Asger F
d0dbc91aa9
Update javascript/ql/lib/semmle/javascript/ApiGraphs.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-01-07 11:05:41 +01:00
Asger F
9721b4e0f5
JS: Fix bad join in export logic
2026-01-07 11:05:41 +01:00
Asger F
cae27c40be
JS: Add a missing needsDefNode restriction
...
Previously this was implied by MkClassInstance but that's no longer
the case.
2026-01-07 11:05:41 +01:00
Asger F
369848a870
JS: Fix some QL4QL alerts
2026-01-07 11:05:41 +01:00
Asger F
869efb8a48
JS: Sync ApiGraphModels.qll
2026-01-07 11:05:41 +01:00
Asger F
97d369cf4e
JS: Make API::Node overlay[local?]
...
We want the type itself to be local but nearly all its member predicates
are global.
2026-01-07 11:05:41 +01:00
Asger F
27e8bcb347
JS: Add back promisify-all support
...
This was somehow lost in a rebase
2026-01-07 11:05:41 +01:00
Asger F
8731eee10e
JS: Work around an issue with overlay-invariance
2026-01-07 11:05:41 +01:00
Asger F
962c128f20
JS: Update test output to reflect Node.toString() change
2026-01-07 11:05:41 +01:00
Asger F
7974416e65
JS: Simplify toString()
2026-01-07 11:05:41 +01:00
Asger F
651608a170
JS: Bugfix in Stage1Local::trackDefNode
2026-01-07 11:05:41 +01:00
Asger F
ed3a8bdfa9
JS: Include import paths from custom ModuleImportNode::Range subclasses
2026-01-07 11:05:41 +01:00
Asger F
c687dc93b0
JS: Add overlay[global] to abstract classes with fields
...
Some abstract classes defines fields without binding them, leaving it up to the subclasses to bind them. When combined with overlay[local?], the charpred for such an abstract class can become local, while the subclasses are global. The means the charpred needs to be materialized, even though it doesn't bind the fields, leading to a cartesian product.
2026-01-07 11:05:41 +01:00
Asger F
cf0e7652f4
JS: Remove global dependency that wasnt needed anyway
2026-01-07 11:05:41 +01:00
Asger F
a6dfb8351c
JS: Add back CallReceiverStep() restriction
...
This was initially lost after rebasing with indentation changes
2026-01-07 11:05:41 +01:00
Asger F
825c08356f
JS: Change signature of 'edges' to support quick eval
2026-01-07 11:05:41 +01:00
Asger F
4bd0f34938
JS: Add debug tools for detecting lost nodes/edges
2026-01-07 11:05:41 +01:00
Asger F
c9d3f06fbc
JS:Add more member labels
2026-01-07 11:05:41 +01:00
Asger F
9c37e076cc
JS: Add overlay-specific Stage2
2026-01-07 11:05:41 +01:00
Asger F
1001e86f20
JS: Restrict Stage1 to the base database
2026-01-07 11:05:41 +01:00
Asger F
b12d927020
JS: Also expose "any state" version of tracking predicates
2026-01-07 11:05:41 +01:00
Asger F
daf04f1184
JS: Call forceLocal on the output of Stage 1
2026-01-07 11:05:41 +01:00
Asger F
271567c88f
JS: Add missing def-node roots
2026-01-07 11:05:41 +01:00
Asger F
123bc64091
JS: Improve join order at MkUse call
2026-01-07 11:05:41 +01:00
Asger F
295bc6981d
JS: Make API nodes and labels local
2026-01-07 11:05:41 +01:00
Asger F
6c00a7fb96
JS: Remove unused predicate
2026-01-07 11:05:41 +01:00
Asger F
3ed0f36bb1
JS: Use forceLocal to localize MkTypeUse
2026-01-07 11:05:41 +01:00
Asger F
385bb32710
JS: Localize MkClassInstance
2026-01-07 11:05:41 +01:00
Asger F
a2a9518d2a
JS: Localize MkModuleImport
2026-01-07 11:05:41 +01:00
Asger F
3110e5a8ac
JS: Localize MkModuleExport
2026-01-07 11:05:41 +01:00
Asger F
c8108d109d
JS: Localize charpred of API::EntryPoint
...
This is needed for localizing ApiLabel later
2026-01-07 11:05:41 +01:00
Asger F
b69f8532d0
JS: Moving 'cache' annotations outside the parameterised module
2026-01-07 11:05:41 +01:00
Asger F
10db30a715
JS: Parameterise the module (still only one instantiation)
2026-01-07 11:05:41 +01:00
Asger F
465f4b987d
JS: Wrap in a module
...
Simply wraps everything in 'cached private module Stage {}' and adds 'import Stage'.
The diff is large because of indentation changes.
2026-01-07 11:05:41 +01:00
Asger F
fd65eeba0a
JS: Make use() and rhs() uncached and private
2026-01-07 11:05:41 +01:00
Asger F
8f413856e0
JS: Make other node types not depend on tracking predicates
2026-01-07 11:05:41 +01:00
Asger F
7fc87536bf
JS: Make MkSyntheticCallbackArg() independent of trackUseNode
2026-01-07 11:05:41 +01:00
Asger F
12c0ad0e04
JS: Stop dependeding on getPath() for toString()
2026-01-07 11:05:41 +01:00
Geoffrey White
503a1b5d0c
Merge pull request #21107 from geoffw0/rusttest
...
Rust: Additional test cases for tuple content.
2026-01-07 09:37:14 +00:00
Michael Nebel
77b0c4bbe4
Merge pull request #21111 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-01-07 09:41:21 +01:00
github-actions[bot]
53a0b8dd47
Add changed framework coverage reports
2026-01-07 00:25:25 +00:00
Geoffrey White
13df23630b
Rust: Effect of lifting content reads as taint steps.
2026-01-06 16:47:07 +00:00
Geoffrey White
6e2702c3af
Rust: Add some taint tests involving tuples.
2026-01-06 16:38:36 +00:00
Tom Hvitved
1a2f72252a
Merge pull request #21072 from hvitved/rust/mad-provenance-refactor
...
Rust: Refactor MaD provenance-based filtering
2026-01-06 14:59:42 +01:00
Tom Hvitved
da6d0abe31
Address review comment
2026-01-06 14:35:07 +01:00
Taus
72f9e34318
Merge pull request #20708 from github/tausbn/python-add-support-for-template-string-literals
...
Python: Add support for template string literals
2026-01-06 14:33:51 +01:00
Jeroen Ketema
4ede207c1f
Merge pull request #20926 from jketema/jketema/frontend-update
...
C++: Update expected test results after frontend update
2026-01-06 14:25:40 +01:00
Jeroen Ketema
d02ef7c6b1
C++: Add change notes
2026-01-06 13:53:47 +01:00
Jeroen Ketema
17b22bc088
C++: Update expected test results after frontend _Generic fix
2026-01-06 13:53:45 +01:00
Jeroen Ketema
5117b5906b
C++: Exclude comparisons from enum constants in `cpp/constant-comparison
2026-01-06 13:53:44 +01:00
