codeqlhelper
|
cf21997c0f
|
Reduce false alarms raised by static variables
Static variables are initialized to zero or null by compiler, no need to get an initializer of them.
See https://stackoverflow.com/questions/13251083/the-initialization-of-static-variables-in-c
See 6.7.8/10 in the C99 Standard.
A relevant PR: https://github.com/github/codeql/pull/16527
|
2025-07-27 23:46:53 +08:00 |
|
codeqlhelper
|
89dcad48f4
|
Create InitialisationNotRun.qlref
|
2025-07-27 23:42:50 +08:00 |
|
codeqlhelper
|
c2d0a12e1e
|
Create test for InitialisationNotRun
|
2025-07-27 23:40:00 +08:00 |
|
Mathias Vorreiter Pedersen
|
5da7ae877b
|
Merge pull request #20115 from MathiasVP/add-more-windows-memcpy-functions
C++: Add some more Windows specific memory copy models
|
2025-07-23 16:10:56 +01:00 |
|
Mathias Vorreiter Pedersen
|
cbe5561eb6
|
C++: Accept test changes.
|
2025-07-23 14:05:42 +01:00 |
|
Mathias Vorreiter Pedersen
|
9d736723fb
|
C++: Add more Windows specific models for memcpy-like tings.
|
2025-07-23 13:45:20 +01:00 |
|
Mathias Vorreiter Pedersen
|
50785f7f21
|
C++: Add tests with missing flow.
|
2025-07-23 13:37:32 +01:00 |
|
Mathias Vorreiter Pedersen
|
3a977b86d4
|
Update cpp/ql/lib/semmle/code/cpp/security/ProductFlowUtils/ProductFlowUtils.qll
Co-authored-by: Idriss Riouak <idrissrio@github.com>
|
2025-07-23 12:27:38 +01:00 |
|
Mathias Vorreiter Pedersen
|
5d6c4a63bb
|
Update cpp/ql/lib/semmle/code/cpp/security/ProductFlowUtils/ProductFlowUtils.qll
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-07-23 11:53:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
019447b681
|
C++: Add change note.
|
2025-07-23 11:49:07 +01:00 |
|
Mathias Vorreiter Pedersen
|
1189665970
|
C++: Add barriers to 'cpp/overrun-write'.
|
2025-07-22 18:35:56 +01:00 |
|
Mathias Vorreiter Pedersen
|
a502bb1ac2
|
C++: Add a copy of 'isSinkPairImpl' (named 'isSinkPairImpl0') with a few more columns that we'll need.
|
2025-07-22 18:35:50 +01:00 |
|
Mathias Vorreiter Pedersen
|
e0eadc75dd
|
C++: Remove the ad-hoc code for keeping track of increments/decrements on pointers in the 'cpp/overrun-write' query.
|
2025-07-22 18:35:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
a1f4246c5f
|
C++: Extract the barriers from 'cpp/invalid-pointer-deref' into a library.
|
2025-07-22 18:35:29 +01:00 |
|
Mathias Vorreiter Pedersen
|
92a730c9ac
|
C++: Add a false positive.
|
2025-07-22 18:35:21 +01:00 |
|
github-actions[bot]
|
37cc78255a
|
Post-release preparation for codeql-cli-2.22.2
|
2025-07-22 14:22:20 +00:00 |
|
Nick Rolfe
|
43d14c28c2
|
Tweak changenotes
|
2025-07-22 15:06:09 +01:00 |
|
github-actions[bot]
|
997547b8ef
|
Release preparation for version 2.22.2
|
2025-07-22 14:04:14 +00:00 |
|
Nick Rolfe
|
825c813095
|
Revert "Release preparation for version 2.22.2"
|
2025-07-22 14:33:45 +01:00 |
|
github-actions[bot]
|
deb035cf4e
|
Post-release preparation for codeql-cli-2.22.2
|
2025-07-22 09:36:07 +00:00 |
|
Nick Rolfe
|
74cd982aca
|
Tweak changenotes
|
2025-07-22 09:51:52 +01:00 |
|
github-actions[bot]
|
c8632b70b7
|
Release preparation for version 2.22.2
|
2025-07-21 16:45:45 +00:00 |
|
Nick Rolfe
|
ad9b637bec
|
Revert "Merge pull request #19994 from github/post-release-prep/codeql-cli-2.22.2"
This reverts commit e5b4a15e35, reversing
changes made to 33e63109bb.
|
2025-07-21 15:18:59 +01:00 |
|
Idriss Riouak
|
36ebe99f2f
|
Merge pull request #19707 from microsoft/lwsimpkins/fix-qhelp-upstream
fix qhelp files
|
2025-07-17 14:51:01 +02:00 |
|
Jeroen Ketema
|
29a6af4efd
|
C++: Fix instruction class name
|
2025-07-16 18:11:17 +02:00 |
|
Jeroen Ketema
|
f319381f27
|
C++: Support the spaceship operator in the IR
|
2025-07-16 17:53:55 +02:00 |
|
Jeroen Ketema
|
9b8302f983
|
Merge pull request #20068 from jketema/spaceship-test
C++: Add test that shows that IR generation for `<=>` is broken
|
2025-07-16 16:50:25 +02:00 |
|
Jeroen Ketema
|
807ab986f4
|
C++: Update more exoected test results
|
2025-07-16 16:19:40 +02:00 |
|
Jeroen Ketema
|
2709bf0615
|
C++: Add test that shows that IR generation for <=> is broken
|
2025-07-16 15:54:18 +02:00 |
|
Mathias Vorreiter Pedersen
|
8b953e4f22
|
C++: No need for 'resolveCall' anymore.
|
2025-07-16 14:28:04 +01:00 |
|
Mathias Vorreiter Pedersen
|
df4b338c5d
|
C++: Add change notes.
|
2025-07-16 14:11:09 +01:00 |
|
Mathias Vorreiter Pedersen
|
ca913b452c
|
C++: Don't summarize calls through function pointers in FunctionWithWrappers.
|
2025-07-16 11:51:46 +01:00 |
|
Jeroen Ketema
|
200d46f5c7
|
Merge pull request #20060 from jketema/typeid-fix
C++: Fix typeid IR translation
|
2025-07-16 12:40:03 +02:00 |
|
Jeroen Ketema
|
529712122c
|
C++: Address review comments
|
2025-07-15 22:15:11 +02:00 |
|
Jeroen Ketema
|
a08d594371
|
C++: Introduce TypeidInstruction base class
|
2025-07-15 21:31:24 +02:00 |
|
Jeroen Ketema
|
58aa7588e5
|
Merge pull request #20059 from MathiasVP/no-more-as-expr-inUncontrolledProcessOperation
C++: Reduce duplication in `cpp/uncontrolled-process-operation`
|
2025-07-15 21:17:08 +02:00 |
|
Jeroen Ketema
|
54f11ca611
|
C++: Fix typo in comment
|
2025-07-15 20:40:57 +02:00 |
|
Jeroen Ketema
|
70bff4e726
|
C++: Fix typeid IR translation
|
2025-07-15 20:24:17 +02:00 |
|
Jeroen Ketema
|
477edd215c
|
C++: Add test showing that the IR translation for typeid is broken
|
2025-07-15 17:29:00 +02:00 |
|
Mathias Vorreiter Pedersen
|
29cceeba1a
|
C++: Don't use asExpr to mark the sink in 'cpp/uncontrolled-process-operation'.
|
2025-07-14 18:08:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
c83895fdd2
|
Merge branch 'main' into fix-global-variable-recursion-fp
|
2025-07-14 16:08:46 +01:00 |
|
Mathias Vorreiter Pedersen
|
1d36405084
|
C++: Accept path changes.
|
2025-07-14 15:47:06 +01:00 |
|
Mathias Vorreiter Pedersen
|
a825213c05
|
C++: Fix FP by not generating a global def entry node for variable 'v' in the 'IRfunction' for 'v' itself.
|
2025-07-14 15:22:52 +01:00 |
|
Mathias Vorreiter Pedersen
|
46627c677d
|
C++: Add FP in dataflow through global variables.
|
2025-07-14 15:20:08 +01:00 |
|
Jeroen Ketema
|
d82d5c23bf
|
Merge pull request #20026 from jketema/concept-fix
C++: Fix C++20 concept related class extensions
|
2025-07-13 10:20:10 +02:00 |
|
Mathias Vorreiter Pedersen
|
1da42cb590
|
Merge pull request #20023 from MathiasVP/dataflow-for-functors
C++: Better dataflow for function objects
|
2025-07-11 15:14:27 +01:00 |
|
Mathias Vorreiter Pedersen
|
053a749e14
|
C++: Add change note.
|
2025-07-11 13:43:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
649c8831ec
|
Merge pull request #20014 from jketema/wchar
C++: Do not alert on unreachable code in `cpp/incorrect-string-type-conversion`
|
2025-07-11 13:39:37 +01:00 |
|
Jeroen Ketema
|
232377a583
|
C++: Fix C++20 concept related class extensions
|
2025-07-11 13:38:06 +02:00 |
|
Mathias Vorreiter Pedersen
|
4f538a2b1f
|
C++: Accept taint test changes.
|
2025-07-11 09:46:22 +01:00 |
|