1685 Commits

Author	SHA1	Message	Date
Alex Eyers-Taylor	c49e2ab2da	DataFlow: Add code to do overlay informed dataflow.	2025-10-07 17:52:12 +01:00
Alex Eyers-Taylor	82e4fc9f0f	AlertFiltering: Expose filtering further.	2025-10-07 17:52:12 +01:00
Alex Eyers-Taylor	8c02130bcf	DataFlow: Rearrange files to group the parts that can be shared with overlay aware.	2025-10-07 17:52:12 +01:00
Owen Mansel-Chan	b0c8fcda35	Merge pull request #20591 from owen-mc/shared/update-inline-expectations-qldoc ... Shared: Correct comment about empty `.expected` file	2025-10-07 12:47:11 +01:00
Owen Mansel-Chan	bf76cab7e0	Correct comment about empty .expected file	2025-10-07 11:48:25 +01:00
Nicolas Will	378eb18db5	Merge branch 'main' into jca_signature_extensions	2025-10-06 14:50:15 +02:00
REDMOND\brodes	9c5765a48c	Crypto: Add missing string constants for signature algorithms.	2025-10-03 17:17:07 -04:00
REDMOND\brodes	f1eb6511a7	Crypto: Add modeling for JCA signatures. Make consistent use of "unknown" or "other" for unrecognized types.	2025-10-03 12:07:37 -04:00
Anders Schack-Mulligen	64810f6fb5	C#: Improve ConstantCondition.ql	2025-10-03 15:29:34 +02:00
Anders Schack-Mulligen	b52a9a818c	C#: Instantiate shared Guards.	2025-10-03 15:29:32 +02:00
Anders Schack-Mulligen	c01ac307b0	Guards: Disregard more trivial guards.	2025-10-03 15:29:31 +02:00
Anders Schack-Mulligen	ca7d56023a	ControlFlow: Rename getAPhiInput to getAnInput.	2025-10-03 15:29:31 +02:00
Anders Schack-Mulligen	64caae554a	Guards: Refactor representation of false.	2025-10-03 15:29:30 +02:00
Simon Friis Vindum	402d58bc3a	Merge pull request #20553 from paldepind/rust-ruby/update-cargo-deps ... Rust, ruby: Update cargo dependencies	2025-10-03 14:50:55 +02:00
Anders Schack-Mulligen	2e9e357d7e	Rangeanalysis: Fix a join-order.	2025-10-03 10:52:52 +02:00
REDMOND\brodes	507174e44f	Crypto: Fix bug in MacOperationNode constructor with detecting if the operation is also used for signatures.	2025-10-02 15:20:59 -04:00
REDMOND\brodes	704a06e1fa	Crypto: Update JCA PBKDF2 modeling: 1) add further inheritance structures to make the inheritance decomposition and caveats clearer, and 2) use getConsumer to establish the hash and hmac consumer. Update the Model to expect hash node types specifically for HMAC getHashALgorithmOrUnknown.	2025-10-02 11:45:13 -04:00
Ben Rodes	d251b3f9f7	Merge branch 'main' into signature_model_refactor	2025-10-02 09:02:34 -04:00
Mathias Vorreiter Pedersen	6eb2aad7da	Merge pull request #20569 from aschackmull/guards/uniquevalue-perf ... Guards: Improve performance for phi nodes with many incoming constant values.	2025-10-01 17:19:42 +01:00
Anders Schack-Mulligen	a1028d604c	Guards: Improve performance for uniqueValue.	2025-10-01 14:08:37 +02:00
Simon Friis Vindum	4846cf4791	Cargo: upgrade dependencies	2025-09-30 10:21:17 +02:00
github-actions[bot]	a7a4e43991	Post-release preparation for codeql-cli-2.23.2	2025-09-29 15:10:19 +00:00
github-actions[bot]	d2130a589b	Release preparation for version 2.23.2	2025-09-29 10:28:45 +00:00
Anders Schack-Mulligen	f4388c80d0	Merge pull request #20519 from aschackmull/controlflowreach/perf2 ... ControlFlow: Split only on relevant values.	2025-09-26 14:51:49 +02:00
Anders Schack-Mulligen	2c29f21004	Shared: Address review comments.	2025-09-26 13:59:53 +02:00
Anders Schack-Mulligen	109b6a1d79	ControlFlow: Split only on relevant values.	2025-09-25 15:03:35 +02:00
Simon Friis Vindum	45b84ffb31	Rust: Ensure singleton	2025-09-22 14:23:50 +02:00
Simon Friis Vindum	265e8b3623	Shared: Pass SummaryComponentStack to isSource and getSourceType	2025-09-22 14:18:54 +02:00
Anders Schack-Mulligen	d5a238768c	Shared/Cfg: Fix missing JoinBlockPredecessor.	2025-09-17 16:37:23 +02:00
Simon Friis Vindum	203788d4f1	Merge pull request #20408 from paldepind/rust/update-rust-analyzer ... Rust: Upgrade to rust-analyzer 0.0.301	2025-09-17 16:04:35 +02:00
github-actions[bot]	4e8343664f	Post-release preparation for codeql-cli-2.23.1	2025-09-17 10:13:40 +00:00
github-actions[bot]	02a1b1efcb	Release preparation for version 2.23.1	2025-09-16 14:14:42 +00:00
Asger F	78bfdfd931	Merge pull request #20390 from asgerf/post-update-consistency ... DataFlow: Permit local flow between post-update nodes	2025-09-16 13:00:29 +02:00
Mathias Vorreiter Pedersen	fa36d9f84e	Merge pull request #20438 from MathiasVP/remove-antijoin-in-shared-guards ... Shared: Remove antijoin from `Guards.qll`	2025-09-16 10:40:45 +01:00
Anders Schack-Mulligen	57e15b9a91	Merge pull request #20367 from aschackmull/shared/controlflow ... Shared/Java: Introduce a shared control flow reachability library and replace the Java Nullness implementation.	2025-09-16 10:44:44 +02:00
Mathias Vorreiter Pedersen	18c96fd7d4	Shared: Remove antijoin.	2025-09-15 17:12:23 +01:00
Anders Schack-Mulligen	acb4d9f681	Shared: Copy some qldoc from Guards.qll	2025-09-15 11:41:23 +02:00
Anders Schack-Mulligen	be39c4c0cd	Shared: Minor precision improvement.	2025-09-15 10:38:49 +02:00
Anders Schack-Mulligen	b308c5438f	Java: Add a change note, and a minor ql comment.	2025-09-15 10:14:26 +02:00
Anders Schack-Mulligen	2743fc0be1	Guards: Include ConditionalExpr in exprHasValue.	2025-09-12 15:41:17 +02:00
Anders Schack-Mulligen	4a8ffea0f6	Shared: Add control flow reachability lib.	2025-09-12 15:41:15 +02:00
Simon Friis Vindum	29ba013580	Rust: Add support for resolving methods from blanket implementations	2025-09-12 15:34:04 +02:00
Anders Schack-Mulligen	1ebdcdfa8c	Guards: Support integer ranges.	2025-09-12 13:38:20 +02:00
Asger F	511308746c	DataFlow: Permit local flow between post-update nodes	2025-09-11 14:49:56 +02:00
Simon Friis Vindum	55d022f6eb	Cargo: upgrade dependencies	2025-09-11 10:47:26 +02:00
Mathias Vorreiter Pedersen	5a9b562f19	Merge branch 'main' into source-bounded-fast-tc-in-typetracking	2025-09-10 12:14:01 +01:00
Mathias Vorreiter Pedersen	f8bdf924db	Shared: Make 'standardFlowsTo' private.	2025-09-10 11:26:36 +01:00
Mathias Vorreiter Pedersen	b7bc94b987	Update shared/typetracking/codeql/typetracking/internal/TypeTrackingImpl.qll ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2025-09-10 11:21:25 +01:00
Tom Hvitved	e3e1bcd63f	Rename Environment -> AccessEnvironment	2025-09-09 15:06:56 +02:00
Tom Hvitved	2e90499df4	Rename State -> Environment	2025-09-09 15:05:58 +02:00