codeql

mirror of https://github.com/github/codeql.git synced 2026-01-30 06:42:57 +01:00

Files

Max Schaefer 62b79721ea Track taint through element writes.

This adds a taint step from `pred` to (the post-update node) of `succ` in `succ[idx] = pred` and its syntactic variants.

Unlike for structs, where partially tainted values are quite common, the theory is that arrays, maps, and slices are usually either completely tainted or completely clean.

2020-03-23 09:15:01 +00:00

example-tests/snippets

examples/variable: Select declaration as well as the variable

2020-02-12 10:41:58 -08:00

experimental

Update ql/test/experimental/README.md

2020-03-02 10:20:07 +00:00

extractor-tests

Add tests for go1.14 overlapping embedded methods

2020-03-05 13:44:15 -08:00

library-tests/semmle/go

Track taint through element writes.