Skip to content

Commit 93d8a03

Browse files
jcogs33jcogs33
authored
Merge branch 'main' into jcogs33/mad-metrics-query
2 parents a77acd6 + 636d5e3 commit 93d8a03

File tree

878 files changed

+17561
-6531
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

878 files changed

+17561
-6531
lines changed

‎.github/workflows/check-query-ids.yml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: Check query IDs
2+
3+
on:
4+
pull_request:
5+
paths:
6+
- "**/src/**/*.ql"
7+
- misc/scripts/check-query-ids.py
8+
- .github/workflows/check-query-ids.yml
9+
branches:
10+
- main
11+
- "rc/*"
12+
workflow_dispatch:
13+
14+
jobs:
15+
check:
16+
name: Check query IDs
17+
runs-on: ubuntu-latest
18+
steps:
19+
- uses: actions/checkout@v3
20+
- name: Check for duplicate query IDs
21+
run: python3 misc/scripts/check-query-ids.py

‎.github/workflows/swift.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,7 @@ jobs:
6565
if : ${{ github.event_name == 'pull_request' }}
6666
needs: build-and-test-macos
6767
runs-on: macos-12-xl
68+
timeout-minutes: 60
6869
steps:
6970
- uses: actions/checkout@v3
7071
- uses: ./swift/actions/run-integration-tests

‎config/identical-files.json

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -470,6 +470,10 @@
470470
"javascript/ql/src/Comments/CommentedOutCodeReferences.inc.qhelp",
471471
"python/ql/src/Lexical/CommentedOutCodeReferences.inc.qhelp"
472472
],
473+
"ThreadResourceAbuse qhelp": [
474+
"java/ql/src/experimental/Security/CWE/CWE-400/LocalThreadResourceAbuse.qhelp",
475+
"java/ql/src/experimental/Security/CWE/CWE-400/ThreadResourceAbuse.qhelp"
476+
],
473477
"IDE Contextual Queries": [
474478
"cpp/ql/lib/IDEContextual.qll",
475479
"csharp/ql/lib/IDEContextual.qll",
@@ -537,6 +541,11 @@
537541
"ruby/ql/lib/codeql/ruby/frameworks/data/internal/ApiGraphModels.qll",
538542
"python/ql/lib/semmle/python/frameworks/data/internal/ApiGraphModels.qll"
539543
],
544+
"ApiGraphModelsExtensions": [
545+
"javascript/ql/lib/semmle/javascript/frameworks/data/internal/ApiGraphModelsExtensions.qll",
546+
"ruby/ql/lib/codeql/ruby/frameworks/data/internal/ApiGraphModelsExtensions.qll",
547+
"python/ql/lib/semmle/python/frameworks/data/internal/ApiGraphModelsExtensions.qll"
548+
],
540549
"TaintedFormatStringQuery Ruby/JS": [
541550
"javascript/ql/lib/semmle/javascript/security/dataflow/TaintedFormatStringQuery.qll",
542551
"ruby/ql/lib/codeql/ruby/security/TaintedFormatStringQuery.qll"
@@ -580,5 +589,9 @@
580589
"IncompleteMultiCharacterSanitization JS/Ruby": [
581590
"javascript/ql/lib/semmle/javascript/security/IncompleteMultiCharacterSanitizationQuery.qll",
582591
"ruby/ql/lib/codeql/ruby/security/IncompleteMultiCharacterSanitizationQuery.qll"
592+
],
593+
"EncryptionKeySizes Python/Java": [
594+
"python/ql/lib/semmle/python/security/internal/EncryptionKeySizes.qll",
595+
"java/ql/lib/semmle/code/java/security/internal/EncryptionKeySizes.qll"
583596
]
584597
}

‎cpp/ql/lib/CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
## 0.4.5
2+
3+
No user-facing changes.
4+
15
## 0.4.4
26

37
No user-facing changes.

‎cpp/ql/lib/change-notes/2022-11-25-deprecate-default-taint-tracking.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
category: deprecated
3+
---
4+
5+
* Deprecated `semmle.code.cpp.ir.dataflow.DefaultTaintTracking`. Use `semmle.code.cpp.ir.dataflow.TaintTracking`.
6+
* Deprecated `semmle.code.cpp.security.TaintTrackingImpl`. Use `semmle.code.cpp.ir.dataflow.TaintTracking`.

‎cpp/ql/lib/change-notes/2022-12-08-support-getaddrinfo-dataflow.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `getaddrinfo` function is now recognized as a flow source.

‎cpp/ql/lib/change-notes/2022-12-08-support-getenv-variants.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `secure_getenv` and `_wgetenv` functions are now recognized as local flow sources.

‎cpp/ql/lib/change-notes/2022-12-08-support-scanf-dataflow.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `scanf` and `fscanf` functions and their variants are now recognized as flow sources.

‎cpp/ql/lib/change-notes/2022-12-09-generalize-argv-source.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `ArgvSource` flow source has been generalized to handle cases where the argument vector of `main` is not named `argv`.

‎cpp/ql/lib/change-notes/released/0.4.5.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
## 0.4.5
2+
3+
No user-facing changes.

0 commit comments

Comments
 (0)