Owen Mansel-Chan
512e27187e
Make new predicate private
2026-03-09 13:44:48 +00:00
Taus
f2bad1e6e1
Python: Improve docstring and make predicate private
2026-03-09 13:41:38 +00:00
Taus
c5360ba46c
Python: Fix bad join in method call order computation
...
This join had badness 1127 on the project FiacreT/M-moire, producing ~31
million tuples in order to end up with only ~27k tuples later in the
pipeline. With the fix, we reduce this by roughly the full 31 million
(the new materialised helper predicate accounting for roughly 130k
tuples on its own).
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2026-03-09 13:09:29 +00:00
Geoffrey White
be9c1d074f
Merge pull request #21376 from geoffw0/splitoff2
...
Rust: Update split_off models
2026-03-09 09:22:36 +00:00
Owen Mansel-Chan
097681e705
Update cpp/ql/lib/semmle/code/cpp/dataflow/ExternalFlow.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-03-07 10:17:58 +00:00
Owen Mansel-Chan
63e8061917
Add model validation for constructor summary models
2026-03-07 09:57:09 +00:00
Jeroen Ketema
8bbb0ec954
Merge pull request #21418 from github/jketema/swift-6.2.4
...
Swift: Update to Swift 6.2.4
2026-03-06 21:48:09 +01:00
Geoffrey White
d81b9aa5fd
Merge branch 'main' into splitoff2
2026-03-06 17:24:01 +00:00
Geoffrey White
fd7093e74d
Merge pull request #21375 from geoffw0/mapfix
...
Rust: Add neutral models (map, from)
2026-03-06 17:20:14 +00:00
Óscar San José
a6de855549
Merge pull request #21423 from github/oscarsj/merge-back-rc-3.21
...
Merge back rc/3.21 into main
2026-03-06 16:58:04 +01:00
Óscar San José
3b9eba2afc
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.21
2026-03-06 16:20:36 +01:00
Tom Hvitved
4dca9aa958
Rust: Small refactor in TypeMention.qll
2026-03-06 15:33:11 +01:00
Tom Hvitved
84bef5d4bc
Merge pull request #21420 from hvitved/rust/type-inference-qualified-trait-arg-path
...
Rust: More conservative resolution of `<Foo as Bar<...>>` paths
2026-03-06 15:14:01 +01:00
Jeroen Ketema
2340369e2d
Swift: Add change note
2026-03-06 10:43:33 +01:00
Jeroen Ketema
70c1b58492
Swift: Remove overrides
2026-03-06 10:41:37 +01:00
Jeroen Ketema
f3dc0412b5
Swift: update artifacts
2026-03-06 10:40:43 +01:00
Owen Mansel-Chan
a3e9aed00a
Merge pull request #21416 from owen-mc/csharp/validate-constructor-summary-models
...
C#: Add model validation for constructor summary models
2026-03-06 09:09:39 +00:00
Owen Mansel-Chan
e96ba4806b
Merge pull request #21415 from owen-mc/java/validate-constructor-summary-models
...
Java: validate constructor summary models
2026-03-06 09:09:18 +00:00
Anders Schack-Mulligen
76346eccd8
Merge pull request #21417 from aschackmull/csharp/binary-assignment
...
C#: Make Assignment extend BinaryOperation.
2026-03-06 09:14:20 +01:00
Tom Hvitved
feb45e5731
Merge pull request #21348 from hvitved/csharp/remove-tcs
...
C#: Remove some unbounded TC computations
2026-03-06 09:00:38 +01:00
Taus
66ca10c338
Python: Add change note
2026-03-05 22:20:03 +00:00
Taus
fa61f6f3df
Python: Model @typing.overload in method resolution
...
Adds `hasOverloadDecorator` as a predicate on functions. It looks for
decorators called `overload` or `something.overload` (usually
`typing.overload` or `t.overload`). These are then filtered out in the
predicates that (approximate) resolving methods according to the MRO.
As the test introduced in the previous commit shows, this removes the
spurious resolutions we had before.
2026-03-05 22:20:03 +00:00
Taus
0561a63003
Python: Add test for overloaded __init__ resolution
...
Adds a test showing that `@typing.overload` stubs are spuriously
resolved as call targets alongside the actual `__init__` implementation.
2026-03-05 22:20:03 +00:00
Tom Hvitved
ff41917147
Rust: More conservative resolution of <Foo as Bar<...>> paths
2026-03-05 21:42:33 +01:00
Tom Hvitved
838f3b90e7
Rust: Add type inference test
2026-03-05 20:57:32 +01:00
Owen Mansel-Chan
3c36a9e308
Correctly deal with generic types
2026-03-05 15:47:53 +00:00
Jeroen Ketema
eb81743fb5
Swift: Update to Swift 6.2.4
2026-03-05 16:13:29 +01:00
Anders Schack-Mulligen
d9ef9f82e1
C#: Make Assignment extend BinaryOperation.
2026-03-05 14:41:38 +01:00
Owen Mansel-Chan
92a719092a
Update models in test output
2026-03-05 13:32:52 +00:00
Anders Schack-Mulligen
ffa5110522
C#: Update dbscheme to make assignments part of binary expressions.
2026-03-05 13:59:14 +01:00
Asger F
c9fa7fa283
Merge pull request #21369 from asgerf/js/this-bindings
...
JS: Emit variables for 'this'
2026-03-05 13:36:38 +01:00
Anders Schack-Mulligen
8ef4be49aa
Merge pull request #21412 from aschackmull/java/binary-assignment
...
Java: Make Assignment extend BinaryExpr.
2026-03-05 13:19:45 +01:00
Owen Mansel-Chan
e6996ea29a
Add model validation for constructor summary models
2026-03-05 12:11:25 +00:00
Owen Mansel-Chan
579c871b69
Fix incorrect constructor summary models
2026-03-05 12:03:21 +00:00
Owen Mansel-Chan
63c71b418c
Add model validation for constructor summary models
2026-03-05 12:02:37 +00:00
Anders Schack-Mulligen
3e7a966c0d
Merge pull request #21408 from aschackmull/guards/perf-tweak
...
Guards: Improve performance of forall in guardDeterminesPhiInput.
2026-03-05 12:42:06 +01:00
Owen Mansel-Chan
926725a87f
Merge pull request #21405 from owen-mc/java/consistent-inline-expectation-tests
...
Inline expectation tests should always have space before and after `$`
2026-03-05 11:27:37 +00:00
Paolo Tranquilli
9bf4262dbb
Add /rerun slash command for failed internal checks
2026-03-05 11:38:27 +01:00
Owen Mansel-Chan
c82f75604a
Add change notes
2026-03-05 10:34:30 +00:00
Anders Schack-Mulligen
ea77c0d86c
Java: Add change note.
2026-03-05 11:32:00 +01:00
Anders Schack-Mulligen
ec1d034ee0
Java: Make Assignment extend BinaryExpr.
2026-03-05 11:31:59 +01:00
Anders Schack-Mulligen
37a8fc85eb
Guards: Use unique aggregate.
2026-03-05 11:20:24 +01:00
Tom Hvitved
b5bf1c578c
Merge pull request #21404 from hvitved/dataflow/no-enclosing-stack-flow-feature
...
Data flow: Add `FeatureEscapesSourceCallContext(OrEqualSourceSinkCallContext)` flow feature
2026-03-05 09:36:48 +01:00
Tom Hvitved
f3898329d6
Merge pull request #21413 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-03-05 09:28:47 +01:00
Tom Hvitved
acd6f4156b
C#: Avoid computing full TC in DangerousNonShortCircuitLogic.ql
2026-03-05 09:11:17 +01:00
Tom Hvitved
e22d3a1074
Sync files
2026-03-05 09:11:16 +01:00
Tom Hvitved
212374b94b
C#: Replace a recursive predicate with doublyBoundedFastTc
2026-03-05 09:11:15 +01:00
Tom Hvitved
aa7a730041
C#: Remove some unnecessary TCs
2026-03-05 09:11:13 +01:00
github-actions[bot]
1c5afb2306
Add changed framework coverage reports
2026-03-05 00:32:15 +00:00
Mathias Vorreiter Pedersen
5b30e945ef
Merge pull request #21410 from MathiasVP/add-WebSocket-ReceiveAsync-model
...
C#: Add `System.Net.WebSockets.ReceiveAsync` as a remote flow source
2026-03-04 16:09:50 +00:00
