Anders Schack-Mulligen
723a896b99
Cfg: Add ConditionKind and getDual to ConditionalSuccessor.
2026-02-23 15:09:48 +01:00
Owen Mansel-Chan
ada9c452f0
Merge pull request #21336 from owen-mc/js/accept-mad-sanitizers
...
JS: Accept MaD sanitizers for queries with MaD sinks
2026-02-23 13:44:54 +00:00
Jeroen Ketema
99de5d4238
Merge pull request #21208 from jketema/jketema/softfloat
...
C++: Update expected test results after extractor changes
2026-02-23 13:52:43 +01:00
Owen Mansel-Chan
12bd709219
Merge pull request #21341 from owen-mc/rb/accept-mad-sanitizers
...
Ruby: Accept MaD sanitizers for queries with MaD sinks and convert some existing sanitizers
2026-02-23 11:44:05 +00:00
Jeroen Ketema
a935d97190
C++: Update expected test results after extractor changes
2026-02-23 11:54:58 +01:00
Taus
480ae619e6
Merge pull request #21116 from github/tausbn/python-add-dataflow-overlay-annotations
...
Add `overlay[local]` annotations
2026-02-21 13:44:09 +01:00
Jeroen Ketema
8947f7afd8
Merge pull request #21329 from paldepind/cpp/simple-range-analysis-phi-divide
...
C++: Divide number of bounds between branches for phi nodes
2026-02-20 17:05:01 +01:00
Jeroen Ketema
9228304294
Merge branch 'main' into cpp/simple-range-analysis-phi-divide
2026-02-20 16:25:26 +01:00
Simon Friis Vindum
8eed18a8ff
C++: Fix typo
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2026-02-20 16:24:19 +01:00
Simon Friis Vindum
fdbd49a843
C++: Improve clarity in comment
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2026-02-20 13:38:24 +01:00
Paolo Tranquilli
15fde872b5
Merge pull request #21276 from github/redsun82/bazel-9
...
Upgrade Bazel to 9.0.0
2026-02-20 13:26:14 +01:00
Mathias Vorreiter Pedersen
1dba99f47d
Merge pull request #21292 from microsoft/UncheckedLeaprYearAfterModification_Refactor_Upstream
...
C++: Refactor of UncheckedLeapYearAfterModification
2026-02-20 12:11:45 +00:00
Paolo Tranquilli
a5905a6f20
Merge branch 'main' into redsun82/bazel-9
2026-02-20 10:51:18 +01:00
Geoffrey White
ca41ae0d1a
Merge pull request #21347 from geoffw0/toolstatus
...
Rust: Update rust/diagnostic/database-quality
2026-02-20 09:16:44 +00:00
REDMOND\brodes
38219f6ebb
C++: Fixing FP in unit tests.
2026-02-19 14:08:36 -05:00
Geoffrey White
b08e4e1dba
Merge branch 'main' into toolstatus
2026-02-19 16:19:15 +00:00
Paolo Tranquilli
dfe451128e
Merge branch 'main' into redsun82/bazel-9
2026-02-19 11:05:32 +01:00
Geoffrey White
fd5c5b5635
Rust: Change note.
2026-02-19 08:59:55 +00:00
Geoffrey White
97a02ed903
Rust: Remove MacroCallTargetStats from rust/diagnostic/database-quality.
2026-02-19 08:57:12 +00:00
Paolo Tranquilli
6e8f43ce2e
Merge pull request #21343 from github/redsun82/update-rust-toolchain
...
Bazel: Update Rust toolchain to nightly/2026-01-22 and rules_rust to 0.68.1.codeql.1
2026-02-19 09:40:26 +01:00
Tom Hvitved
6dfbd4e062
Merge pull request #21342 from hvitved/csharp/equals-nullable-tests
...
C#: Add tests for `Equals` methods with nullable parameter types
2026-02-19 09:08:33 +01:00
Paolo Tranquilli
e11363280a
Rust: accept test changes
2026-02-18 16:56:28 +01:00
Taus
6b6d8862b0
Merge pull request #21288 from microsoft/azure_python_sanitizer_upstream2
...
Azure python sanitizer upstream2
2026-02-18 14:59:59 +01:00
Owen Mansel-Chan
1d6b8c5120
Use postprocessing queries for unrelated test
...
Need to do this because the model numbering was changing. At the same
time we may as well use inline expectations.
2026-02-18 13:49:53 +00:00
Owen Mansel-Chan
05d681fe19
Update taintstep test for models becoming MaD
2026-02-18 13:49:50 +00:00
Mathias Vorreiter Pedersen
a2339305e5
Merge pull request #329 from geoffw0/moreascii
...
Address more non-ascii characters
2026-02-18 13:43:16 +00:00
Owen Mansel-Chan
f577e973bc
Update other test in same folder
2026-02-18 13:39:06 +00:00
Óscar San José
df35f9f98b
Merge pull request #21339 from github/oscarsj/skip-csharp-integration-on-macos-26
...
Skip csharp integration tests on macos-26
2026-02-18 14:29:42 +01:00
Paolo Tranquilli
24f3d9ede0
Revert rust-toolchain.toml changes and update test expectations
2026-02-18 13:56:48 +01:00
Taus
3d4785f29f
Python: Add change note
2026-02-18 12:51:35 +00:00
Tom Hvitved
1357de90ec
Merge pull request #21311 from hvitved/rust/path-resolution-remove-duplicates
...
Rust: Make path resolution robust against invalid code with conflicting declarations
2026-02-18 12:29:06 +01:00
Geoffrey White
d7250a8abe
Address more non-ascii characters.
2026-02-18 11:23:01 +00:00
Paolo Tranquilli
116f5a253c
Bazel: Update Rust toolchain to nightly/2026-01-22 and rules_rust to 0.68.1.codeql.1
...
Update the Rust nightly toolchain from nightly/2025-08-01 to nightly/2026-01-22
(rustc 1.95.0-nightly), and rules_rust from 0.66.0 to 0.68.1.codeql.1.
The new nightly changed how stdlib metadata is distributed: .rlib files now
contain only a metadata stub, with full metadata in separate .rmeta files.
rules_rust's stdlib glob doesn't include *.rmeta, causing 'only metadata stub
found' errors. This is patched via a custom registry entry (0.68.1.codeql.1).
Upstream bug: https://github.com/bazelbuild/rules_rust/issues/3859
2026-02-18 12:22:01 +01:00
Idriss Riouak
22b55f3d6f
Merge pull request #21063 from github/idrissrio/cpp/overlay/single-location
...
C/C++ overlay: discard single location elements
2026-02-18 08:58:21 +01:00
Tom Hvitved
93d417049c
C#: Add tests for Equals methods with nullable parameter types
2026-02-18 08:42:15 +01:00
Owen Mansel-Chan
1bff7a3eb8
Add change note
2026-02-17 22:29:35 +00:00
Owen Mansel-Chan
eb7f1989c7
Reinstate ql model for String#shellescape
2026-02-17 22:27:15 +00:00
Owen Mansel-Chan
de5470a85c
Add MaD barriers for Shellwords.escape and shellescape
...
Note that this will only block flow for queries that use the kind `command-injection`.
2026-02-17 22:27:13 +00:00
Owen Mansel-Chan
b3681f7a0c
Model flow through Shellwords escape and shellescape
2026-02-17 22:27:11 +00:00
Owen Mansel-Chan
6294c3b3b8
Remove Shellwords sanitizer in ql
...
Note that some sanitizers had no effect because flow through those functions wasn't modeled.
2026-02-17 22:27:10 +00:00
Owen Mansel-Chan
4aee99f0eb
Reinstate SQLite3 sanitizer in MaD
2026-02-17 22:27:08 +00:00
Owen Mansel-Chan
5df695bec9
Move SQLite3 flow model to MaD and remove ql sanitizer
2026-02-17 22:27:06 +00:00
Owen Mansel-Chan
1fa183ee2a
Improve Sqlite3 test
2026-02-17 22:27:04 +00:00
Owen Mansel-Chan
d4bb92b038
Reinstate Mysql2 sanitizer in MaD
2026-02-17 22:27:03 +00:00
Owen Mansel-Chan
3e4f42f8a3
Move Mysql2 flow model to MaD and remove ql sanitizer
2026-02-17 22:27:01 +00:00
Owen Mansel-Chan
fc429c1757
Improve Mysql2 test
2026-02-17 22:27:00 +00:00
Owen Mansel-Chan
1d7a39a093
Change how sql-injection barriers are accepted
2026-02-17 22:26:58 +00:00
Ben Rodes
a1eaf42cbf
Update python/ql/lib/change-notes/2026-02-09-ssrf_test_case_cleanup_and_new_ssrf_barriers.md
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-02-17 13:05:51 -05:00
Óscar San José
fa73cd5d5c
Remove unnecessary blank line in test.py
2026-02-17 18:49:51 +01:00
Óscar San José
6760390d75
Fix imports
2026-02-17 18:49:11 +01:00
