Tom Hvitved
836b667a62
Address review comment
2026-01-05 19:47:02 +01:00
Tom Hvitved
2543754dd4
Rust: Remove newtype construction
2026-01-05 13:10:40 +01:00
Tom Hvitved
5bc457f6da
Rust: Move logic from AccessAfterLifetimeExtensions.qll to AccessAfterLifetime.ql
2026-01-05 13:10:38 +01:00
Tom Hvitved
06a5648336
Rust: Speedup AccessAfterLifetime.ql
...
Before
```
Pipeline standard for AccessAfterLifetimeExtensions::AccessAfterLifetime::mayEncloseOnStack/2#3cdefece#bf@61cb32j5 was evaluated in 30 iterations totaling 44856ms (delta sizes total: 241646328).
241404616 ~1% {2} r1 = SCAN `AccessAfterLifetimeExtensions::AccessAfterLifetime::mayEncloseOnStack/2#3cdefece#bf#prev_delta` OUTPUT In.1, In.0
7379161442 ~1080% {2} | JOIN WITH `_AstNode::AstNode.getEnclosingBlock/0#5c38e65a_AstNode::AstNode.getEnclosingCallable/0#5a548913_Bloc__#join_rhs` ON FIRST 1 OUTPUT Lhs.1, Rhs.1
333897324 ~40% {2} | AND NOT `AccessAfterLifetimeExtensions::AccessAfterLifetime::mayEncloseOnStack/2#3cdefece#bf#prev`(FIRST 2)
297961888 ~24% {2} | JOIN WITH `project#AccessAfterLifetimeExtensions::AccessAfterLifetime::sourceValueScope/3#d065ba16#2` ON FIRST 1 OUTPUT Lhs.0, Lhs.1
return r1
```
2026-01-05 13:10:37 +01:00
Óscar San José
2824c98efb
Merge pull request #21025 from github/oscarsj/mergeback-rc-3-20-into-main
...
Mergeback rc/3.20 into main
2025-12-15 11:59:58 +01:00
Óscar San José
d972af9ef8
Merge branch 'main' of https://github.com/github/codeql into oscarsj/mergeback-rc-3-20-into-main
2025-12-12 13:22:08 +01:00
Geoffrey White
ee13a49152
Merge branch 'main' into varfps
2025-12-11 18:21:22 +00:00
Geoffrey White
d88bae9ec2
Rust: Narrow the exclusion a little.
2025-12-11 18:07:12 +00:00
Geoffrey White
6ca90a2d62
Rust: Change note.
2025-12-10 16:56:26 +00:00
Geoffrey White
c160a1f658
Rust: Fix common FPs for rust/unused-variable and rust/unused-value.
2025-12-10 16:56:24 +00:00
Simon Friis Vindum
ade7815125
Rust: Add change note
2025-12-10 11:35:29 +01:00
Simon Friis Vindum
7d1acbcb87
Rust: Restrict the scope of DereferenceSink to dereferences of raw pointers
2025-12-10 11:35:28 +01:00
Tom Hvitved
a5f513f178
Merge pull request #20954 from hvitved/rust/stats-more-calls
...
Rust: Include more calls in DB quality metrics
2025-12-09 14:14:07 +01:00
Tom Hvitved
31b184a404
Rust: Exclude deref expressions on raw pointers from call resolution stats
2025-12-09 08:54:51 +01:00
github-actions[bot]
2854330759
Post-release preparation for codeql-cli-2.23.8
2025-12-08 15:49:10 +00:00
github-actions[bot]
66c51e979e
Release preparation for version 2.23.8
2025-12-08 14:38:23 +00:00
Tom Hvitved
bfa37b8488
Fix typo
2025-12-08 10:17:47 +01:00
Geoffrey White
24852c6664
Merge pull request #20966 from geoffw0/lifetimetest
...
Rust: Fix FPs from rust/access-after-lifetime-ended
2025-12-08 09:03:51 +00:00
Óscar San José
bc6133de5c
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
2025-12-05 19:31:47 +01:00
Tom Hvitved
57bca5ca9b
Rust: Include more calls in DB quality metrics
2025-12-05 09:15:26 +01:00
Geoffrey White
b7402fef09
Merge remote-tracking branch 'upstream/main' into lifetimetest
2025-12-04 17:33:39 +00:00
Geoffrey White
3cdbef71f1
Rust: Change note.
2025-12-04 17:25:34 +00:00
Tom Hvitved
8b89e15dfa
Merge pull request #20863 from hvitved/rust/call-refactor
...
Rust: Restructure classes representing calls
2025-12-04 17:02:17 +01:00
Tom Hvitved
bc6d38ebb4
Address review comments
2025-12-04 10:38:47 +01:00
Anders Schack-Mulligen
607ad1f886
Merge pull request #20961 from aschackmull/dataflow/flowfrom
...
Dataflow: Add flowFrom predicates to mirror flowTo.
2025-12-04 10:09:29 +01:00
Anders Schack-Mulligen
78e1879c9e
Use more flowTo.
2025-12-03 14:12:08 +01:00
github-actions[bot]
085faa2bdb
Post-release preparation for codeql-cli-2.23.7
2025-12-02 16:39:43 +00:00
github-actions[bot]
a045b317ac
Release preparation for version 2.23.7
2025-12-02 15:31:27 +00:00
Tom Hvitved
7378fbc567
Rust: Restructure classes representing calls
2025-12-02 10:08:04 +01:00
github-actions[bot]
19a13467e0
Release preparation for version 2.23.7
2025-12-01 16:07:37 +00:00
Óscar San José
1cc5b3444a
Fix date format in change note file
2025-12-01 15:39:37 +01:00
Geoffrey White
c64f19f6eb
Rust: Change note.
2025-12-01 12:39:19 +00:00
Geoffrey White
faf69b821b
Rust: Add sinks as barriers to prevent duplicate results.
2025-12-01 12:39:13 +00:00
Simon Friis Vindum
86eb949673
Merge pull request #20902 from paldepind/rust/xss-query
...
Rust: Add new query for XSS vulnerabilities
2025-11-28 09:09:14 +01:00
Simon Friis Vindum
97dad2db17
Rust: Apply suggestions from docs review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-11-27 11:43:41 +01:00
Felicity Chapman
caf6b950ac
Remove trailing periods from @name metadata in query files
...
Fixed 73 .ql query files where the @name metadata contained an ending period.
This ensures consistency with the CodeQL query metadata style guidelines.
2025-11-26 14:29:51 +00:00
Simon Friis Vindum
7c7663629e
Rust: Fix typo in change note for XSS query
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2025-11-25 16:13:11 +01:00
Simon Friis Vindum
9ae4c14ffb
Rust: Address PR feedback
2025-11-25 14:20:17 +01:00
Geoffrey White
1c2d8bb70e
Merge pull request #20851 from geoffw0/access-invalid-pointer-fp
...
Rust: Improve rust/access-invalid-pointer
2025-11-25 09:49:07 +00:00
Simon Friis Vindum
411d1fa861
Rust: Fix grammar and typos
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-11-25 09:31:00 +01:00
Simon Friis Vindum
597c81d659
Rust: Add change note for XSS query
2025-11-24 15:46:27 +01:00
Simon Friis Vindum
9c2858d69b
Rust: Add qhelp for XSS query
2025-11-24 15:46:26 +01:00
Simon Friis Vindum
ae9c753371
Rust: Add XSS query
2025-11-24 15:46:24 +01:00
Geoffrey White
ff8032a4ec
Rust: Fix after merge.
2025-11-21 18:53:57 +00:00
Geoffrey White
80615056c0
Merge remote-tracking branch 'upstream/main' into cert-checks
2025-11-21 18:40:40 +00:00
Geoffrey White
03fc4cb0aa
Merge remote-tracking branch 'upstream/main' into access-invalid-pointer-fp
2025-11-21 17:39:56 +00:00
Geoffrey White
785754ec65
Rust: Switch the query to taint flow, since some taint summaries are relevant now.
2025-11-21 15:02:29 +00:00
Geoffrey White
8145264b77
Rust: Add threat model sources as additional sources for the query.
2025-11-21 14:40:11 +00:00
Tom Hvitved
489fff9572
Rust: Base DataFlow::Node on AST instead of CFG
2025-11-19 19:37:39 +01:00
Paolo Tranquilli
48ee9dd149
Merge branch 'main' into post-release-prep/codeql-cli-2.23.6
2025-11-18 12:18:09 +01:00
