Dave Bartolomeo
|
613ccaac1d
|
Add change note to all v1.0.0 packs
|
2024-05-23 13:01:22 -04:00 |
|
Dave Bartolomeo
|
ffe4c8c87b
|
Update all pack versions to 1.0.0
|
2024-05-22 13:39:08 -04:00 |
|
Mathias Vorreiter Pedersen
|
3f66b635a4
|
Merge pull request #16562 from aschackmull/dataflow/update-qltest-expected
Dataflow: Fix qltests following https://github.com/github/codeql/pull/16511
|
2024-05-22 16:16:04 +01:00 |
|
Mathias Vorreiter Pedersen
|
1978922d9e
|
Merge pull request #16563 from MathiasVP/avoid-cp
C++: Avoid a CP in `cpp/alloca-in-loop`
|
2024-05-22 15:58:46 +01:00 |
|
Mathias Vorreiter Pedersen
|
769d9317c7
|
C++: Avoid a CP between 'getExpr(node)' and 'this' in 'LoopWithAlloca'.
|
2024-05-22 15:15:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
1a0d66b339
|
Merge pull request #16557 from MathiasVP/fix-unique-pointer-query-fp
C++: Fix `cpp/use-of-unique-pointer-after-lifetime-ends` FP
|
2024-05-22 15:09:54 +01:00 |
|
Anders Schack-Mulligen
|
987d5712b8
|
Python: Accept qltest .expected file changes.
|
2024-05-22 15:43:49 +02:00 |
|
Anders Schack-Mulligen
|
15a7c3faeb
|
Java: Accept qltest .expected file changes.
|
2024-05-22 15:42:40 +02:00 |
|
Anders Schack-Mulligen
|
a650499a9c
|
Java: Accept qltest .expected file changes (interesting).
|
2024-05-22 15:42:12 +02:00 |
|
Anders Schack-Mulligen
|
f931c8d836
|
Go: Accept qltest .expected file changes.
|
2024-05-22 15:39:47 +02:00 |
|
Anders Schack-Mulligen
|
8db9187698
|
Go: Accept qltest .expected file changes (interesting).
|
2024-05-22 15:38:01 +02:00 |
|
Anders Schack-Mulligen
|
e7f24318cd
|
C++: Accept qltest .expected file changes.
|
2024-05-22 15:36:30 +02:00 |
|
Anders Schack-Mulligen
|
f977a4206a
|
C++: Accept qltest .expected file changes (interesting).
|
2024-05-22 15:35:28 +02:00 |
|
Mathias Vorreiter Pedersen
|
9907f0f827
|
C++: Exclude a cast to any integral type.
|
2024-05-22 13:42:07 +01:00 |
|
Anders Schack-Mulligen
|
bbebdfea8d
|
Merge pull request #16511 from aschackmull/dataflow/configuration-provenance
Dataflow: Add provenance for configuration-specific steps.
|
2024-05-22 14:07:10 +02:00 |
|
Anders Schack-Mulligen
|
de5c69d0a1
|
Merge pull request #16551 from aschackmull/java/model-fixes
Java: Revise some jdk time-related models
|
2024-05-22 14:05:23 +02:00 |
|
Mathias Vorreiter Pedersen
|
09357e15b4
|
Merge pull request #16533 from MathiasVP/better-negation-guards-in-c
C++: Make `IRGuardCondition` handle `p` in `if(p)` and `if(!p)` better in C programs
|
2024-05-22 13:02:06 +01:00 |
|
Tom Hvitved
|
a992b67d97
|
Merge pull request #16556 from hvitved/dataflow/simplify
Data flow: Remove two redundant conjuncts
|
2024-05-22 13:58:04 +02:00 |
|
Tamás Vajk
|
c9f468578d
|
Merge pull request #16521 from tamasvajk/impr/refactor-common-csproj-prop
C#: Refactor common msbuild properties
|
2024-05-22 13:38:31 +02:00 |
|
Mathias Vorreiter Pedersen
|
00a940fd58
|
Merge pull request #16524 from catenacyber/deref-null-result
Adds another rule for null deref
|
2024-05-22 12:37:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
4b02f88089
|
C++: Add change note.
|
2024-05-22 12:37:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
af81698fa8
|
C++: Fix FP and accept test changes.
|
2024-05-22 12:34:09 +01:00 |
|
Mathias Vorreiter Pedersen
|
91f860ba4f
|
C++: Add 'cpp/use-of-unique-pointer-after-lifetime-ends' FP.
|
2024-05-22 12:33:34 +01:00 |
|
Alex Ford
|
8119a27540
|
Merge pull request #16185 from alexrford/rb/conditions-arr0
Ruby: ActiveRecord - refine `conditions` argument as an SQLi sink
|
2024-05-22 12:19:10 +01:00 |
|
Tom Hvitved
|
a006c29a00
|
Merge pull request #16481 from hvitved/treesitter/bump2
Tree-sitter: Bump to 0.22.6
|
2024-05-22 12:53:14 +02:00 |
|
Tom Hvitved
|
70cf16597b
|
Data flow: Remove two redundant conjuncts
|
2024-05-22 12:45:11 +02:00 |
|
Anders Schack-Mulligen
|
a078dcf1f2
|
Merge pull request #16550 from aschackmull/java/zipslip-number-sanitizer
Java: Improve sanitizer for java/zipslip
|
2024-05-22 12:43:44 +02:00 |
|
Mathias Vorreiter Pedersen
|
eda815789b
|
Update cpp/ql/src/experimental/Likely Bugs/DerefNullResult.ql
|
2024-05-22 11:21:04 +01:00 |
|
Anders Schack-Mulligen
|
a74cf6501a
|
Java: update qltest expected files.
|
2024-05-22 11:13:06 +02:00 |
|
Michael Nebel
|
84e412fe36
|
Merge pull request #16477 from michaelnebel/csharp/madinlinetest
C#: Inline expectation for model generator test.
|
2024-05-22 11:05:23 +02:00 |
|
Anders Schack-Mulligen
|
ba97c3623a
|
Java: Change most java.time.* df-generated taint models to neutrals.
|
2024-05-22 10:29:54 +02:00 |
|
Anders Schack-Mulligen
|
54f2316d00
|
Java: Add a neutral model.
|
2024-05-22 10:29:49 +02:00 |
|
Anders Schack-Mulligen
|
7828cb8f5a
|
Java: Add change note.
|
2024-05-22 10:27:33 +02:00 |
|
Anders Schack-Mulligen
|
d82acf5866
|
Java: Add simple type sanitization to java/zipslip.
|
2024-05-22 10:23:30 +02:00 |
|
Tamás Vajk
|
855fe12c6c
|
Merge pull request #16549 from tamasvajk/fix/tsp-diag
C#: Fix TSP diagnostic message
|
2024-05-22 10:10:26 +02:00 |
|
Anders Schack-Mulligen
|
012b861ffb
|
Ruby: Accept qltest .expected file changes.
|
2024-05-22 10:08:59 +02:00 |
|
Anders Schack-Mulligen
|
c4ae18649e
|
Ruby: Accept qltest .expected file changes (interesting).
|
2024-05-22 10:08:59 +02:00 |
|
Anders Schack-Mulligen
|
c2ec1bf561
|
Swift: Accept qltest .expected file changes.
|
2024-05-22 10:08:56 +02:00 |
|
Anders Schack-Mulligen
|
73b8314308
|
C#: Accept qltest .expected file changes.
|
2024-05-22 10:05:42 +02:00 |
|
Anders Schack-Mulligen
|
22c1d52381
|
Dataflow: Add provenance for configuration-specific steps.
|
2024-05-22 10:05:42 +02:00 |
|
Tamas Vajk
|
91aa182d53
|
C#: Fix TSP diagnostic message
|
2024-05-22 08:49:55 +02:00 |
|
Erik Krogh Kristensen
|
92df0a3d46
|
Merge pull request #16546 from erik-krogh/ts-big-file-fix
JS: fix that very large TypeScript files would crash the extractor
|
2024-05-22 07:41:58 +02:00 |
|
erik-krogh
|
a30bac14e9
|
add change-note
|
2024-05-21 22:14:39 +02:00 |
|
Philippe Antoine
|
ab4b823c2e
|
fixup unique assignment
|
2024-05-21 22:10:00 +02:00 |
|
Tom Hvitved
|
22aea47604
|
Repin
|
2024-05-21 20:59:54 +02:00 |
|
Tom Hvitved
|
a87ceed361
|
Merge pull request #16394 from hvitved/dataflow/synth-param-ret-node
Data flow: Synthesize parameter return nodes
|
2024-05-21 20:55:14 +02:00 |
|
Tom Hvitved
|
bc1283c715
|
Ruby: Reference official Tree-sitter grammar in Cargo.toml
|
2024-05-21 20:51:50 +02:00 |
|
erik-krogh
|
61c72361cd
|
move the "isFileTooLarge" earlier in the pipeline, so we're only doing it once
|
2024-05-21 20:01:24 +02:00 |
|
erik-krogh
|
241f977488
|
fix that very large TypeScript files would crash the extractor
|
2024-05-21 19:52:43 +02:00 |
|
Chuan-kai Lin
|
8a22e2283c
|
Merge pull request #16424 from github/cklin/ruby-entities-reorder
Ruby: Use entities in reorder directives
|
2024-05-21 07:32:28 -07:00 |
|