hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-06 02:01:09 +01:00
Code Issues Packages Projects Releases Wiki Activity
41,418 Commits 1,690 Branches 160 Tags
codeql-cli/v2.10.2
Commit Graph

41418 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Geoffrey White
dc1ec635fb CPP: Undo an accidentally committed change to the test. 2019-08-12 11:17:02 +01:00
Mark Shannon
96ba9a2dfd Python points-to. Do not track tuples on lhs of assignment or in deletions. 2019-08-12 11:04:28 +01:00
semmle-qlci
e890aba4fe Merge pull request #1712 from hvitved/csharp/remove-nomagic 
Approved by calumgrant
 2019-08-12 10:59:10 +01:00
Max Schaefer
020d31c3b6 JavaScript: Fix inconisstency in TaintedPath.qhelp. 2019-08-12 10:29:41 +01:00
Max Schaefer
80cfe070d4 JavaScript: Fix inconsistency in MissingRegExpAnchor.qhelp. 2019-08-12 10:29:21 +01:00
Anders Schack-Mulligen
de13d0cced Java: Adjust change note. 2019-08-12 10:39:59 +02:00
Tom Hvitved
98ab2b26dc C#: Fix bad join-order in guardImpliesNotEqual() 2019-08-12 09:50:17 +02:00
Jonas Jensen
5724fb0df0 Merge pull request #1706 from geoffw0/qldoceg3 
CPP: Add syntax examples to QLDoc in Struct.qll, Union.qll.
 2019-08-12 07:57:40 +02:00
Ziemowit Laski
6eda7f354a Remove builtin functions and macros; minor fixes and tweaks. 2019-08-09 13:06:14 -07:00
Geoffrey White
208f533245 CPP: Brace placement. 2019-08-09 17:48:57 +01:00
Geoffrey White
11d17b891e CPP: Brace placement. 2019-08-09 17:44:55 +01:00
Geoffrey White
e149b6a332 CPP: Brace placement. 2019-08-09 17:42:02 +01:00
semmle-qlci
a6cae2bf3e Merge pull request #1723 from xiemaisi/js/overlapping-barriers 
Approved by asger-semmle
 2019-08-09 16:19:32 +01:00
Jonas Jensen
0507d51f0c C++: Prune getAReachedBlockVarSBB using live vars 
On a Postgres snapshot, where the `getAReachedBlockVarSBB` predicate
performs badly because of a Yacc-generated 20,000-line parser loop, that
predicate is reduced from 4m22s to 1m32s plus 5.2s for the live
variables analysis.

This change removes 17,142 rows from `BlockVar.getAnAccess` on Postgres.
I sampled some of them, and they were all of the following form:

    while (...) {
      T x;
      f1(&x); // access
      f2(&x); // definition
    }

Such accesses are ruled out now because we deliberately lose track of
variables when they go out of scope.
 2019-08-09 16:06:28 +02:00
Anders Schack-Mulligen
41763e6025 Java: Treat SecureJDKXercesXMLReader as a secure XMLReader. 2019-08-09 16:00:41 +02:00
Jonas Jensen
b348803a66 Merge pull request #1594 from geoffw0/erafix7 
CPP: Add test coverage for LeapYearFieldAccess.isModifiedByArithmeticOperation.
 2019-08-09 15:57:35 +02:00
Felicity Chapman
ab07128833 Merge pull request #1722 from jf205/rename-docs-folder 
docs: add CODEOWNERS entries and rename `ql-documentation` > `language`
 2019-08-09 14:56:14 +01:00
Max Schaefer
d2f4575978 JavaScript: Expand qldoc for {Barrier,Sanitizer}GuardNode. 2019-08-09 14:19:53 +01:00
Jonas Jensen
8aa24fe5c9 C++: Improve QLDoc on assignmentLikeOperation 2019-08-09 15:06:19 +02:00
semmle-qlci
3b0ddf54bc Merge pull request #1719 from Semmle/xiemaisi-patch-2 
Approved by jf205
 2019-08-09 12:46:57 +01:00
Max Schaefer
fd93998dee Fix typos in CONTRIBUTING.md 2019-08-09 12:44:28 +01:00
james
3800b44e51 add CODEOWNERS entry for ql language docs 2019-08-09 12:38:58 +01:00
james
79a1583ed5 add docs team to CODEOWNERS for relevant qhelp files 2019-08-09 12:35:32 +01:00
james
b6d6774329 docs: rename ql-documentation > language 2019-08-09 12:30:31 +01:00
Anders Schack-Mulligen
079b453f39 Java: Add change note. 2019-08-09 13:04:34 +02:00
Geoffrey White
67eb37f460 CPP: Update test annotations. 2019-08-09 09:31:47 +01:00
Ziemowit Laski
810c884921 Rough first draft of final document. 2019-08-08 14:48:19 -07:00
Jonas Jensen
605b56f8ca Merge pull request #1563 from geoffw0/constexprif 
CPP: Test cases for EmptyBlock.ql with 'if constexpr'
 2019-08-08 20:57:28 +02:00
Rebecca Valentine
8823cdfdbc Merge pull request #1713 from markshannon/python-remove-parents 
Python taint-tracking: Remove 'parents' query from path-queries.
 2019-08-08 10:01:40 -07:00
Rebecca Valentine
56c3a4d6e5 Merge pull request #1632 from markshannon/python-account-for-dynamically-defined-builtin-instances 
Python points-to: track more instances.
 2019-08-08 09:59:11 -07:00
Rebecca Valentine
bb19d45066 Merge pull request #1638 from markshannon/python-port-to-new-api 
Python: port a few queries to new API.
 2019-08-08 09:58:15 -07:00
Geoffrey White
1173daefca CPP: Minor changes. 2019-08-08 17:55:50 +01:00
Geoffrey White
950bc6e3d0 CPP: Brace placement. 2019-08-08 17:51:27 +01:00
Geoffrey White
c406746190 CPP: Brace placement. 2019-08-08 17:16:47 +01:00
Geoffrey White
5bdaefd504 CPP: Brace placement. 2019-08-08 17:13:58 +01:00
Geoffrey White
f0e6730eba Update cpp/ql/src/semmle/code/cpp/Union.qll 
Co-Authored-By: Jonas Jensen <jbj@knef.dk>
 2019-08-08 17:11:05 +01:00
Geoffrey White
a1cf7b50a9 Update cpp/ql/src/semmle/code/cpp/Struct.qll 
Co-Authored-By: Jonas Jensen <jbj@knef.dk>
 2019-08-08 17:10:52 +01:00
Geoffrey White
7086004f8a Update cpp/ql/src/semmle/code/cpp/Union.qll 
Co-Authored-By: Jonas Jensen <jbj@knef.dk>
 2019-08-08 17:06:44 +01:00
Geoffrey White
b3bcc33bce Update cpp/ql/src/semmle/code/cpp/Struct.qll 
Co-Authored-By: Jonas Jensen <jbj@knef.dk>
 2019-08-08 17:06:17 +01:00
Calum Grant
9512b701bf Merge pull request #1599 from jf205/contributing-queries/sd-3476 
docs: add more information about contributing queries to the public repo
 2019-08-08 16:55:32 +01:00
semmledocs-ac
ec5b2da7dc Merge pull request #1681 from jf205/responsive-slides 
Docs: a few CSS tweaks to improve slide appearance on small screens
 2019-08-08 16:35:57 +01:00
james
e25749d5de docs: 2nd review comment 2019-08-08 15:52:22 +01:00
Tom Hvitved
5ecf680cc2 C#: Improve performance of SSA adjacent reads calculation 
- Speedup the `varBlockReaches()` predicate, by restricting to basic blocks
  in which a given SSA definition may still be live, in constrast to just
  being able to reach *any* access (read or write) to the underlying source
  variable.
- Account for some missing cases in the `lastRead()` predicate.
 2019-08-08 16:21:57 +02:00
Geoffrey White
82bf631541 CPP: Add test cases. 2019-08-08 15:02:56 +01:00
Geoffrey White
ef37893d15 CPP: Improve the MemberFunctions test. 2019-08-08 15:02:56 +01:00
Geoffrey White
843b85c0e6 CPP: Test PureVirtualFunction. 2019-08-08 15:02:55 +01:00
Geoffrey White
44ea685bf3 CPP: Simplify the VirtualFunctions test. 2019-08-08 15:02:55 +01:00
Geoffrey White
be25338e44 CPP: QLDoc Function.qll. 2019-08-08 15:02:55 +01:00
Calum Grant
cb8544d6e4 Merge pull request #1695 from hvitved/csharp/multiple-dataflow-copies 
C#: Add more copies of the data flow library (ODASA-8039)
 2019-08-08 13:24:54 +01:00
Jonas Jensen
2c6dbacd2b C++: Tidy up DataFlowUtil.qll 2019-08-08 14:05:03 +02:00