Skip to content

Commit 2c8f3a5

Browse files
jcogs33jcogs33
authored
Merge branch 'main' into jcogs33/java/provenance-postprocess-qltest
2 parents bab89c4 + 0d46953 commit 2c8f3a5

File tree

125 files changed

+2098
-1044
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

125 files changed

+2098
-1044
lines changed

‎cpp/ql/test/library-tests/dataflow/taint-tests/test_mad-signatures.expected

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -496,6 +496,9 @@ getParameterTypeName
496496
| stl.h:333:42:333:47 | insert | 1 | func:0 |
497497
| stl.h:333:42:333:47 | insert | 2 | func:0 |
498498
| stl.h:333:42:333:47 | insert | 2 | func:0 |
499+
| stl.h:335:37:335:43 | emplace | 0 | const_iterator |
500+
| stl.h:335:37:335:43 | emplace | 1 | func:0 && |
501+
| stl.h:336:33:336:44 | emplace_back | 0 | func:0 && |
499502
| stl.h:338:8:338:11 | swap | 0 | vector & |
500503
| stl.h:351:12:351:21 | shared_ptr | 0 | class:0 * |
501504
| stl.h:352:3:352:12 | shared_ptr | 0 | const shared_ptr & |
@@ -529,9 +532,25 @@ getParameterTypeName
529532
| stl.h:435:6:435:15 | operator[] | 0 | key_type && |
530533
| stl.h:435:6:435:15 | operator[] | 0 | key_type && |
531534
| stl.h:436:6:436:7 | at | 0 | const key_type & |
535+
| stl.h:439:48:439:54 | emplace | 0 | func:0 && |
536+
| stl.h:439:48:439:54 | emplace | 0 | func:0 && |
537+
| stl.h:440:36:440:47 | emplace_hint | 0 | const_iterator |
538+
| stl.h:440:36:440:47 | emplace_hint | 0 | const_iterator |
539+
| stl.h:440:36:440:47 | emplace_hint | 1 | func:0 && |
540+
| stl.h:440:36:440:47 | emplace_hint | 1 | func:0 && |
532541
| stl.h:443:24:443:29 | insert | 0 | value_type && |
533542
| stl.h:445:12:445:17 | insert | 0 | const_iterator |
534543
| stl.h:445:12:445:17 | insert | 1 | value_type && |
544+
| stl.h:448:48:448:58 | try_emplace | 0 | key_type && |
545+
| stl.h:448:48:448:58 | try_emplace | 0 | key_type && |
546+
| stl.h:448:48:448:58 | try_emplace | 1 | func:0 && |
547+
| stl.h:448:48:448:58 | try_emplace | 1 | func:0 && |
548+
| stl.h:450:36:450:46 | try_emplace | 0 | const_iterator |
549+
| stl.h:450:36:450:46 | try_emplace | 0 | const_iterator |
550+
| stl.h:450:36:450:46 | try_emplace | 1 | key_type && |
551+
| stl.h:450:36:450:46 | try_emplace | 1 | key_type && |
552+
| stl.h:450:36:450:46 | try_emplace | 2 | func:0 && |
553+
| stl.h:450:36:450:46 | try_emplace | 2 | func:0 && |
535554
| stl.h:452:42:452:57 | insert_or_assign | 0 | key_type && |
536555
| stl.h:452:42:452:57 | insert_or_assign | 1 | func:0 && |
537556
| stl.h:454:30:454:45 | insert_or_assign | 0 | const_iterator |
@@ -550,9 +569,34 @@ getParameterTypeName
550569
| stl.h:503:16:503:25 | operator[] | 0 | key_type && |
551570
| stl.h:503:16:503:25 | operator[] | 0 | key_type && |
552571
| stl.h:504:16:504:17 | at | 0 | const key_type & |
572+
| stl.h:507:48:507:54 | emplace | 0 | func:0 && |
573+
| stl.h:507:48:507:54 | emplace | 0 | func:0 && |
574+
| stl.h:507:48:507:54 | emplace | 0 | func:0 && |
575+
| stl.h:507:48:507:54 | emplace | 0 | func:0 && |
576+
| stl.h:507:48:507:54 | emplace | 0 | func:0 && |
577+
| stl.h:508:36:508:47 | emplace_hint | 0 | const_iterator |
578+
| stl.h:508:36:508:47 | emplace_hint | 0 | const_iterator |
579+
| stl.h:508:36:508:47 | emplace_hint | 1 | func:0 && |
580+
| stl.h:508:36:508:47 | emplace_hint | 1 | func:0 && |
553581
| stl.h:511:24:511:29 | insert | 0 | value_type && |
554582
| stl.h:513:12:513:17 | insert | 0 | const_iterator |
555583
| stl.h:513:12:513:17 | insert | 1 | value_type && |
584+
| stl.h:516:48:516:58 | try_emplace | 0 | key_type && |
585+
| stl.h:516:48:516:58 | try_emplace | 0 | key_type && |
586+
| stl.h:516:48:516:58 | try_emplace | 0 | key_type && |
587+
| stl.h:516:48:516:58 | try_emplace | 0 | key_type && |
588+
| stl.h:516:48:516:58 | try_emplace | 0 | key_type && |
589+
| stl.h:516:48:516:58 | try_emplace | 1 | func:0 && |
590+
| stl.h:516:48:516:58 | try_emplace | 1 | func:0 && |
591+
| stl.h:516:48:516:58 | try_emplace | 1 | func:0 && |
592+
| stl.h:516:48:516:58 | try_emplace | 1 | func:0 && |
593+
| stl.h:516:48:516:58 | try_emplace | 1 | func:0 && |
594+
| stl.h:518:36:518:46 | try_emplace | 0 | const_iterator |
595+
| stl.h:518:36:518:46 | try_emplace | 0 | const_iterator |
596+
| stl.h:518:36:518:46 | try_emplace | 1 | key_type && |
597+
| stl.h:518:36:518:46 | try_emplace | 1 | key_type && |
598+
| stl.h:518:36:518:46 | try_emplace | 2 | func:0 && |
599+
| stl.h:518:36:518:46 | try_emplace | 2 | func:0 && |
556600
| stl.h:520:42:520:57 | insert_or_assign | 0 | key_type && |
557601
| stl.h:520:42:520:57 | insert_or_assign | 1 | func:0 && |
558602
| stl.h:522:30:522:45 | insert_or_assign | 0 | const_iterator |
@@ -567,6 +611,12 @@ getParameterTypeName
567611
| stl.h:557:33:557:35 | set | 0 | func:0 |
568612
| stl.h:557:33:557:35 | set | 1 | func:0 |
569613
| stl.h:560:8:560:16 | operator= | 0 | const set & |
614+
| stl.h:568:48:568:54 | emplace | 0 | func:0 && |
615+
| stl.h:568:48:568:54 | emplace | 0 | func:0 && |
616+
| stl.h:569:36:569:47 | emplace_hint | 0 | const_iterator |
617+
| stl.h:569:36:569:47 | emplace_hint | 0 | const_iterator |
618+
| stl.h:569:36:569:47 | emplace_hint | 1 | func:0 && |
619+
| stl.h:569:36:569:47 | emplace_hint | 1 | func:0 && |
570620
| stl.h:571:23:571:28 | insert | 0 | value_type && |
571621
| stl.h:573:12:573:17 | insert | 0 | const_iterator |
572622
| stl.h:573:12:573:17 | insert | 1 | value_type && |
@@ -584,6 +634,12 @@ getParameterTypeName
584634
| stl.h:611:33:611:45 | unordered_set | 1 | func:0 |
585635
| stl.h:611:33:611:45 | unordered_set | 2 | size_type |
586636
| stl.h:614:18:614:26 | operator= | 0 | const unordered_set & |
637+
| stl.h:622:48:622:54 | emplace | 0 | func:0 && |
638+
| stl.h:622:48:622:54 | emplace | 0 | func:0 && |
639+
| stl.h:623:36:623:47 | emplace_hint | 0 | const_iterator |
640+
| stl.h:623:36:623:47 | emplace_hint | 0 | const_iterator |
641+
| stl.h:623:36:623:47 | emplace_hint | 1 | func:0 && |
642+
| stl.h:623:36:623:47 | emplace_hint | 1 | func:0 && |
587643
| stl.h:625:24:625:29 | insert | 0 | value_type && |
588644
| stl.h:627:12:627:17 | insert | 0 | const_iterator |
589645
| stl.h:627:12:627:17 | insert | 1 | value_type && |

‎docs/codeql/reusables/supported-platforms.rst

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -14,19 +14,11 @@
1414
Windows,"Windows 10 / Windows Server 2019
1515

1616
Windows 11 / Windows Server 2022","x86-64"
17-
macOS,"macOS 10.15 Catalina
18-
19-
macOS 11 Big Sur
20-
21-
macOS 12 Monterey
17+
macOS,"macOS 12 Monterey
2218

2319
macOS 13 Ventura
2420

25-
macOS 14 Sonoma","x86-64
26-
27-
x86-64, arm64 (Apple Silicon)
28-
29-
x86-64, arm64 (Apple Silicon)
21+
macOS 14 Sonoma","x86-64, arm64 (Apple Silicon)
3022

3123
x86-64, arm64 (Apple Silicon)
3224

‎go/ql/lib/ext/github.com.antchfx.htmlquery.model.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: sinkModel
5+
data:
6+
- ["github.com/antchfx/htmlquery", "", True, "Find", "", "", "Argument[1]", "xpath-injection", "manual"]
7+
- ["github.com/antchfx/htmlquery", "", True, "FindOne", "", "", "Argument[1]", "xpath-injection", "manual"]
8+
- ["github.com/antchfx/htmlquery", "", True, "Query", "", "", "Argument[1]", "xpath-injection", "manual"]
9+
- ["github.com/antchfx/htmlquery", "", True, "QueryAll", "", "", "Argument[1]", "xpath-injection", "manual"]

‎go/ql/lib/ext/github.com.antchfx.jsonquery.model.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: sinkModel
5+
data:
6+
- ["github.com/antchfx/jsonquery", "", True, "Find", "", "", "Argument[1]", "xpath-injection", "manual"]
7+
- ["github.com/antchfx/jsonquery", "", True, "FindOne", "", "", "Argument[1]", "xpath-injection", "manual"]
8+
- ["github.com/antchfx/jsonquery", "", True, "Query", "", "", "Argument[1]", "xpath-injection", "manual"]
9+
- ["github.com/antchfx/jsonquery", "", True, "QueryAll", "", "", "Argument[1]", "xpath-injection", "manual"]

‎go/ql/lib/ext/github.com.antchfx.xmlquery.model.yml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: sinkModel
5+
data:
6+
- ["github.com/antchfx/xmlquery", "", True, "Find", "", "", "Argument[1]", "xpath-injection", "manual"]
7+
- ["github.com/antchfx/xmlquery", "", True, "FindOne", "", "", "Argument[1]", "xpath-injection", "manual"]
8+
- ["github.com/antchfx/xmlquery", "", True, "FindEach", "", "", "Argument[1]", "xpath-injection", "manual"]
9+
- ["github.com/antchfx/xmlquery", "", True, "FindEachWithBreak", "", "", "Argument[1]", "xpath-injection", "manual"]
10+
- ["github.com/antchfx/xmlquery", "", True, "Query", "", "", "Argument[1]", "xpath-injection", "manual"]
11+
- ["github.com/antchfx/xmlquery", "", True, "QueryAll", "", "", "Argument[1]", "xpath-injection", "manual"]
12+
- ["github.com/antchfx/xmlquery", "Node", True, "SelectElement", "", "", "Argument[0]", "xpath-injection", "manual"]
13+
- ["github.com/antchfx/xmlquery", "Node", True, "SelectElements", "", "", "Argument[0]", "xpath-injection", "manual"]

‎go/ql/lib/ext/github.com.antchfx.xpath.model.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: sinkModel
5+
data:
6+
- ["github.com/antchfx/xpath", "", True, "Compile", "", "", "Argument[0]", "xpath-injection", "manual"]
7+
- ["github.com/antchfx/xpath", "", True, "CompileWithNS", "", "", "Argument[0]", "xpath-injection", "manual"]
8+
- ["github.com/antchfx/xpath", "", True, "MustCompile", "", "", "Argument[0]", "xpath-injection", "manual"]
9+
- ["github.com/antchfx/xpath", "", True, "Select", "", "", "Argument[1]", "xpath-injection", "manual"]

‎go/ql/lib/ext/github.com.appleboy.gin-jwt.model.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: sinkModel
5+
data:
6+
- ["github.com/appleboy/gin-jwt", "GinJWTMiddleware", True, "Key", "", "", "", "credentials-key", "manual"]

‎go/ql/lib/ext/github.com.christrenkamp.goxpath.model.yml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: sinkModel
5+
data:
6+
- ["github.com/ChrisTrenkamp/goxpath", "", True, "MustParse", "", "", "Argument[0]", "xpath-injection", "manual"]
7+
- ["github.com/ChrisTrenkamp/goxpath", "", True, "Parse", "", "", "Argument[0]", "xpath-injection", "manual"]
8+
- ["github.com/ChrisTrenkamp/goxpath", "", True, "ParseExec", "", "", "Argument[0]", "xpath-injection", "manual"]

‎go/ql/lib/ext/github.com.go-jose.go-jose.model.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: packageGrouping
5+
data:
6+
- ["go-jose", "github.com/go-jose/go-jose"]
7+
- ["go-jose", "gopkg.in/square/go-jose"]
8+
- ["go-jose", "github.com/square/go-jose"]
9+
- addsTo:
10+
pack: codeql/go-all
11+
extensible: sinkModel
12+
data:
13+
- ["group:go-jose", "Recipient", True, "Key", "", "", "", "credentials-key", "manual"]
14+
- ["group:go-jose", "SigningKey", True, "Key", "", "", "", "credentials-key", "manual"]

‎go/ql/lib/ext/github.com.go-xmlpath.xmlpath.model.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/go-all
4+
extensible: sinkModel
5+
data:
6+
- ["github.com/go-xmlpath/xmlpath", "", True, "Compile", "", "", "Argument[0]", "xpath-injection", "manual"]
7+
- ["github.com/go-xmlpath/xmlpath", "", True, "MustCompile", "", "", "Argument[0]", "xpath-injection", "manual"]

0 commit comments

Comments
 (0)