mirror of
https://github.com/github/codeql.git
synced 2026-03-23 16:06:47 +01:00
29 lines
1.2 KiB
Markdown
29 lines
1.2 KiB
Markdown
## 0.0.8
|
|
|
|
### Deprecated APIs
|
|
|
|
* The `codeql/java-upgrades` CodeQL pack has been removed. All upgrades scripts have been merged into the `codeql/java-all` CodeQL pack.
|
|
|
|
## 0.0.7
|
|
|
|
## 0.0.6
|
|
|
|
### Major Analysis Improvements
|
|
|
|
* Data flow now propagates taint from remote source `Parameter` types to read steps of their fields (e.g. `tainted.publicField` or `tainted.getField()`). This also applies to their subtypes and the types of their fields, recursively.
|
|
|
|
## 0.0.5
|
|
|
|
### Bug Fixes
|
|
|
|
* `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
|
|
* The `RangeAnalysis` module now properly handles comparisons with Unicode surrogate character literals.
|
|
|
|
## 0.0.4
|
|
|
|
### Bug Fixes
|
|
|
|
* `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
|
|
* The `RangeAnalysis` module and the `java/constant-comparison` queries no longer raise false alerts regarding comparisons with Unicode surrogate character literals.
|
|
* The predicate `Method.overrides(Method)` was accidentally transitive. This has been fixed. This fix also affects `Method.overridesOrInstantiates(Method)` and `Method.getASourceOverriddenMethod()`.
|