Release preparation for version 2.7.5

2026-05-26 09:01:22 +02:00 · 2021-12-13 15:04:16 +00:00
493 changed files with 892 additions and 1316 deletions
--- a/cpp/old-change-notes/2020-09-29-range-analysis-rollup.md
+++ b/cpp/old-change-notes/2020-09-29-range-analysis-rollup.md
--- a/cpp/old-change-notes/2020-10-21-erroneous-types.md
+++ b/cpp/old-change-notes/2020-10-21-erroneous-types.md
--- a/cpp/old-change-notes/2020-10-21-size-check-queries.md
+++ b/cpp/old-change-notes/2020-10-21-size-check-queries.md
--- a/cpp/old-change-notes/2020-11-02-unused-local-variable.md
+++ b/cpp/old-change-notes/2020-11-02-unused-local-variable.md
--- a/cpp/old-change-notes/2020-11-05-formatting-function.md
+++ b/cpp/old-change-notes/2020-11-05-formatting-function.md
--- a/cpp/old-change-notes/2020-11-05-private-models.md
+++ b/cpp/old-change-notes/2020-11-05-private-models.md
--- a/cpp/old-change-notes/2020-11-12-unsafe-use-of-this.md
+++ b/cpp/old-change-notes/2020-11-12-unsafe-use-of-this.md
--- a/cpp/old-change-notes/2020-11-27-downgrade-to-recommendation.md
+++ b/cpp/old-change-notes/2020-11-27-downgrade-to-recommendation.md
--- a/cpp/old-change-notes/2021-02-04-unsigned-difference-expression-compared-zero.md
+++ b/cpp/old-change-notes/2021-02-04-unsigned-difference-expression-compared-zero.md
--- a/cpp/old-change-notes/2021-02-24-memset-may-be-deleted.md
+++ b/cpp/old-change-notes/2021-02-24-memset-may-be-deleted.md
--- a/cpp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
+++ b/cpp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
--- a/cpp/old-change-notes/2021-03-11-failed-extractions.md
+++ b/cpp/old-change-notes/2021-03-11-failed-extractions.md
--- a/cpp/old-change-notes/2021-03-11-overflow-abs.md
+++ b/cpp/old-change-notes/2021-03-11-overflow-abs.md
--- a/cpp/old-change-notes/2021-03-17-av-rule-79.md
+++ b/cpp/old-change-notes/2021-03-17-av-rule-79.md
--- a/cpp/old-change-notes/2021-04-06-assign-where-compare-meant.md
+++ b/cpp/old-change-notes/2021-04-06-assign-where-compare-meant.md
--- a/cpp/old-change-notes/2021-04-09-unsigned-difference-expression-compared-zero.md
+++ b/cpp/old-change-notes/2021-04-09-unsigned-difference-expression-compared-zero.md
--- a/cpp/old-change-notes/2021-04-13-arithmetic-queries.md
+++ b/cpp/old-change-notes/2021-04-13-arithmetic-queries.md
--- a/cpp/old-change-notes/2021-04-21-return-stack-allocated-object.md
+++ b/cpp/old-change-notes/2021-04-21-return-stack-allocated-object.md
--- a/cpp/old-change-notes/2021-04-26-more-sound-expr-might-overflow.md
+++ b/cpp/old-change-notes/2021-04-26-more-sound-expr-might-overflow.md
--- a/cpp/old-change-notes/2021-05-10-comparison-with-wider-type.md
+++ b/cpp/old-change-notes/2021-05-10-comparison-with-wider-type.md
--- a/cpp/old-change-notes/2021-05-12-uncontrolled-arithmetic.md
+++ b/cpp/old-change-notes/2021-05-12-uncontrolled-arithmetic.md
--- a/cpp/old-change-notes/2021-05-14-uncontrolled-allocation-size.md
+++ b/cpp/old-change-notes/2021-05-14-uncontrolled-allocation-size.md
--- a/cpp/old-change-notes/2021-05-18-static-buffer-overflow.md
+++ b/cpp/old-change-notes/2021-05-18-static-buffer-overflow.md
--- a/cpp/old-change-notes/2021-05-19-weak-cryptographic-algorithm.md
+++ b/cpp/old-change-notes/2021-05-19-weak-cryptographic-algorithm.md
--- a/cpp/old-change-notes/2021-05-20-incorrect-allocation-error-handling.md
+++ b/cpp/old-change-notes/2021-05-20-incorrect-allocation-error-handling.md
--- a/cpp/old-change-notes/2021-05-20-ref-qualifiers.md
+++ b/cpp/old-change-notes/2021-05-20-ref-qualifiers.md
--- a/cpp/old-change-notes/2021-05-21-unsafe-strncat.md
+++ b/cpp/old-change-notes/2021-05-21-unsafe-strncat.md
--- a/cpp/old-change-notes/2021-06-10-cleartext-transmission.md
+++ b/cpp/old-change-notes/2021-06-10-cleartext-transmission.md
--- a/cpp/old-change-notes/2021-06-10-std-types.md
+++ b/cpp/old-change-notes/2021-06-10-std-types.md
--- a/cpp/old-change-notes/2021-06-21-weak-cryptographic-algorithm.md
+++ b/cpp/old-change-notes/2021-06-21-weak-cryptographic-algorithm.md
--- a/cpp/old-change-notes/2021-06-22-sql-tainted.md
+++ b/cpp/old-change-notes/2021-06-22-sql-tainted.md
--- a/cpp/old-change-notes/2021-06-24-dataflow-implicit-reads.md
+++ b/cpp/old-change-notes/2021-06-24-dataflow-implicit-reads.md
--- a/cpp/old-change-notes/2021-06-24-uncontrolled-arithmetic.md
+++ b/cpp/old-change-notes/2021-06-24-uncontrolled-arithmetic.md
--- a/cpp/old-change-notes/2021-06-30-wrong-type-format-argument.md
+++ b/cpp/old-change-notes/2021-06-30-wrong-type-format-argument.md
--- a/cpp/old-change-notes/2021-07-13-cleartext-storage-file.md
+++ b/cpp/old-change-notes/2021-07-13-cleartext-storage-file.md
--- a/cpp/old-change-notes/2021-07-20-toctou-race-condition.md
+++ b/cpp/old-change-notes/2021-07-20-toctou-race-condition.md
--- a/cpp/old-change-notes/2021-07-27-uncontrolled-arithmetic.md
+++ b/cpp/old-change-notes/2021-07-27-uncontrolled-arithmetic.md
--- a/cpp/old-change-notes/2021-07-29-virtual-function-declaration-specifiers.md
+++ b/cpp/old-change-notes/2021-07-29-virtual-function-declaration-specifiers.md
--- a/cpp/old-change-notes/2021-08-10-has-trailing-return-type.md
+++ b/cpp/old-change-notes/2021-08-10-has-trailing-return-type.md
--- a/cpp/old-change-notes/2021-08-17-has-c-linkage.md
+++ b/cpp/old-change-notes/2021-08-17-has-c-linkage.md
--- a/cpp/old-change-notes/2021-08-23-ctime-weaken-claims.md
+++ b/cpp/old-change-notes/2021-08-23-ctime-weaken-claims.md
--- a/cpp/old-change-notes/2021-08-23-getPrimaryQlClasses.md
+++ b/cpp/old-change-notes/2021-08-23-getPrimaryQlClasses.md
--- a/cpp/old-change-notes/2021-08-24-implicit-downcast-from-bitfield.md
+++ b/cpp/old-change-notes/2021-08-24-implicit-downcast-from-bitfield.md
--- a/cpp/old-change-notes/2021-08-31-range-analysis-upper-bound.md
+++ b/cpp/old-change-notes/2021-08-31-range-analysis-upper-bound.md
--- a/cpp/old-change-notes/2021-09-13-overflow-static.md
+++ b/cpp/old-change-notes/2021-09-13-overflow-static.md
--- a/cpp/old-change-notes/2021-09-27-command-line-injection.md
+++ b/cpp/old-change-notes/2021-09-27-command-line-injection.md
--- a/cpp/old-change-notes/2021-09-27-overflow-static.md
+++ b/cpp/old-change-notes/2021-09-27-overflow-static.md
--- a/cpp/old-change-notes/2021-10-01-improper-null-termination.md
+++ b/cpp/old-change-notes/2021-10-01-improper-null-termination.md
--- a/cpp/old-change-notes/2021-10-07-extraction-errors.md
+++ b/cpp/old-change-notes/2021-10-07-extraction-errors.md
--- a/cpp/change-notes/2021-11-01-isFromSystemMacroDefinition.md
+++ b/cpp/change-notes/2021-11-01-isFromSystemMacroDefinition.md
@@ -0,0 +1,4 @@
+lgtm,codescanning
+* The QL library `semmle.code.cpp.commons.Exclusions` now contains a predicate
+  `isFromSystemMacroDefinition` for identifying code that originates from a
+  macro outside the project being analyzed.
--- a/cpp/change-notes/2021-11-09-use-of-http.md
+++ b/cpp/change-notes/2021-11-09-use-of-http.md
@@ -0,0 +1,2 @@
+lgtm,codescanning
+* A new query `cpp/non-https-url` has been added for C/C++. The query flags uses of `http` URLs that might be better replaced with `https`.
--- a/cpp/change-notes/2021-11-25-certificate-not-checked.md
+++ b/cpp/change-notes/2021-11-25-certificate-not-checked.md
@@ -0,0 +1,2 @@
+lgtm,codescanning
+* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/change-notes/2021-11-25-certificate-result-conflation.md
+++ b/cpp/change-notes/2021-11-25-certificate-result-conflation.md
@@ -0,0 +1,2 @@
+lgtm,codescanning
+* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/ql/lib/qlpack.yml
+++ b/cpp/ql/lib/qlpack.yml
@@ -1,8 +1,8 @@
 name: codeql/cpp-all
-version: 0.0.6-dev
+version: 0.0.5
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp
 library: true
 dependencies:
-  codeql/cpp-upgrades: ^0.0.3
+  codeql/cpp-upgrades: 0.0.3
--- a/cpp/ql/src/CHANGELOG.md
+++ b/cpp/ql/src/CHANGELOG.md
@@ -1,10 +1,5 @@
 ## 0.0.5

-### New Queries
-
-* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
-* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
-
 ## 0.0.4

 ### New Queries
--- a/cpp/ql/src/change-notes/released/0.0.5.md
+++ b/cpp/ql/src/change-notes/released/0.0.5.md
@@ -1,6 +1 @@
 ## 0.0.5
-
-### New Queries
-
-* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
-* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/ql/src/qlpack.yml
+++ b/cpp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.0.6-dev
+version: 0.0.5
 groups: cpp
 dependencies:
    codeql/cpp-all: "*"
--- a/cpp/upgrades/qlpack.yml
+++ b/cpp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-upgrades
 groups: cpp
 upgrades: .
-version: 0.0.6-dev
+version: 0.0.5
 library: true
--- a/csharp/old-change-notes/2020-08-18-ast-viewer.md
+++ b/csharp/old-change-notes/2020-08-18-ast-viewer.md
--- a/csharp/old-change-notes/2020-08-18-partial-method-bodies.md
+++ b/csharp/old-change-notes/2020-08-18-partial-method-bodies.md
--- a/csharp/old-change-notes/2020-08-26-implicit-array-lengths.md
+++ b/csharp/old-change-notes/2020-08-26-implicit-array-lengths.md
--- a/csharp/old-change-notes/2020-09-02-assembly-insensitive-trap.md
+++ b/csharp/old-change-notes/2020-09-02-assembly-insensitive-trap.md
--- a/csharp/old-change-notes/2020-09-22-weak-encryption.md
+++ b/csharp/old-change-notes/2020-09-22-weak-encryption.md
--- a/csharp/old-change-notes/2020-10-21-AST-printing-improvements.md
+++ b/csharp/old-change-notes/2020-10-21-AST-printing-improvements.md
--- a/csharp/old-change-notes/2020-10-21-CodeAnalysis-attributes-in-assert.md
+++ b/csharp/old-change-notes/2020-10-21-CodeAnalysis-attributes-in-assert.md
--- a/csharp/old-change-notes/2020-10-21-rework-attribute-extraction.md
+++ b/csharp/old-change-notes/2020-10-21-rework-attribute-extraction.md
--- a/csharp/old-change-notes/2020-10-28-cil-to-string.md
+++ b/csharp/old-change-notes/2020-10-28-cil-to-string.md
--- a/csharp/old-change-notes/2020-11-05-get-sourcedeclaration-rename.md
+++ b/csharp/old-change-notes/2020-11-05-get-sourcedeclaration-rename.md
--- a/csharp/old-change-notes/2020-11-18-lambda-modifiers.md
+++ b/csharp/old-change-notes/2020-11-18-lambda-modifiers.md
--- a/csharp/old-change-notes/2020-11-18-local-function-attributable.md
+++ b/csharp/old-change-notes/2020-11-18-local-function-attributable.md
--- a/csharp/old-change-notes/2020-12-08-cil-enum-underlying-type.md
+++ b/csharp/old-change-notes/2020-12-08-cil-enum-underlying-type.md
--- a/csharp/old-change-notes/2020-12-17-format-method-empty-overload.md
+++ b/csharp/old-change-notes/2020-12-17-format-method-empty-overload.md
--- a/csharp/old-change-notes/2020-12-18-extract-custom-modifiers.md
+++ b/csharp/old-change-notes/2020-12-18-extract-custom-modifiers.md
--- a/csharp/old-change-notes/2020-12-21-merge-format-queries.md
+++ b/csharp/old-change-notes/2020-12-21-merge-format-queries.md
--- a/csharp/old-change-notes/2021-01-14-Unary-pattern.md
+++ b/csharp/old-change-notes/2021-01-14-Unary-pattern.md
--- a/csharp/old-change-notes/2021-01-15-Relational-pattern.md
+++ b/csharp/old-change-notes/2021-01-15-Relational-pattern.md
--- a/csharp/old-change-notes/2021-01-19-Function-pointer.md
+++ b/csharp/old-change-notes/2021-01-19-Function-pointer.md
--- a/csharp/old-change-notes/2021-01-25-Function-pointer-cil.md
+++ b/csharp/old-change-notes/2021-01-25-Function-pointer-cil.md
--- a/csharp/old-change-notes/2021-01-27-Add-binary-pattern.md
+++ b/csharp/old-change-notes/2021-01-27-Add-binary-pattern.md
--- a/csharp/old-change-notes/2021-02-01-Preprocessor-directives.md
+++ b/csharp/old-change-notes/2021-02-01-Preprocessor-directives.md
--- a/csharp/old-change-notes/2021-02-02-foreach-underlying-methods.md
+++ b/csharp/old-change-notes/2021-02-02-foreach-underlying-methods.md
--- a/csharp/old-change-notes/2021-02-04-Records.md
+++ b/csharp/old-change-notes/2021-02-04-Records.md
--- a/csharp/old-change-notes/2021-02-12-with-expression.md
+++ b/csharp/old-change-notes/2021-02-12-with-expression.md
--- a/csharp/old-change-notes/2021-02-26-tuple-dataflow.md
+++ b/csharp/old-change-notes/2021-02-26-tuple-dataflow.md
--- a/csharp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
+++ b/csharp/old-change-notes/2021-03-01-fluent-interface-data-flow.md
--- a/csharp/old-change-notes/2021-03-02-dotnet5.md
+++ b/csharp/old-change-notes/2021-03-02-dotnet5.md
--- a/csharp/old-change-notes/2021-03-24-cil-ssa.md
+++ b/csharp/old-change-notes/2021-03-24-cil-ssa.md
--- a/csharp/old-change-notes/2021-03-24-remove-legacy-queries.md
+++ b/csharp/old-change-notes/2021-03-24-remove-legacy-queries.md
--- a/csharp/old-change-notes/2021-03-24-remove-vuln-package-query.md
+++ b/csharp/old-change-notes/2021-03-24-remove-vuln-package-query.md
--- a/csharp/old-change-notes/2021-04-09-dapper-support.md
+++ b/csharp/old-change-notes/2021-04-09-dapper-support.md
--- a/csharp/old-change-notes/2021-04-09-default-argument-values.md
+++ b/csharp/old-change-notes/2021-04-09-default-argument-values.md
--- a/csharp/old-change-notes/2021-04-14-customizations.md
+++ b/csharp/old-change-notes/2021-04-14-customizations.md
--- a/csharp/old-change-notes/2021-04-22-console-read-local-source.md
+++ b/csharp/old-change-notes/2021-04-22-console-read-local-source.md
--- a/csharp/old-change-notes/2021-04-23-model-error-extraction.md
+++ b/csharp/old-change-notes/2021-04-23-model-error-extraction.md
--- a/csharp/old-change-notes/2021-04-26-string-builder-summaries.md
+++ b/csharp/old-change-notes/2021-04-26-string-builder-summaries.md
--- a/csharp/old-change-notes/2021-05-03-implicit-constructor-init.md
+++ b/csharp/old-change-notes/2021-05-03-implicit-constructor-init.md
--- a/csharp/old-change-notes/2021-06-04-tuple-members.md
+++ b/csharp/old-change-notes/2021-06-04-tuple-members.md
--- a/csharp/old-change-notes/2021-06-15-effective-visibility.md
+++ b/csharp/old-change-notes/2021-06-15-effective-visibility.md
--- a/csharp/old-change-notes/2021-06-15-unsafe-non-source-code.md
+++ b/csharp/old-change-notes/2021-06-15-unsafe-non-source-code.md
--- a/csharp/old-change-notes/2021-06-16-qualified-names.md
+++ b/csharp/old-change-notes/2021-06-16-qualified-names.md
--- a/Show More
+++ b/Show More