idrissrio
3d69286382
C/C++ overlay: Address review comments
2025-11-27 09:22:33 +01:00
idrissrio
6c09325838
C/C++ Overlay: Preserve entities that have at least one location in an unchanged file
...
Previously, an entity would be discarded if it had any location in a changed
file. This caused issues for entities with multiple declaration entries, such
as extern variables declared in one file and defined in another.
For example, given:
// a.c (changed) // b.c (unchanged)
extern int x; int x;
The variable `x` should be preserved because it has a location in the
unchanged file b.c, even though it also has a location in the changed file a.c.
2025-11-27 09:22:31 +01:00
idrissrio
39136f3827
C/C++ overlay: Add basic Overlay.qll file
2025-11-27 09:22:29 +01:00
Jeroen Ketema
adc13e374e
Merge pull request #20920 from jketema/feature-incorrect
...
C++: Remove incorrect tests
2025-11-26 15:01:50 +01:00
Jeroen Ketema
33c7057066
C++: Remove incorrect tests
...
`__has_feature` is not available in GCC versions before GCC 14.
Our frontend was exposing `__has_feature` when emulating earlier versions of
GCC. This will be fixed with the latest major frontend update though.
2025-11-26 13:42:43 +01:00
Simon Friis Vindum
1c8cc39a6a
Merge pull request #20906 from paldepind/rust/enum-fieldless
...
Rust: Add predicates for fieldless and unit-only enums
2025-11-26 12:52:28 +01:00
Owen Mansel-Chan
0414555e43
Merge pull request #20741 from aegilops/java-kotlin-sensitive-logging-substring-barriers
...
java: Added Java/Kotlin Sensitive Logging barriers (substrings)
2025-11-26 09:55:14 +00:00
Asger F
0245b9d609
Merge pull request #20911 from asgerf/js/next-folders
...
JS: Fix project layout detection for Next.js apps
2025-11-26 09:09:54 +01:00
Owen Mansel-Chan
f0dec21b9b
Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers
2025-11-25 23:24:58 +00:00
Joe Farebrother
85cb3e026c
Merge pull request #20762 from joefarebrother/go-insecure-cookie
...
Go: Promote non-httponly cookie query, and add insecure cookie query
2025-11-25 16:39:45 +00:00
Asger F
5b4e114955
JS: Add test
2025-11-25 16:04:30 +01:00
Asger F
a91969b7e1
JS: Change note
2025-11-25 15:58:11 +01:00
Asger F
e95b3590f0
JS: Fix project layout detection for Next.js apps
...
Some parts of the code did not handle case where 'pages' was located at 'app/pages'.
2025-11-25 15:54:45 +01:00
Joe Farebrother
cece73bdbf
Remove references to gorilla
2025-11-25 14:36:16 +00:00
Joe Farebrother
c7b16a043e
Address reviews - update comments, remove unneeded stubs
2025-11-25 14:36:00 +00:00
Joe Farebrother
c6110ed541
Split SecureCookies into query specific files
2025-11-25 14:35:47 +00:00
Joe Farebrother
5b702d963e
Refactor parts of SensitiveCookieNameConfig
2025-11-25 14:35:42 +00:00
Joe Farebrother
03d63dec2e
Address reviews - rename and update doc comments
2025-11-25 14:35:29 +00:00
Joe Farebrother
1bd5005fc1
Fix typos
2025-11-25 14:35:17 +00:00
Joe Farebrother
6282c34396
Update formatting
2025-11-25 14:35:09 +00:00
Joe Farebrother
a25861d8a3
Update integration test
2025-11-25 14:35:02 +00:00
Joe Farebrother
ed483dd5b2
Add change note
2025-11-25 14:34:57 +00:00
Joe Farebrother
d633120f4d
Update integration tests
2025-11-25 14:34:48 +00:00
Joe Farebrother
536e885f18
Remove experimental query
2025-11-25 14:34:41 +00:00
Joe Farebrother
fa30041498
Add qhelp & fix tests
2025-11-25 14:34:28 +00:00
Joe Farebrother
2b1cd846b3
Fixes and doc updates
2025-11-25 14:34:10 +00:00
Joe Farebrother
8d544e5b15
Add tests
2025-11-25 14:33:51 +00:00
Joe Farebrother
5094784a4b
Add modeling for gin
2025-11-25 14:33:43 +00:00
Joe Farebrother
74c424dc4c
Fixes, add secure query
2025-11-25 14:33:33 +00:00
Joe Farebrother
7d76619bea
Implement cookie write concepts and httponly query
2025-11-25 14:33:23 +00:00
Mathias Vorreiter Pedersen
26e5320a80
Merge pull request #20901 from MathiasVP/canonical-content
...
C++: Don't use `Field`s to define `FieldContent`
2025-11-25 13:54:19 +00:00
Jeroen Ketema
861ca7526e
Merge branch 'main' into canonical-content
2025-11-25 14:08:42 +01:00
Mathias Vorreiter Pedersen
2024f32e81
C++: Add an example with missing flow.
2025-11-25 12:36:29 +00:00
Simon Friis Vindum
4f13ae3fc9
Rust: Add qldoc
2025-11-25 13:35:14 +01:00
Simon Friis Vindum
393da4567e
Rust: Add tests for Enum
2025-11-25 13:35:12 +01:00
Simon Friis Vindum
50e8d0ca20
Rust: Add isFieldless and isUnitOnly to Enum
2025-11-25 13:35:11 +01:00
Simon Friis Vindum
b4ae58871a
Rust: Tweak existing isStruct predicates
2025-11-25 13:35:10 +01:00
Mathias Vorreiter Pedersen
47ab307410
C++: Respond to review comments.
2025-11-25 12:06:58 +00:00
Geoffrey White
1c2d8bb70e
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
...
Rust: Improve rust/access-invalid-pointer
2025-11-25 09:49:07 +00:00
Geoffrey White
daead038ab
Merge pull request #20829 from geoffw0/cert-checks
...
Rust: New Query rust/disabled-certificate-check
2025-11-24 15:21:58 +00:00
Mathias Vorreiter Pedersen
eb6b08591d
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 15:01:09 +00:00
Mathias Vorreiter Pedersen
2e53370716
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowUtil.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-24 15:01:00 +00:00
Ian Lynagh
555301cec7
Merge pull request #20874 from igfoo/igfoo/overlay
...
C++: Add the beginnings of overlay support
2025-11-24 14:11:09 +00:00
Owen Mansel-Chan
1a59839f3c
Range library recognises long literals now
2025-11-24 14:10:54 +00:00
Owen Mansel-Chan
e37336d550
No need for getUnderlyingExpr to look through casts
2025-11-24 14:10:20 +00:00
Mathias Vorreiter Pedersen
0487e0622a
C++: Accept test changes from tests that use getAQlClass.
2025-11-24 14:04:35 +00:00
Mathias Vorreiter Pedersen
ecb80cb4fc
C++: Represent field content using a column that is shared by all template instantiations.
2025-11-24 12:29:49 +00:00
Tom Hvitved
43111b8eaa
Merge pull request #20716 from hvitved/rust/path-resolution-variable-impl
...
Rust: Path resolution before variable resolution
2025-11-24 13:08:53 +01:00
Tom Hvitved
ac644b257a
Merge pull request #20848 from hvitved/rust/ranked-forex-rename
...
Rust: Use `ToIndex` instead of `FromIndex` in ranked `forex` predicates
2025-11-24 13:05:58 +01:00
Tom Hvitved
c7a0411c55
Merge pull request #20892 from hvitved/rust/builtin-mut-placeholders
...
Rust: Add placeholder declarations for `&mut` and `*mut`
2025-11-24 13:05:15 +01:00
