Geoffrey White
14b75a968b
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-06-13 14:09:49 +01:00
Geoffrey White
087e666658
Rust: Exclude sources in macro expansions.
2025-06-11 18:48:23 +01:00
Geoffrey White
168246005c
Rust: Extend tests based on cases found in DCA.
2025-06-11 18:33:59 +01:00
Geoffrey White
b29deed919
Rust: Accept changes in an unrelated test reported by CI.
2025-06-11 18:09:22 +01:00
Geoffrey White
ecac0dbe69
Rust: Accept consistency check failures.
2025-06-11 08:52:52 +01:00
Geoffrey White
a9d5d8b2b3
Rust: Accept the new alert message in tests.
2025-06-09 19:14:14 +01:00
Geoffrey White
74ce4e8105
Update rust/ql/src/queries/security/CWE-825/AccessAfterLifetime.ql
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-06-09 19:10:39 +01:00
Geoffrey White
e7945e16cb
Rust: Accept the query in suite listings.
2025-06-09 19:06:34 +01:00
Geoffrey White
9b0ee8fb9f
Rust: Add security-severity tag and reduce precision to medium for now.
...
precis
2025-06-09 17:58:44 +01:00
Geoffrey White
b3330b5636
Rust: Allow parameter accesses as sources.
2025-06-09 17:58:42 +01:00
Geoffrey White
d3d0a533b5
Rust: Add test showing yet another spurious result.
2025-06-09 17:58:41 +01:00
Geoffrey White
858eec390d
Rust: Exclude results where the source is a reference.
2025-06-09 17:58:40 +01:00
Geoffrey White
7bae451af3
Rust: Exclude results in macro invocations.
2025-06-09 17:58:38 +01:00
Geoffrey White
26f85585fd
Rust: Add qhelp, examples, and examples as tests.
2025-06-09 17:58:37 +01:00
Geoffrey White
fe20fb403d
Rust: More robust fix for closures.
2025-06-09 16:41:31 +01:00
Geoffrey White
21b4baeb42
Rust: Have the alert message cite the variable, so it's easier to understand whether the alert is correct.
2025-06-09 10:28:25 +01:00
Geoffrey White
79f8584efb
Rust: Fix spurious results involving closures.
2025-06-09 10:25:48 +01:00
Geoffrey White
bf4ea02dd2
Rust: Implement the query.
2025-06-09 10:25:40 +01:00
Geoffrey White
526620ca41
Rust: Add some helper predicates for finding enclosing blocks.
2025-06-05 16:30:28 +01:00
Geoffrey White
96dc34e36d
Rust: Even more test cases (inspired by real world results).
2025-06-05 16:29:58 +01:00
Geoffrey White
66c1e2cace
Rust: Add test cases for implicit dereferences and more pointer/enum mixes (inspired by early real world results).
2025-06-05 10:37:30 +01:00
Geoffrey White
e2fb1d3892
Rust: Add test cases involving lifetimes + lifetime annotations.
2025-06-05 10:37:29 +01:00
Geoffrey White
ae19ecc674
Rust: Add test cases involving lifetimes + closures and async blocks.
2025-06-05 10:37:28 +01:00
Geoffrey White
43cb98ad15
Rust: Fix some warnings in the existing test.
2025-06-05 10:37:27 +01:00
Geoffrey White
8e8374b9bc
Rust: Label source annotations in the test properly.
2025-06-05 10:37:26 +01:00
Geoffrey White
da4fbfb449
Rust: Placeholder new query.
2025-06-05 10:37:25 +01:00
Owen Mansel-Chan
e7e4286233
Merge pull request #19561 from owen-mc/go/mad/bigquery-sql-injection-sink
...
Go: Add BigQuery as a sink for SQLi queries #2
2025-06-04 11:36:18 +01:00
Nicolas Will
0ef17ba231
Merge pull request #19607 from trailofbits/openssl-base-classes
...
Quantum: Add base classes for OpenSSL EVP methods
2025-06-03 19:23:21 +02:00
GrosQuildu
60d9b6e338
update docs
2025-06-03 16:27:50 +02:00
GrosQuildu
eff6eb3cc2
remove redundant if/none
2025-06-03 16:27:50 +02:00
GrosQuildu
f04fa58c8b
rm one-shot class
2025-06-03 16:27:50 +02:00
Paweł Płatek
328cf798bf
Apply docs suggestions
...
Co-authored-by: Ben Rodes <benjaminrodes@gmail.com >
2025-06-03 16:27:50 +02:00
Paweł Płatek
f103e8be96
Update cpp/ql/lib/experimental/quantum/OpenSSL/Operations/OpenSSLOperationBase.qll
...
Co-authored-by: Ben Rodes <benjaminrodes@gmail.com >
2025-06-03 16:27:50 +02:00
GrosQuildu
af8702d6a8
fix openssl outputs
2025-06-03 16:27:50 +02:00
GrosQuildu
6d1b1d1a6e
refactor EVP common classes
...
add initial work for openssl signatures
add basic C test files for ciphers and signatures
more signature classes, comments for evp base classes
more signature tests
fix super calls for input consumers
fix getOutputArtifact for tests
formatting
delete redundant test files
move algorithm methods to OpenSSLOperation
refactor ECKeyGenOperation for new EVP classes
formatting
fix getOutputArtifact
fix cipher and digest operation test results
mv openssl signature to another PR
2025-06-03 16:27:50 +02:00
Idriss Riouak
8fe2699a36
Merge pull request #19603 from github/idrissrio/comments-using
...
C++: Add support for getting literals in using declarations
2025-06-03 16:14:21 +02:00
idrissrio
10fb806601
C++: add change note for using declarations
2025-06-03 16:04:36 +02:00
idrissrio
4fd44e96ba
C++: add test for getReferencedMember
2025-06-03 16:04:35 +02:00
idrissrio
e31f722d76
C++: Add support for getting referenced literals in using declarations
2025-06-03 16:04:30 +02:00
Florin Coada
35691db373
Merge pull request #19643 from github/changedocs/2.21.4
...
Docs: Add changelog entry for CodeQL 2.21.4 release
2025-06-03 14:19:19 +01:00
Paolo Tranquilli
f48012a37c
Merge pull request #19644 from github/redsun82/update-ripunzip
...
Ripunzip: update to 2.0.2
2025-06-03 13:51:34 +02:00
Asger F
9ea4410592
Merge pull request #19587 from asgerf/js/angular2-client-side
...
JS: Mark AngularJS $location as client-side remote flow source
2025-06-03 13:40:01 +02:00
Jeroen Ketema
5e84c71b69
Merge pull request #19652 from jketema/down-typo
...
C++: Fix typo in downgrade script
2025-06-03 12:55:28 +02:00
Jeroen Ketema
41bdaa3d3c
C++: Fix typo in downgrade script
2025-06-03 12:25:46 +02:00
Arthur Baars
4de3817b16
Merge pull request #19616 from github/aibaars/rust-fix-stats
...
Rust: restrict line and file counts to include only extracted source files
2025-06-03 11:31:54 +02:00
Tom Hvitved
ae4a425608
Merge pull request #19605 from hvitved/rust/jump-to-def-extensions
...
Rust: Extend jump-to-def to include paths and `mod file;` imports
2025-06-03 10:19:28 +02:00
Tom Hvitved
3781de7b92
Rust: Reorder columns in Definitions.ql test
2025-06-03 09:53:45 +02:00
Nicolas Will
7d7ea72516
Merge pull request #19632 from bdrodes/openssl_keyagreement_instances_and_consumers
...
Quantum: Add OpenSSL key agreement instances and consumers
2025-06-02 20:55:05 +02:00
Nicolas Will
7e7dfeb40b
Merge branch 'main' into openssl_keyagreement_instances_and_consumers
2025-06-02 20:02:53 +02:00
REDMOND\brodes
8b770bfb4d
Crypto: Remove old crypto stubs, now part of experimental/stubs.
2025-06-02 14:00:30 -04:00
