Simon Friis Vindum
9d87f26145
Shared: Use strictconcat in model generator printing
2025-01-29 11:56:39 +01:00
Asger F
6d04425790
JS: Add test
2025-01-29 11:14:21 +01:00
Asger F
d66d1a79d6
JS: Also update legacy entry point used by qltest
2025-01-29 11:14:10 +01:00
Asger F
8182190120
JS: Remove trailing whitespace
2025-01-29 10:53:26 +01:00
Asger F
bf80f0798b
JS: Treat more file patterns as as tsconfig.json-like
2025-01-29 10:53:18 +01:00
Michael Nebel
ee5416f0b1
Merge pull request #18299 from michaelnebel/java/deprecateexperimental
...
Java: Deprecate experimental queries.
2025-01-29 10:41:25 +01:00
Simon Friis Vindum
70550950d8
Java, C#: Ensure variable is used in all disjuncts
2025-01-29 10:30:26 +01:00
Geoffrey White
3b5397f3b0
Rust: Model Iterator.collect.
2025-01-29 09:19:20 +00:00
Geoffrey White
de149a9623
Rust: Model Iterator.nth.
2025-01-29 09:19:19 +00:00
Geoffrey White
80e50f9b04
Rust: Make sources more accurate (iterator contents).
2025-01-29 09:19:18 +00:00
Geoffrey White
a42c0f6b5b
Merge pull request #18605 from geoffw0/expect
...
Rust: Improve models for environment sources, expect and unwrap
2025-01-29 09:11:30 +00:00
Asger F
f8694a34e5
Merge pull request #18397 from aegilops/angular-sources-sinks
...
JavaScript CodeQL library updates: new Angular sink(s)
2025-01-29 09:09:23 +01:00
Mathias Vorreiter Pedersen
bc50634472
Merge pull request #18616 from MathiasVP/18592-follow-up
...
C++: #18592 follow-up
2025-01-28 20:00:16 +00:00
Andrew Eisenberg
a4d9956c94
Merge pull request #18614 from github/aeisenberg/remove-pr-template
...
Delete .github/pull_request_template.md
2025-01-28 10:54:08 -08:00
Mathias Vorreiter Pedersen
be2777bc31
C++: Don't infer lambda calls when there is a static dispatch to a source or summary callable.
2025-01-28 18:51:31 +00:00
Chuan-kai Lin
225ce81d26
Merge branch 'main' into cklin/merge-back-2.20.3
2025-01-28 10:11:30 -08:00
Chuan-kai Lin
36d1c5602e
Merge pull request #18589 from github/cklin/merge-back-2.20.2
...
Mergeback from codeql-cli-2.20.2
2025-01-28 10:04:43 -08:00
Mathias Vorreiter Pedersen
a35ed57848
Revert "C++: Don't generate parameter nodes for bodyless parameters when there is a summary of the enclosing function."
...
This reverts commit ad80b36074
2025-01-28 17:09:45 +00:00
Mathias Vorreiter Pedersen
ff9a4d02f0
Merge pull request #18592 from MathiasVP/fix-enclosing-callable-cpp
...
C++: Don't generate dataflow nodes for functions with summaries
2025-01-28 16:57:44 +00:00
Geoffrey White
919e7978cd
Rust: Add PrettyPrintModels.ql to the test. I gather this stabilized the output MaD IDs.
2025-01-28 16:23:20 +00:00
Geoffrey White
df8a92cb62
Merge pull request #6 from hvitved/expect
...
Rust: Fix data flow through callbacks passed to library functions
2025-01-28 16:12:17 +00:00
Mathias Vorreiter Pedersen
202a5e86da
C++: Add change note.
2025-01-28 16:07:09 +00:00
Chuan-kai Lin
b9b9394259
AlertFiltering: allow multiple filtering predicates
...
This commit rephrases the documentation for the restrictAlertsTo
predicate and renames the predicate columns for clarity. The new
documentation should be equivalent to the old documentation, except
allowing for the possibility that there may be multiple alert filtering
predicates.
2025-01-28 07:51:45 -08:00
Mathias Vorreiter Pedersen
c9a3cf4bd0
C++: Accept test changes.
2025-01-28 15:48:11 +00:00
Mathias Vorreiter Pedersen
d6054c9a51
C++: Infer larger buffer sizes for non-static member variables.
2025-01-28 15:48:04 +00:00
Mathias Vorreiter Pedersen
1643a66183
C++: Add 'cpp/overflow-buffer' FP tests.
2025-01-28 15:44:53 +00:00
Andrew Eisenberg
4e7d364f4d
Delete .github/pull_request_template.md
...
The template is not useful.
2025-01-28 07:40:56 -08:00
Owen Mansel-Chan
2d76466405
Add change note
2025-01-28 15:35:28 +00:00
Owen Mansel-Chan
0ccf4cecb8
Fix XSS FPs when content type is safe
2025-01-28 15:32:30 +00:00
Arthur Baars
8d96c87abe
Rust: add UseTree::is_star
2025-01-28 16:12:25 +01:00
Simon Friis Vindum
13e0829d19
Shared: Generalize the number of columns in a generated MaD row
2025-01-28 15:36:09 +01:00
Mathias Vorreiter Pedersen
38b66e5a8e
C++: Fix a few type errors.
2025-01-28 14:08:12 +00:00
Calum Grant
cc35ec49e4
C++: Remove linker-awareness FPs
2025-01-28 14:06:38 +00:00
Calum Grant
6df8fdc233
C++: Add test for cpp/wrong-type-format-argument
2025-01-28 14:04:33 +00:00
Mathias Vorreiter Pedersen
d40322f9eb
C++: (Bugfix 3) Don't conflate summarized callables and source callables in 'nodeGetEnclosingCallable'.
2025-01-28 13:59:19 +00:00
Mathias Vorreiter Pedersen
06bc8add9d
C++: (Bugfix 2) Don't remap isParameterOf.
2025-01-28 13:59:17 +00:00
Mathias Vorreiter Pedersen
662e74924b
C++: (Bugfix 1) There should be a callable representing the source code even if there is a summarized version.
2025-01-28 13:59:16 +00:00
Mathias Vorreiter Pedersen
01d7ab93e2
C++: Add consistency check to the MaD folder.
2025-01-28 13:59:14 +00:00
Jonas Jensen
865073a75a
QL spec: result of looking through float
...
I searched for `float` everywhere in the QL language reference and
considered whether each occurrence should be generalised to cover
`BigInt`.
2025-01-28 13:58:17 +01:00
Tom Hvitved
8b82eaa633
Rust: Fix data flow through callbacks passed to library functions
2025-01-28 13:44:27 +01:00
Erik Krogh Kristensen
f0755bfb5d
Merge pull request #18601 from erik-krogh/del-deps-jan-2025
...
All: delete outdated deprecations
2025-01-28 13:31:41 +01:00
Geoffrey White
f2564c351f
Rust: Changes to other tests - mostly MaD IDs :(.
2025-01-28 09:22:30 +00:00
Geoffrey White
6337f5a08b
Merge pull request #18586 from geoffw0/floatguards
...
C++: Test and (perhaps) fix an issue with guards on floating point comparisons.
2025-01-28 09:05:13 +00:00
Asger F
16634e6dc9
Merge pull request #18540 from JarLob/bash
...
Actions: Improve bash support
2025-01-28 09:49:58 +01:00
Geoffrey White
dfd1865b96
Rust: Add some basic flow models.
2025-01-28 08:47:15 +00:00
Geoffrey White
9d42be8305
Rust: Alphabetize lang-core.model.yml.
2025-01-28 08:47:14 +00:00
Geoffrey White
c04d619a3c
Rust: Add a couple of extra data flow test cases.
2025-01-28 08:47:13 +00:00
Geoffrey White
185a23b3c6
Rust: Allow implicit flow out of content at the test sinks, so that we see our results.
2025-01-28 08:43:06 +00:00
Geoffrey White
a1980d4d08
Rust: Make sources more accurate (Option / Result contents).
2025-01-28 08:43:05 +00:00
Geoffrey White
78d0c5c529
Merge pull request #18602 from geoffw0/reqwest2
...
Rust: Additional models for Reqwest
2025-01-28 08:40:38 +00:00
