Jonas Jensen
5bebae9abf
Java: Diff-informed ImproperIntentVerification.ql
2024-12-20 13:01:07 +01:00
Jonas Jensen
e799bff744
Java: Diff-informed TaintedPermissionsCheck.ql
2024-12-20 13:01:06 +01:00
Jonas Jensen
011d667f06
Java: Diff-informed PredictableSeed.ql
2024-12-20 13:01:05 +01:00
Jonas Jensen
a928a0d2b5
Java: Diff-informed BrokenCryptoAlgorithm.ql
2024-12-20 13:01:04 +01:00
Jonas Jensen
fea260bd55
Java: Diff-informed UnsafeHostnameVerification.ql
...
This commit also adds a test case that would fail under `codeql test run
--check-diff-informed` if not for the override of
`getASelectedSourceLocation`. There was no existing such test since all
the existing tests used anonymous classes whose location was on the same
line as the source.
2024-12-20 12:58:59 +01:00
Calum Grant
d5571c5f68
Merge pull request #18309 from github/calumgrant/bmn/return-stack-allocated-memory
...
C++: Fix FPs to cpp/return-stack-allocated-memory
2024-12-20 10:54:24 +00:00
Florin Coada
82fdd1125c
Update docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.0.rst
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-12-20 12:50:05 +02:00
Jeroen Ketema
dd021fdcbf
Merge pull request #18339 from jketema/typo
...
C++: Remove duplicate word from change note
2024-12-20 11:50:01 +01:00
Jeroen Ketema
51f625b90c
C++: Allow sizeof pack in sizeof_bind
2024-12-20 11:49:37 +01:00
Florin Coada
5c5049e5fd
Fix typo in CodeQL changelog entry
2024-12-20 12:35:40 +02:00
Jonas Jensen
8224ef6929
Java: Diff-informed InsecureTrustManager.ql
2024-12-20 11:22:58 +01:00
Jonas Jensen
eac1a4c002
Java: Diff-informed SqlTainted.ql
2024-12-20 11:22:57 +01:00
Jonas Jensen
2561cec80c
Java: Diff-informed CommandLineQuery
2024-12-20 11:22:56 +01:00
Jonas Jensen
40529d1e51
DataFlow: Add the concept of selected locations
...
This extension allows queries to be diff-informed even when the elements
they select are different from the sources and sinks found by data flow.
2024-12-20 11:22:55 +01:00
Florin Coada
66f3b718a6
Update docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.0.rst
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-12-20 12:19:53 +02:00
Jeroen Ketema
757d5d6e6d
C++: Remove duplicate word from change note
2024-12-20 11:18:26 +01:00
Paolo Tranquilli
8e28d99a62
QL for QL: accept test changes
2024-12-20 10:42:19 +01:00
Florin Coada
3bd8d7c0bb
Update CodeQL changelog for versions 2.19.4 and 2.20.0
2024-12-20 11:37:33 +02:00
Calum Grant
3193fe856a
C++: Update comments
2024-12-20 09:11:58 +00:00
Jeroen Ketema
6f9968d2c2
C++: Update test after extractor changes
2024-12-20 08:27:39 +01:00
Edward Minnix III
453913cd9f
Remove Parameter from this PR
2024-12-19 23:11:07 -05:00
Dave Bartolomeo
772b972e7d
Merge pull request #18321 from github/dbartol/actions-merge
...
Migrate Actions queries to public repo
2024-12-19 16:04:49 -05:00
Jeroen Ketema
6200a1d5b9
C++: Simplify some semmle-extractor-options in tests
2024-12-19 21:46:33 +01:00
Rasmus Wriedt Larsen
22b35f5fe7
Merge pull request #18318 from RasmusWL/fastapi-request
...
Python: Model FastAPI requests
2024-12-19 19:52:17 +01:00
Dave Bartolomeo
30dbc3b172
Merge pull request #18332 from github/dbartol/actions-changenote
...
Add `actions` as a supported language for change notes
2024-12-19 12:23:52 -05:00
Dave Bartolomeo
2b4161e16c
Add actions as a supported language for change notes
2024-12-19 12:15:00 -05:00
Paolo Tranquilli
42422632ba
Merge pull request #18331 from github/redsun82/rust-paths-exclude
...
Rust: support `paths` and `paths-ignore` from the code scanning configuration file
2024-12-19 17:59:49 +01:00
Paolo Tranquilli
73a5a3f7ee
Rust: support paths and paths-ignore from the code scanning configuration file
...
This is done by simply adding the autobuilder from the shared
tree-sitter extractor library.
2024-12-19 17:37:56 +01:00
Calum Grant
7abe7003dc
Update cpp/ql/test/query-tests/Likely Bugs/Memory Management/ReturnStackAllocatedMemory/test.cpp
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-12-19 16:01:05 +00:00
Dave Bartolomeo
e4bce701a0
Add change notes
2024-12-19 10:53:23 -05:00
Jeroen Ketema
84b60d2676
Merge pull request #18320 from jketema/template-parameters
...
C++: Support non-type template parameters
2024-12-19 16:21:49 +01:00
Dave Bartolomeo
bfa105fc0d
Fix typo
2024-12-19 10:00:20 -05:00
Paolo Tranquilli
2ff0394a10
Rust: add --no-deps to clippy checks
2024-12-19 15:58:45 +01:00
Paolo Tranquilli
2e150772fd
Merge branch 'main' into redsun82/fix-cargo-fmt-checks
2024-12-19 15:52:36 +01:00
Dave Bartolomeo
8b132274b5
Revert "Accept DB consistency check for now"
...
This reverts commit dba6f0bb9f
2024-12-19 09:47:42 -05:00
Dave Bartolomeo
3e2fe46993
Merge remote-tracking branch 'origin/main' into dbartol/actions-merge
2024-12-19 09:34:29 -05:00
Calum Grant
e067ac92a7
C++: Address review comments
2024-12-19 14:27:13 +00:00
Asger F
942ba189f7
JS: Minor test output change in nodes/edges
...
I suspect this is due to some fixes in the DeduplicatePathGraph module
2024-12-19 15:25:49 +01:00
Asger F
f8dc7eb25b
JS: Update output from tests that changed on main
2024-12-19 15:25:47 +01:00
Asger F
4a6030c592
JS: Update expected with some absent result sets
2024-12-19 15:25:46 +01:00
Asger F
cd6ebb103e
JS: Make test not assume implicit through for maps
2024-12-19 15:25:45 +01:00
Asger F
dc2f39c399
JS: Add model of Map#groupBy
2024-12-19 15:25:43 +01:00
Asger F
de5e6ddeed
JS: Update with changes in TaintTracking test
2024-12-19 15:25:42 +01:00
Asger F
c204527c08
JS: Update Array test output (new tests added on main)
2024-12-19 15:25:41 +01:00
Asger F
33e8bd5032
JS: Update testUtilities import
2024-12-19 15:25:39 +01:00
Ed Minnix
d0c9ba19d7
Fix test results
2024-12-19 09:02:06 -05:00
Ed Minnix
ae6752adf7
Update tests
2024-12-19 09:02:05 -05:00
Ed Minnix
84936c0fc0
Change note
2024-12-19 09:02:02 -05:00
Ed Minnix
b618ae06e8
Model Blazor attributes as marking sources
...
The attributes
- `[Parameter]`
- `[SupplyParameterFromFormAttribute]`
- `[SupplyParameterFromQueryAttribute]`
Tell Blazor to initialize the variables with parameters defined by the
route/form values/query parameters/etc. Values derived from the URI or
form should be classified as `remote` flow sources.
2024-12-19 09:01:56 -05:00
Edward Minnix III
90dbc34c16
Merge pull request #18323 from egregius313/egregius313/csharp/blazor/navigation-manager/typo
...
Fix typo in `NavigationManager` name in models
2024-12-19 09:00:17 -05:00
