Anders Schack-Mulligen
dc6d3fe7ba
Use flowFrom.
2025-12-03 14:04:18 +01:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
Nora Dimitrijević
1321cbb021
C++/DecompressionBombs
2025-10-28 09:41:55 +01:00
Nora Dimitrijević
464f6cb096
C++/ConstantSizeArrayOffByOne
2025-10-28 09:41:26 +01:00
Nora Dimitrijević
ad31f1ab6d
C++/WordexpTainted
...
Same file usees source and sink as endpoints
2025-10-28 09:39:19 +01:00
Mathias Vorreiter Pedersen
5e82eb9b24
C++: Fixup queries which assumes that a guard is always an expression.
2025-09-18 12:16:21 +01:00
Michael Nebel
83d53baf82
C++: Fix some Ql4Ql violations.
2025-09-03 08:19:18 +02:00
Nora Dimitrijević
e382cb5696
[DIFF-INFORMED] C++: DecompressionBombs
2025-08-15 12:00:48 +02:00
Nora Dimitrijević
fabdf9923c
[DIFF-INFORMED] C++: ConstantSizeArrayOffByOne
2025-08-15 12:00:46 +02:00
Nora Dimitrijević
2316b8cf89
C++: mass-add none() location overrides
2025-06-17 17:10:07 +02:00
Nora Dimitrijević
4dd07f475b
C++: mass enable diff-informed data flow
...
An auto-generated patch that enables diff-informed data flow in the obvious cases.
Builds on https://github.com/github/codeql/pull/18342 and https://github.com/github/codeql-patch/pull/88
2025-06-11 18:51:01 +02:00
Nicolas Will
ab3f62eed1
Add missing tags to PrintCBOMGraph.ql queries
2025-05-12 14:34:16 +02:00
Nicolas Will
d0510bc672
Merge branch 'main' into quantum-experimental
2025-05-08 04:37:37 +02:00
Nicolas Will
0c6e124b01
Delete development test query
2025-05-08 03:02:59 +02:00
Nicolas Will
7339dd0077
Rename "Quantum" to "quantum" in dir structure
2025-05-08 02:39:40 +02:00
Nicolas Will
ac72abd3a6
Refactor directory structure (shared experimental)
2025-05-08 02:35:09 +02:00
Nicolas Will
c19291be88
Refactor 'cryptography' and 'Quantum' to 'quantum'
2025-05-08 01:38:53 +02:00
Owen Mansel-Chan
cf614a596d
Fix cwe tags to include leading zero
2025-04-30 16:43:03 +01:00
Nicolas Will
4d44755945
Refactor Model and CBOM print queries
2025-02-11 15:37:15 +01:00
Nicolas Will
3dc28c2d17
Move language-agnostic model to shared library
2025-02-06 21:54:18 +01:00
Nicolas Will
69a63855cc
Update CBOMGraph.ql
2025-01-29 21:55:57 +01:00
Nicolas Will
9af18bc100
WIP: add dgml/dot output/remove test code
2025-01-29 19:45:04 +01:00
Nicolas Will
e027b0e9a0
WIP: add properties
2025-01-28 02:02:06 +01:00
Nicolas Will
1a7d8cb99d
WIP
2025-01-24 17:33:03 +01:00
Jeroen Ketema
d9b278de66
C++: Promote cpp/guarded-free
2024-11-26 11:45:55 +01:00
Jeroen Ketema
88be4b88ab
C++: Address review comments
2024-11-18 14:27:01 +01:00
Jeroen Ketema
20685918bd
C++: Silence ql-for-ql warning
2024-11-14 13:10:20 +01:00
Jeroen Ketema
b581723a63
C++: Ignore complex guards and the comma operator
2024-11-14 12:53:54 +01:00
Jeroen Ketema
176acabd9d
C++: Ignore free calls that are macro defined or #if/#ifdef guarded
2024-11-14 12:51:04 +01:00
Jeroen Ketema
a31e983e9e
C++: Also allow single statement blocks in cpp/guarded-free
2024-11-14 12:47:29 +01:00
Jeroen Ketema
c86bbbb063
C++: Fix cpp/guarded-free FPs when there are other blocks depending on the guard
2024-11-14 11:48:17 +01:00
Jeroen Ketema
a065434dd7
Merge pull request #16811 from porcupineyhairs/curlssl
...
CPP: Disabled SSL certificate verification
2024-09-19 20:02:17 +02:00
Porcupiney Hairs
ee41e65e90
Include changes from review
2024-09-19 22:52:20 +05:30
Porcupiney Hairs
57d1035acd
Include changes from review
2024-09-19 03:32:34 +05:30
am0o0
401bb24fde
remove redundent zStreamAccess in flow steps
2024-09-05 17:09:26 +02:00
Jeroen Ketema
3aa68b34bb
C++: Fix zstd and clean up test
2024-09-04 22:25:44 +02:00
Jeroen Ketema
9b905d5e84
C++: Set precision to low
...
There are no barriers, so the query as is will flag up any use of the
identified functions.
2024-09-04 14:13:43 +02:00
Jeroen Ketema
238895e677
C++: Fix formatting
2024-09-04 14:10:24 +02:00
Jeroen Ketema
92c6170a76
C++: Simplify QLhelp
...
One good and one bad example suffices to get the point across, and makes the
help more readable. The examples also do not have to be complete.
2024-09-04 14:06:12 +02:00
Jeroen Ketema
2369b18ca6
C++: Make additional flow steps more uniform
2024-09-04 13:43:03 +02:00
Jeroen Ketema
8fe0d0a045
C++: Improve query output
2024-09-04 13:22:02 +02:00
Jeroen Ketema
8d22d147b8
C++: Clean up QLDoc
2024-09-04 13:16:56 +02:00
Jeroen Ketema
65fafbf4df
C++: Fix QL-for-QL warnings
2024-09-04 11:57:10 +02:00
Jeroen Ketema
084dbc4e12
C++: Rename qhelp file to match ql file
2024-09-04 11:48:42 +02:00
Jeroen Ketema
50d9e77339
C++: Move experimental files into the correct locations
2024-09-04 09:33:27 +02:00
am0o0
386e45a11e
delete bzip2 as it is not updated for more than three years so it is not in the priority
2024-09-03 15:33:14 +02:00
am0o0
81283d59ab
remove more unused imports, add tests for zstd, add flow steps for zstd
...
zstd is not finilized
2024-09-03 15:26:38 +02:00
am0o0
4fc971dbcb
remove xz(lzma)
2024-09-03 14:48:52 +02:00
am0o0
6c97096642
remove unused imports, add tests for libarchive
2024-09-03 14:16:25 +02:00
am0o0
9531701129
delete miniz support because there is no good documents and i don't have enough time as the library is not popular enough. add tests for minizip lib
2024-09-03 13:08:00 +02:00
