Jeroen Ketema
09f930f4e8
C++: Generate initialization function for each NSDMI
2026-03-24 15:33:25 +01:00
Jeroen Ketema
68039ecd68
C++: Add NSDMI dataflow test
2026-03-24 15:33:24 +01:00
Jeroen Ketema
59c27a2196
C++: Add NSDMI tests
2026-03-24 15:33:22 +01:00
Jeroen Ketema
07603a835a
C++: Rename CallOrAllocationExpr to something more generic
2026-03-24 15:33:20 +01:00
Jeroen Ketema
5aabd90eff
C++: Add direct and default initialization subclasses for ConstructorFieldInit
2026-03-24 15:32:58 +01:00
Mathias Vorreiter Pedersen
8cebf510dc
C++: Reword the change note from #21458 .
2026-03-23 13:45:46 +00:00
Mathias Vorreiter Pedersen
b5723bd75d
Merge branch 'main' into more-public-dataflow-apis
2026-03-23 13:43:01 +00:00
Mathias Vorreiter Pedersen
fef314e27f
C++: Add change note.
2026-03-23 13:39:15 +00:00
Mathias Vorreiter Pedersen
1363c54a9f
C++: Add 'asIndirectInstruction' as a public predicate.
2026-03-23 13:28:33 +00:00
Mathias Vorreiter Pedersen
09caeca7e9
C++: Move parameter indirection nodes into the public API.
2026-03-23 13:27:20 +00:00
Jeroen Ketema
ee00b98476
Update cpp/ql/lib/change-notes/2026-03-20-add-indirect-uninitialized-node.md
2026-03-23 10:44:21 +01:00
Jeongsoo Lee
d4fef1c68e
Merge branch 'main' into jeongsoolee09/add-getIndirectionIndex
2026-03-20 10:01:05 -07:00
Jeongsoo Lee
d2fcced5ad
Add a feature change note
2026-03-20 09:59:12 -07:00
Simon Friis Vindum
f6c81ff30a
Merge pull request #21512 from paldepind/cpp/extraction-information
...
C++: Add `cpp/extraction-information` query
2026-03-20 14:12:59 +01:00
Óscar San José
ec726f5941
Merge pull request #21486 from github/post-release-prep/codeql-cli-2.25.0
...
Post-release preparation for codeql-cli-2.25.0
2026-03-20 11:23:20 +01:00
Geoffrey White
208ae7aa01
Merge pull request #21514 from geoffw0/suspicioussizeof
...
C++: Fix an issue with cpp/suspicious-add-sizeof in BMN databases
2026-03-20 09:41:39 +00:00
Simon Friis Vindum
bc518c08c7
C++: Fix grammar in comment
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-20 09:19:59 +01:00
Kaixuan Li
6452cc549f
Merge branch 'github:main' into fix/format-string-fp-in-printf-impl
2026-03-20 10:15:56 +08:00
Jeongsoo Lee
356905ba36
Merge branch 'jeongsoolee09/add-getIndirectionIndex' of github.com:github/codeql into jeongsoolee09/add-getIndirectionIndex
2026-03-19 15:51:37 -07:00
Jeongsoo Lee
dc291ffad7
Address code review
2026-03-19 15:51:00 -07:00
Jeongsoo Lee
d191d09c55
Apply suggestions from code review
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2026-03-19 15:48:47 -07:00
Geoffrey White
9c6276ef48
C++: Change note.
2026-03-19 16:24:35 +00:00
Óscar San José
d30aab47ea
Merge branch 'main' into post-release-prep/codeql-cli-2.25.0
2026-03-19 16:57:20 +01:00
Geoffrey White
07db9cf3c4
Merge pull request #21421 from geoffw0/wrongtypeformat
...
C++: Add some test cases for cpp/wrong-type-format-argument
2026-03-19 14:25:33 +00:00
Geoffrey White
92c9a8e146
Update cpp/ql/test/query-tests/Security/CWE/CWE-468/semmle/SuspiciousAddWithSizeof/buildless.cpp
2026-03-19 13:51:03 +00:00
Geoffrey White
21cb11ea5d
C++: Change note.
2026-03-19 13:29:41 +00:00
Simon Friis Vindum
4c525ce7ab
C++: Add cpp/extraction-information query
2026-03-19 14:29:31 +01:00
Geoffrey White
0f794b57ed
C++: Fix the issue.
2026-03-19 13:16:16 +00:00
Geoffrey White
2e987f8d78
C++: Add test cases emulating cpp/suspicious-add-sizeof in buildless mode.
2026-03-19 13:00:58 +00:00
Óscar San José
2139b97628
Merge branch 'main' into post-release-prep/codeql-cli-2.25.0
2026-03-19 13:07:00 +01:00
Kaixuan Li
1ddf81c58c
Merge branch 'main' into fix/format-string-fp-in-printf-impl
2026-03-19 14:36:50 +08:00
Kaixuan Li
c155394f25
the [] syntax directly
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-03-19 14:36:28 +08:00
Kaixuan Li
2c76e6e637
use American spellings in documentation
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-03-19 14:35:45 +08:00
Owen Mansel-Chan
5b17d8cf76
Merge pull request #21472 from owen-mc/adjust-severity/xss-log-injection
...
Adjust `@security-severity` metadata for XSS and log injection queries
2026-03-18 16:51:14 +00:00
Geoffrey White
34f405f465
C++: Update test annotations.
2026-03-18 13:13:22 +00:00
MarkLee131
ff48ac5434
C++: exclude printf implementation internals from format string sinks
2026-03-17 22:45:38 +08:00
Jeongsoo Lee
3f9ad14473
Factor out common code into an abstract private class
2026-03-16 14:11:34 -07:00
Geoffrey White
9cb1c89a02
C++: Change note.
2026-03-16 19:11:27 +00:00
Geoffrey White
a57f803b37
C++: Address false positive results.
2026-03-16 19:03:10 +00:00
Geoffrey White
1130870168
Merge remote-tracking branch 'upstream/main' into wrongtypeformat
2026-03-16 19:03:02 +00:00
Geoffrey White
8ddfee9971
Merge pull request #21457 from geoffw0/intmultlong
...
C++: Fix BMN issue with cpp/integer-multiplication-cast-to-long.
2026-03-16 19:02:16 +00:00
Geoffrey White
8df4dfb585
C++: Autoformat.
2026-03-16 16:40:27 +00:00
Geoffrey White
2f7526d70b
C++: Clarify doc comment and make build-mode: nonereferences more consistent.
2026-03-16 16:38:59 +00:00
Geoffrey White
eeb09ae389
C++: Fix typo.
2026-03-16 16:12:30 +00:00
Geoffrey White
3c4a386f3f
C++: Clarify two cases in the test.
2026-03-16 16:08:35 +00:00
github-actions[bot]
e3dbf5b022
Post-release preparation for codeql-cli-2.25.0
2026-03-16 16:03:22 +00:00
github-actions[bot]
d6055754b6
Release preparation for version 2.25.0
2026-03-16 12:15:34 +00:00
Jeongsoo Lee
d3066af2e2
Create IndirectUninitializedNode and add a bridge from it to LocalVariable
...
This way the changes do not alter the meaning of `UninitializedNode`.
In the meantime, the code still provides a specialized `Node` type
`IndirectUninitializedNode` to access the nodes behind levels of
indirection.
2026-03-13 11:39:57 -07:00
Jeongsoo Lee
8c03136c25
Revert "Expose the indirection index"
...
This reverts commit 6c792e69b3
2026-03-13 10:11:40 -07:00
Owen Mansel-Chan
52809133f5
Add change notes
2026-03-13 11:10:43 +00:00
