Skip to content

Commit 70076fd

Browse files
committed
remove lgtm from presentations
1 parent ff78ac9 commit 70076fd

13 files changed

+15
-200
lines changed

docs/codeql/ql-training/cpp/bad-overflow-guard.rst

Lines changed: 1 addition & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ CodeQL for C/C++
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `ChakraCore database <https://downloads.lgtm.com/snapshots/cpp/microsoft/chakracore/ChakraCore-revision-2017-April-12--18-13-26.zip>`__
16-
17-
.. note::
18-
19-
For the examples in this presentation, we will be analyzing `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__.
20-
21-
You can query the project in `the query console <https://lgtm.com/query/project:2034240708/lang:cpp/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__ from GitHub.
2813

2914
Checking for overflow in C
3015
==========================

docs/codeql/ql-training/cpp/control-flow-cpp.rst

Lines changed: 1 addition & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -11,22 +11,7 @@ CodeQL for C/C++
1111
Setup
1212
=====
1313

14-
For this example you should download:
15-
16-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
17-
- `ChakraCore database <https://downloads.lgtm.com/snapshots/cpp/microsoft/chakracore/ChakraCore-revision-2017-April-12--18-13-26.zip>`__
18-
19-
.. note::
20-
21-
For the examples in this presentation, we will be analyzing `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__.
22-
23-
You can query the project in `the query console <https://lgtm.com/query/project:2034240708/lang:cpp/>`__ on LGTM.com.
24-
25-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
26-
27-
.. include:: ../slide-snippets/database-note.rst
28-
29-
.. resume slides
14+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `ChakraCore <https://github.com/Chakra-Core/ChakraCore/>`__ from GitHub.
3015

3116

3217
.. rst-class:: agenda

docs/codeql/ql-training/cpp/data-flow-cpp.rst

Lines changed: 1 addition & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ Finding string formatting vulnerabilities in C/C++
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `dotnet/coreclr database <http://downloads.lgtm.com/snapshots/cpp/dotnet/coreclr/dotnet_coreclr_fbe0c77.zip>`__
16-
17-
.. note::
18-
19-
For the examples in this presentation, we will be analyzing `dotnet/coreclr <https://github.com/dotnet/coreclr>`__.
20-
21-
You can query the project in `the query console <https://lgtm.com/query/projects:1505958977333/lang:cpp/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `dotnet/coreclr <https://github.com/dotnet/coreclr>`__ from GitHub.
2813

2914
.. rst-class:: agenda
3015

docs/codeql/ql-training/cpp/global-data-flow-cpp.rst

Lines changed: 1 addition & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ CodeQL for C/C++
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `dotnet/coreclr database <http://downloads.lgtm.com/snapshots/cpp/dotnet/coreclr/dotnet_coreclr_fbe0c77.zip>`__
16-
17-
.. note::
18-
19-
For the examples in this presentation, we will be analyzing `dotnet/coreclr <https://github.com/dotnet/coreclr>`__.
20-
21-
You can query the project in `the query console <https://lgtm.com/query/projects:1505958977333/lang:cpp/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `dotnet/coreclr <https://github.com/dotnet/coreclr>`__ from GitHub.
2813

2914
.. rst-class:: agenda
3015

docs/codeql/ql-training/cpp/intro-ql-cpp.rst

Lines changed: 2 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ CodeQL for C/C++
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `exiv2 database <http://downloads.lgtm.com/snapshots/cpp/exiv2/Exiv2_exiv2_b090f4d.zip>`__
16-
17-
.. note::
18-
19-
For this example, we will be analyzing `exiv2 <https://github.com/Exiv2/exiv2>`__.
20-
21-
You can also query the project in `the query console <https://lgtm.com/query/project:1506532406873/lang:cpp/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `exiv2 <https://github.com/Exiv2/exiv2>`__ from GitHub.
2813

2914
.. Include language-agnostic section here
3015
@@ -66,7 +51,7 @@ A simple CodeQL query
6651

6752
.. note::
6853

69-
We are going to write a simple query which finds “if statements” with empty “then” blocks, so we can highlight the results like those on the previous slide. The query can be run in the `query console on LGTM <https://lgtm.com/query>`__, or in your `IDE <https://lgtm.com/help/lgtm/running-queries-ide>`__.
54+
We are going to write a simple query which finds “if statements” with empty “then” blocks, so we can highlight the results like those on the previous slide.
7055

7156
A `query <https://codeql.github.com/docs/ql-language-reference/queries/>`__ consists of a “select” clause that indicates what results should be returned. Typically it will also provide a “from” clause to declare some variables, and a “where” clause to state conditions over those variables. For more information on the structure of query files (including links to useful topics in the `QL language reference <https://codeql.github.com/docs/ql-language-reference/>`__), see `About CodeQL queries <https://codeql.github.com/docs/writing-codeql-queries/about-codeql-queries/>`__.
7257

@@ -203,6 +188,3 @@ Model answer: redundant if-statement
203188

204189
.. literalinclude:: ../query-examples/cpp/empty-if-cpp-model.ql
205190

206-
.. note::
207-
208-
You can explore the results generated when this query is run on exiv2 in LGTM `here <https://lgtm.com/query/4641433299746527262/>`__.

docs/codeql/ql-training/cpp/snprintf.rst

Lines changed: 1 addition & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ CodeQL for C/C++
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `rsyslog database <https://downloads.lgtm.com/snapshots/cpp/rsyslog/rsyslog/rsyslog-all-revision-2018-April-27--14-12-31.zip>`__
16-
17-
.. note::
18-
19-
For this example, we will be analyzing `rsyslog <https://github.com/rsyslog/rsyslog>`__.
20-
21-
You can also query the project in `the query console <https://lgtm.com/query/project:1506087977050/lang:cpp/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `rsyslog <https://github.com/rsyslog/rsyslog>`__ from GitHub.
2813

2914
``snprintf``
3015
============
@@ -94,8 +79,6 @@ Model answer
9479

9580
.. rst-class:: build
9681

97-
- More full-featured version: `https://lgtm.com/rules/1505913226124 <https://lgtm.com/rules/1505913226124>`__.
98-
9982
.. note::
10083

10184
The regular expression for matching the format string uses the “(?s)” directive to ensure that “.” also matches any newline characters embedded in the string.

docs/codeql/ql-training/java/apache-struts-java.rst

Lines changed: 2 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -13,22 +13,7 @@ Exercise: Apache Struts
1313
Setup
1414
=====
1515

16-
For this example you should download:
17-
18-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
19-
- `Apache Struts database <https://downloads.lgtm.com/snapshots/java/apache/struts/apache-struts-7fd1622-CVE-2018-11776.zip>`__
20-
21-
.. note::
22-
23-
For this example, we will be analyzing `Apache Struts <https://github.com/apache/struts>`__.
24-
25-
You can also query the project in `the query console <https://lgtm.com/query/project:1878521151/lang:java/>`__ on LGTM.com.
26-
27-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
28-
29-
.. include:: ../slide-snippets/database-note.rst
30-
31-
.. resume slides
16+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
3217

3318
Unsafe deserialization in Struts
3419
================================
@@ -45,7 +30,7 @@ which is intended to populate the ``target`` object with data from the reader, u
4530
RCE in Apache Struts
4631
====================
4732

48-
- Vulnerable code looked like this (`original <https://lgtm.com/projects/g/apache/struts/snapshot/b434c23f95e0f9d5bde789bfa07f8fc1d5a8951d/files/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java?sort=name&dir=ASC&mode=heatmap#L45>`__):
33+
- Vulnerable code looked like this:
4934

5035
.. code-block:: java
5136

docs/codeql/ql-training/java/data-flow-java.rst

Lines changed: 1 addition & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ Finding SPARQL injection vulnerabilities in Java
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `VIVO Vitro database <http://downloads.lgtm.com/snapshots/java/vivo-project/Vitro/vivo-project_Vitro_java-srcVersion_47ae42c01954432c3c3b92d5d163551ce367f510-dist_odasa-lgtm-2019-04-23-7ceff95-linux64.zip>`__
16-
17-
.. note::
18-
19-
For this example, we will be analyzing `VIVO Vitro <https://github.com/vivo-project/Vitro>`__.
20-
21-
You can also query the project in `the query console <https://lgtm.com/query/project:14040005/lang:java/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `VIVO Vitro <https://github.com/vivo-project/Vitro>`__ from GitHub.
2813

2914
.. rst-class:: agenda
3015

docs/codeql/ql-training/java/global-data-flow-java.rst

Lines changed: 1 addition & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ CodeQL for Java
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `Apache Struts database <https://downloads.lgtm.com/snapshots/java/apache/struts/apache-struts-7fd1622-CVE-2018-11776.zip>`__
16-
17-
.. note::
18-
19-
For this example, we will be analyzing `Apache Struts <https://github.com/apache/struts>`__.
20-
21-
You can also query the project in `the query console <https://lgtm.com/query/project:1878521151/lang:java/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
2813

2914
.. rst-class:: agenda
3015

docs/codeql/ql-training/java/intro-ql-java.rst

Lines changed: 2 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -9,22 +9,7 @@ CodeQL for Java
99
Setup
1010
=====
1111

12-
For this example you should download:
13-
14-
- `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__
15-
- `Apache Struts database <https://downloads.lgtm.com/snapshots/java/apache/struts/apache-struts-7fd1622-CVE-2018-11776.zip>`__
16-
17-
.. note::
18-
19-
For this example, we will be analyzing `Apache Struts <https://github.com/apache/struts>`__.
20-
21-
You can also query the project in `the query console <https://lgtm.com/query/project:1878521151/lang:java/>`__ on LGTM.com.
22-
23-
.. insert database-note.rst to explain differences between database available to download and the version available in the query console.
24-
25-
.. include:: ../slide-snippets/database-note.rst
26-
27-
.. resume slides
12+
For this example you need to set up `CodeQL for Visual Studio Code <https://codeql.github.com/docs/codeql-for-visual-studio-code/setting-up-codeql-in-visual-studio-code/>`__ and download the CodeQL database for `Apache Struts <https://github.com/apache/struts>`__ from GitHub.
2813

2914
.. Include language-agnostic section here
3015
@@ -66,7 +51,7 @@ A simple CodeQL query
6651

6752
.. note::
6853

69-
We are going to write a simple query which finds “if statements” with empty “then” blocks, so we can highlight the results like those on the previous slide. The query can be run in the `query console on LGTM <https://lgtm.com/query>`__, or in your `IDE <https://lgtm.com/help/lgtm/running-queries-ide>`__.
54+
We are going to write a simple query which finds “if statements” with empty “then” blocks, so we can highlight the results like those on the previous slide.
7055

7156
A `query <https://codeql.github.com/docs/ql-language-reference/queries/>`__ consists of a “select” clause that indicates what results should be returned. Typically it will also provide a “from” clause to declare some variables, and a “where” clause to state conditions over those variables. For more information on the structure of query files (including links to useful topics in the `QL language reference <https://codeql.github.com/docs/ql-language-reference/>`__), see `About CodeQL queries <https://codeql.github.com/docs/writing-codeql-queries/about-codeql-queries/>`__.
7257

@@ -201,7 +186,3 @@ Model answer: redundant if-statement
201186
====================================
202187

203188
.. literalinclude:: ../query-examples/java/empty-if-java-model.ql
204-
205-
.. note::
206-
207-
You can explore the results generated when this query is run on apache/struts in LGTM `here <https://lgtm.com/query/1269550358355690774/>`__.

0 commit comments

Comments
 (0)