Commit Graph

80347 Commits

Author SHA1 Message Date
Asger F
fb92d9b034 JS: Update type usage in UnreachableMethodOverloads
This query depended on the cons-hashing performed by type extraction to determine if two types are the same.

This is not trivial to restore, but not important enough to reimplement right now, so for now just simplifying the query's ability to recognise that two types are the same.
2025-06-23 12:55:06 +02:00
Asger F
8b2a424fb0 JS: Update type usage use in Express model 2025-06-23 12:55:05 +02:00
Asger F
b71d09630a JS: Update type usage in Electron model 2025-06-23 12:55:03 +02:00
Asger F
ace8b09a36 JS: Update type usage in ClassValidator.qll 2025-06-23 12:55:01 +02:00
Asger F
9d4c38b5f1 JS: Update type usage in definitions.qll 2025-06-23 12:54:59 +02:00
Asger F
17a687b38f JS: Update type usage in Nest library model 2025-06-23 12:54:57 +02:00
Asger F
b82e84930c JS: Add public API 2025-06-23 12:54:56 +02:00
Asger F
2a0c7c8801 JS: Add classHasGlobalName into NameResolution 2025-06-23 12:54:55 +02:00
Asger F
de9dab9ba3 JS: Move some predicates into NameResolution 2025-06-23 12:54:53 +02:00
Asger F
93c891a987 Merge pull request #19822 from Fdawgs/patch-1
JS: Update Fastify tld
2025-06-23 12:49:42 +02:00
Paolo Tranquilli
4eb98fc46e Merge pull request #19280 from github/redsun82/rust-doc
Rust: update docs for public preview
2025-06-23 10:56:39 +02:00
Paolo Tranquilli
915b0b3861 Update docs/codeql/codeql-language-guides/analyzing-data-flow-in-rust.rst
Co-authored-by: Sunbrye Ly <56200261+sunbrye@users.noreply.github.com>
2025-06-23 10:16:55 +02:00
Paolo Tranquilli
bd0d996664 Merge branch 'main' into redsun82/rust-doc 2025-06-23 10:16:38 +02:00
Tom Hvitved
12cda86141 Merge pull request #19826 from hvitved/csharp/function-auth-test
C#: Add another test for `MissingAccessControl.ql`
2025-06-23 10:02:33 +02:00
Paolo Tranquilli
23c449f21f Merge pull request #19824 from github/redsun82/rust-derive-macro-expansion
Rust: expand derive macros
2025-06-23 09:42:49 +02:00
Paolo Tranquilli
25b337b5c5 Merge pull request #19819 from github/redsun82/rust-regenerate-models
Rust: adapt model generation to new format
2025-06-23 09:16:52 +02:00
Jeroen Ketema
a9169dc126 Merge pull request #19837 from jketema/typeref-dataset-check
C++: Update expected test results after extractor changes
2025-06-22 10:47:40 +02:00
Arthur Baars
f4bdd4d35a Merge branch 'main' into redsun82/rust-derive-macro-expansion 2025-06-20 19:32:08 +02:00
Arthur Baars
666144ef11 Merge pull request #19823 from github/aibaars/rust-expand-assoc-items
Rust: expand attribute macros on `AssocItem` and `ExternItem`
2025-06-20 19:13:44 +02:00
Arthur Baars
9605eb09b4 Merge pull request #19774 from github/aibaars/limit-diagnostics
Rust: limit number of diagnostics to 100 per trap file
2025-06-20 18:29:57 +02:00
Paolo Tranquilli
9c06a826cf Rust: apply suggestions from code review
Co-authored-by: Sunbrye Ly <56200261+sunbrye@users.noreply.github.com>
2025-06-20 18:16:32 +02:00
Arthur Baars
e3e88800d6 Merge branch 'main' into aibaars/rust-expand-assoc-items 2025-06-20 17:30:11 +02:00
Paolo Tranquilli
e8c3a2bfb9 Merge branch 'main' into redsun82/rust-regenerate-models 2025-06-20 17:22:49 +02:00
Paolo Tranquilli
3ddecd4d9f Merge pull request #19836 from github/redsun82/rust-fix-test-flakiness
Rust: yet another tentative fix to test flakiness
2025-06-20 17:20:52 +02:00
Paolo Tranquilli
01b84a8b1e Rust: yet another tentative fix to test flakiness 2025-06-20 16:58:38 +02:00
Paolo Tranquilli
c22526e9d0 Rust: add upgrade/downgrade scripts 2025-06-20 16:17:22 +02:00
Paolo Tranquilli
6064622961 Rust: accept test changes 2025-06-20 16:08:06 +02:00
Paolo Tranquilli
02b6e856a3 Rust: remove VariantDef 2025-06-20 15:59:18 +02:00
Taus
ac8b41a5da Merge pull request #19680 from github/tausbn/javascript-exclude-obviously-generated-files
JavaScript: Don't extract obviously generated files
2025-06-20 15:52:39 +02:00
Paolo Tranquilli
0d292b785c Rust: remove reduntant Item superclass from Adt subclasses 2025-06-20 15:45:18 +02:00
Arthur Baars
7bc3fd6ae9 Merge branch 'main' into aibaars/rust-expand-assoc-items 2025-06-20 15:38:34 +02:00
Napalys Klicius
3fbe348f99 Merge pull request #19784 from Napalys/js/express_middleware
JS: Improve Express middleware taint tracking
2025-06-20 15:36:26 +02:00
Paolo Tranquilli
bc8b1f251e Rust: rename asFunction to getFunction 2025-06-20 15:27:56 +02:00
Paolo Tranquilli
6253b5c5d0 Merge branch 'main' into redsun82/rust-regenerate-models 2025-06-20 15:27:40 +02:00
Paolo Tranquilli
7a3f4a622e Merge branch 'main' into aibaars/rust-expand-assoc-items 2025-06-20 15:22:20 +02:00
Paolo Tranquilli
670b835410 Merge branch 'main' into redsun82/rust-derive-macro-expansion 2025-06-20 15:21:03 +02:00
Tom Hvitved
b234d775ac Merge pull request #19816 from hvitved/rust/path-resolution-crate-self
Rust: Path resolution for `crate::{self as foo}`
2025-06-20 14:50:28 +02:00
Paolo Tranquilli
f1f36db068 Merge pull request #19828 from github/redsun82/rust-fix-nightly-toolchain
Rust: fix nightly toolchain version for tests using it
2025-06-20 14:40:05 +02:00
Paolo Tranquilli
52c0028f85 Rust: make Adt be generated 2025-06-20 14:35:08 +02:00
Paolo Tranquilli
3590ccaa69 Rust: fix tests 2025-06-20 14:32:24 +02:00
Napalys Klicius
c1b2fd86b2 Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll
Co-authored-by: Taus <tausbn@github.com>
2025-06-20 14:29:51 +02:00
Simon Friis Vindum
6773903786 Merge pull request #19820 from paldepind/rust/explicit-dereference
Rust: Fix type inference for explicit dereference with `*` to the `Deref` trait
2025-06-20 14:23:14 +02:00
Paolo Tranquilli
691281a481 Rust: mark one value flow as spurious (should be taint) 2025-06-20 14:13:37 +02:00
Paolo Tranquilli
7f1769e8d1 Rust: fix nightly toolchain version for tests using it
Rather than fixing the version separately for each test, we can just
request to use a nightly in the `options.yml` file, with the specific
version hard-coded in `qltest.rs`. We can update it if we need to.

It's better to have a single nightly version for all tests that require
it, in order to avoid downloading more versions than necessary.
2025-06-20 14:03:42 +02:00
Jeroen Ketema
17ce5f42e6 C++: Update expected test results after extractor changes 2025-06-20 13:51:36 +02:00
Arthur Baars
2acce96bb5 Apply suggestions from code review
Co-authored-by: Paolo Tranquilli <redsun82@github.com>
2025-06-20 13:25:54 +02:00
Arthur Baars
b7f66f8653 Rust: Rust: expand attribute macros on AssocItem and ExternItem 2025-06-20 13:21:26 +02:00
Simon Friis Vindum
bd2812c821 Rust: Only resolve deref methods on references to avoid blowup 2025-06-20 12:49:22 +02:00
Napalys Klicius
8b3137626c Merge pull request #19743 from Napalys/js/quality/loop_shift
JS: Promote `js/loop-iteration-skipped-due-to-shifting` to the Code Quality suite
2025-06-20 12:36:29 +02:00
Tom Hvitved
84e93e2dc5 C#: Add another test for MissingAccessControl.ql 2025-06-20 11:49:30 +02:00