Anders Schack-Mulligen
dc6d3fe7ba
Use flowFrom.
2025-12-03 14:04:18 +01:00
Owen Mansel-Chan
cf6cfe2a1e
Non-initializing writes should target post-update nodes
2025-10-01 16:12:54 +01:00
Nora Dimitrijević
e233501144
Go: mass enable diff-informed data flow
...
An auto-generated patch that enables diff-informed data flow in the obvious cases.
Builds on https://github.com/github/codeql/pull/18345 and https://github.com/github/codeql-patch/pull/88
2025-06-11 18:44:24 +02:00
Owen Mansel-Chan
f944ff4d78
Create getAValueFormattedMessageComponent
2025-03-20 15:08:06 +00:00
Tony Torralba
da4049e25c
Go: Migrate AppenderOrSprinter model to models-as-data
2024-01-09 16:35:47 +01:00
Owen Mansel-Chan
b7dfa2347c
Put QLDoc on data flow and taint tracking modules
...
We preserve all old QLDocs, but move them from the
config to the Flow module. This makes more sense than
the Config module, which is often private, and is generally
not directly accessed.
2023-08-11 10:06:12 +01:00
Owen Mansel-Chan
16ef11a3c3
Make ConstantOauth2State use new API
...
Removed edges were only there originally due to multiple configurations
being in scope. `DataFlow::PathNode` has union semantics for
configurations. Nodes are only generated if they are reachable from a
source, but this includes sources from other configurations.
No alerts are lost.
2023-08-10 15:49:08 +01:00
Owen Mansel-Chan
374f13e0dc
Revert "Go: Fix missing flow through receiver for function variable"
2023-07-20 13:31:14 +01:00
Owen Mansel-Chan
a3ba74a6a6
Cast to MethodCallNode before calling getReceiver()
...
This is not required, because getReceiver is still defined on CallNode,
but is done for consistency.
2023-07-19 11:17:38 +01:00
Owen Mansel-Chan
bc0f9030e3
use CallNode.getSyntacticArgument
2023-04-28 06:09:10 +01:00
Chris Smowton
18d00c1116
Autoformat QL
2023-04-12 14:19:03 +01:00
Chris Smowton
a673610e18
Adapt query not to depend on TaintTracking::FunctionModel
2023-04-12 14:19:01 +01:00
Tony Torralba
7a92970d89
Go: Remove omittable exists variables
2023-01-10 13:36:48 +01:00
Owen Mansel-Chan
f2e2c02db6
Rename predicates to avoid clashes
2022-11-17 14:27:06 +00:00
erik-krogh
e89e0eb7fb
make some acronyms camelCase
2022-08-22 21:22:35 +02:00
Chris Smowton
6068f63e9e
Add taint models for go 1.19's new fmt.Append functions
2022-08-19 10:29:45 +01:00
Chuan-kai Lin
aa514fff32
codeql-go merge prep: move into go/ directory
2022-05-20 10:07:19 -07:00