Mathias Vorreiter Pedersen
09d74a3b3e
C++: Move 'CanonicalField' stuff.
2026-02-27 16:22:23 +00:00
Mathias Vorreiter Pedersen
271a759490
C++: Move 'TIRDataFlowNode'.
2026-02-27 16:22:21 +00:00
Mathias Vorreiter Pedersen
b9595d985e
C++: Create a new file.
2026-02-27 16:22:19 +00:00
Anders Schack-Mulligen
ab94524328
Cfg: Address review comments.
2026-02-27 16:35:25 +01:00
Ian Lynagh
155e21e729
C++ overlays: Tweak dbscheme
2026-02-27 15:28:15 +00:00
Asger F
d440b5fa85
JS: Update TRAP files
2026-02-27 14:15:34 +01:00
Asger F
47895b3334
JS: Update test for UniquePropertyNames test
...
This query now reports the alert previously found by DuplicateProperty
2026-02-27 13:37:29 +01:00
Asger F
71fb6bf915
JS: Mark corresponding lost result for the getter
2026-02-27 13:35:43 +01:00
Asger F
c673bd9151
JS: Document a missing alert due to limitation in structural comparison
2026-02-27 13:34:55 +01:00
Asger F
0f2de46648
JS: Emit variable bindings for 'this' expressions
2026-02-27 11:44:54 +01:00
Asger F
f0f58dacb3
JS: Also emit 'this' variable for class scopes
2026-02-27 11:44:31 +01:00
Asger F
4a3b86c652
JS: Update test output
2026-02-27 11:13:50 +01:00
yoff
600f585a31
Merge pull request #21296 from yoff/python/bool-comparison-guards
...
Python: Handle guards being compared to boolean literals
2026-02-26 21:13:51 +01:00
Geoffrey White
062fbf2b3c
Rust: Accept consistency check changes from CI.
2026-02-26 15:45:40 +00:00
Tom Hvitved
4280d35bf3
Merge pull request #21366 from hvitved/rust/type-inference-unify-method-resolution
...
Rust: Unify logic in `MethodResolution`; remove `TypeQualifierIsInstantiationOfImplSelf` logic
2026-02-26 14:38:35 +01:00
Tom Hvitved
11a726d1b4
Address review comments
2026-02-26 14:23:41 +01:00
Geoffrey White
ec0b90f4b4
Rust: Simplify with the Copilot suggestions.
2026-02-26 13:00:07 +00:00
Geoffrey White
96a06bed8d
Rust: Accept consistency check changes.
2026-02-26 12:41:17 +00:00
Geoffrey White
f2dc585751
Rust: Convert split_off QL-defined barrier to a neutral model (which was always the intent).
2026-02-26 12:25:23 +00:00
Geoffrey White
478f56b82f
Rust: Move the existing 'alloc' neutral models into alloc.model.yml.
2026-02-26 12:25:10 +00:00
yoff
89e5a9bd72
Update python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPublic.qll
...
Co-authored-by: Taus <tausbn@github.com >
2026-02-26 13:14:26 +01:00
yoff
cfbae50845
Python: convert barrier guard to MaD
2026-02-26 13:12:34 +01:00
Geoffrey White
78f855d7e3
Rust: Make the manual model for Option::map more accurate.
2026-02-26 11:34:30 +00:00
Geoffrey White
75ffb5fc4c
Rust: Change note.
2026-02-26 10:59:48 +00:00
Geoffrey White
75fea4245a
Rust: Add neutral models of From::from (corresponding with existing generated sink models).
2026-02-26 10:00:30 +00:00
Geoffrey White
5c108e5c12
Rust: Add a manual model for flow through Option::map.
2026-02-26 09:12:33 +00:00
Geoffrey White
53e886380c
Rust: Add a neutral model of Option::map (so that we don't use the generated models).
2026-02-26 08:36:28 +00:00
Geoffrey White
97f7a26e11
Rust: Add test cases for log injection + uncontrolled allocation size with from.
2026-02-25 19:12:06 +00:00
yoff
9b9c9304c7
Python: simplify logic, suggested in review
2026-02-25 18:16:38 +01:00
yoff
c4f8748a42
Python: simplify barrier guard
2026-02-25 18:03:40 +01:00
Geoffrey White
5523b5e25f
Merge pull request #21271 from geoffw0/neutralmodels
...
Rust: Add support for neutral models.
2026-02-25 16:15:55 +00:00
Paolo Tranquilli
4e4d0555c0
Merge pull request #21373 from github/redsun82/load-cc-explicitly
...
Bazel: load `rules_cc` and `rules_shell` explicitly
2026-02-25 16:10:16 +01:00
Geoffrey White
1213369d75
Rust: Add test cases for log injection with map.
2026-02-25 14:30:01 +00:00
Geoffrey White
ccc318106e
Rust: Add an empty.model.yml similar to the one in CPP, to avoid errors about missing extensionals.
2026-02-25 14:25:12 +00:00
Paolo Tranquilli
4d0c72eafe
Bazel: add explicit rules_shell load
2026-02-25 14:05:53 +01:00
Paolo Tranquilli
15a2575949
Merge branch 'main' into redsun82/load-cc-explicitly
2026-02-25 13:59:29 +01:00
Paolo Tranquilli
968856ed96
Merge pull request #21371 from github/redsun82/fix-local-go-builds
...
Go: fix standalone build of the Go extractor
2026-02-25 13:52:49 +01:00
Paolo Tranquilli
5b5dc9c708
Bazel: load rules_cc explicitly
...
Turns out in https://github.com/github/codeql/pull/21371 I was right
about `java_*` rules not relying on autoload anywhere, but it turns out
some `cc_*` rules still relied on autoload. This autoload is currently
configured in the internal repository, but we want to remove it
eventually. This patch:
* adds explicit loads to `rules_cc`
* removes an obsolete file (that depedency has its own bazel module
since some time, we just forgot to remove the old file)
2026-02-25 13:52:25 +01:00
Paolo Tranquilli
42e41c57d4
Go: fix standalone build of the Go extractor
...
https://github.com/github/codeql/pull/21276 worked together with the
internal changes but broke the standalone build of the Go extractor of
this repo in isolation.
The root cause was the lack of an auto-loaded `java_library` rule
definition. This fixes it.
I also checked this doesn't happen anywhere else.
2026-02-25 13:33:54 +01:00
Asger F
e0ab5ce49b
JS: Emit variables for 'this'
...
The extractor does not emit bindings for 'this', we just ensure that a variable exists for it
2026-02-25 10:17:02 +01:00
Asger F
f0e665d08c
Merge pull request #21349 from asgerf/mobx-wrapper
...
Support React components wrapped by 'mobx-react'
2026-02-25 09:24:45 +01:00
Tom Hvitved
de9b1adf63
Rust: Unify logic in MethodResolution; remove TypeQualifierIsInstantiationOfImplSelf logic
2026-02-25 09:05:58 +01:00
Tom Hvitved
018674cfde
Merge pull request #21333 from hvitved/rust/type-inference-restrict-receiver-type-propagation
...
Rust: Restrict type propagation into receivers
2026-02-25 08:48:14 +01:00
Mathias Vorreiter Pedersen
266130b5cf
Merge pull request #21360 from microsoft/unbreak-changes
...
C++: Provide `BarrierGuard` API without a `Unit` column when instantiating non-parameterized `BarrierGuard`s
2026-02-24 16:57:58 +00:00
Geoffrey White
8769059ce5
Rust: Remove another call to neutralModel we don't need to make explicitly.
2026-02-24 15:01:45 +00:00
Taus
6bfb1e1fae
Merge pull request #21344 from github/tausbn/python-remove-points-to-from-metrics-libraries
...
Python: Remove points-to from metrics library
2026-02-24 15:55:16 +01:00
Taus
f107235db2
Update change note
2026-02-24 15:08:36 +01:00
Michael Nebel
06a8fd0e4a
C#: Add change-note.
2026-02-24 14:42:18 +01:00
Michael Nebel
113565ba76
C#: Update test expected output.
2026-02-24 14:38:59 +01:00
Michael Nebel
ae5ab9c67c
C#: Partial constructor declaration support.
2026-02-24 14:32:24 +01:00