Compare commits

..

3 Commits

Author SHA1 Message Date
yoff
0b473e3763 Python: deprecate Function.getAReturnValueFlowNode() and rewrite internal callers
Follow-up to the getAFlowNode deprecation in the same PR: same AST→legacy-CFG
bridge pattern. The 11 internal call sites (across objects/, types/,
frameworks/, and TypeTrackingImpl) are rewritten to bind a `Return ret`
explicitly, then constrain via `ret.getScope() = f and n.getNode() = ret.getValue()`.

The predicate itself is preserved with a deprecation note so external
users do not experience churn.

Semantic noop.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-02 08:41:44 +00:00
Copilot
a13dfaa44f Python: deprecate AstNode.getAFlowNode() and rewrite internal callers
Preparatory refactor for the shared-CFG dataflow migration.

Deprecates the AstNode.getAFlowNode() cached predicate on the public
Python QL API and rewrites all ~140 internal callers across lib/, src/,
test/, and tools/ from `expr.getAFlowNode() = cfgNode` to
`cfgNode.getNode() = expr`, using ControlFlowNode.getNode() which
already exists in Flow.qll.

The predicate itself is preserved (with a deprecation note pointing at
the new pattern) so external users do not experience churn — they can
migrate at their own pace and the AST/CFG hierarchies still get the
intended untangling once the deprecation eventually elapses.

Semantic noop verified by:
- All 361 lib/ + src/ queries compile clean.
- All 122 ControlFlow + PointsTo library-tests pass.
- All 64 dataflow library-tests pass.
- All 113 Variables/Exceptions/Expressions/Statements/Functions/Imports/
  Security/CWE-798/ModificationOfParameterWithDefault query-tests pass.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-02 08:37:30 +00:00
yoff
ac5fa629ef Python: inline init_module_submodule_defn into ImportResolution
The new-dataflow ImportResolution module only used
semmle.python.essa.SsaDefinitions for the 5-line helper predicate
SsaSource::init_module_submodule_defn. Inline it locally and drop the
dependency on legacy SsaDefinitions. This is the only remaining direct
import of semmle.python.essa.* in the new dataflow stack, so dropping
it makes the layering cleaner.

Semantic noop on the current SSA: SsaSourceVariable.getName() and
GlobalVariable.getId() both project the same DB column
(variable(_,_,result)), and the old call's 'init.getEntryNode() = f'
join was just constraining init = package via Scope.getEntryNode()'s
functional uniqueness. RA dump of accesses.ql confirms only the
expected predicate-rename shuffle; all 70 dataflow + ApiGraphs library
tests pass.

This factors out commit 8cab5a20f2 from the larger shared-CFG
migration #21925.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-02 08:24:17 +00:00
1293 changed files with 6764 additions and 23233 deletions

View File

@@ -1,208 +0,0 @@
name: Update Go version
on:
workflow_dispatch:
schedule:
- cron: "0 3 * * 1" # Run weekly on Mondays at 3 AM UTC (1 = Monday)
permissions:
contents: write
pull-requests: write
jobs:
update-go-version:
name: Check and update Go version
if: github.repository == 'github/codeql'
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v5
with:
fetch-depth: 0
- name: Set up Git
run: |
git config user.name "github-actions[bot]"
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
- name: Fetch latest Go version
id: fetch-version
run: |
LATEST_GO_VERSION=$(curl -s https://go.dev/dl/?mode=json | jq -r '.[0].version')
if [ -z "$LATEST_GO_VERSION" ] || [ "$LATEST_GO_VERSION" = "null" ]; then
echo "Error: Failed to fetch latest Go version from go.dev"
exit 1
fi
echo "Latest Go version from go.dev: $LATEST_GO_VERSION"
echo "version=$LATEST_GO_VERSION" >> $GITHUB_OUTPUT
# Extract version numbers (e.g., go1.26.0 -> 1.26.0)
LATEST_VERSION_NUM=$(echo $LATEST_GO_VERSION | sed 's/^go//')
echo "version_num=$LATEST_VERSION_NUM" >> $GITHUB_OUTPUT
# Extract major.minor version (e.g., 1.26.0 -> 1.26)
LATEST_MAJOR_MINOR=$(echo $LATEST_VERSION_NUM | sed -E 's/^([0-9]+\.[0-9]+).*/\1/')
echo "major_minor=$LATEST_MAJOR_MINOR" >> $GITHUB_OUTPUT
- name: Check current Go version
id: current-version
run: |
CURRENT_VERSION=$(sed -n 's/.*go_sdk\.download(version = \"\([^\"]*\)\".*/\1/p' MODULE.bazel)
if [ -z "$CURRENT_VERSION" ]; then
echo "Error: Could not extract Go version from MODULE.bazel"
exit 1
fi
echo "Current Go version in MODULE.bazel: $CURRENT_VERSION"
echo "version=$CURRENT_VERSION" >> $GITHUB_OUTPUT
# Extract major.minor version
CURRENT_MAJOR_MINOR=$(echo $CURRENT_VERSION | sed -E 's/^([0-9]+\.[0-9]+).*/\1/')
echo "major_minor=$CURRENT_MAJOR_MINOR" >> $GITHUB_OUTPUT
- name: Compare versions
id: compare
run: |
LATEST="${{ steps.fetch-version.outputs.version_num }}"
CURRENT="${{ steps.current-version.outputs.version }}"
echo "Latest: $LATEST"
echo "Current: $CURRENT"
if [ "$LATEST" = "$CURRENT" ]; then
echo "Go version is up to date"
echo "needs_update=false" >> $GITHUB_OUTPUT
else
echo "Go version needs update from $CURRENT to $LATEST"
echo "needs_update=true" >> $GITHUB_OUTPUT
fi
- name: Update Go version in files
if: steps.compare.outputs.needs_update == 'true'
run: |
LATEST_VERSION_NUM="${{ steps.fetch-version.outputs.version_num }}"
LATEST_MAJOR_MINOR="${{ steps.fetch-version.outputs.major_minor }}"
CURRENT_VERSION="${{ steps.current-version.outputs.version }}"
CURRENT_MAJOR_MINOR="${{ steps.current-version.outputs.major_minor }}"
echo "Updating from $CURRENT_VERSION to $LATEST_VERSION_NUM"
# Escape dots in current version strings for use in sed patterns
CURRENT_VERSION_ESCAPED=$(echo "$CURRENT_VERSION" | sed 's/\./\\./g')
CURRENT_MAJOR_MINOR_ESCAPED=$(echo "$CURRENT_MAJOR_MINOR" | sed 's/\./\\./g')
# Update MODULE.bazel
sed -i "s/go_sdk\.download(version = \"$CURRENT_VERSION_ESCAPED\")/go_sdk.download(version = \"$LATEST_VERSION_NUM\")/" MODULE.bazel
if ! grep -q "go_sdk.download(version = \"$LATEST_VERSION_NUM\")" MODULE.bazel; then
echo "Error: Failed to update MODULE.bazel"
exit 1
fi
# Update go/extractor/go.mod
if ! sed -i "s/^go $CURRENT_MAJOR_MINOR_ESCAPED\$/go $LATEST_MAJOR_MINOR/" go/extractor/go.mod; then
echo "Warning: Failed to update go directive in go.mod"
fi
if ! sed -i "s/^toolchain go$CURRENT_VERSION_ESCAPED\$/toolchain go$LATEST_VERSION_NUM/" go/extractor/go.mod; then
echo "Warning: Failed to update toolchain in go.mod"
fi
# Update go/extractor/autobuilder/build-environment.go
if ! sed -i "s/var maxGoVersion = util\.NewSemVer(\"$CURRENT_MAJOR_MINOR_ESCAPED\")/var maxGoVersion = util.NewSemVer(\"$LATEST_MAJOR_MINOR\")/" go/extractor/autobuilder/build-environment.go; then
echo "Warning: Failed to update build-environment.go"
fi
# Update go/actions/test/action.yml
if ! sed -i "s/default: \"~$CURRENT_VERSION_ESCAPED\"/default: \"~$LATEST_VERSION_NUM\"/" go/actions/test/action.yml; then
echo "Warning: Failed to update action.yml"
fi
# Show what changed
git diff
- name: Check for changes
id: check-changes
if: steps.compare.outputs.needs_update == 'true'
run: |
if git diff --quiet; then
echo "No changes detected"
echo "has_changes=false" >> $GITHUB_OUTPUT
else
echo "Changes detected"
echo "has_changes=true" >> $GITHUB_OUTPUT
fi
- name: Check for existing PR
if: steps.check-changes.outputs.has_changes == 'true'
id: check-pr
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
BRANCH_NAME="workflow/go-version-update"
PR_NUMBER=$(gh pr list --head "$BRANCH_NAME" --state open --json number --jq '.[0].number')
if [ -n "$PR_NUMBER" ]; then
echo "Existing PR found: #$PR_NUMBER"
echo "pr_exists=true" >> $GITHUB_OUTPUT
echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT
else
echo "No existing PR found"
echo "pr_exists=false" >> $GITHUB_OUTPUT
fi
- name: Commit and push changes
if: steps.check-changes.outputs.has_changes == 'true'
run: |
BRANCH_NAME="workflow/go-version-update"
LATEST_VERSION_NUM="${{ steps.fetch-version.outputs.version_num }}"
LATEST_MAJOR_MINOR="${{ steps.fetch-version.outputs.major_minor }}"
# Create or switch to branch
git checkout -B "$BRANCH_NAME"
# Stage and commit changes
git add MODULE.bazel go/extractor/go.mod go/extractor/autobuilder/build-environment.go go/actions/test/action.yml
git commit -m "Go: Update to $LATEST_VERSION_NUM"
# Push changes
git push --force-with-lease origin "$BRANCH_NAME"
- name: Create or update PR
if: steps.check-changes.outputs.has_changes == 'true'
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
BRANCH_NAME="workflow/go-version-update"
LATEST_VERSION_NUM="${{ steps.fetch-version.outputs.version_num }}"
CURRENT_VERSION="${{ steps.current-version.outputs.version }}"
PR_TITLE="Go: Update to $LATEST_VERSION_NUM"
PR_BODY=$(cat <<EOF
This PR updates Go from $CURRENT_VERSION to $LATEST_VERSION_NUM.
Updated files:
- \`MODULE.bazel\` - go_sdk.download version
- \`go/extractor/go.mod\` - go directive and toolchain
- \`go/extractor/autobuilder/build-environment.go\` - maxGoVersion (only if MAJOR.MINOR changes)
- \`go/actions/test/action.yml\` - default go-test-version
This PR was automatically created by the [Go version update workflow](https://github.com/${{ github.repository }}/blob/main/.github/workflows/go-version-update.yml).
EOF
)
if [ "${{ steps.check-pr.outputs.pr_exists }}" = "true" ]; then
echo "Updating existing PR #${{ steps.check-pr.outputs.pr_number }}"
gh pr edit "${{ steps.check-pr.outputs.pr_number }}" --title "$PR_TITLE" --body "$PR_BODY"
else
echo "Creating new PR"
gh pr create \
--title "$PR_TITLE" \
--body "$PR_BODY" \
--base main \
--head "$BRANCH_NAME" \
--label "Go"
fi

View File

@@ -273,7 +273,7 @@ use_repo(
)
go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
go_sdk.download(version = "1.26.4")
go_sdk.download(version = "1.26.0")
go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
go_deps.from_file(go_mod = "//go/extractor:go.mod")

View File

@@ -1 +1 @@
query: Models/CompositeActionsSinks.ql
Models/CompositeActionsSinks.ql

View File

@@ -1 +1,2 @@
query: Models/CompositeActionsSources.ql
Models/CompositeActionsSources.ql

View File

@@ -1 +1,2 @@
query: Models/CompositeActionsSummaries.ql
Models/CompositeActionsSummaries.ql

View File

@@ -1 +1,2 @@
query: Models/ReusableWorkflowsSinks.ql
Models/ReusableWorkflowsSinks.ql

View File

@@ -1 +1,2 @@
query: Models/ReusableWorkflowsSources.ql
Models/ReusableWorkflowsSources.ql

View File

@@ -1 +1,2 @@
query: Models/ReusableWorkflowsSummaries.ql
Models/ReusableWorkflowsSummaries.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE-074/OutputClobberingHigh.ql
experimental/Security/CWE-074/OutputClobberingHigh.ql

View File

@@ -1 +1 @@
query: Security/CWE-077/EnvPathInjectionCritical.ql
Security/CWE-077/EnvPathInjectionCritical.ql

View File

@@ -1 +1 @@
query: Security/CWE-077/EnvPathInjectionMedium.ql
Security/CWE-077/EnvPathInjectionMedium.ql

View File

@@ -1 +1 @@
query: Security/CWE-077/EnvVarInjectionCritical.ql
Security/CWE-077/EnvVarInjectionCritical.ql

View File

@@ -1 +1 @@
query: Security/CWE-077/EnvVarInjectionMedium.ql
Security/CWE-077/EnvVarInjectionMedium.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE-078/CommandInjectionCritical.ql
experimental/Security/CWE-078/CommandInjectionCritical.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE-078/CommandInjectionMedium.ql
experimental/Security/CWE-078/CommandInjectionMedium.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE-088/ArgumentInjectionCritical.ql
experimental/Security/CWE-088/ArgumentInjectionCritical.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE-088/ArgumentInjectionMedium.ql
experimental/Security/CWE-088/ArgumentInjectionMedium.ql

View File

@@ -1 +1 @@
query: Security/CWE-094/CodeInjectionCritical.ql
Security/CWE-094/CodeInjectionCritical.ql

View File

@@ -1 +1 @@
query: Security/CWE-094/CodeInjectionMedium.ql
Security/CWE-094/CodeInjectionMedium.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-1395/UseOfKnownVulnerableAction.ql
Security/CWE-1395/UseOfKnownVulnerableAction.ql

View File

@@ -1 +1,2 @@
query: experimental/Security/CWE-200/SecretExfiltration.ql
experimental/Security/CWE-200/SecretExfiltration.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-275/MissingActionsPermissions.ql
Security/CWE-275/MissingActionsPermissions.ql

View File

@@ -1 +1,2 @@
query: experimental/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql
experimental/Security/CWE-284/CodeExecutionOnSelfHostedRunner.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-285/ImproperAccessControl.ql
Security/CWE-285/ImproperAccessControl.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-312/ExcessiveSecretsExposure.ql
Security/CWE-312/ExcessiveSecretsExposure.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-312/SecretsInArtifacts.ql
Security/CWE-312/SecretsInArtifacts.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-312/UnmaskedSecretExposure.ql
Security/CWE-312/UnmaskedSecretExposure.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-349/CachePoisoningViaCodeInjection.ql
Security/CWE-349/CachePoisoningViaCodeInjection.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-349/CachePoisoningViaDirectCache.ql
Security/CWE-349/CachePoisoningViaDirectCache.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-349/CachePoisoningViaPoisonableStep.ql
Security/CWE-349/CachePoisoningViaPoisonableStep.ql

View File

@@ -1 +1 @@
query: Security/CWE-367/UntrustedCheckoutTOCTOUCritical.ql
Security/CWE-367/UntrustedCheckoutTOCTOUCritical.ql

View File

@@ -1 +1 @@
query: Security/CWE-367/UntrustedCheckoutTOCTOUHigh.ql
Security/CWE-367/UntrustedCheckoutTOCTOUHigh.ql

View File

@@ -1 +1 @@
query: Security/CWE-571/ExpressionIsAlwaysTrueCritical.ql
Security/CWE-571/ExpressionIsAlwaysTrueCritical.ql

View File

@@ -1 +1 @@
query: Security/CWE-571/ExpressionIsAlwaysTrueHigh.ql
Security/CWE-571/ExpressionIsAlwaysTrueHigh.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-829/ArtifactPoisoningCritical.ql
Security/CWE-829/ArtifactPoisoningCritical.ql

View File

@@ -1 +1,2 @@
query: Security/CWE-829/ArtifactPoisoningMedium.ql
Security/CWE-829/ArtifactPoisoningMedium.ql

View File

@@ -1 +1,2 @@
query: experimental/Security/CWE-829/ArtifactPoisoningPathTraversal.ql
experimental/Security/CWE-829/ArtifactPoisoningPathTraversal.ql

View File

@@ -1 +1 @@
query: Security/CWE-829/UnpinnedActionsTag.ql
Security/CWE-829/UnpinnedActionsTag.ql

View File

@@ -1 +1 @@
query: Security/CWE-829/UntrustedCheckoutCritical.ql
Security/CWE-829/UntrustedCheckoutCritical.ql

View File

@@ -1 +1 @@
query: Security/CWE-829/UntrustedCheckoutHigh.ql
Security/CWE-829/UntrustedCheckoutHigh.ql

View File

@@ -1 +1 @@
query: Security/CWE-829/UntrustedCheckoutMedium.ql
Security/CWE-829/UntrustedCheckoutMedium.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE-829/UnversionedImmutableAction.ql
experimental/Security/CWE-829/UnversionedImmutableAction.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE-918/RequestForgery.ql
experimental/Security/CWE-918/RequestForgery.ql

View File

@@ -1 +1 @@
query: Debug/SyntaxError.ql
Debug/SyntaxError.ql

View File

@@ -1 +1 @@
query: Violations Of Best Practice/CodeQL/UnnecessaryUseOfAdvancedConfig.ql
Violations Of Best Practice/CodeQL/UnnecessaryUseOfAdvancedConfig.ql

View File

@@ -11,6 +11,10 @@
"java/ql/lib/semmle/code/java/dataflow/internal/rangeanalysis/SignAnalysisCommon.qll",
"csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisCommon.qll"
],
"Bound Java/C#": [
"java/ql/lib/semmle/code/java/dataflow/Bound.qll",
"csharp/ql/lib/semmle/code/csharp/dataflow/Bound.qll"
],
"ModulusAnalysis Java/C#": [
"java/ql/lib/semmle/code/java/dataflow/ModulusAnalysis.qll",
"csharp/ql/lib/semmle/code/csharp/dataflow/ModulusAnalysis.qll"

View File

@@ -1 +1 @@
query: jsf/4.13 Functions/AV Rule 107.ql
jsf/4.13 Functions/AV Rule 107.ql

View File

@@ -1 +1 @@
query: Best Practices/Hiding/LocalVariableHidesGlobalVariable.ql
Best Practices/Hiding/LocalVariableHidesGlobalVariable.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/PrintAST.ql
semmle/code/cpp/PrintAST.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-020/NoCheckBeforeUnsafePutUser.ql
experimental/Security/CWE/CWE-020/NoCheckBeforeUnsafePutUser.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql
experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-078/WordexpTainted.ql
experimental/Security/CWE/CWE-078/WordexpTainted.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-1041/FindWrapperFunctions.ql
experimental/Security/CWE/CWE-1041/FindWrapperFunctions.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-1126/DeclarationOfVariableWithUnnecessarilyWideScope.ql
experimental/Security/CWE/CWE-1126/DeclarationOfVariableWithUnnecessarilyWideScope.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-1240/CustomCryptographicPrimitive.ql
experimental/Security/CWE/CWE-1240/CustomCryptographicPrimitive.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-125/DangerousWorksWithMultibyteOrWideCharacters.ql
experimental/Security/CWE/CWE-125/DangerousWorksWithMultibyteOrWideCharacters.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-190/AllocMultiplicationOverflow.ql
experimental/Security/CWE/CWE-190/AllocMultiplicationOverflow.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation.ql
experimental/Security/CWE/CWE-190/DangerousUseOfTransformationAfterOperation.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-190/IfStatementAdditionOverflow.ql
experimental/Security/CWE/CWE-190/IfStatementAdditionOverflow.ql

View File

@@ -1 +1 @@
query: experimental/Likely Bugs/ArrayAccessProductFlow.ql
experimental/Likely Bugs/ArrayAccessProductFlow.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-193/ConstantSizeArrayOffByOne.ql
experimental/Security/CWE/CWE-193/ConstantSizeArrayOffByOne.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql
experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql
experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql
experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-243/IncorrectChangingWorkingDirectory.ql
experimental/Security/CWE/CWE-243/IncorrectChangingWorkingDirectory.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql
experimental/Security/CWE/CWE-266/IncorrectPrivilegeAssignment.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-285/PamAuthorization.ql
experimental/Security/CWE/CWE-285/PamAuthorization.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-295/CurlSSL.ql
experimental/Security/CWE/CWE-295/CurlSSL.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-359/PrivateCleartextWrite.ql
experimental/Security/CWE/CWE-359/PrivateCleartextWrite.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-369/DivideByZeroUsingReturnValue.ql
experimental/Security/CWE/CWE-369/DivideByZeroUsingReturnValue.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-377/InsecureTemporaryFile.ql
experimental/Security/CWE/CWE-377/InsecureTemporaryFile.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql
experimental/Security/CWE/CWE-401/MemoryLeakOnFailedCallToRealloc.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-409/DecompressionBombs.ql
experimental/Security/CWE/CWE-409/DecompressionBombs.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-415/DoubleFree.ql
experimental/Security/CWE/CWE-415/DoubleFree.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-476/DangerousUseOfExceptionBlocks.ql
experimental/Security/CWE/CWE-476/DangerousUseOfExceptionBlocks.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-561/FindIncorrectlyUsedSwitch.ql
experimental/Security/CWE/CWE-561/FindIncorrectlyUsedSwitch.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-670/DangerousUseSSL_shutdown.ql
experimental/Security/CWE/CWE-670/DangerousUseSSL_shutdown.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-675/DoubleRelease.ql
experimental/Security/CWE/CWE-675/DoubleRelease.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementAfterRefactoringTheCode.ql
experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementAfterRefactoringTheCode.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementWhenUsingBitOperations.ql
experimental/Security/CWE/CWE-691/InsufficientControlFlowManagementWhenUsingBitOperations.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-703/FindIncorrectlyUsedExceptions.ql
experimental/Security/CWE/CWE-703/FindIncorrectlyUsedExceptions.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-754/ImproperCheckReturnValueScanf.ql
experimental/Security/CWE/CWE-754/ImproperCheckReturnValueScanf.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-758/UndefinedOrImplementationDefinedBehavior.ql
experimental/Security/CWE/CWE-758/UndefinedOrImplementationDefinedBehavior.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql
experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBitwiseOrLogicalOperations.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-788/AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql
experimental/Security/CWE/CWE-788/AccessOfMemoryLocationAfterEndOfBufferUsingStrlen.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBoolType.ql
experimental/Security/CWE/CWE-783/OperatorPrecedenceLogicErrorWhenUseBoolType.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-805/BufferAccessWithIncorrectLengthValue.ql
experimental/Security/CWE/CWE-805/BufferAccessWithIncorrectLengthValue.ql

View File

@@ -1 +1 @@
query: experimental/Security/CWE/CWE-120/MemoryUnsafeFunctionScan.ql
experimental/Security/CWE/CWE-120/MemoryUnsafeFunctionScan.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/PrintAST.ql
semmle/code/cpp/PrintAST.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/ASTConsistency.ql
semmle/code/cpp/ASTConsistency.ql

View File

@@ -1 +1 @@
query: Telemetry/CompilerErrors.ql
Telemetry/CompilerErrors.ql

View File

@@ -1 +1 @@
query: Telemetry/DatabaseQuality.ql
Telemetry/DatabaseQuality.ql

View File

@@ -1 +1 @@
query: Telemetry/ExtractionMetrics.ql
Telemetry/ExtractionMetrics.ql

View File

@@ -1 +1 @@
query: Telemetry/SucceededIncludes.ql
Telemetry/SucceededIncludes.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/ir/IRConsistency.ql
semmle/code/cpp/ir/IRConsistency.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConsistency.ql
semmle/code/cpp/ir/implementation/aliased_ssa/internal/SSAConsistency.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/ir/implementation/raw/IRConsistency.ql
semmle/code/cpp/ir/implementation/raw/IRConsistency.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/ir/implementation/unaliased_ssa/IRConsistency.ql
semmle/code/cpp/ir/implementation/unaliased_ssa/IRConsistency.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConsistency.ql
semmle/code/cpp/ir/implementation/unaliased_ssa/internal/SSAConsistency.ql

View File

@@ -1 +1 @@
query: semmle/code/cpp/ir/IRConsistency.ql
semmle/code/cpp/ir/IRConsistency.ql

Some files were not shown because too many files have changed in this diff Show More