Florin Coada
22ca2273cb
Add changelog entry for CodeQL CLI version 2.23.6
2025-11-27 09:51:30 +00:00
Geoffrey White
e8cb6b8f54
Rust: Fix a couple of comments.
2025-11-27 09:24:34 +00:00
Asger F
d8027fb6d6
Merge pull request #20885 from asgerf/js/local-module-exports
...
JS: Split module exports into a local and global variant
2025-11-27 10:05:22 +01:00
Tom Hvitved
f0cac321b2
Merge pull request #20236 from hvitved/rust/type-inference-async-dyn-future
...
Rust: Model `async` return types as `dyn Future`
2025-11-27 09:41:02 +01:00
Simon Friis Vindum
d88cfe98f8
Rust: Implement toString for struct fields and visibility
2025-11-27 09:35:31 +01:00
idrissrio
3d69286382
C/C++ overlay: Address review comments
2025-11-27 09:22:33 +01:00
idrissrio
6c09325838
C/C++ Overlay: Preserve entities that have at least one location in an unchanged file
...
Previously, an entity would be discarded if it had any location in a changed
file. This caused issues for entities with multiple declaration entries, such
as extern variables declared in one file and defined in another.
For example, given:
// a.c (changed) // b.c (unchanged)
extern int x; int x;
The variable `x` should be preserved because it has a location in the
unchanged file b.c, even though it also has a location in the changed file a.c.
2025-11-27 09:22:31 +01:00
idrissrio
39136f3827
C/C++ overlay: Add basic Overlay.qll file
2025-11-27 09:22:29 +01:00
Simon Friis Vindum
8b32679475
Merge pull request #20921 from paldepind/rust/barrier-tweaks
...
Rust: Tweaks and improvements to data flow barriers
2025-11-27 08:56:04 +01:00
Mingjie Shen
25a46a82ba
C++: Use appropriate sizeof in CWE-119 memcpy tests
...
Signed-off-by: Mingjie Shen <shen497@purdue.edu >
2025-11-27 05:15:51 +00:00
Eliav2
69ba764e9d
Merge branch 'main' into 20823-globalVarRef-document-defaultView
2025-11-26 23:26:26 +02:00
Tom Hvitved
a9b58b8db3
Rust: Model async return types as dyn Future
2025-11-26 21:03:03 +01:00
Jeroen Ketema
982950ffc6
Merge pull request #20923 from github/felicity-fix-query-names
...
Remove trailing periods from @name metadata in query files
2025-11-26 17:08:02 +01:00
Owen Mansel-Chan
38cb6e5a00
Delete dummy.ql for now
...
This is needed because a PR to another repo is needed to update the
location of the consistency queries, and until that PR is merged we
don't want to runny dummy.ql as a consistency query. After that PR is
merged we should reinstate these files so that consistency tests are
run on this test folder.
2025-11-26 15:03:09 +00:00
Jeroen Ketema
4a8fbba521
Merge branch 'main' into felicity-fix-query-names
2025-11-26 16:01:34 +01:00
Simon Friis Vindum
329df20e55
Rust: Fix typo
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-26 15:48:34 +01:00
Owen Mansel-Chan
6fbed9037f
Be more specific to avoid CP
2025-11-26 14:39:58 +00:00
Owen Mansel-Chan
9481fc9451
Add QLDoc explaining reverseRead
2025-11-26 14:30:23 +00:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
Mathias Vorreiter Pedersen
d869b00672
Merge pull request #20899 from MathiasVP/ignore-non-type-template-params
...
C++: Ignore non-type template parameters when matching signatures in MaD
2025-11-26 14:26:45 +00:00
Jeroen Ketema
adc13e374e
Merge pull request #20920 from jketema/feature-incorrect
...
C++: Remove incorrect tests
2025-11-26 15:01:50 +01:00
Simon Friis Vindum
815af34c66
Rust: Add additional barriers to queries
2025-11-26 14:54:11 +01:00
Simon Friis Vindum
081ab499c2
Rust: Add barrier for fieldless enum types
2025-11-26 14:46:58 +01:00
Simon Friis Vindum
6050a0e1a8
Rust: Split boolean from number barriers
2025-11-26 14:45:31 +01:00
yoff
2c835dc33c
python: add changenote
2025-11-26 14:03:15 +01:00
yoff
24e55c0691
python: update MAD expectations
2025-11-26 14:00:22 +01:00
Jeroen Ketema
33c7057066
C++: Remove incorrect tests
...
`__has_feature` is not available in GCC versions before GCC 14.
Our frontend was exposing `__has_feature` when emulating earlier versions of
GCC. This will be fixed with the latest major frontend update though.
2025-11-26 13:42:43 +01:00
yoff
ebe29dd143
python: model urllib.ParseResult
2025-11-26 13:36:05 +01:00
yoff
a878bc61e1
python: add model for urllib.urlparse
2025-11-26 13:32:54 +01:00
yoff
d59f721341
python: add test for header injection
2025-11-26 13:32:54 +01:00
Simon Friis Vindum
1c8cc39a6a
Merge pull request #20906 from paldepind/rust/enum-fieldless
...
Rust: Add predicates for fieldless and unit-only enums
2025-11-26 12:52:28 +01:00
Owen Mansel-Chan
1d0fcd77d8
Add change note
2025-11-26 11:24:04 +00:00
Owen Mansel-Chan
eca9ec59c4
Add exclusions to data flow consistency checks
2025-11-26 11:12:44 +00:00
Owen Mansel-Chan
a2e68487ea
Shared: allow exclusions to localFlowIsLocal
2025-11-26 11:00:30 +00:00
Owen Mansel-Chan
916fe69e65
Accept data flow consistency test results
2025-11-26 11:00:25 +00:00
Tom Hvitved
7e5131891c
Rust: Special-case Self::AssocType in path resolution
2025-11-26 11:50:35 +01:00
Asger F
dbf14c190a
Factor XML discard predicates into OverlayXml.qll
2025-11-26 11:48:32 +01:00
Owen Mansel-Chan
7cd04e346e
Move existing consistency query to new place
2025-11-26 10:44:59 +00:00
Owen Mansel-Chan
fba53b58f8
Run data flow consistency tests in CI
2025-11-26 10:44:56 +00:00
Asger F
b33af5b377
JS: Fix typo
2025-11-26 11:40:41 +01:00
Tom Hvitved
0d46dc0461
Rust: More path resolution tests
2025-11-26 11:33:17 +01:00
Owen Mansel-Chan
0414555e43
Merge pull request #20741 from aegilops/java-kotlin-sensitive-logging-substring-barriers
...
java: Added Java/Kotlin Sensitive Logging barriers (substrings)
2025-11-26 09:55:14 +00:00
Asger F
0245b9d609
Merge pull request #20911 from asgerf/js/next-folders
...
JS: Fix project layout detection for Next.js apps
2025-11-26 09:09:54 +01:00
Simon Friis Vindum
7278bc75ca
Rust: Remove unused function in XSS tests
2025-11-26 08:57:47 +01:00
Owen Mansel-Chan
f0dec21b9b
Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers
2025-11-25 23:24:58 +00:00
Joe Farebrother
85cb3e026c
Merge pull request #20762 from joefarebrother/go-insecure-cookie
...
Go: Promote non-httponly cookie query, and add insecure cookie query
2025-11-25 16:39:45 +00:00
Mathias Vorreiter Pedersen
295dc6971f
Merge branch 'main' into ignore-non-type-template-params
2025-11-25 15:37:25 +00:00
Simon Friis Vindum
7c7663629e
Rust: Fix typo in change note for XSS query
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-11-25 16:13:11 +01:00
Asger F
5b4e114955
JS: Add test
2025-11-25 16:04:30 +01:00
Mathias Vorreiter Pedersen
73b6fa69a9
C++: Fix Code Scanning alert.
2025-11-25 15:03:26 +00:00
