Chris Smowton
9bb2a4bfce
Change note
2024-10-08 19:23:07 +01:00
Chris Smowton
dcbb66d366
Go: extract and expose struct tags, interface method IDs
...
This enables us to distinguish all database types in QL. Previously structs with the same field names and types but differing tags, and interface types with matching method names and at least one non-exported method but declared in differing packages, were impossible or only sometimes possible to distinguish in QL. With this change these types can be distinguished, as well as permitting queries to examine struct field tags, e.g. to read JSON field name associations.
2024-10-08 19:23:06 +01:00
Tom Hvitved
d0ca39fb03
JS: Update expected test output
2024-10-04 08:35:33 +02:00
Tom Hvitved
b3b9406e45
Python: Update test
2024-10-04 08:35:32 +02:00
Tom Hvitved
953461d1aa
C++: Update expected test output
2024-10-04 08:35:31 +02:00
Tom Hvitved
bf0675e5ba
Kotlin: Update two tests
2024-10-04 08:35:30 +02:00
Tom Hvitved
2832318711
Java: Account for top-level res folders in AndroidLayoutXmlFile
2024-10-04 08:35:28 +02:00
Angela P Wen
8542992b0d
Merge pull request #17651 from github/post-release-prep/codeql-cli-2.19.1
...
Post-release preparation for codeql-cli-2.19.1
2024-10-03 11:18:54 -07:00
Chris Smowton
321eb34eff
Merge pull request #17637 from smowton/smowton/admin/go-test-extraction-tests
...
Go: augment test-extraction tests
2024-10-03 16:06:53 +01:00
Geoffrey White
64720adccb
Merge pull request #17656 from geoffw0/unusedvar2
...
Rust: Diagnose unused variable false positives
2024-10-03 14:56:27 +01:00
Michael Nebel
7600c243de
Merge pull request #17639 from felickz/patch-1
...
Update Comment - Clarify threat model flow sources comment in LogForgingQuery.qll
2024-10-03 15:51:40 +02:00
Geoffrey White
369241e1ea
Merge pull request #5 from hvitved/unusedvar2
...
Rust: Account for variables bound in `while let` expressions
2024-10-03 14:04:38 +01:00
Geoffrey White
ccaf2dd9ea
Rust: Temporarily limit results (hopefully enough for the DCA job to cope).
2024-10-03 13:44:04 +01:00
yoff
88b3d1ffd7
Merge pull request #17565 from yoff/python/model-urllib-parse-parse-qs
...
Python: model `urllib.parse.parse_qs`
2024-10-03 14:32:08 +02:00
Tom Hvitved
cd04500dd9
Rust: Account for variables bound in while let expressions
2024-10-03 14:05:24 +02:00
Geoffrey White
0304aa846c
Rust: Add more tests for uused variables.
2024-10-03 12:37:02 +01:00
Rasmus Lerchedahl Petersen
777279dc29
Python: MaD test expectations
2024-10-03 13:29:56 +02:00
Geoffrey White
821398715c
Rust: Test spacing.
2024-10-03 11:55:11 +01:00
Rasmus Lerchedahl Petersen
768d866e72
python: model urllib.parse.parse_qs
2024-10-03 12:20:40 +02:00
Rasmus Lerchedahl Petersen
0462809edc
Python: add taint test for urllib
2024-10-03 12:20:38 +02:00
yoff
91f1cf10a7
Merge pull request #17454 from yoff/stdlib-optparse
...
Python: Several standard library models
2024-10-03 12:02:22 +02:00
Tom Hvitved
97c2387904
Merge pull request #17644 from hvitved/rust/break-continue-target
2024-10-03 11:38:27 +02:00
yoff
56d0affe38
Update python/ql/lib/semmle/python/frameworks/Stdlib.model.yml
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2024-10-03 10:18:25 +02:00
github-actions[bot]
98d587c482
Post-release preparation for codeql-cli-2.19.1
2024-10-02 22:40:35 +00:00
Angela P Wen
569b650916
Merge pull request #17649 from github/release-prep/2.19.1
...
Release preparation for version 2.19.1
codeql-cli/v2.19.1
2024-10-02 11:36:20 -07:00
github-actions[bot]
fe54961b84
Release preparation for version 2.19.1
2024-10-02 18:30:42 +00:00
Angela P Wen
b16ba61fcb
Merge pull request #17636 from github/revert-17629-release-prep/2.19.1
...
Revert "Release preparation for version 2.19.1"
2024-10-02 11:27:40 -07:00
Geoffrey White
f7db47b771
Merge pull request #17588 from geoffw0/loc2
...
Rust: Improve lines-of-code counts.
2024-10-02 18:13:36 +01:00
Geoffrey White
0b6ec4624e
Rust: Autoformat.
2024-10-02 17:05:01 +01:00
Geoffrey White
d6848f5c5d
Rust: Apparently a doc comment here was illegal.
2024-10-02 17:00:28 +01:00
Geoffrey White
01abcf8537
Rust: Use just end locations for now, to avoid all false positive lines caused by attached comments.
2024-10-02 16:54:02 +01:00
Geoffrey White
8c87b66bea
Rust: Add more test cases for comments.
2024-10-02 16:52:19 +01:00
Chris Smowton
05d2e16de3
autoformat
2024-10-02 15:25:36 +01:00
Tom Hvitved
6da3972433
Rust: Simplify break/continue CFG labels
2024-10-02 15:45:18 +02:00
Tom Hvitved
1266f9757d
Rust: Add {BreakExpr,ContinueExpr}.getTarget()
2024-10-02 15:45:16 +02:00
Tom Hvitved
000dedf3e8
Rust: Output CFG for library-tests/variables
2024-10-02 15:45:14 +02:00
Tom Hvitved
d6415cd0c8
Merge pull request #17642 from hvitved/rust/unused-variable
...
Rust: Implement `UnusedVariable.ql`
2024-10-02 15:41:24 +02:00
Tom Hvitved
3a1f6efce4
Address review comments
2024-10-02 13:37:24 +02:00
Geoffrey White
8243f87179
Rust: Modify the exclusion as suggested in comments.
2024-10-02 11:38:29 +01:00
Tom Hvitved
fb9ec2423c
Rust: Implement UnusedVariable.ql
2024-10-02 11:22:32 +02:00
Tom Hvitved
3fa52ad680
Merge pull request #17633 from hvitved/rust/cfg-fixes
...
Rust: More CFG modelling
2024-10-02 11:21:53 +02:00
Tom Hvitved
9c7216fe4f
Rust: Add another CFG test
2024-10-02 10:59:26 +02:00
Tom Hvitved
69e0ad0181
Rust: Refactor CFG implementation for loops
2024-10-02 10:55:52 +02:00
Calum Grant
8b536f54fd
Merge pull request #17481 from github/calumgrant/bmn/uninitialized-local
...
C++: Remove FPs from cpp/uninitialized-local when encountered extraction errors
2024-10-02 09:29:15 +01:00
Calum Grant
d3695dce4d
C++: Add change note
2024-10-02 08:14:23 +01:00
Chad Bentz
2458d16426
Clarify threat model flow sources comment in LogForgingQuery.qll
2024-10-01 23:04:22 -04:00
Tom Hvitved
8f0b7f0969
Rust: Use propagatesAbnormal in two places
2024-10-01 21:49:08 +02:00
Tom Hvitved
c4eafb2cf3
Rust: Skip ParenExprs in the CFG
2024-10-01 21:26:49 +02:00
Tom Hvitved
8b66dc16ad
Rust: Fix CFG for labelled block expressions
2024-10-01 21:03:36 +02:00
Tom Hvitved
e8cb3490e6
Rust: Refine deadEnd consistency check
2024-10-01 21:02:55 +02:00