Michael Nebel
73360eefb3
Merge pull request #21452 from michaelnebel/csharp/expandedassignment
...
C#: Remove expanded assignments.
2026-03-27 09:18:55 +01:00
Michael Nebel
1a4f333c4a
C#: Update integration tests to use SDK 10.0.201.
2026-03-26 18:07:05 +01:00
Michael Nebel
41bb349a9b
C#: Improve the downgrade script.
2026-03-26 14:34:54 +01:00
Michael Nebel
a5f27b8f19
C#: Add change-note.
2026-03-26 11:52:42 +01:00
Michael Nebel
a402ce59f4
C#: Fix bad join in cs/coalesce-of-identical-expressions.
2026-03-26 10:45:02 +01:00
Michael Nebel
147ac37fec
C#: Add downgrade script.
2026-03-25 16:09:39 +01:00
Michael Nebel
29acd6960f
C#: Add upgrade script.
2026-03-25 16:09:26 +01:00
Michael Nebel
d96e8cb704
C#: Remove expr_parent_adjusted.
2026-03-24 15:32:20 +01:00
Michael Nebel
a900fe8657
C#: Adress review comments.
2026-03-24 15:32:17 +01:00
Michael Nebel
3d2d09d0bc
C#: Use the DB types and replace the abstract class implementation.
2026-03-24 15:32:15 +01:00
Michael Nebel
96f55fbdf1
C#: Add operation types to the DB scheme.
2026-03-24 15:32:13 +01:00
Michael Nebel
55516342b2
C#: Add/update tests and expected output.
2026-03-24 15:32:11 +01:00
Michael Nebel
51673312c5
C#: Upgrade libraries and queries to use the new Operation classes.
2026-03-24 15:32:08 +01:00
Michael Nebel
149df86ce2
C#: Update the CFG implementation based on the new operations and remove hack that rotates children of assignments.
2026-03-24 15:32:06 +01:00
Michael Nebel
569e33b407
C#: Introduce a new kind of assignable definitions for compound assignments (those that was previously covered by expanded assignments).
2026-03-24 15:32:04 +01:00
Michael Nebel
e2afb000b2
C#: Cleaup expanded assignments from the dispatch logic.
2026-03-24 15:32:02 +01:00
Michael Nebel
2a78183238
C#: Deprecate the expanded assignment predicate as we no longer extract expanded assignments.
2026-03-24 15:32:00 +01:00
Michael Nebel
327757dbcb
C#: Update the child indices for assignments, update Assign classes to extend OperatorCall and add AssignOperation classes.
2026-03-24 15:31:57 +01:00
Michael Nebel
b426c6fb39
C#: Update the DB scheme to reflect that assign arithmetic- and bitwise operations are operator calls.
2026-03-24 15:31:55 +01:00
Michael Nebel
c8169f576f
C#: Don't extract expanded assignments and swap child indices for assignments.
2026-03-24 15:31:53 +01:00
Paolo Tranquilli
14b3f6211e
C#: Opt out of dotnet CLI telemetry
...
Add `DOTNET_CLI_TELEMETRY_OPTOUT=1` to the minimal environment used for
all `dotnet` invocations. The telemetry is unnecessary and may even be
causing segfaults in some cases.
2026-03-24 14:16:49 +01:00
Gregro
a59c865328
let interprocedural analysis handle source-available extension methods for LogForgingLogMessageSink's
2026-03-21 20:05:08 +00:00
Gregro
d0c48893f5
update test helper to use more robust .ReplaceLineEndings() sanitizer
2026-03-21 20:05:08 +00:00
Gregro
d99247cf13
Clarify static extension method class name
2026-03-21 20:05:08 +00:00
Gregro
a9eb801fea
C#: Fix false positives in cs/log-forging for extension methods
2026-03-21 20:05:08 +00:00
Óscar San José
2139b97628
Merge branch 'main' into post-release-prep/codeql-cli-2.25.0
2026-03-19 13:07:00 +01:00
Owen Mansel-Chan
5b17d8cf76
Merge pull request #21472 from owen-mc/adjust-severity/xss-log-injection
...
Adjust `@security-severity` metadata for XSS and log injection queries
2026-03-18 16:51:14 +00:00
Anders Schack-Mulligen
af63e63686
C#: Accept test changes.
2026-03-17 14:12:18 +01:00
Anders Schack-Mulligen
19faf8f30b
C#: Add ObjectInitMethod as enclosing callable for the instance initializers.
2026-03-17 13:38:41 +01:00
github-actions[bot]
e3dbf5b022
Post-release preparation for codeql-cli-2.25.0
2026-03-16 16:03:22 +00:00
github-actions[bot]
d6055754b6
Release preparation for version 2.25.0
2026-03-16 12:15:34 +00:00
Anders Schack-Mulligen
a929c0bf24
C#: Remove splitting-awareness from Range Analysis.
2026-03-16 09:58:14 +01:00
Anders Schack-Mulligen
db0a3e38e2
C#: Accept a few irrelevant taint steps.
2026-03-16 09:09:54 +01:00
Anders Schack-Mulligen
e7edf15031
C#: Clean up.
2026-03-16 08:51:51 +01:00
Anders Schack-Mulligen
4c77e0f315
C#: Remove splitting-awareness for local expression steps.
2026-03-16 08:51:51 +01:00
Anders Schack-Mulligen
7124cd4e6e
C#: Remove splitting-awareness for source-to-def steps.
2026-03-16 08:51:50 +01:00
Anders Schack-Mulligen
c076992b83
C#: Remove splitting-awareness in ObjectInitializerNode.
2026-03-16 08:51:49 +01:00
Anders Schack-Mulligen
659d8e7c90
C#: Remove splitting-awareness in argumentOf.
2026-03-16 08:51:49 +01:00
Anders Schack-Mulligen
1e8de0511b
C#: Remove splitting-awareness in lambda flow.
2026-03-16 08:51:48 +01:00
Anders Schack-Mulligen
bce0a4d2a7
C#: Remove splitting-awareness for store steps.
2026-03-16 08:51:48 +01:00
Anders Schack-Mulligen
2160910d56
C#: Remove splitting-awareness for read steps.
2026-03-16 08:51:47 +01:00
Anders Schack-Mulligen
a5c8a5b5f8
C#: Remove splitting-awareness for taint steps.
2026-03-16 08:51:47 +01:00
Owen Mansel-Chan
52809133f5
Add change notes
2026-03-13 11:10:43 +00:00
Owen Mansel-Chan
056aa342fe
Change @security-severity for log injection queries from 7.8 to 6.1
2026-03-13 10:02:01 +00:00
Owen Mansel-Chan
f58a6e5d3a
Change @security-severity for XSS queries from 6.1 to 7.8
2026-03-13 10:01:02 +00:00
Anders Schack-Mulligen
8c1c039edf
C#: Delete PreBasicBlocks.
2026-03-13 08:00:08 +01:00
Owen Mansel-Chan
0215ea3ee3
Merge pull request #21426 from owen-mc/cpp/validate-constructor-summary-models
...
C++: Add model validation for constructor summary models
2026-03-10 09:42:24 +00:00
Anders Schack-Mulligen
4013f00b19
C#: Disentangle SwitchStmt AST and CFG.
2026-03-09 15:07:59 +01:00
Owen Mansel-Chan
e0e5319b11
C#: Make corresponding predicate private
2026-03-09 13:44:52 +00:00
Óscar San José
3b9eba2afc
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.21
2026-03-06 16:20:36 +01:00
