File tree
2,533 files changed
+92178
-5477
lines changed- cpp
- autobuilder/Semmle.Autobuild.Cpp.Tests
- ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow
- ir
- dataflow/internal
- ssa0
- implementation
- aliased_ssa/constant
- raw
- constant
- internal
- unaliased_ssa/constant
- models/implementations
- src
- Likely Bugs/Memory Management
- Security/CWE
- CWE-114
- CWE-120
- CWE-134
- CWE-170
- CWE-190
- CWE-290
- CWE-807
- Summary
- change-notes
- released
- experimental/cryptography/inventory/new_models
- test
- library-tests
- controlflow/guards-ir
- dataflow/dataflow-tests
- ir/ir
- query-tests
- Likely Bugs/Memory Management
- ImproperNullTermination
- ReturnStackAllocatedMemory
- Security/CWE
- CWE-078/semmle/ExecTainted
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-119/semmle/tests
- CWE-134
- SAMATE
- semmle
- argv
- funcs
- globalVars
- ifs
- CWE-190
- SAMATE
- semmle
- TaintedAllocationSize
- tainted
- CWE-197/SAMATE/IntegerOverflowTainted
- CWE-290/semmle/AuthenticationBypass
- CWE-807/semmle/TaintedCondition
- csharp
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp/Populators
- Semmle.Extraction.Tests
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- integration-tests
- all-platforms
- cshtml_standalone_flowsteps
- Controllers
- Views
- Test
- cshtml_standalone
- cshtml
- diag_dotnet_incompatible
- diag_missing_project_files
- diag_missing_xamarin_sdk
- diag_recursive_generics
- dotnet_build
- dotnet_no_args_inject
- dotnet_pack
- dotnet_publish
- dotnet_run
- standalone
- posix-only
- dotnet_test_mstest
- dotnet_test
- inherit-env-vars
- standalone_dependencies_nuget
- warn_as_error
- lib
- change-notes
- released
- semmle/code
- cil/internal
- csharp
- controlflow/internal
- dataflow/internal
- frameworks
- security/dataflow/flowsinks
- src
- Security Features
- change-notes
- released
- test
- library-tests/standalone
- assemblyattribute
- externalLocationSink
- query-tests/Security Features/CWE-079/XSSRazorPages
- Areas/TestArea/Views
- Test4
- Controllers
- Generated
- MyAreas/Test4
- Views
- Custom2
- Custom/Test3
- Other
- Test2
- Test4
- Test
- docs/codeql
- codeql-for-visual-studio-code
- images/codeql-for-visual-studio-code
- reusables
- writing-codeql-queries
- go/ql
- consistency-queries
- change-notes/released
- lib
- change-notes
- released
- semmle/go
- dataflow/internal
- src
- change-notes/released
- experimental/CWE-525
- test
- experimental/CWE-525
- library-tests/semmle/go
- dataflow
- ArrayConversion
- SliceExpressions
- frameworks/Beego
- query-tests/Security/CWE-078
- javascript
- extractor
- lib/typescript
- src
- src/com/semmle/ts/extractor
- tests/ts
- input
- output/trap
- ql
- lib
- change-notes
- released
- semmle/javascript/frameworks
- src
- Security
- CWE-022
- examples
- CWE-079
- CWE-117
- Summary
- change-notes/released
- experimental/semmle/javascript
- test
- experimental/TypeOrm
- library-tests
- TypeScript
- ImportAssertions
- ImportAttributes
- Types
- frameworks/SQL
- query-tests/Security/CWE-022/TaintedPath
- examples
- java
- kotlin-extractor
- src/main/kotlin
- utils/versions
- v_1_5_0
- v_1_9_0-Beta
- v_2.0.0-Beta1
- ql
- automodel
- src
- change-notes/released
- test
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- com/github/codeql/test
- java/io
- integration-tests/all-platforms/kotlin/extractor_information_kotlin2
- lib
- change-notes
- released
- semmle/code/java/dataflow/internal
- src
- Security/CWE/CWE-022
- change-notes/released
- test-kotlin1
- TestUtilities
- internal
- library-tests
- GeneratedFiles
- android_function_return_types
- annotation-accessor-result-type
- annotation_classes
- annotations/jvmName
- arrays-with-variances
- arrays
- call-int-to-char
- clashing-extension-fields
- classes
- collection-literals
- comments
- companion_objects
- compilation-units
- controlflow
- basic
- dominance
- paths
- plot
- coroutines
- data-classes
- dataflow
- extensionMethod
- foreach
- func
- notnullexpr
- stmtexpr
- summaries
- taint
- whenexpr
- declaration-stack
- empty
- enum
- exprs_typeaccess
- exprs
- extensions_recursion
- extensions
- fake_overrides
- all_java
- all_kotlin
- kotlin_calling_java
- field-initializer-flow
- files
- for-array-iterators
- function-n
- generic-inner-classes
- generic-instance-methods
- generic-methods
- generic-selective-extraction
- generic-type-bounds
- generics-location
- generics
- inherited-callee
- inherited-collection-implementation
- inherited-default-value
- inherited-single-abstract-method
- inheritence-substitution
- instances
- interface-delegate
- internal-constructor-called-from-java
- internal-public-alias
- java-kotlin-collection-type-generic-methods
- java-lang-number-conversions
- java-list-kotlin-user
- java-map-methods
- java_and_kotlin_generics
- java
- kotlin
- java_and_kotlin_internal
- java_and_kotlin
- java_properties
- jvmoverloads-annotation
- jvmoverloads_flow
- jvmoverloads_generics
- jvmstatic-annotation
- kotlin-java-map-entries
- lateinit
- lazy-val-multiple-constructors
- literals
- maps-iterator-overloads
- methods-mixed-java-and-kotlin
- methods
- ministdlib
- mixed-java-and-kotlin
- modifiers
- multiple_extensions
- multiple_files
- no-when-branch-found
- numlines
- object
- operator-overloads
- parameter-defaults
- private-anonymous-types
- properties
- recursive-instantiations
- stack-overflow-1
- stack-overflow-2
- reflection
- special-method-getters
- static-method-calls
- stmts
- string-charat
- super-method-calls
- this
- trap
- trivial
- type_aliases
- type_equivalences
- types
- underscore-parameters
- vararg
- variables
- query-tests
- AbstractToConcreteCollection
- AutoBoxing
- CloseReader
- CloseWriter
- ConfusingOverloading
- ConstantLoopCondition
- DeadCode
- DeadRefTypes
- EmptyBlock
- ExposeRepresentation
- InnerClassCouldBeStatic
- MissingInstanceofInEquals
- MissingOverrideAnnotation
- MutualDependency
- NamingConventionsRefTypes
- NonSerializableField
- NonSerializableInnerClass
- NullMaybe
- OneStatementPerLine
- PartiallyMaskedCatch
- ReturnValueIgnored
- SimplifyBoolExpr
- UnderscoreIdentifier
- UnreadLocal
- UselessNullCheck
- UselessParameter
- WhitespaceContradictsPrecedence
- test-kotlin2
- TestUtilities
- internal
- library-tests
- GeneratedFiles
- android_function_return_types
- annotation-accessor-result-type
- annotation_classes
- annotations/jvmName
- arrays-with-variances
- arrays
- call-int-to-char
- clashing-extension-fields
- classes
- collection-literals
- comments
- companion_objects
- compilation-units
- controlflow
- basic
- dominance
- paths
- plot
- coroutines
- data-classes
- dataflow
- extensionMethod
- foreach
- func
- notnullexpr
- stmtexpr
- summaries
- taint
- whenexpr
- declaration-stack
- empty
- enum
- exprs_typeaccess
- exprs
- extensions_recursion
- extensions
- fake_overrides
- all_java
- all_kotlin
- kotlin_calling_java
- field-initializer-flow
- files
- for-array-iterators
- function-n
- generic-inner-classes
- generic-instance-methods
- generic-methods
- generic-selective-extraction
- generic-type-bounds
- generics-location
- generics
- inherited-callee
- inherited-collection-implementation
- inherited-default-value
- inherited-single-abstract-method
- inheritence-substitution
- instances
- interface-delegate
- internal-constructor-called-from-java
- internal-public-alias
- java-kotlin-collection-type-generic-methods
- java-lang-number-conversions
- java-list-kotlin-user
- java-map-methods
- java_and_kotlin_generics
- java
- kotlin
- java_and_kotlin_internal
- java_and_kotlin
- java_properties
- jvmoverloads-annotation
- jvmoverloads_flow
- jvmoverloads_generics
- jvmstatic-annotation
- kotlin-java-map-entries
- lateinit
- lazy-val-multiple-constructors
- literals
- maps-iterator-overloads
- methods-mixed-java-and-kotlin
- methods
- ministdlib
- mixed-java-and-kotlin
- modifiers
- multiple_extensions
- multiple_files
- no-when-branch-found
- numlines
- object
- operator-overloads
- parameter-defaults
- private-anonymous-types
- properties
- recursive-instantiations
- stack-overflow-1
- stack-overflow-2
- reflection
- special-method-getters
- static-method-calls
- stmts
- string-charat
- super-method-calls
- this
- trap
- trivial
- type_aliases
- type_equivalences
- types
- underscore-parameters
- vararg
- variables
- query-tests
- AbstractToConcreteCollection
- AutoBoxing
- CloseReader
- CloseWriter
- ConfusingOverloading
- ConstantLoopCondition
- DeadCode
- DeadRefTypes
- EmptyBlock
- ExposeRepresentation
- InnerClassCouldBeStatic
- MissingInstanceofInEquals
- MissingOverrideAnnotation
- MutualDependency
- NamingConventionsRefTypes
- NonSerializableField
- NonSerializableInnerClass
- NullMaybe
- OneStatementPerLine
- PartiallyMaskedCatch
- ReturnValueIgnored
- SimplifyBoolExpr
- UnderscoreIdentifier
- UnreadLocal
- UselessNullCheck
- UselessParameter
- WhitespaceContradictsPrecedence
- test/query-tests/security/CWE-022/semmle/tests
- misc
- bazel/cmake
- codegen
- generators
- lib
- templates
- test
- suite-helpers
- change-notes/released
- python
- downgrades/728c6d65e61d808ae276013ebc15abc3a97aaef1
- ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new/internal
- frameworks
- upgrades/0565f7466437d52e1dc64a3b930926ab2f60cd64
- src
- Summary
- change-notes/released
- experimental/cryptography/inventory
- new_models
- old_models
- test
- 2
- library-tests
- ControlFlow/Exceptions
- PointsTo/imports2
- package
- classes/attr
- comprehensions
- modules
- general
- package_members
- usage
- types/properties
- query-tests/Summary
- 3
- library-tests
- ControlFlow/Exceptions
- PointsTo
- import_time
- imports
- package
- classes
- attr
- meta
- modules
- package_members
- usage
- types
- functions
- properties
- query-tests/Summary
- experimental
- dataflow
- basic
- calls
- coverage-py2
- coverage-py3
- coverage
- def-use-flow
- exceptions
- fieldflow
- global-flow
- match
- model-summaries
- module-initialization
- path-graph
- regression
- sensitive-data
- summaries-checks
- summaries
- tainttracking
- commonSanitizer
- customSanitizer
- defaultAdditionalTaintStep-py3
- defaultAdditionalTaintStep
- generator-flow
- unwanted-global-flow
- typetracking-summaries
- typetracking_imports
- typetracking
- use-use-flow
- variable-capture
- import-resolution
- library-tests
- CallGraph-implicit-init
- CallGraph-imports
- CallGraph
- meta/inline-taint-test-demo
- library-tests
- ApiGraphs/py2
- ControlFlow
- augassign
- comparison
- dominators
- except
- general
- ssa/deletions
- InlineExpectationsTest/missing-relevant-tag
- PEP695
- PointsTo
- functions
- imports
- inheritance
- lookup
- new
- attributes
- classes/attr
- comments
- essa/ssa-compute
- exceptions
- frameworks
- aioch
- aiofiles
- aiofile
- aiohttp
- aiomysql
- aiopg
- aiosqlite
- anyio
- asyncpg
- baize
- cassandra-driver
- cherrypy
- clickhouse_driver
- cryptodome
- cryptography
- crypto
- cx_Oracle
- dill
- django-orm
- django-v1
- django-v2-v3
- django
- fabric
- fastapi
- flask_admin
- flask_sqlalchemy
- flask
- httpx
- idna
- internal-ql-helpers
- invoke
- jmespath
- joblib
- libtaxii
- lxml
- markupsafe
- multidict
- mysql-connector-python
- mysqldb
- numpy
- oracledb
- pandas
- peewee
- phoenixdb
- pycurl
- pymssql
- pymysql
- pyodbc
- requests
- rest_framework
- rsa
- ruamel.yaml
- sanic
- serverless
- simplejson
- sqlalchemy
- starlette
- stdlib-py2
- stdlib-py3
- stdlib
- toml
- tornado
- twisted
- ujson
- urllib3
- xmltodict
- yaml
- yarl
- imports
- locations/negative_numbers
- modules/usage
- parentheses
- regex
- stmts
- general
- raise_stmt
- try_stmt
- with_stmt
- types/properties
- query-tests
- Expressions/general
- Functions/ModificationOfParameterWithDefault
- Security
- CWE-022-PathInjection
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- CWE-209-StackTraceExposure
- CWE-943-NoSqlInjection
- Statements/ReturnOrYieldOutsideOfFunction
- ql
- extractor
- ruby/ql
- lib
- change-notes/released
- codeql/ruby
- controlflow
- dataflow
- internal
- src
- change-notes/released
- test/library-tests
- dataflow
- array-flow
- global
- hash-flow
- local
- params
- variables
- swift
- downgrades
- 556e495d498c9c01286088785b590a7e80f0bb0b
- 58e9efb426b5b2b322a64c9dab988b02578e0f04
- b83ff9c60c2bb4be2f3d1d4810268c557eb38f19
- extractor
- infra
- translators
- ql
- lib
- change-notes
- released
- codeql/swift
- controlflow/internal
- dataflow
- internal
- elements
- decl
- expr
- stmt
- type
- frameworks
- StandardLibrary
- generated
- decl
- expr
- pattern
- stmt
- type
- printast
- security
- upgrades
- 04ef9ecaa9e06a587f252f147462861e3d32846a
- 556e495d498c9c01286088785b590a7e80f0bb0b
- 58e9efb426b5b2b322a64c9dab988b02578e0f04
- src
- change-notes
- released
- test
- extractor-tests/generated
- decl/MacroDecl
- expr
- CopyExpr
- IdentityExpr
- PackExpansionExpr
- stmt/DiscardStmt
- library-tests/dataflow
- flowsources
- taint/libraries
- query-tests/Security
- CWE-022
- CWE-134
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
2,533 files changed
+92178
-5477
lines changedLines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
8 | 8 |
| |
9 | 9 |
| |
10 | 10 |
| |
| 11 | + | |
| 12 | + | |
11 | 13 |
| |
12 | 14 |
| |
13 | 15 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
3 | 3 |
| |
4 |
| - | |
| 4 | + | |
5 | 5 |
| |
6 | 6 |
| |
7 | 7 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
145 | 145 |
| |
146 | 146 |
| |
147 | 147 |
| |
148 |
| - | |
| 148 | + | |
149 | 149 |
| |
150 |
| - | |
| 150 | + | |
151 | 151 |
| |
152 | 152 |
| |
153 | 153 |
| |
|
Lines changed: 14 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
1 | 15 |
| |
2 | 16 |
| |
3 | 17 |
| |
|
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 13 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + |
0 commit comments