli-2.22.4	2025-08-18 14:42:42 +00:00
github-actions[bot]	90d29994c8	Release preparation for version 2.22.4	2025-08-18 14:06:09 +00:00
Ian Lynagh	fd020b52e4	Merge pull request #20232 from igfoo/igfoo/SloppyGlobal ... C++: SloppyGlobal: Don't alert on template instantiations, only the template	2025-08-18 11:39:30 +01:00
Ian Lynagh	0870cc370b	C++: Add a changenote for the change to cpp/short-global-name	2025-08-15 12:09:37 +01:00
Ian Lynagh	3157fcdf79	C++: Add some BAD annotations to SloppyGlobal test	2025-08-15 12:07:09 +01:00
Ian Lynagh	bfd4c41ed9	C++: SloppyGlobal: Accept test changes ... We no longer alert on template instantiations, just the template.	2025-08-15 11:24:19 +01:00
Ian Lynagh	4b786061d6	C++: SloppyGlobal: Don't alert on template instantiations, only the template	2025-08-15 11:23:48 +01:00
Ian Lynagh	0b68c1c974	C++: Add some more tests for SloppyGlobal	2025-08-15 11:20:31 +01:00
Nora Dimitrijević	89788206d1	[DIFF-INFORMED] C++: TypeConfusion	2025-08-15 12:01:30 +02:00
Nora Dimitrijević	5b9e37cd8f	[DIFF-INFORMED] C++: TaintedCondition	2025-08-15 12:01:28 +02:00
Nora Dimitrijević	0c636dd400	[DIFF-INFORMED] C++: UnsafeDaclSecurityDescriptor	2025-08-15 12:01:25 +02:00
Nora Dimitrijević	194d9a9f44	[DIFF-INFORMED] C++: UnsafeCreateProcessCall	2025-08-15 12:01:23 +02:00
Nora Dimitrijević	39b430aa7e	[DIFF-INFORMED] C++: IteratorToExpiredContainer	2025-08-15 12:01:21 +02:00
Nora Dimitrijević	ec85e55069	[DIFF-INFORMED] C++: InsufficientKeySize	2025-08-15 12:01:19 +02:00