Asger F
|
6e744093e2
|
Merge pull request #12398 from github/post-release-prep/codeql-cli-2.12.4
Post-release preparation for codeql-cli-2.12.4
|
2023-03-09 15:38:21 +01:00 |
|
Paolo Tranquilli
|
c4fd39ec3f
|
C++: fix example code for FilePermissions.qll
|
2023-03-07 13:50:20 +01:00 |
|
Jeroen Ketema
|
3a4c0a2aae
|
Merge pull request #12389 from jketema/more-deprecated
C++: Add `deprecated` to predicates that are deprecated according to the QLDoc
|
2023-03-07 11:21:43 +01:00 |
|
Anders Schack-Mulligen
|
5c7f2ac7f7
|
Merge pull request #12186 from aschackmull/dataflow/refactor-configuration
Data flow: Refactor configuration
|
2023-03-06 13:38:59 +01:00 |
|
github-actions[bot]
|
af61b45785
|
Post-release preparation for codeql-cli-2.12.4
|
2023-03-04 14:16:55 +00:00 |
|
Jeroen Ketema
|
aa00424b75
|
C++: Fix experimental query that uses the deprecated freeCall predicate
|
2023-03-03 17:53:49 +01:00 |
|
Mathias Vorreiter Pedersen
|
907e6299a4
|
C++: Convert 'ExecTainted' to use the new refactored dataflow library.
|
2023-03-03 14:41:29 +00:00 |
|
github-actions[bot]
|
462da63970
|
Release preparation for version 2.12.4
|
2023-03-03 14:11:51 +00:00 |
|
Geoffrey White
|
7b596f4928
|
Merge pull request #10431 from ihsinme/ihsinme-patch-111
CPP: Add query for CWE-369: Divide By Zero.
|
2023-03-03 10:42:04 +00:00 |
|
ihsinme
|
49af5ec536
|
Update DivideByZeroUsingReturnValue.ql
|
2023-02-19 21:41:28 +03:00 |
|
github-actions[bot]
|
8eb8daa4d4
|
Post-release preparation for codeql-cli-2.12.3
|
2023-02-16 17:23:25 +00:00 |
|
github-actions[bot]
|
b0315119c6
|
Release preparation for version 2.12.3
|
2023-02-16 11:49:06 +00:00 |
|
Jeroen Ketema
|
1c35109675
|
C++: Add experimental tag to experimental query
|
2023-02-06 20:31:26 +01:00 |
|
Jeroen Ketema
|
868f07bc91
|
Merge branch 'main' into ihsinme-patch-102
|
2023-02-06 20:16:53 +01:00 |
|
ihsinme
|
065ca3c227
|
Update DivideByZeroUsingReturnValue.ql
|
2023-02-06 19:42:46 +03:00 |
|
github-actions[bot]
|
faf21f3edb
|
Post-release preparation for codeql-cli-2.12.2
|
2023-02-02 23:01:04 +00:00 |
|
github-actions[bot]
|
a4fa984792
|
Release preparation for version 2.12.2
|
2023-02-02 14:34:55 +00:00 |
|
Nora Dimitrijević
|
1df0be3ca2
|
C++: Fix join order in cpp/missing-check-scanf
The issues were:
* `revFlow`: `revFlow` joins `fwdFlow` on `vn`.
* `Node.getASuccessor()`: `MkNode` self-join on `vn`.
* `hasFlow/5`: `MkNode` self-join on `vn`.
|
2023-02-01 16:29:43 +01:00 |
|
github-actions[bot]
|
b62cb6ba84
|
Post-release preparation for codeql-cli-2.12.1
|
2023-01-20 19:49:56 +00:00 |
|
github-actions[bot]
|
005b3e4a47
|
Release preparation for version 2.12.1
|
2023-01-20 12:03:19 +00:00 |
|
Geoffrey White
|
54b3262d9c
|
Merge pull request #11891 from geoffw0/authbypass
C++: Fix issue with cpp/user-controlled-bypass
|
2023-01-17 15:43:08 +00:00 |
|
Geoffrey White
|
d628cc5ab8
|
Update cpp/ql/src/Security/CWE/CWE-290/AuthenticationBypass.ql
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2023-01-17 14:37:19 +00:00 |
|
Geoffrey White
|
1a416884d4
|
C++: Do something similar with the other three cases.
|
2023-01-14 00:09:01 +00:00 |
|
Geoffrey White
|
316117f5c9
|
C++: Reduce number of regexps.
|
2023-01-13 18:50:41 +00:00 |
|
Geoffrey White
|
2f09f0e2c1
|
C++: Turn the huge list into a predicate.
|
2023-01-13 18:47:18 +00:00 |
|
Mathias Vorreiter Pedersen
|
6e6f2115c0
|
Merge pull request #11857 from MathiasVP/speedup-missing-check-scanf
C++: Speedup `cpp/missing-check-scanf`
|
2023-01-13 16:11:16 +00:00 |
|
Mathias Vorreiter Pedersen
|
59072f9e81
|
C++: Improve QLDoc.
|
2023-01-13 11:01:23 +00:00 |
|
Mathias Vorreiter Pedersen
|
dd8bead21a
|
C++: Fix spurious backticks.
|
2023-01-13 10:57:44 +00:00 |
|
Mathias Vorreiter Pedersen
|
1ae52b6c7e
|
C++: Speedup 'MissingCheckScanf'.
|
2023-01-12 10:13:02 +00:00 |
|
Pierre
|
c3116b3f0f
|
Merge branch 'main' into turbo/experimental/combined
|
2023-01-11 18:02:55 +01:00 |
|
Tony Torralba
|
3fcc99e5cb
|
C++: Remove omittable exists variables
|
2023-01-10 13:36:01 +01:00 |
|
Geoffrey White
|
f3914ffe25
|
Merge pull request #11823 from geoffw0/heuristicalloc
C++: Use HeuristicAllocationExpr in more queries
|
2023-01-06 13:13:14 +00:00 |
|
Geoffrey White
|
bb451f3911
|
C++: Fix result duplication.
|
2023-01-06 11:05:47 +00:00 |
|
github-actions[bot]
|
cdb8f67601
|
Post-release preparation for codeql-cli-2.12.0
|
2023-01-06 10:36:34 +00:00 |
|
Nick Rolfe
|
6e07076151
|
tweak wording in 2.12 release notes
|
2023-01-05 16:46:44 +00:00 |
|
github-actions[bot]
|
b6a8193785
|
Release preparation for version 2.12.0
|
2023-01-05 16:32:14 +00:00 |
|
Geoffrey White
|
b3e82498fa
|
C++: Change note.
|
2023-01-05 15:06:40 +00:00 |
|
Geoffrey White
|
3b31da8a62
|
C++: Update the experimental query as well.
|
2023-01-05 12:48:17 +00:00 |
|
Geoffrey White
|
823c767aac
|
C++: Undo changes to SizeCheck.ql, SizeCheck2.ql.
|
2023-01-05 12:34:12 +00:00 |
|
Geoffrey White
|
2023abdc60
|
C++: Update the queries.
|
2023-01-05 11:33:58 +00:00 |
|
Arthur Baars
|
98c5b81456
|
Merge pull request #11723 from aibaars/alert-suppression
CodeQL alert suppression
|
2022-12-21 10:59:57 +01:00 |
|
Arthur Baars
|
035ad65e43
|
AlertSuppression: move library into util folder
|
2022-12-21 10:39:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
cbe330eb7b
|
Merge pull request #11693 from jketema/argv-param-flowsource
C++: Define the `argv` flow source in terms the input parameter
|
2022-12-20 09:30:19 +00:00 |
|
Arthur Baars
|
a8be5d7274
|
AlertSuppression: add change notes
|
2022-12-19 17:02:52 +01:00 |
|
Arthur Baars
|
c176606be5
|
AlertSuppression: allow //lgtm comments to scope over the next line
|
2022-12-19 16:10:26 +01:00 |
|
Arthur Baars
|
016c7a8ca7
|
Merge pull request #11719 from aibaars/alert-suppression-shared
Shared AlertSuppression library
|
2022-12-19 16:04:44 +01:00 |
|
Jeroen Ketema
|
ed33b905a6
|
C++: Simplify cpp/path-injection now argv sources are parameters
|
2022-12-19 12:54:16 +01:00 |
|
Arthur Baars
|
ad80822a52
|
C/C++: use shared AlertSuppression.qll
|
2022-12-19 12:25:46 +01:00 |
|
turbo
|
d1d4163b79
|
Exclude cpp/wrong-use-of-the-umask
|
2022-12-18 15:55:04 +01:00 |
|
turbo
|
1e5426fca2
|
Create security-experimental suite helper and all language suite implementations
|
2022-12-18 15:44:08 +01:00 |
|