Paolo Tranquilli
|
b3c09389c8
|
Java: add missing QLDoc
The check for QLDoc comments was unfortunately broken for some time, so
we missed this.
|
2025-11-19 11:59:25 +01:00 |
|
Paolo Tranquilli
|
773b6c04a1
|
Merge branch 'main' into post-release-prep/codeql-cli-2.23.6
|
2025-11-18 13:44:21 +01:00 |
|
github-actions[bot]
|
5ee45af3aa
|
Post-release preparation for codeql-cli-2.23.6
|
2025-11-18 09:53:12 +00:00 |
|
github-actions[bot]
|
18fa6799ce
|
Release preparation for version 2.23.6
|
2025-11-17 16:38:07 +00:00 |
|
Paul Hodgkinson
|
7b25e22a37
|
Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers
|
2025-11-17 11:03:39 +00:00 |
|
aegilops
|
528c451007
|
Added change note, adjusted spacing in comment
|
2025-11-17 11:02:59 +00:00 |
|
aegilops
|
0c0fbc1457
|
Fixed sensitive logging barriers for substring to allow single-arg use
|
2025-11-14 18:12:05 +00:00 |
|
Anders Schack-Mulligen
|
4a58a0158a
|
Java: Reinstate useless null check results for fields that are no longer tracked as SSA variables.
|
2025-11-12 09:06:22 +01:00 |
|
Anders Schack-Mulligen
|
437ca58e3f
|
Java: Add change note.
|
2025-11-12 09:06:22 +01:00 |
|
Anders Schack-Mulligen
|
95ac61df42
|
Java: Drop caching of deprecated predicates.
|
2025-11-12 09:06:20 +01:00 |
|
Anders Schack-Mulligen
|
5849d85f1f
|
Java: Deprecate two more SSA classes.
|
2025-11-12 09:06:20 +01:00 |
|
Anders Schack-Mulligen
|
ee5d65eba1
|
Java: Update toString for implicit writes.
|
2025-11-12 09:06:19 +01:00 |
|
Anders Schack-Mulligen
|
f0bd0346f0
|
Java: Replace usages of SsaVariable.
|
2025-11-12 09:06:19 +01:00 |
|
Anders Schack-Mulligen
|
8594ae03df
|
Java: Replace remaining SsaImplicitInit.
|
2025-11-12 09:06:19 +01:00 |
|
Anders Schack-Mulligen
|
f4b9efcdce
|
Java: Replace getAUse with getARead.
|
2025-11-12 09:06:18 +01:00 |
|
Anders Schack-Mulligen
|
35caede859
|
Java: Replace SsaPhiNode with SsaPhiDefinition.
|
2025-11-12 09:06:18 +01:00 |
|
Anders Schack-Mulligen
|
3e43c53b9d
|
Java: Update some qldoc deprecation notices.
|
2025-11-12 09:06:17 +01:00 |
|
Anders Schack-Mulligen
|
06df5c0bd1
|
Java: Introduce SsaCapturedDefinition and replace uses of getAnUltimateDefinition.
|
2025-11-12 09:06:17 +01:00 |
|
Anders Schack-Mulligen
|
483b2d89a7
|
Java: Replace uses of SsaExplicitUpdate.
|
2025-11-12 09:06:16 +01:00 |
|
Anders Schack-Mulligen
|
07e635636c
|
Java: Replace getAFirstUse with top-level predicate.
|
2025-11-12 09:06:16 +01:00 |
|
Anders Schack-Mulligen
|
99aa0333cf
|
Java: Replace usages of isParameterDefinition.
|
2025-11-12 09:06:15 +01:00 |
|
Anders Schack-Mulligen
|
154f0770de
|
Java: Simplify instantiation of Guards and ControlFlowReachability.
|
2025-11-12 09:06:15 +01:00 |
|
Anders Schack-Mulligen
|
d5708fdd4e
|
Java: Instantiate shared SSA wrappers for main SSA.
|
2025-11-12 09:06:14 +01:00 |
|
Anders Schack-Mulligen
|
942dc2b89e
|
Java: Replace BaseSSA class wrappers with shared code.
|
2025-11-12 09:06:14 +01:00 |
|
Anders Schack-Mulligen
|
551944bacb
|
Java: Add VariableWrite class.
|
2025-11-12 09:06:13 +01:00 |
|
Anders Schack-Mulligen
|
374c77213f
|
Java: Remove getAFirstUse in BaseSSA.
|
2025-11-12 09:06:12 +01:00 |
|
Anders Schack-Mulligen
|
f2181ece4f
|
Java: Get rid of untracked SSA definitions.
|
2025-11-12 09:06:11 +01:00 |
|
Anders Schack-Mulligen
|
c4f0868844
|
Java: Move SSA entry defs to index -1.
|
2025-11-12 09:06:11 +01:00 |
|
github-actions[bot]
|
4014df9a6e
|
Post-release preparation for codeql-cli-2.23.4
|
2025-11-04 17:57:52 +00:00 |
|
github-actions[bot]
|
64fcdd1f2f
|
Release preparation for version 2.23.4
|
2025-11-03 14:52:23 +00:00 |
|
aegilops
|
d1eceee9d4
|
Fixed format/docs issues
|
2025-10-31 18:19:27 +00:00 |
|
aegilops
|
26087f6060
|
Added java-kotlin Sensitive Logging barriers (substrings)
|
2025-10-31 17:56:04 +00:00 |
|
yoff
|
4461be180a
|
Merge pull request #19539 from yoff/java/conflicting-access
|
2025-10-28 20:37:44 +01:00 |
|
Nora Dimitrijević
|
a0975e7e19
|
Constrain location overrides to actual sources/sinks
|
2025-10-28 09:42:20 +01:00 |
|
Nora Dimitrijević
|
f24a6f64ab
|
Java/WebviewDebugEnabledQuery
java/ql/src/Security/CWE/CWE-489/WebviewDebuggingEnabled.ql
|
2025-10-28 09:40:06 +01:00 |
|
Nora Dimitrijević
|
518c0818a4
|
Java/UnsafeDeserializationQuery
java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.ql
|
2025-10-28 09:40:03 +01:00 |
|
Nora Dimitrijević
|
4439322e88
|
Java/TempDirLocalInformationDisclosureQuery
java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql
|
2025-10-28 09:40:01 +01:00 |
|
Nora Dimitrijević
|
2a889f4f98
|
Java/TaintedPermissionsCheckQuery
java/ql/src/Security/CWE/CWE-807/TaintedPermissionsCheck.ql
|
2025-10-28 09:39:58 +01:00 |
|
Nora Dimitrijević
|
697f428eae
|
Java/TaintedEnvironmentVariableQuery
java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql
|
2025-10-28 09:39:55 +01:00 |
|
Nora Dimitrijević
|
72a97773b1
|
Java/NumericCastTaintedQuery
java/ql/src/Security/CWE/CWE-681/NumericCastTainted.ql
|
2025-10-28 09:39:52 +01:00 |
|
Nora Dimitrijević
|
247ae1d23c
|
Java/MaybeBrokenCryptoAlgorithmQuery
java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
|
2025-10-28 09:39:50 +01:00 |
|
Nora Dimitrijević
|
eebff9c282
|
Java/ImproperValidationOfArrayConstructionFlow
java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstruction.ql
|
2025-10-28 09:39:47 +01:00 |
|
Nora Dimitrijević
|
9eeeec336e
|
Java/ImproperValidationOfArrayConstructionCodeSpecifiedQuery
java/ql/src/Security/CWE/CWE-129/ImproperValidationOfArrayConstructionCodeSpecified.ql
|
2025-10-28 09:39:45 +01:00 |
|
Nora Dimitrijević
|
dc1dff98b0
|
Java/ConditionalBypass
java/ql/src/Security/CWE/CWE-807/ConditionalBypass.ql
|
2025-10-28 09:39:42 +01:00 |
|
Nora Dimitrijević
|
4482e831d7
|
Java/CommandLineQuery
85a4dd0325/java/ql/src/Security/CWE/CWE-078/ExecTainted.ql
857b51be58/java/ql/src/Security/CWE/CWE-078/ExecUnescaped.ql
b6e56f26c7/java/ql/src/experimental/Security/CWE/CWE-078/ExecTainted.ql
|
2025-10-28 09:39:39 +01:00 |
|
Nora Dimitrijević
|
b023880a0a
|
Java/BrokenCryptoAlgorithmQuery
java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.ql
|
2025-10-28 09:39:37 +01:00 |
|
Nora Dimitrijević
|
1129230e10
|
Java/ArithmeticUncontrolledQuery
java/ql/src/Security/CWE/CWE-190/ArithmeticUncontrolled.ql
|
2025-10-28 09:39:34 +01:00 |
|
Nora Dimitrijević
|
a228936c63
|
Java/ArithmeticTainted
java/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql
|
2025-10-28 09:39:31 +01:00 |
|
Nora Dimitrijević
|
913550f408
|
Java/ArbitraryApkInstallationQuery
java/ql/src/Security/CWE/CWE-094/ArbitraryApkInstallation.ql
|
2025-10-28 09:39:29 +01:00 |
|
Alexander Eyers-Taylor
|
227e1fcbde
|
Merge pull request #20598 from github/alexet/overlay-query-libraries
Java: Make some query libraries local.
|
2025-10-27 17:52:27 +00:00 |
|