Asger F
82d190f4bf
Java: use approximate related sink locations in polynomial redos
2025-07-02 14:40:56 +02:00
Asger F
a46b5f9529
Python: enable diff-informedness for poly redos using approximate related locations
2025-07-02 14:39:42 +02:00
Asger F
d65da1f8a1
Ruby: enable for PolyReDos but document why it still doesnt work
2025-07-02 14:39:41 +02:00
Asger F
8b345518f4
Shared: Add approximate version of getASelected{Source,Sink}Location
2025-07-02 14:39:39 +02:00
Asger F
d1b4172486
Shared: Factor out some helper predicates in alert filtering
2025-07-02 14:39:37 +02:00
Asger F
d85838477e
JS: Update Nest model
...
An external contribution added more uses of the now-deprecated getType()
predicate while this PR was open.
2025-07-02 14:11:31 +02:00
Jeroen Ketema
d17c931939
Merge pull request #19952 from jketema/comment-cleanup
...
C++: Remove QLtest related comment from integration test
2025-07-02 13:59:15 +02:00
Asger F
47a90c8b32
Merge branch 'main' into js/no-type-extraction
2025-07-02 13:18:05 +02:00
Jeroen Ketema
e47f16b100
Merge pull request #19947 from jketema/function-confusion
...
C++: Move builtin function identification to its own table
2025-07-02 12:56:18 +02:00
Paolo Tranquilli
c4ec0765ea
Merge pull request #19951 from github/aibaars/rust-workflows
...
Rust: add trailing newline to rust-cwe.md
2025-07-02 12:26:48 +02:00
Paolo Tranquilli
c70198e4e4
Rust: change dummy macro call expansion
2025-07-02 12:25:10 +02:00
Jeroen Ketema
def0ee90c3
C++: Remove QLtest related comment from integration test
...
I forgot to remove this in https://github.com/github/codeql/pull/19410
2025-07-02 12:14:38 +02:00
Arthur Baars
9e54bc6918
Rust: add trailing newline to rust-cwe.md
2025-07-02 11:39:00 +02:00
Tom Hvitved
f7195f04f8
Rust: Handle more explicit type arguments in type inference
2025-07-02 11:37:05 +02:00
Tom Hvitved
b6d5225bf5
Rust: Add more type inference tests
2025-07-02 11:37:03 +02:00
Tom Hvitved
d10002c735
Merge pull request #19927 from hvitved/rust/type-inference-overlap3
...
Rust: Disambiguate more method calls based on argument types
2025-07-02 11:36:37 +02:00
Paolo Tranquilli
bf09c92528
Rust: add location to dummy MacroCalls in library mode
2025-07-02 10:33:53 +02:00
Paolo Tranquilli
63ccbec933
Rust: accept language test changes
2025-07-02 10:19:52 +02:00
Geoffrey White
3e11dbded0
Rust: Accept test changes.
2025-07-02 09:08:15 +01:00
Asger F
4b2025d2c4
JS: Remove obsolete unit tests
2025-07-02 09:54:18 +02:00
Asger F
2aad14771c
JS: Remove TypeScriptMode
2025-07-02 08:39:17 +02:00
Jeroen Ketema
1103644737
C++: Add upgrade and downgrade scripts
2025-07-01 23:38:24 +02:00
Jeroen Ketema
3418451bee
C++: Update stats file
2025-07-01 23:16:26 +02:00
Jeroen Ketema
19d6f665b4
Merge pull request #19676 from mrigankpawagi/patch-1
...
Fixes in cpp/global-use-before-init
2025-07-01 19:17:29 +02:00
REDMOND\brodes
a98f4c29d3
Crypto: Code scanning warning fix.
2025-07-01 12:26:50 -04:00
REDMOND\brodes
ff93045938
Crypto: remove JCA bad import.
2025-07-01 12:21:51 -04:00
REDMOND\brodes
88d36aa574
Crypto: Intermediate JCA updates to support new MAC model. Work in progress.
2025-07-01 12:19:15 -04:00
Geoffrey White
7ef5586cc7
Rust: Translate more legacy models -> new models (mostly guesswork for these last few cases).
2025-07-01 17:15:26 +01:00
Jeroen Ketema
65b21286a1
C++: Move builtin function identification to its own table
2025-07-01 18:00:44 +02:00
Geoffrey White
e56b9debf8
Rust: Fix mistake.
2025-07-01 16:55:06 +01:00
REDMOND\brodes
0270fac4e7
Crypto: Update model to have a mac operation instance that extends the signature or mac operation instance.
2025-07-01 11:51:40 -04:00
Geoffrey White
3027f75617
Rust: Translate more legacy models -> new models (from data).
2025-07-01 16:37:14 +01:00
Paolo Tranquilli
223f0c8684
Rust: fix macro expansion in library code
...
There was a mismatch between a `self.macro_context_level += 1` and the
corresponding `self.macro_context_level -= 1`, which resulted in an
`usize` underflow (panic in debug mode, wrong behaviour in release
mode).
This fixes it and adds a relevant assertion and test. In order to
properly test library mode extraction, a special option enforcing that
on source code as well is added.
2025-07-01 17:31:26 +02:00
Jeroen Ketema
7c2fd28585
Merge pull request #19938 from jketema/external
...
C++: Remove unused `external_package` tables from the dbscheme
2025-07-01 16:50:31 +02:00
REDMOND\brodes
d32e09ac37
Crypto: Misc. cleanup and completed model refactor for Mac. Passing tests for openssl, refactor still required for JCA.
2025-07-01 10:37:09 -04:00
Mrigank Pawagi
fe24cc876a
Merge branch 'main' into patch-1
2025-07-01 20:04:13 +05:30
Arthur Baars
4c6c395b1b
Merge pull request #19939 from github/aibaars/rust-workflows
...
Rust: add to `generate-code-scanning-query-list.py` and `shared-code-metrics.py` scripts
2025-07-01 16:12:11 +02:00
Jeroen Ketema
02e5541953
Merge branch 'main' into patch-1
2025-07-01 15:58:48 +02:00
Mrigank Pawagi
b821b21500
Create 2025-07-01-global-vars-ubi-query-fixes.md.md
2025-07-01 13:12:38 +00:00
Tom Hvitved
add2e0fd9d
Rust: Extend methodResolutionDependsOnArgument to parameterized implementations
2025-07-01 14:22:06 +02:00
Tom Hvitved
961e6201ea
Rust: Add more type inference tests
2025-07-01 14:22:04 +02:00
Geoffrey White
cb6640474e
Rust: Translate more legacy models -> new models (from data + manual extrapolation).
2025-07-01 13:21:52 +01:00
Tom Hvitved
b813010b75
Merge pull request #19903 from hvitved/rust/type-inference-overlap2
...
Rust: Apply inherent method prioritization inside type inference loop
2025-07-01 14:21:15 +02:00
Tom Hvitved
d6b051ed30
Merge pull request #19936 from hvitved/rust/path-resolution-prelude-always
...
Rust: Assume prelude is always available in path resolution
2025-07-01 13:13:35 +02:00
Owen Mansel-Chan
811ed3ccde
Merge pull request #19892 from owen-mc/fix-markdown-query-help-formatting
...
Fix markdown query help formatting
2025-07-01 12:05:35 +01:00
Tom Hvitved
219a622299
Merge pull request #19926 from hvitved/ruby/restrict-string-component-length
...
Ruby: Do not compute `StringlikeLiteralImpl.getStringValue` for large strings
2025-07-01 12:45:51 +02:00
Arthur Baars
c08d98d159
Rust: add to querylist and shared code metrics scripts
2025-07-01 12:16:42 +02:00
Tom Hvitved
072339137a
Rust: Update expected test output
2025-07-01 10:34:16 +02:00
Jeroen Ketema
f3c5870d44
C++: Update stats file
2025-07-01 10:21:51 +02:00
Tom Hvitved
bd1f46b75c
Rust: Assume prelude is always available in path resolution
2025-07-01 10:18:02 +02:00
