Commit 3b9eba2
committed
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.21
File tree
846 files changed
+87213
-58480
lines changed- cpp
- downgrades/770002bb02322e04fa25345838ce6e82af285a0b
- ql
- lib
- change-notes
- semmle/code/cpp
- dataflow
- internal
- ir
- dataflow/internal
- implementation/raw/internal
- upgrades/7e7c2f55670f8123d514cf542ccb1938118ac561
- src
- Likely Bugs/Memory Management
- utils/modelgenerator/internal
- test
- library-tests
- dataflow
- fields
- models-as-data
- taint-tests
- ir
- points_to
- range-analysis
- types
- query-tests/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearModification
- csharp
- documentation/library-coverage
- downgrades/e73ca2c93df8aae162f1704edc4817a5cb330529
- extractor/Semmle.Extraction.CSharp/Entities
- ql
- lib
- change-notes
- ext
- semmle/code/csharp
- controlflow
- internal
- dataflow/internal
- rangeanalysis
- exprs
- internal
- upgrades/178a7e6cf335486d33d4e49543148e3f57f04a9a
- src/Likely Bugs
- test
- library-tests
- csharp7
- dataflow
- constructors
- external-models
- flowsources/remote
- library
- operators
- structs
- dispatch
- linq
- partial
- query-tests/Security Features
- CWE-1004/HttpOnlyCookie
- AspNetCore/NoPolicy
- SystemWeb/HttpOnlyCookiesFalse
- CWE-614/InsecureCookie
- AspNetCore/NoPolicy
- SystemWeb/RequireSSLFalse
- go/ql
- lib/change-notes
- test/library-tests/semmle/go
- dataflow/flowsources/local
- file
- stdin
- frameworks/Macaron
- javascript
- downgrades/26a123164be893893e2aa0374d820785decf55af
- extractor
- src/com/semmle/js/extractor
- tests
- cfg/output/trap
- closure/output/trap
- comments/output/trap
- default-encoding/output/trap
- e4x/output/trap
- encoding/output/trap
- errors/output/trap
- es2015/output/trap
- es2016/output/trap
- es2017/output/trap
- es2018/output/trap
- es2019/output/trap
- es2021/output/trap
- es2024/output/trap
- esnext/output/trap
- exprs/output/trap
- extensions/output/trap
- externs/output/trap
- flow/output/trap
- functionbind/output/trap
- generatedcode/output/trap
- helloworld/output/trap
- html/output/trap
- jscript/output/trap
- jsx/output/trap
- keywords/output/trap
- moduleTypes1/output/trap
- moduleTypes2/output/trap
- moduleTypes3/output/trap
- mozilla/output/trap
- ng-templates/output/trap
- node/output/trap
- regexp/output/trap
- restprops/output/trap
- shebang/output/trap
- stmts/output/trap
- strictmode/output/trap
- ts/output/trap
- v8/output/trap
- variables/output/trap
- vue/output/trap
- ql
- lib
- change-notes
- upgrades/578367e82a25a3e286aaf1238613db3717b67476
- test
- library-tests
- frameworks/WebSocket
- variables
- query-tests
- Declarations
- SuspiciousMethodNameDeclaration
- UniquePropertyNames
- Expressions
- DuplicateProperty
- ExprHasNoEffect
- Quality/UnhandledErrorInStreamPipeline
- Security
- CWE-022/TaintedPath
- CWE-078/CommandInjection
- CWE-918
- Statements/LoopIterationSkippedDueToShifting
- java
- downgrades/de4ded61c8ae83f829aedaf05be73307ba25ca40
- ql
- consistency-queries
- lib
- change-notes
- config
- ext
- semmle/code/java
- arithmetic
- controlflow
- dataflow
- internal
- rangeanalysis
- metrics
- security
- upgrades/9f6026c400996c13842974b24f076a486ad1f69c
- utils/test
- src
- Likely Bugs
- Arithmetic
- Comparison
- Termination
- Security/CWE/CWE-295
- Violations of Best Practice
- Declarations
- legacy
- experimental/quantum/Examples
- test-kotlin1/library-tests
- controlflow
- basic
- dominance
- exprs
- test-kotlin2/library-tests
- controlflow
- basic
- dominance
- exprs
- test
- experimental/query-tests/quantum/examples
- BadMacUse
- InsecureOrUnknownNonceSource
- WeakOrUnknownAsymmetricKeySize
- WeakOrUnknownBlockMode
- WeakOrUnknownHash
- WeakOrUnknownKDFIterationCount
- WeakOrUnknownKDFKeySize
- WeakOrUnknownSymmetricCipher
- ext/TestModels
- library-tests
- controlflow
- basic
- dominance
- dataflow
- capture
- entrypoint-types
- fluent-methods
- taint-jackson
- taintsources
- flexible-constructors
- frameworks
- android
- intent
- slice
- taint-database
- apache-commons-lang3
- apache-http
- guava/handwritten
- javax-json
- jms
- lastaflute
- netty/manual
- rabbitmq
- ratpack/resources
- spring
- cache
- context
- controller
- data
- http
- ui
- util
- validation
- webmultipart
- websocket
- webutil
- guards12
- guards
- java7/MultiCatch
- optional
- pattern-instanceof
- pattern-switch/cfg
- ssa
- successors
- CloseReaderTest
- LoopVarReadTest
- SaveFileTest
- SchackTest
- TestBreak
- TestContinue
- TestDeclarations
- TestFinallyBreakContinue
- TestFinally
- TestLoopBranch
- TestThrow2
- TestThrow
- TestTryCatch
- TestTryWithResources
- switch-default-impossible-dispatch
- query-tests
- Escaping
- Nullness
- SafePublication
- StringComparison
- ThreadSafe/examples
- UselessComparisonTest
- security
- CWE-078
- CWE-1004
- CWE-1204
- CWE-200/semmle/tests
- SensitiveNotification
- SensitiveTextView
- CWE-287
- InsecureKeys/Test1
- InsecureLocalAuth
- CWE-295
- AndroidMissingCertificatePinning
- Test1
- Test2
- Test3
- Test4
- ImproperWebVeiwCertificateValidation
- CWE-297
- CWE-312/android/CleartextStorage
- CWE-524/res/layout
- CWE-749
- CWE-918
- CWE-927
- python/ql
- lib/change-notes
- test
- experimental
- import-resolution
- package/subpackage
- library-tests
- CallGraph-type-annotations
- CallGraph/code
- query-tests/Security
- CWE-022-UnsafeUnpacking
- CWE-1427-PromptInjection
- CWE-176
- library-tests
- ApiGraphs
- py2
- py3
- dataflow
- basic
- coverage-py2
- coverage-py3
- coverage
- global-flow
- global-or-captured-vars
- match
- model-summaries
- module-initialization
- typetracking
- variable-capture
- frameworks
- django-orm/testapp
- django-v1
- django-v2-v3
- testapp
- testproj
- django
- fabric
- flask
- invoke
- mysql-connector-python
- mysqldb
- pandas
- paramiko
- pyramid
- rest_framework/testproj
- ruamel.yaml
- stdlib-py2
- stdlib-py3
- stdlib
- yaml
- regexparser
- regex
- query-tests
- Exceptions/general
- Functions
- ModificationOfParameterWithDefault
- methodArgNames
- overriding
- Resources/FileNotAlwaysClosed
- Security
- CWE-022-PathInjection
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- src
- CWE-1004-NonHttpOnlyCookie
- CWE-1275-SameSiteNoneCookie
- CWE-209-StackTraceExposure
- CWE-614-InsecureCookie
- CWE-943-NoSqlInjection
- Variables/capture
- ruby/ql
- lib
- change-notes
- codeql/ruby/security
- src/experimental/cwe-176/examples
- test
- library-tests
- dataflow
- api-graphs
- flow-summaries
- frameworks
- action_controller
- action_mailer
- active_support
- arel
- json
- query-tests
- experimental
- cwe-176
- improper-memoization
- security/cwe-300
- variables
- DeadStoreOfLocal
- UninitializedLocal
- rust/ql
- lib
- change-notes
- codeql/rust/internal/typeinference
- src/queries/security/CWE-825
- test
- library-tests/type-inference
- CONSISTENCY
- query-tests/security
- CWE-312
- CWE-825
- swift/ql
- lib/change-notes
- test/library-tests/dataflow/taint/libraries
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
846 files changed
+87213
-58480
lines changedLines changed: 21 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
0 commit comments