Taus
cc471fd672
Python: Add some CFG-validation queries
...
These use the annotated, self-verifying test files to check various
consistency requirements.
Some of these may be expressing the same thing in different ways, but
it's fairly cheap to keep them around, so I have not attempted to
produce a minimal set of queries for this.
2026-05-28 21:09:37 +00:00
Taus
9a4fb5c971
Python: Add self-validating CFG tests
...
These tests consist of various Python constructions (hopefully a
somewhat comprehensive set) with specific timestamp annotations
scattered throughout. When the tests are run using the Python 3
interpreter, these annotations are checked and compared to the "current
timestamp" to see that they are in agreement. This is what makes the
tests "self-validating".
There are a few different kinds of annotations: the basic `t[4]` style
(meaning this is executed at timestamp 4), the `t.dead[4]` variant
(meaning this _would_ happen at timestamp 4, but it is in a dead
branch), and `t.never` (meaning this is never executed at all).
In addition to this, there is a query, MissingAnnotations, which checks
whether we have applied these annotations maximally. Many expression
nodes are not actually annotatable, so there is a sizeable list of
excluded nodes for that query.
2026-05-28 21:09:36 +00:00
Taus
6165623cbf
Merge pull request #21724 from github/tausbn/python-add-self-validating-cfg-tests
2026-05-28 22:07:55 +02:00
Michael Nebel
2eac8890d3
Merge pull request #21893 from michaelnebel/cshar/updateroslyn
...
C#: Update Roslyn and other pinned depenencies.
2026-05-28 13:49:29 +02:00
Geoffrey White
34d4e9a8e2
Merge pull request #21898 from geoffw0/swiftflow
...
Swift: Extend swift/weak-sensitive-data-hashing, swift/weak-password-hashing sinks
2026-05-28 11:52:32 +01:00
Michael Nebel
ed8b9c29cc
Merge pull request #21866 from michaelnebel/csharp/refreturnindexerproperty
...
C#: Property- and Indexer calls for ref return properties and indexers.
2026-05-28 12:31:17 +02:00
Asger F
17fe3e4e31
Merge pull request #21901 from asgerf/unified-fix-test
...
Unified: fix test output
2026-05-27 22:19:17 +02:00
Asger F
313500e581
Unified: update test outputs
2026-05-27 21:27:09 +02:00
Asger F
ad56ebd361
Unified: update test output
2026-05-27 21:25:32 +02:00
Asger F
6be9e2315d
Merge pull request #21841 from github/tausbn/unified-swift-named-body-fields
...
Unified: Get rid of all `$children` fields
2026-05-27 21:25:11 +02:00
Geoffrey White
5c2488e304
Swift: Fix typo.
2026-05-27 16:29:48 +01:00
Geoffrey White
4fbea4ef95
Swift: Autoformat.
2026-05-27 16:28:21 +01:00
Taus
35faec3db1
Python: Address review comments
...
- Get rid of unnecessary parentheses
- Use call syntax in the relevant test
- Get rid of `dead(2)` annotation
2026-05-27 15:27:19 +00:00
Taus
41fd59c1c1
Unified: regenerate Ast.qll and dbscheme
2026-05-27 15:02:28 +00:00
Taus
d6e7e38e1c
Unified: merge in main
...
Keeps our version of the conflicting files. They will be regenerated in
the next commit.
2026-05-27 15:01:03 +00:00
Jeroen Ketema
7723324687
Merge pull request #21896 from jketema/jketema/deprecated
...
C++: Remove deprecated code
2026-05-27 14:11:10 +02:00
Michael Nebel
d4c7b5b6fe
C#: Update encoding of SBCS to UTF8 with BOM.
2026-05-27 14:01:34 +02:00
Michael Nebel
6b55f865cd
C#: Update integration test expected output.
2026-05-27 13:24:45 +02:00
Jeroen Ketema
42c4d8a98b
Merge pull request #21897 from jketema/jketema/missing-friend
...
C++: Update expected test results after extractor changes
2026-05-27 12:54:00 +02:00
Geoffrey White
f962eac914
Swift: Fill the simple gaps in modelling.
2026-05-27 11:20:00 +01:00
Geoffrey White
c6c3e1474c
Swift: Add a few more test cases for simple missing models.
2026-05-27 11:15:28 +01:00
Geoffrey White
94e6ec6511
Swift: Widen the new sinks to cover more cases the MaD sinks are missing.
2026-05-27 10:34:12 +01:00
Geoffrey White
c902c75651
Swift: Add change note.
2026-05-27 10:33:42 +01:00
Geoffrey White
2b4ea18dfe
Swift: Add a similar sink for password hashing as well.
2026-05-27 10:33:41 +01:00
Geoffrey White
98b7659cc1
Swift: Add a special case sink for weak sensitive data hashing sinks that are calls through a metatype.
2026-05-27 10:33:39 +01:00
Geoffrey White
d9c0b9ca31
Swift: Additional test cases for CryptoKit.
2026-05-27 10:33:37 +01:00
Geoffrey White
b44bca9ea7
Swift: Add HashFunction protocol and other realism to the CryptoKit test stubs (this is needed for new cases to work as intended).
2026-05-27 10:33:31 +01:00
Jeroen Ketema
e66b1e4beb
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-27 10:58:05 +02:00
Jeroen Ketema
362c48cc6d
C++: Add change note
2026-05-27 10:44:44 +02:00
Jeroen Ketema
35364a087a
C++: Update expected test results after extractor changes
2026-05-27 10:23:16 +02:00
Asger F
f18cdcfec6
Merge pull request #21848 from asgerf/asgerf/swift-yeast
...
Unified: Add schema checking and corpus-style tests
2026-05-26 22:00:21 +02:00
Jeroen Ketema
7862922e5c
C++: Remove deprecated code
2026-05-26 17:54:51 +02:00
Taus
fbc861e7a4
unified: Clarify grammar comment
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-26 16:19:02 +02:00
Michael Nebel
7f2fb2eb99
C#: Use the generic version of the associated implementation.
2026-05-26 15:59:25 +02:00
Michael Nebel
769b1957a5
C#: Update generated files.
2026-05-26 14:13:02 +02:00
Michael Nebel
26da373bd4
C#: Update Roslyn and other pinned dependencies.
2026-05-26 14:11:36 +02:00
Óscar San José
491c373e07
Merge pull request #21864 from github/post-release-prep/codeql-cli-2.25.5
...
Post-release preparation for codeql-cli-2.25.5
2026-05-22 17:41:38 +02:00
Óscar San José
996e79131e
Merge branch 'main' into post-release-prep/codeql-cli-2.25.5
2026-05-22 16:32:30 +02:00
Tom Hvitved
688695cd57
Merge pull request #21876 from hvitved/dense-rank-short-circuit
...
Util: Short-circuit `rank` usage in dense ranking library
2026-05-22 16:08:45 +02:00
Jeroen Ketema
3c4e22a8ba
Merge pull request #21870 from jketema/jketema/generated
...
C++: Add ability to see if one template was generated from another
2026-05-22 15:46:06 +02:00
Tom Hvitved
c70007607a
Merge pull request #21850 from hvitved/type-inference-unify-base-type
...
Type inference: Unify `getABaseTypeMention` and `conditionSatisfiesConstraint`
2026-05-22 13:44:18 +02:00
Tom Hvitved
9685755479
Merge pull request #21865 from hvitved/csharp/compilation-cwd-folder
...
C#: Ensure that `Folder` entities exist for `Compilation` entities
2026-05-22 13:42:35 +02:00
Mathias Vorreiter Pedersen
a7405bddaa
Merge pull request #21856 from MathiasVP/scanf-safe-functions
...
C++: Model secure versions of `scanf` as flow sources
2026-05-22 12:34:54 +01:00
Jeroen Ketema
8ad461be98
C++: Add change note
2026-05-22 13:13:27 +02:00
Jeroen Ketema
0e6257de2d
C++: Fix QLDoc wording
2026-05-22 13:13:25 +02:00
Jeroen Ketema
77f6caca00
C++: Update stats file
2026-05-22 13:13:24 +02:00
Jeroen Ketema
f98dfcd0a5
C++: Add upgrade and downgrade scripts
2026-05-22 13:13:22 +02:00
Jeroen Ketema
a027665ab4
C++: Add ability to see if one template was generated from another
2026-05-22 13:13:21 +02:00
Óscar San José
de1cb26a93
Merge pull request #21890 from github/codeql-spark-run-26283874463
...
Update changelog documentation site for codeql-cli-2.25.5
2026-05-22 13:11:25 +02:00
github-actions[bot]
9599f01ae0
update codeql documentation
2026-05-22 11:02:30 +00:00
