File tree
4,098 files changed
+191499
-35943
lines changed- cpp
- autobuilder/Semmle.Autobuild.Cpp.Tests
- downgrades/0a9eb01d3650642e013eb86be45d952289537f91
- ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow
- ir
- dataflow
- internal
- ssa0
- implementation
- aliased_ssa/constant
- raw
- constant
- internal
- unaliased_ssa/constant
- models
- implementations
- interfaces
- rangeanalysis/new
- internal/semantic
- analysis
- upgrades/8cba93a44180e0d50a80a660950800d822b981fc
- src
- Likely Bugs/Memory Management
- Security/CWE
- CWE-114
- CWE-120
- CWE-134
- CWE-170
- CWE-190
- CWE-290
- CWE-416
- CWE-807
- Summary
- change-notes
- released
- experimental/cryptography/inventory/new_models
- test
- library-tests
- controlflow/guards-ir
- dataflow
- dataflow-tests
- source-sink-tests
- taint-tests
- ir
- ir
- modulus-analysis
- range-analysis
- sign-analysis
- syntax-zoo
- query-tests
- Likely Bugs/Memory Management
- ImproperNullTermination
- ReturnStackAllocatedMemory
- Security/CWE
- CWE-078/semmle/ExecTainted
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-119/semmle/tests
- CWE-120/semmle/tests
- CWE-134
- SAMATE
- semmle
- argv
- funcs
- globalVars
- ifs
- CWE-190
- SAMATE
- semmle
- TaintedAllocationSize
- tainted
- CWE-193
- CWE-197/SAMATE/IntegerOverflowTainted
- CWE-290/semmle/AuthenticationBypass
- CWE-416/semmle/tests
- UseAfterFree
- UseOfStringAfterLifetimeEnds
- CWE-457/semmle/tests
- CWE-807/semmle/TaintedCondition
- csharp
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- documentation/library-coverage
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp.StubGenerator
- Semmle.Extraction.CSharp
- Entities
- Populators
- Semmle.Extraction.Tests
- Semmle.Extraction
- Entities/Base
- Semmle.Util
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- examples/snippets
- integration-tests
- all-platforms
- cshtml_standalone_flowsteps
- Controllers
- Views
- Test
- cshtml_standalone
- cshtml
- diag_dotnet_incompatible
- diag_missing_project_files
- diag_missing_xamarin_sdk
- diag_recursive_generics
- dotnet_build
- dotnet_no_args_inject
- dotnet_pack
- dotnet_publish
- dotnet_run
- standalone
- posix-only
- dotnet_test_mstest
- dotnet_test
- inherit-env-vars
- standalone_dependencies_multi_target
- standalone_dependencies_nuget
- standalone_dependencies
- warn_as_error
- windows-only/standalone_dependencies
- lib
- Linq
- change-notes/released
- ext
- generated
- semmle/code
- asp
- cil
- internal
- csharp
- commons
- controlflow/internal
- dataflow
- internal
- rangeanalysis
- frameworks
- microsoft
- system
- collections
- data
- linq
- runtime
- security/cryptography
- text
- threading
- test
- security
- auth
- cryptography
- dataflow
- flowsinks
- flowsources
- xml
- serialization
- dotnet
- src
- API Abuse
- Bad Practices
- Naming Conventions
- Concurrency
- Dead Code
- Documentation
- Input Validation
- Likely Bugs
- Collections
- LeapYear
- Metrics/Summaries
- Security Features
- CWE-091
- CWE-114
- CWE-327
- CWE-384
- Telemetry
- change-notes
- released
- experimental
- CWE-918
- Security Features
- CWE-327/Azure
- CWE-759
- JsonWebTokenHandler
- Serialization
- backdoor
- ir
- implementation/raw/internal/desugar
- internal
- meta/frameworks
- utils
- modelconverter
- modeleditor
- modelgenerator/internal
- test
- TestUtilities
- library-tests
- assemblies
- assignables
- async
- attributes
- cil
- attributes
- consistency
- dataflow
- enums
- functionPointers
- init-only-prop
- regressions
- typeAnnotations
- comments
- commons/Disposal
- constructors
- conversion
- operator
- reftype
- csharp10
- csharp11
- csharp7.3
- csharp8
- csharp9
- dataflow
- async
- callablereturnsarg
- external-models
- library
- tuples
- types
- definitions
- delegates
- dispatch
- enums
- events
- expressions
- extension-method-call
- fields
- frameworks
- EntityFramework
- sql
- system
- Dispose
- Equals
- generics
- indexers
- members
- methods
- namespaces
- nestedtypes
- operators
- overrides
- parameters
- properties
- regressions
- standalone
- assemblyattribute
- externalLocationSink
- tostringwithtypes
- types
- unification
- query-tests
- API Abuse
- IncorrectCompareToSignature
- NonOverridingMethod
- Dead Code/Tests
- Documentation
- Likely Bugs/InconsistentCompareTo
- Security Features/CWE-079/XSSRazorPages
- Areas/TestArea/Views
- Test4
- Controllers
- Generated
- MyAreas/Test4
- Views
- Custom2
- Custom/Test3
- Other
- Test2
- Test4
- Test
- Telemetry
- LibraryUsage
- SupportedExternalApis
- Useless Code/PointlessForwardingMethod
- utils
- modeleditor
- modelgenerator
- dataflow
- typebasedflow
- tools
- docs
- codeql
- codeql-for-visual-studio-code
- codeql-language-guides
- codeql-overview
- codeql-changelog
- images/codeql-for-visual-studio-code
- reusables
- writing-codeql-queries
- ql-libraries/dataflow
- go
- extractor
- vendor
- golang.org/x
- mod/modfile
- sys
- execabs
- tools
- go
- internal/packagesdriver
- packages
- types/objectpath
- internal
- gocommand
- packagesinternal
- typesinternal
- versions
- ql
- consistency-queries
- change-notes/released
- lib
- change-notes
- released
- semmle/go
- dataflow
- internal
- frameworks
- src
- change-notes/released
- experimental
- CWE-287
- examples
- CWE-525
- CWE-942
- test
- experimental
- CWE-287
- vendor
- gopkg.in/ldap.v2
- CWE-525
- CWE-942
- vendor
- github.com
- gin-contrib/cors
- gin-gonic/gin
- library-tests/semmle/go
- dataflow
- ArrayConversion
- SliceExpressions
- frameworks/Beego
- query-tests/Security/CWE-078
- javascript
- downgrades
- externs
- extractor
- lib/typescript
- src
- parser-tests
- src/com/semmle
- js/extractor
- ts/extractor
- tests
- ts
- input
- output/trap
- test/com/semmle/js/extractor/test
- ql
- lib
- change-notes
- released
- semmle/javascript
- frameworks
- internal
- security
- dataflow
- regexp
- src
- DOM
- Performance
- Security
- CWE-022
- examples
- CWE-079
- CWE-117
- CWE-327
- Summary
- change-notes
- released
- experimental/semmle/javascript
- test
- experimental/TypeOrm
- library-tests
- TypeScript
- ImportAssertions
- ImportAttributes
- Types
- frameworks/SQL
- query-tests
- DOM/TargetBlank
- Security
- CWE-022/TaintedPath
- examples
- CWE-327
- java
- documentation/library-coverage
- downgrades/dee651b58d1e5455ca2d07eca37775a21d772fcc
- kotlin-extractor
- src/main/kotlin
- utils/versions
- v_1_5_0
- v_1_9_0-Beta
- v_2.0.0-Beta1
- ql
- automodel
- src
- change-notes/released
- test
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- com/github/codeql/test
- java/io
- consistency-queries
- integration-tests/all-platforms
- java
- android-sample-kotlin-build-script-no-wrapper
- android-sample-kotlin-build-script
- android-sample-no-wrapper
- android-sample-old-style-kotlin-build-script-no-wrapper
- android-sample-old-style-kotlin-build-script
- android-sample-old-style-no-wrapper
- android-sample-old-style
- android-sample
- diagnostics/java-version-too-old
- kotlin/extractor_information_kotlin2
- lib
- change-notes
- released
- config
- ext
- semmle/code/java
- controlflow
- internal
- dataflow
- internal
- rangeanalysis
- dispatch
- frameworks
- metrics
- security
- regexp
- upgrades/ecfcf050952e54b1155fc89525db84af6ad34aaf
- src
- Language Abuse
- Likely Bugs
- Collections
- Comparison
- Security/CWE
- CWE-022
- CWE-502
- CWE-730
- Violations of Best Practice
- Boxed Types
- Dead Code
- Declarations
- change-notes/released
- test-kotlin1
- TestUtilities
- internal
- library-tests
- GeneratedFiles
- android_function_return_types
- annotation-accessor-result-type
- annotation_classes
- annotations/jvmName
- arrays-with-variances
- arrays
- call-int-to-char
- clashing-extension-fields
- classes
- collection-literals
- comments
- companion_objects
- compilation-units
- controlflow
- basic
- dominance
- paths
- plot
- coroutines
- data-classes
- dataflow
- extensionMethod
- foreach
- func
- notnullexpr
- stmtexpr
- summaries
- taint
- whenexpr
- declaration-stack
- empty
- enum
- exprs_typeaccess
- exprs
- extensions_recursion
- extensions
- fake_overrides
- all_java
- all_kotlin
- kotlin_calling_java
- field-initializer-flow
- files
- for-array-iterators
- function-n
- generic-inner-classes
- generic-instance-methods
- generic-methods
- generic-selective-extraction
- generic-type-bounds
- generics-location
- generics
- inherited-callee
- inherited-collection-implementation
- inherited-default-value
- inherited-single-abstract-method
- inheritence-substitution
- instances
- interface-delegate
- internal-constructor-called-from-java
- internal-public-alias
- java-kotlin-collection-type-generic-methods
- java-lang-number-conversions
- java-list-kotlin-user
- java-map-methods
- java_and_kotlin_generics
- java
- kotlin
- java_and_kotlin_internal
- java_and_kotlin
- java_properties
- jvmoverloads-annotation
- jvmoverloads_flow
- jvmoverloads_generics
- jvmstatic-annotation
- kotlin-java-map-entries
- lateinit
- lazy-val-multiple-constructors
- literals
- maps-iterator-overloads
- methods-mixed-java-and-kotlin
- methods
- ministdlib
- mixed-java-and-kotlin
- modifiers
- multiple_extensions
- multiple_files
- no-when-branch-found
- numlines
- object
- operator-overloads
- parameter-defaults
- private-anonymous-types
- properties
- recursive-instantiations
- stack-overflow-1
- stack-overflow-2
- reflection
- special-method-getters
- static-method-calls
- stmts
- string-charat
- super-method-calls
- this
- trap
- trivial
- type_aliases
- type_equivalences
- types
- underscore-parameters
- vararg
- variables
- query-tests
- AbstractToConcreteCollection
- AutoBoxing
- CloseReader
- CloseWriter
- ConfusingOverloading
- ConstantLoopCondition
- DeadCode
- DeadRefTypes
- EmptyBlock
- ExposeRepresentation
- InnerClassCouldBeStatic
- MissingInstanceofInEquals
- MissingOverrideAnnotation
- MutualDependency
- NamingConventionsRefTypes
- NonSerializableField
- NonSerializableInnerClass
- NullMaybe
- OneStatementPerLine
- PartiallyMaskedCatch
- ReturnValueIgnored
- SimplifyBoolExpr
- UnderscoreIdentifier
- UnreadLocal
- UselessNullCheck
- UselessParameter
- WhitespaceContradictsPrecedence
- test-kotlin2
- TestUtilities
- internal
- library-tests
- GeneratedFiles
- android_function_return_types
- annotation-accessor-result-type
- annotation_classes
- annotations/jvmName
- arrays-with-variances
- arrays
- call-int-to-char
- clashing-extension-fields
- classes
- collection-literals
- comments
- companion_objects
- compilation-units
- controlflow
- basic
- dominance
- paths
- plot
- coroutines
- data-classes
- dataflow
- extensionMethod
- foreach
- func
- notnullexpr
- stmtexpr
- summaries
- taint
- whenexpr
- declaration-stack
- empty
- enum
- exprs_typeaccess
- exprs
- extensions_recursion
- extensions
- fake_overrides
- all_java
- all_kotlin
- kotlin_calling_java
- field-initializer-flow
- files
- for-array-iterators
- function-n
- generic-inner-classes
- generic-instance-methods
- generic-methods
- generic-selective-extraction
- generic-type-bounds
- generics-location
- generics
- inherited-callee
- inherited-collection-implementation
- inherited-default-value
- inherited-single-abstract-method
- inheritence-substitution
- instances
- interface-delegate
- internal-constructor-called-from-java
- internal-public-alias
- java-kotlin-collection-type-generic-methods
- java-lang-number-conversions
- java-list-kotlin-user
- java-map-methods
- java_and_kotlin_generics
- java
- kotlin
- java_and_kotlin_internal
- java_and_kotlin
- java_properties
- jvmoverloads-annotation
- jvmoverloads_flow
- jvmoverloads_generics
- jvmstatic-annotation
- kotlin-java-map-entries
- lateinit
- lazy-val-multiple-constructors
- literals
- maps-iterator-overloads
- methods-mixed-java-and-kotlin
- methods
- ministdlib
- mixed-java-and-kotlin
- modifiers
- multiple_extensions
- multiple_files
- no-when-branch-found
- numlines
- object
- operator-overloads
- parameter-defaults
- private-anonymous-types
- properties
- recursive-instantiations
- stack-overflow-1
- stack-overflow-2
- reflection
- special-method-getters
- static-method-calls
- stmts
- string-charat
- super-method-calls
- this
- trap
- trivial
- type_aliases
- type_equivalences
- types
- underscore-parameters
- vararg
- variables
- query-tests
- AbstractToConcreteCollection
- AutoBoxing
- CloseReader
- CloseWriter
- ConfusingOverloading
- ConstantLoopCondition
- DeadCode
- DeadRefTypes
- EmptyBlock
- ExposeRepresentation
- InnerClassCouldBeStatic
- MissingInstanceofInEquals
- MissingOverrideAnnotation
- MutualDependency
- NamingConventionsRefTypes
- NonSerializableField
- NonSerializableInnerClass
- NullMaybe
- OneStatementPerLine
- PartiallyMaskedCatch
- ReturnValueIgnored
- SimplifyBoolExpr
- UnderscoreIdentifier
- UnreadLocal
- UselessNullCheck
- UselessParameter
- WhitespaceContradictsPrecedence
- test
- library-tests
- dataflow
- collections
- modulus-analysis
- range-analysis
- dependency
- dependency
- empty-argfile
- flow-through-binding
- guards12
- object-tostring-flow-binding-patterns
- pattern-instanceof
- pattern-switch
- cfg
- dfg
- prettyprint
- printAst
- switch-default-impossible-dispatch
- typeflow
- virtual-dispatch-binding-patterns
- query-tests
- Nullness
- security
- CWE-022/semmle/tests
- CWE-089/semmle/examples
- CWE-502
- misc
- bazel/cmake
- codegen
- generators
- lib
- templates
- test
- scripts/models-as-data
- suite-helpers
- change-notes/released
- python
- downgrades/728c6d65e61d808ae276013ebc15abc3a97aaef1
- ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new/internal
- frameworks
- internal
- security
- dataflow
- regexp
- upgrades/0565f7466437d52e1dc64a3b930926ab2f60cd64
- src
- Security
- CWE-327
- CWE-730
- Summary
- change-notes/released
- experimental/cryptography/inventory
- new_models
- old_models
- test
- 2
- library-tests
- ControlFlow/Exceptions
- PointsTo/imports2
- package
- classes/attr
- comprehensions
- modules
- general
- package_members
- usage
- types/properties
- query-tests/Summary
- 3
- library-tests
- ControlFlow/Exceptions
- PointsTo
- import_time
- imports
- package
- classes
- attr
- meta
- modules
- package_members
- usage
- types
- functions
- properties
- query-tests/Summary
- experimental
- dataflow
- basic
- calls
- consistency
- coverage-py2
- coverage-py3
- coverage
- def-use-flow
- exceptions
- fieldflow
- global-flow
- match
- model-summaries
- module-initialization
- path-graph
- regression
- sensitive-data
- strange-essaflow
- summaries-checks
- summaries
- tainttracking
- commonSanitizer
- customSanitizer
- defaultAdditionalTaintStep-py3
- defaultAdditionalTaintStep
- generator-flow
- unwanted-global-flow
- typetracking-summaries
- typetracking_imports
- typetracking
- use-use-flow
- variable-capture
- import-resolution
- library-tests
- CallGraph-implicit-init
- CallGraph-imports
- CallGraph
- meta/inline-taint-test-demo
- library-tests
- ApiGraphs
- py2
- py3
- ControlFlow
- augassign
- comparison
- dominators
- except
- general
- ssa/deletions
- InlineExpectationsTest/missing-relevant-tag
- PEP695
- PointsTo
- functions
- imports
- inheritance
- lookup
- new
- attributes
- classes/attr
- comments
- essa/ssa-compute
- exceptions
- frameworks
- aioch
- aiofiles
- aiofile
- aiohttp
- aiomysql
- aiopg
- aiosqlite
- anyio
- asyncpg
- baize
- cassandra-driver
- cherrypy
- clickhouse_driver
- cryptodome
- cryptography
- crypto
- cx_Oracle
- dill
- django-orm
- django-v1
- django-v2-v3
- django
- fabric
- fastapi
- flask_admin
- flask_sqlalchemy
- flask
- httpx
- idna
- internal-ql-helpers
- invoke
- jmespath
- joblib
- libtaxii
- lxml
- markupsafe
- multidict
- mysql-connector-python
- mysqldb
- numpy
- oracledb
- pandas
- peewee
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
4,098 files changed
+191499
-35943
lines changedLines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
8 | 8 |
| |
9 | 9 |
| |
10 | 10 |
| |
| 11 | + | |
| 12 | + | |
11 | 13 |
| |
12 | 14 |
| |
13 | 15 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
3 | 3 |
| |
4 |
| - | |
| 4 | + | |
5 | 5 |
| |
6 | 6 |
| |
7 | 7 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
145 | 145 |
| |
146 | 146 |
| |
147 | 147 |
| |
148 |
| - | |
| 148 | + | |
149 | 149 |
| |
150 |
| - | |
| 150 | + | |
151 | 151 |
| |
152 | 152 |
| |
153 | 153 |
| |
|
0 commit comments