File tree
1,236 files changed
+37400
-42505
lines changed- .github/workflows
- cpp
- downgrades
- ql
- lib
- change-notes
- semmle/code/cpp
- dataflow
- internal
- tainttracking1
- tainttracking2
- exprs
- ir
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- implementation/raw/internal
- models
- implementations
- interfaces
- security
- flowafterfree
- src
- Critical
- Metrics/Internal
- Security/CWE
- CWE-497
- CWE-611
- change-notes
- test
- experimental/query-tests/Security/CWE/CWE-416
- library-tests
- CPP-205
- dataflow
- dataflow-tests
- models-as-data
- source-sink-tests
- taint-tests
- fields/fields
- ir
- ir
- modulus-analysis
- range-analysis
- sign-analysis
- ssa
- types
- syntax-zoo
- types
- __wchar_t
- wchar_t_typedef
- variables/variables
- query-tests
- Critical/GlobalUseBeforeInit
- Likely Bugs/Format/NonConstantFormat
- Security/CWE
- CWE-022/semmle/tests
- CWE-078/semmle/ExecTainted
- CWE-079/semmle/CgiXss
- CWE-089/SqlTainted
- CWE-114/SAMATE/UncontrolledProcessOperation
- CWE-129
- SAMATE/ImproperArrayIndexValidation
- semmle/ImproperArrayIndexValidation
- CWE-134
- SAMATE
- semmle
- argv
- consts
- CWE-190/semmle
- TaintedAllocationSize
- tainted
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-497/semmle/tests
- CWE-807/semmle/TaintedCondition
- csharp
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- SourceGenerators
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp
- Entities
- Expressions
- Populators
- Semmle.Extraction.Tests
- Semmle.Util
- ql
- integration-tests/posix-only
- standalone_dependencies_executing_runtime
- standalone_dependencies_nuget_config_error_timeout
- proj
- lib
- change-notes
- ext
- generated
- semmle/code/csharp
- dataflow/internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- tainttracking5
- frameworks
- src
- Security Features/CWE-016
- Telemetry
- utils
- modelconverter
- modeleditor
- modelgenerator/internal
- test
- experimental/Security Features/CWE-759
- library-tests
- controlflow
- graph
- guards
- csharp6
- csharp8
- dataflow
- async
- collections
- external-models
- global
- library
- threat-models
- typeflow-dispatch
- dynamic
- expressions
- frameworks/EntityFramework
- query-tests
- Nullness
- Security Features
- CWE-020
- CWE-022
- TaintedPath
- ZipSlip
- CWE-078
- CWE-079
- StoredXSS
- XSSAsp
- XSS
- CWE-089
- CWE-090
- CWE-091/XMLInjection
- CWE-094
- CWE-099
- CWE-112
- CWE-114/AssemblyPathInjection
- CWE-117
- CWE-134
- CWE-201/ExposureInTransmittedData
- CWE-209
- CWE-321/HardcodedSymmetricEncryptionKey
- CWE-338
- CWE-502
- UnsafeDeserializationUntrustedInputNewtonsoftJson
- UnsafeDeserializationUntrustedInput
- CWE-601/UrlRedirect
- CWE-611
- CWE-643
- CWE-730
- ReDoSGlobalTimeout
- ReDoS
- RegexInjection
- CWE-807
- CWE-838
- utils
- modeleditor
- modelgenerator
- dataflow
- typebasedflow
- docs/codeql
- codeql-language-guides
- reusables
- go
- extractor
- toolchain
- integration-tests-lib
- ql
- integration-tests
- all-platforms/go
- bazel-sample-1
- bazel-sample-2
- diagnostics
- build-constraints-exclude-all-go-files
- go-files-found-not-processed
- invalid-toolchain-version
- newer-go-version-needed
- no-go-files-found
- package-not-found-with-go-mod
- package-not-found-without-go-mod
- unsupported-relative-path
- go-get-without-modules-sample
- go-mod-sample
- go-mod-without-version
- go-version-bump
- make-sample
- mixed-layout
- ninja-sample
- single-go-mod-and-go-files-not-under-it
- single-go-mod-in-root
- single-go-mod-not-in-root
- single-go-work-not-in-root
- two-go-mods-nested-none-in-root
- two-go-mods-nested-one-in-root
- two-go-mods-not-nested
- two-go-mods-one-failure
- linux-only/go
- dep-sample
- glide-sample
- lib
- change-notes
- semmle/go
- controlflow
- dataflow
- internal
- tainttracking1
- tainttracking2
- frameworks/stdlib
- internal
- security
- test
- experimental
- CWE-090
- CWE-203
- CWE-287
- CWE-369
- CWE-522-DecompressionBombs
- CWE-74
- CWE-79
- CWE-918
- extractor-tests/no-intermediate-strings
- library-tests/semmle/go
- controlflow/ControlFlowGraph
- dataflow
- DefaultTaintSanitizer
- HiddenNodes
- Switch
- frameworks
- BeegoOrm
- Beego
- Echo
- Encoding
- Revel
- Twirp
- XNetHtml
- query-tests/Security
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-327
- CWE-338/InsecureRandomness
- CWE-347
- CWE-601
- BadRedirectCheck
- OpenUrlRedirect
- CWE-640
- CWE-643
- CWE-918
- javascript/ql
- lib
- semmle/javascript/frameworks
- data/internal
- test/library-tests/frameworks/data
- java
- documentation/library-coverage
- kotlin-extractor
- src/main/kotlin/utils/versions
- v_1_5_0
- v_1_9_0-Beta
- v_2_0_0-RC1
- ql
- automodel
- src
- test
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction/com/github/codeql/test
- integration-tests/all-platforms
- kotlin/diagnostics/kotlin-version-too-new
- lib
- config
- ext/generated
- semmle/code/java
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- dispatch
- regex
- security
- src
- Advisory/Documentation
- Telemetry
- change-notes
- utils
- flowtestcasegenerator
- modelconverter
- modeleditor
- test
- experimental/query-tests/security
- CWE-020
- CWE-073
- CWE-078
- CWE-089/src/main
- CWE-094
- CWE-1004
- CWE-200
- CWE-208/TimingAttackAgainstSignagure
- CWE-346
- CWE-348
- CWE-352
- CWE-400
- CWE-470
- CWE-598
- CWE-600
- CWE-601
- CWE-625
- CWE-652
- CWE-755
- CWE-759
- library-tests
- dataflow
- local-additional-taint
- threat-models
- frameworks/JaxWs
- query-tests
- SpuriousJavadocParam
- security
- CWE-022/semmle/tests
- CWE-078
- CWE-089/semmle/examples
- CWE-090
- CWE-094
- CWE-113/semmle/tests
- CWE-129/semmle/tests
- CWE-134/semmle/tests
- CWE-190/semmle/tests
- CWE-200/semmle/tests/TempDirLocalInformationDisclosure
- CWE-297
- CWE-311/CWE-319
- CWE-327/semmle/tests
- CWE-601/semmle/tests
- CWE-681/semmle/tests
- CWE-807/semmle/tests
- misc
- bazel
- scripts
- python
- downgrades
- extractor
- buildtools
- cli-integration-test
- force-enable-library-extraction
- repo_dir
- ignore-venv
- tsg-python
- tsp
- ql
- lib
- semmle/python
- dataflow/new
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- frameworks
- data
- internal
- src/Security/CWE-020-ExternalAPIs
- test
- 2
- extractor-tests
- ellipsis
- exec
- import_depth
- package
- multibyte
- normalise
- object_hash
- old_style_disequality
- syntax_error
- library-tests/locations2.7plus
- 3
- extractor-tests
- Kannada
- annotations
- async3.5
- async3.6
- decorators
- fstrings3.6
- fstrings3.8
- import_depth
- package
- matmult
- multibyte
- numbers
- positional_only
- tuple_unpacking
- unpacking
- walrus_operator
- library-tests/calls
- experimental
- dataflow/summaries
- query-tests/Security
- CWE-022-TarSlip
- CWE-022-UnsafeUnpacking
- CWE-074-TemplateInjection
- CWE-079
- CWE-091-XsltInjection
- CWE-113
- CWE-1236
- CWE-176
- CWE-287-ConstantSecretKey
- CWE-522
- CWE-614
- CWE-770
- extractor-tests
- ast
- async
- basicblocks
- comment-on-decorator-line
- conflicts
- package
- mod
- deep_graph
- double-import
- pack
- inner
- exceptions
- exclude-subpath
- src
- pack
- test
- exo_path
- path1/package1
- path2/package2
- exports
- filter-option
- foo
- flags
- identical_contents
- folder1
- folder2
- ignore
- package
- imports
- just_folder
- test
- latin
- line_endings
- long_path
- long_string
- main
- match
- paths
- not_package
- package
- pruning
- script
- splitter-regression
- splitter
- string_concatenation
- syntax_error
- thrift
- unicode_decoding
- library-tests
- frameworks
- data
- django-orm
- modeling-example
- web/zope
- query-tests/Security
- CWE-020-ExternalAPIs
- CWE-022-PathInjection
- CWE-078-CommandInjection-py2
- CWE-078-CommandInjection
- CWE-079-ReflectedXss
- CWE-090-LdapInjection
- CWE-094-CodeInjection
- CWE-117-LogInjection
- CWE-285-PamAuthorization
- CWE-502-UnsafeDeserialization
- CWE-601-UrlRedirect
- CWE-611-Xxe
- CWE-643-XPathInjection
- CWE-730-PolynomialReDoS
- CWE-730-RegexInjection
- CWE-776-XmlBomb
- CWE-918-ServerSideRequestForgery
- CWE-943-NoSqlInjection
- lib
- Crypto
- Cipher
- PublicKey
- cheetah/Template
- cherrypy
- cryptography/hazmat/primitives
- asymmetric
- ciphers
- django
- conf
- db
- models
- http
- views
- fabric
- falcon
- flask
- invoke
- libxml2
- lxml
- os
- paramiko
- pyOpenSSL
- pyramid
- tornado
- twisted/web
- zope/interface
- ruby
- downgrades
- ql
- lib
- codeql/ruby
- ast/internal
- dataflow
- internal
- tainttracking1
- frameworks
- actiondispatch/internal
- core
- data
- internal
- stdlib
- security
- typetracking/internal
- src
- change-notes
- queries/security
- cwe-078
- examples
- cwe-601
- examples
- cwe-915
- examples
- utils/modeleditor
- test
- library-tests
- dataflow
- call-sensitivity
- global
- summaries
- frameworks/json
- query-tests
- experimental
- LdapInjection
- TemplateInjection
- XPathInjection
- cwe-502
- security
- cwe-022
- cwe-078/CommandInjection
- cwe-079
- cwe-089
- cwe-094/CodeInjection
- cwe-117
- cwe-1333-regexp-injection
- cwe-134
- cwe-312
- cwe-502/unsafe-deserialization
- cwe-601
- cwe-915
- cwe-918
- swift
- downgrades
- ql
- lib/codeql/swift/dataflow
- internal
- tainttracking1
- test/query-tests/Security/CWE-311
- third_party
- tools
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,236 files changed
+37400
-42505
lines changedLines changed: 3 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
6 | 6 |
| |
7 | 7 |
| |
8 | 8 |
| |
| 9 | + | |
9 | 10 |
| |
10 | 11 |
| |
11 | 12 |
| |
| |||
22 | 23 |
| |
23 | 24 |
| |
24 | 25 |
| |
| 26 | + | |
25 | 27 |
| |
26 | 28 |
| |
27 | 29 |
| |
28 | 30 |
| |
| 31 | + | |
29 | 32 |
| |
30 | 33 |
| |
31 | 34 |
| |
|
Lines changed: 3 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
14 | 14 |
| |
15 | 15 |
| |
16 | 16 |
| |
17 |
| - | |
| 17 | + | |
18 | 18 |
| |
19 | 19 |
| |
20 | 20 |
| |
| |||
31 | 31 |
| |
32 | 32 |
| |
33 | 33 |
| |
| 34 | + | |
| 35 | + | |
34 | 36 |
| |
35 | 37 |
| |
36 | 38 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 |
| - | |
| 1 | + | |
2 | 2 |
| |
3 | 3 |
| |
4 | 4 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 |
| - | |
| 1 | + | |
2 | 2 |
| |
3 | 3 |
| |
4 | 4 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 |
| - | |
| 1 | + | |
2 | 2 |
| |
3 | 3 |
| |
4 | 4 |
| |
|
Lines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + |
Lines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + |
Lines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + |
Lines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
7 | 7 |
| |
8 | 8 |
| |
9 | 9 |
| |
| 10 | + | |
10 | 11 |
| |
11 | 12 |
| |
| 13 | + | |
12 | 14 |
| |
13 | 15 |
| |
14 | 16 |
| |
|
Lines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
364 | 364 |
| |
365 | 365 |
| |
366 | 366 |
| |
| 367 | + | |
| 368 | + | |
367 | 369 |
| |
368 | 370 |
| |
369 | 371 |
| |
|
0 commit comments