MarkLee131
ff48ac5434
C++: exclude printf implementation internals from format string sinks
2026-03-17 22:45:38 +08:00
Anders Schack-Mulligen
af63e63686
C#: Accept test changes.
2026-03-17 14:12:18 +01:00
Anders Schack-Mulligen
19faf8f30b
C#: Add ObjectInitMethod as enclosing callable for the instance initializers.
2026-03-17 13:38:41 +01:00
Owen Mansel-Chan
3aaee9d981
Change @security-severity for rust/log-injection from 2.6 to 6.1
2026-03-17 12:01:05 +00:00
Tom Hvitved
8e19b05a25
Merge pull request #21355 from hvitved/rust/type-inference-unify
...
Rust: Unify call resolution logic
2026-03-17 10:38:05 +01:00
Tom Hvitved
1ac9e5a2a4
Rust: Elaborate QL doc on FunctionPosition class
2026-03-17 09:51:15 +01:00
Jeongsoo Lee
3f9ad14473
Factor out common code into an abstract private class
2026-03-16 14:11:34 -07:00
Geoffrey White
9cb1c89a02
C++: Change note.
2026-03-16 19:11:27 +00:00
Geoffrey White
a57f803b37
C++: Address false positive results.
2026-03-16 19:03:10 +00:00
Geoffrey White
1130870168
Merge remote-tracking branch 'upstream/main' into wrongtypeformat
2026-03-16 19:03:02 +00:00
Geoffrey White
8ddfee9971
Merge pull request #21457 from geoffw0/intmultlong
...
C++: Fix BMN issue with cpp/integer-multiplication-cast-to-long.
2026-03-16 19:02:16 +00:00
Geoffrey White
8df4dfb585
C++: Autoformat.
2026-03-16 16:40:27 +00:00
Geoffrey White
2f7526d70b
C++: Clarify doc comment and make build-mode: nonereferences more consistent.
2026-03-16 16:38:59 +00:00
Geoffrey White
eeb09ae389
C++: Fix typo.
2026-03-16 16:12:30 +00:00
Geoffrey White
3c4a386f3f
C++: Clarify two cases in the test.
2026-03-16 16:08:35 +00:00
github-actions[bot]
e3dbf5b022
Post-release preparation for codeql-cli-2.25.0
2026-03-16 16:03:22 +00:00
Óscar San José
72534e882b
Merge pull request #21483 from github/release-prep/2.25.0
...
Release preparation for version 2.25.0
2026-03-16 15:45:36 +01:00
Taus
a99b3f2c3b
Merge pull request #21459 from github/tausbn/python-fix-missing-relative-imports
...
Python: Fix resolution of relative imports from namespace packages
2026-03-16 14:59:44 +01:00
Taus
92718a98d0
Python: Add test for package inside namespace package
2026-03-16 12:41:09 +00:00
Taus
e70727524a
Python: Rename prints tag to flow
...
The former was a remnant of copying the setup over from
`ql/test/experimental/import-resolution/importflow.ql`.
2026-03-16 12:37:00 +00:00
github-actions[bot]
d6055754b6
Release preparation for version 2.25.0
2026-03-16 12:15:34 +00:00
Anders Schack-Mulligen
c24b43d01e
Merge pull request #21482 from aschackmull/csharp/rangeanalysis-no-split
...
C#: Remove splitting-awareness from Range Analysis.
2026-03-16 10:54:49 +01:00
Jeroen Ketema
179a4cd41a
Merge pull request #21474 from jketema/jketema/swift-linux-2
...
Swift: Ignore some DB-CHECK results on Linux
2026-03-16 10:50:05 +01:00
Anders Schack-Mulligen
a929c0bf24
C#: Remove splitting-awareness from Range Analysis.
2026-03-16 09:58:14 +01:00
Anders Schack-Mulligen
427ccee3b9
Merge pull request #21473 from aschackmull/csharp/dataflow-no-split
...
C#: Remove splitting-awareness from data flow.
2026-03-16 09:33:31 +01:00
Asger F
22f16dda85
Merge pull request #21368 from asgerf/browser-sources
...
JS: Add 'browser' source kinds
2026-03-16 09:24:54 +01:00
Anders Schack-Mulligen
db0a3e38e2
C#: Accept a few irrelevant taint steps.
2026-03-16 09:09:54 +01:00
Anders Schack-Mulligen
e7edf15031
C#: Clean up.
2026-03-16 08:51:51 +01:00
Anders Schack-Mulligen
4c77e0f315
C#: Remove splitting-awareness for local expression steps.
2026-03-16 08:51:51 +01:00
Anders Schack-Mulligen
7124cd4e6e
C#: Remove splitting-awareness for source-to-def steps.
2026-03-16 08:51:50 +01:00
Anders Schack-Mulligen
c076992b83
C#: Remove splitting-awareness in ObjectInitializerNode.
2026-03-16 08:51:49 +01:00
Anders Schack-Mulligen
659d8e7c90
C#: Remove splitting-awareness in argumentOf.
2026-03-16 08:51:49 +01:00
Anders Schack-Mulligen
1e8de0511b
C#: Remove splitting-awareness in lambda flow.
2026-03-16 08:51:48 +01:00
Anders Schack-Mulligen
bce0a4d2a7
C#: Remove splitting-awareness for store steps.
2026-03-16 08:51:48 +01:00
Anders Schack-Mulligen
2160910d56
C#: Remove splitting-awareness for read steps.
2026-03-16 08:51:47 +01:00
Anders Schack-Mulligen
a5c8a5b5f8
C#: Remove splitting-awareness for taint steps.
2026-03-16 08:51:47 +01:00
Jeongsoo Lee
f8a3ce7bf8
Merge branch 'main' into jeongsoolee09/add-getIndirectionIndex
2026-03-14 16:17:36 -07:00
Jeroen Ketema
f9f1d9eecc
Swift: Ignore some DB-CHECK results on Linux
2026-03-13 20:06:57 +01:00
Jeongsoo Lee
d3066af2e2
Create IndirectUninitializedNode and add a bridge from it to LocalVariable
...
This way the changes do not alter the meaning of `UninitializedNode`.
In the meantime, the code still provides a specialized `Node` type
`IndirectUninitializedNode` to access the nodes behind levels of
indirection.
2026-03-13 11:39:57 -07:00
Jeongsoo Lee
8c03136c25
Revert "Expose the indirection index"
...
This reverts commit 6c792e69b3
2026-03-13 10:11:40 -07:00
Owen Mansel-Chan
d52e9bc18c
Merge pull request #21370 from github/owen-mc/go/overlay-annotations
...
Go: Add overlay annotations from script
2026-03-13 16:46:01 +00:00
Owen Mansel-Chan
b8b841cfba
Add overlay[loca] in 4 more tests
2026-03-13 16:19:00 +00:00
Owen Mansel-Chan
df9f8ee386
Merge branch 'main' into owen-mc/go/overlay-annotations
2026-03-13 15:55:17 +00:00
Owen Mansel-Chan
99f4930e24
Explicitly mark DataFlowNodes.qll as overlay[local]
2026-03-13 15:23:39 +00:00
Owen Mansel-Chan
e9df9147ad
Add overlay annotations in 4 PrintAst tests
2026-03-13 15:03:05 +00:00
Owen Mansel-Chan
f32f85399a
Mark various files as overlay[local]
2026-03-13 15:03:02 +00:00
Jonas Jensen
c56feb7644
Go: annotate the standard library with for overlay
...
This commit is auto-generated with:
python3 config/add-overlay-annotations.py go
2026-03-13 15:03:01 +00:00
Jonas Jensen
7ef60a8649
Update the overlay annotation script for go
...
The Go libraries follow their own naming convention for "query
libraries". These need to be exempted from automatic `overlay[local?]`
annotations since otherwise it appears that too many predicates are
evaluated, possibly because of inadequate use of sentinels.
2026-03-13 15:02:58 +00:00
Tom Hvitved
ca2838b361
Address review comments
2026-03-13 15:38:07 +01:00
Tom Hvitved
7a6ab70091
Rust: Add test for free function with context-based typing
2026-03-13 15:36:06 +01:00
