Commit Graph

84810 Commits

Author SHA1 Message Date
Tom Hvitved
a707527022 Address review comments in annotations.py 2025-12-03 20:46:30 +01:00
Geoffrey White
2665d8395a Merge pull request #20939 from geoffw0/saltmodel
Rust: Add heuristic sinks for passwords, initialization vectors etc
2025-12-03 18:01:48 +00:00
Tom Hvitved
ca9d327280 Merge pull request #20915 from hvitved/content-flow-ap-limit
Shared: Improvements to content-sensitive model generation
2025-12-03 15:54:57 +01:00
Michael Nebel
a903420122 C#: Add change note. 2025-12-03 15:49:37 +01:00
Michael Nebel
0d08f24a2d C#: Invoke the extractor after the compiler to ensure that source generators have been executed. 2025-12-03 15:49:35 +01:00
yoff
7fd4755e93 Merge pull request #20919 from yoff/python/header-splitting-experiments
Python: detecting header splitting in synthetic app
2025-12-03 15:48:54 +01:00
Tom Hvitved
3ba256a72a C#/Java: Go back to access path limit 2 2025-12-03 15:05:02 +01:00
Paolo Tranquilli
599d342b33 Dependabot: add bazel 2025-12-03 14:52:02 +01:00
Anders Schack-Mulligen
78e1879c9e Use more flowTo. 2025-12-03 14:12:08 +01:00
Anders Schack-Mulligen
dc6d3fe7ba Use flowFrom. 2025-12-03 14:04:18 +01:00
Anders Schack-Mulligen
4191b18410 Dataflow: Add flowFrom predicates to mirror flowTo. 2025-12-03 13:46:44 +01:00
Simon Friis Vindum
299fed5901 Rust: Apply fixes from code review 2025-12-03 13:04:54 +01:00
Simon Friis Vindum
a05d0a906c Rust: Add change note for raw pointer type inference 2025-12-03 11:56:54 +01:00
Michael Nebel
c1793ab529 C#: Code quality improvement. 2025-12-03 11:48:32 +01:00
Paolo Tranquilli
5784a216a2 Merge pull request #20810 from github/redsun82/update-bazel
Bazel: update to 8.4.2
2025-12-03 11:45:38 +01:00
Geoffrey White
3028e5dac0 Rust: CallExpr -> Call. 2025-12-02 17:31:35 +00:00
Owen Mansel-Chan
e710c150de Add change note 2025-12-02 17:12:05 +00:00
Owen Mansel-Chan
a85d0ea8a3 Make tests pass 2025-12-02 17:08:16 +00:00
Owen Mansel-Chan
8fd8fc07b7 Add failing tests for more regex match methods 2025-12-02 17:06:34 +00:00
github-actions[bot]
085faa2bdb Post-release preparation for codeql-cli-2.23.7 2025-12-02 16:39:43 +00:00
Óscar San José
dce6d0e222 Merge pull request #20955 from github/release-prep/2.23.7
Release preparation for version 2.23.7
codeql-cli/v2.23.7
2025-12-02 17:06:20 +01:00
Owen Mansel-Chan
566aa8f201 Refactor regex sanitizer
Move it to Sanitizers.qll and rename it to be more general (mostly
following Go).
2025-12-02 16:04:39 +00:00
github-actions[bot]
a045b317ac Release preparation for version 2.23.7 2025-12-02 15:31:27 +00:00
Michael Nebel
3197b50da7 C#: Address review comments. 2025-12-02 16:16:29 +01:00
Simon Friis Vindum
236df0ab65 Rust: Accept changes to expected files 2025-12-02 15:07:54 +01:00
Michael Nebel
1d9b88de8b C#: Comment back in the .NET 10 tests. 2025-12-02 14:59:45 +01:00
Simon Friis Vindum
ea1b0a8476 Rust: Fix path resolution for raw pointer types 2025-12-02 14:43:52 +01:00
Simon Friis Vindum
c15e12c9ff Rust: Accept test changes 2025-12-02 14:43:51 +01:00
Simon Friis Vindum
785025f1e3 Rust: Type inference for raw pointers 2025-12-02 14:43:50 +01:00
Michael Nebel
4a6ae216a4 C#: Gracefully handle non-zero exitcodes for dotnet --info. 2025-12-02 14:42:00 +01:00
Anders Schack-Mulligen
5d63b6e723 C#: Accept integration test change 2025-12-02 14:03:31 +01:00
Owen Mansel-Chan
e52f819df0 Merge pull request #20949 from owen-mc/go/reinstate-dummy-test
Go: Reinstate dummy test so consistency tests are run
2025-12-02 12:55:36 +00:00
Anders Schack-Mulligen
67a2bced0d C#: Accept CFG dead ends for compilation errors. 2025-12-02 13:49:18 +01:00
Anders Schack-Mulligen
2eb2a50ccd C#: Fix enclosing DataFlowCallable of ObjectInitMethods with multiple bodies. 2025-12-02 13:49:17 +01:00
Anders Schack-Mulligen
ba7b517a4a C#: Tweaks from review comments. 2025-12-02 13:49:17 +01:00
Anders Schack-Mulligen
7e4e872430 C#: Accept expected changes. 2025-12-02 13:49:16 +01:00
Anders Schack-Mulligen
541dce4d17 C#: Accept PrintAst index shift. 2025-12-02 13:49:16 +01:00
Anders Schack-Mulligen
02e5f4545a C#: Fixup test 2025-12-02 13:49:15 +01:00
Anders Schack-Mulligen
85121e88b4 C#: Move and rename module. 2025-12-02 13:49:14 +01:00
Anders Schack-Mulligen
24a575a7a5 C#: Replace initializer splitting with ObjectInitMethod. 2025-12-02 13:49:14 +01:00
Anders Schack-Mulligen
9414cfbd03 C#: Add extractor support for object initializer methods. 2025-12-02 13:49:13 +01:00
Anders Schack-Mulligen
a7066ec758 C#: Add object initializer test. 2025-12-02 13:49:13 +01:00
Simon Friis Vindum
3e7a7d541b Rust: Include certain types in type inference tests 2025-12-02 13:16:33 +01:00
Simon Friis Vindum
6a2502c97a Rust: Add type inference tests for raw pointers 2025-12-02 13:14:09 +01:00
Owen Mansel-Chan
e9cb183670 Revert "Delete dummy.ql for now"
This reverts commit 38cb6e5a00.
2025-12-02 11:41:39 +00:00
Owen Mansel-Chan
848677e580 Merge pull request #20917 from owen-mc/go/enable-data-flow-consistency-checks
Go: enable data flow consistency checks
2025-12-02 10:52:47 +00:00
Tom Hvitved
7378fbc567 Rust: Restructure classes representing calls 2025-12-02 10:08:04 +01:00
Joe Farebrother
7cf3964e44 Update expectations 2025-12-01 20:27:48 +00:00
Tom Hvitved
666855dbd7 Shared: Improvements to content-sensitive model generation 2025-12-01 21:23:14 +01:00
Tom Hvitved
3e5ea5664c Rust: Add DB downgrade script 2025-12-01 20:59:31 +01:00