File tree
2,604 files changed
+136544
-218224
lines changed- .github/workflows
- config
- cpp
- autobuilder
- Semmle.Autobuild.Cpp.Tests
- Semmle.Autobuild.Cpp
- ql
- lib
- change-notes
- released
- experimental/semmle/code/cpp
- dataflow
- ir/dataflow
- internal
- ssa0
- tainttracking1
- tainttracking2
- tainttracking3
- security
- semantic
- analysis
- semmle/code/cpp
- commons
- controlflow
- dataflow
- internal
- tainttracking1
- new
- exprs
- ir
- dataflow
- internal
- ssa0
- tainttracking1
- implementation
- aliased_ssa
- internal
- raw
- internal
- unaliased_ssa
- internal
- internal
- models
- implementations
- interfaces
- rangeanalysis
- security
- boostorg/asio
- src
- Critical
- Likely Bugs
- Conversion
- Format
- Leap Year
- Likely Typos
- Memory Management
- Protocols
- Security/CWE
- CWE-020
- ir
- CWE-022
- CWE-078
- CWE-129
- CWE-131
- CWE-190
- CWE-191
- CWE-295
- CWE-311
- CWE-313
- CWE-319
- CWE-326
- CWE-428
- CWE-497
- CWE-611
- CWE-732
- change-notes
- released
- experimental/Security/CWE
- CWE-020
- CWE-078
- CWE-190
- CWE-193
- CWE-285
- CWE-359
- CWE-415
- CWE-787
- CWE-788
- test
- TestUtilities/dataflow
- examples/docs-examples
- analyzing-data-flow-in-cpp
- experimental/query-tests/Security/CWE
- CWE-020/NoCheckBeforeUnsafePutUser
- CWE-078
- CWE-119
- CWE-190/AllocMultiplicationOverflow
- CWE-193
- array-access
- constant-size
- pointer-deref
- CWE-359/semmle/tests
- library-tests
- CPP-205
- allocators
- dataflow
- DefaultTaintTracking/annotate_sinks_only
- additional-flow-to-parameter
- crement
- dataflow-tests
- fields
- recursion
- security-taint
- smart-pointers-taint
- source-sink-tests
- taint-tests
- declarationEntry/more
- ir
- modulus-analysis
- range-analysis
- noexcept/copy_from_prototype
- syntax-zoo
- templates/isfromtemplateinstantiation
- query-tests
- Critical/MissingCheckScanf
- Likely Bugs
- Conversion/CastArrayPointerArithmetic
- Format/NonConstantFormat
- Leap Year/Adding365DaysPerYear
- Memory Management/NtohlArrayNoBound
- Protocols
- Security/CWE
- CWE-022/semmle/tests
- CWE-078
- SAMATE/ExecTainted
- semmle/ExecTainted
- CWE-079/semmle/CgiXss
- CWE-089/SqlTainted
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-119
- SAMATE
- semmle/tests
- CWE-120/semmle/tests
- CWE-129/semmle/ImproperArrayIndexValidation
- CWE-134
- SAMATE
- semmle
- argv
- consts
- funcs
- globalVars
- ifs
- CWE-190
- SAMATE
- semmle
- ArithmeticUncontrolled
- TaintedAllocationSize
- tainted
- CWE-290/semmle/AuthenticationBypass
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-497
- SAMATE
- semmle/tests
- CWE-611
- CWE-807/semmle/TaintedCondition
- csharp
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- extractor/Semmle.Util
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- consistency-queries
- integration-tests
- all-platforms
- diag_dotnet_incompatible
- diag_missing_project_files
- diag_missing_xamarin_sdk
- dotnet_build
- dotnet_pack
- dotnet_publish
- dotnet_run
- msbuild
- posix-only
- diag_autobuild_script
- diag_multiple_scripts
- scripts
- dotnet_test
- inherit-env-vars
- windows-only
- diag_autobuild_script
- diag_multiple_scripts
- scripts
- lib
- change-notes
- released
- semmle/code
- cil
- csharp
- commons
- dataflow
- internal
- tainttracking1
- dispatch
- exprs
- frameworks
- system
- collections
- runtime
- security/cryptography
- security/dataflow
- flowsources
- src
- Stubs
- change-notes/released
- experimental
- Security Features
- JsonWebTokenHandler
- backdoor
- ir
- implementation
- raw
- internal
- desugar
- internal
- unaliased_ssa
- internal
- internal
- test
- library-tests
- dataflow/library
- dispatch
- frameworks/EntityFramework
- query-tests/Stubs
- All
- Minimal
- resources/stubs/_frameworks
- Microsoft.AspNetCore.App
- Microsoft.NETCore.App
- docs
- codeql
- codeql-language-guides
- reusables
- go
- extractor
- cli
- go-autobuilder
- go-extractor
- diagnostics
- util
- ql
- integration-tests/all-platforms/go/diagnostics
- build-constraints-exclude-all-go-files
- work
- go-files-found-not-processed
- work
- subdir
- newer-go-version-needed
- work
- no-go-files-found
- work
- package-not-found-with-go-mod
- work
- package-not-found-without-go-mod
- work
- unsupported-relative-path
- work/main
- subpkg
- lib
- change-notes
- released
- semmle/go
- dataflow
- internal
- tainttracking1
- frameworks
- stdlib
- security
- src
- Security/CWE-681
- change-notes
- released
- test
- library-tests/semmle/go/dataflow/VarArgsWithFunctionModels
- query-tests/Security
- CWE-681
- CWE-918
- javascript
- extractor
- lib/typescript
- src
- src/com/semmle
- jcorn
- flow
- js
- ast
- extractor
- parser
- ts/extractor
- tests
- esnext
- input
- output/trap
- ts
- input
- output/trap
- ql
- experimental/adaptivethreatmodeling
- lib
- experimental/adaptivethreatmodeling
- modelbuilding/extraction
- src
- integration-tests/all-platforms
- diagnostics/syntax-error
- lib
- change-notes
- released
- semmle/javascript
- dataflow
- internal
- dependencies
- frameworks
- AngularJS
- heuristics
- security
- dataflow
- src
- Security/CWE-020
- change-notes
- released
- test
- library-tests
- TypeScript
- ImportAssertions
- Types
- frameworks/ReactJS
- query-tests/Security
- CWE-079/DomBasedXss
- CWE-089/untyped
- CWE-327
- CWE-601/ServerSideUrlRedirect
- java
- documentation/library-coverage
- ql
- integration-tests
- all-platforms/java/diagnostics
- android-gradle-incompatibility
- compilation-error
- dependency-error
- java-version-too-old
- maven-http-repository
- multiple-candidate-builds
- no-build-system
- no-gradle-test-classes
- no-gradle-wrapper
- posix-only/kotlin/kotlin_double_interception
- code
- lib
- change-notes
- released
- ext
- semmle/code
- java
- dataflow
- internal
- tainttracking1
- deadcode
- dispatch
- frameworks
- android
- google
- jackson
- javaee/ejb
- os
- security
- regexp
- xml
- src
- Security/CWE
- CWE-022
- CWE-079
- CWE-094
- CWE-113
- CWE-117
- CWE-190
- CWE-200
- CWE-209
- CWE-266
- CWE-327
- CWE-441
- CWE-470
- CWE-532
- CWE-681
- CWE-730
- CWE-780
- CWE-918
- CWE-927
- change-notes
- released
- experimental/Security/CWE/CWE-348
- test
- TestUtilities
- kotlin/library-tests/jvmoverloads-annotation
- library-tests
- dataflow
- callback-dispatch
- collections
- fluent-methods
- inoutbarriers
- partial
- state
- taint-format
- frameworks
- JaxWs
- android
- content-provider
- external-storage
- slice
- sources
- apache-ant
- apache-commons-compress
- apache-http
- hudson
- jdk
- java.io
- java.net
- java.nio.file
- netty
- okhttp
- rabbitmq
- retrofit
- spring/controller
- stapler
- pathsanitizer
- printAst
- query-tests/security
- CWE-022/semmle/tests
- mad
- CWE-023/semmle/tests
- CWE-089/semmle/examples
- mad
- CWE-094
- CWE-117
- CWE-266
- CWE-295/InsecureTrustManager
- CWE-311/CWE-319
- CWE-441
- CWE-470
- CWE-489/webview-debugging
- CWE-532
- CWE-601/semmle/tests
- mad
- CWE-730
- CWE-780
- CWE-918
- mad
- CWE-927
- stubs
- apache-ant-1.10.13/org/apache/tools
- ant
- filters
- input
- taskdefs
- condition
- types
- resources/selectors
- selectors
- modifiedselector
- util
- regexp
- zip
- apache-commons-beanutils/org/apache/commons/beanutils
- apache-commons-compress/org/apache/commons/compress/archivers
- tar
- zip
- apache-commons-fileupload-1.4/org/apache/commons/fileupload
- apache-commons-io-2.6/org/apache/commons/io
- filefilter
- file
- output
- apache-commons-jelly-1.0.1/org/apache/commons/jelly
- expression
- impl
- parser
- apache-commons-lang/org/apache/commons/lang/exception
- apache-http-4.4.13/org/apache/http
- client/utils
- util
- cargo/org/codehaus/cargo
- container/installer
- util
- log
- dom4j-2.1.1/org/dom4j
- io
- rule
- tree
- xpath
- javafx-web
- com
- sun/javafx/tk
- zaxxer/hikari
- metrics
- io/micrometer/observation
- jakarta/ws/rs
- client
- core
- javafx
- animation
- beans
- binding
- property
- value
- collections
- transformation
- concurrent
- css
- event
- geometry
- print
- scene
- effect
- image
- input
- paint
- text
- transform
- web
- stage
- util
- javax
- net
- ssl
- security/cert
- sql
- ws/rs
- client
- core
- org
- apache
- commons/logging
- http
- client
- config
- methods
- concurrent
- conn
- routing
- message
- params
- protocol
- codehaus/cargo
- container/installer
- util
- log
- jdbi/v3/core
- argument
- internal
- array
- codec
- collector
- config
- extension
- generic
- mapper
- qualifier
- result
- spi
- statement
- internal
- transaction
- postgresql
- util
- reactivestreams
- springframework
- boot/jdbc
- core
- codec
- io
- buffer
- support
- http
- client
- reactive
- support
- codec
- converter
- server
- reactive
- jdbc/datasource
- util
- web
- client
- reactive/function
- client
- util
- w3c/dom
- reactor
- core
- observability
- publisher
- scheduler
- util
- context
- function
- retry
- javax-servlet-2.5/javax
- servlet
- annotation
- http
- jaxen-1.2.0/org/jaxen
- jenkins/hudson/remoting
- jmh-1.3.6/org/openjdk/jmh
- annotations
- profile
- results/format
- runner/options
- util
- netty-4.1.x/io/netty
- resolver
- util/concurrent
- saxon-xqj-9.x/net/sf/json
- processors
- util
- springframework-5.3.8/org/springframework/boot/jdbc
- stapler-1.263/org/kohsuke/stapler
- bind
- event
- export
- framework
- adjunct
- io
- lang
- misc
- codegen/templates
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new
- internal
- tainttracking1
- frameworks
- security/dataflow
- xml
- src
- Security
- CWE-078
- examples
- CWE-327
- Variables
- change-notes
- released
- experimental/Security/CWE-348
- test
- experimental
- dataflow
- TestUtil
- basic
- callgraph_crosstalk
- calls
- consistency
- coverage
- exceptions
- fieldflow
- global-flow
- match
- pep_328
- regression
- strange-essaflow
- tainttracking
- basic
- commonSanitizer
- customSanitizer
- defaultAdditionalTaintStep-py3
- defaultAdditionalTaintStep
- generator-flow
- unwanted-global-flow
- typetracking
- variable-capture
- library-tests/CallGraph
- meta/debug
- library-tests
- ApiGraphs/py3
- frameworks
- django-orm
- stdlib
- query-tests
- Security
- CWE-078-UnsafeShellCommandConstruction
- src
- CWE-327-InsecureProtocol
- Variables/undefined
- ql
- buramu
- extractor
- ql
- src/queries/style
- test/queries/style/DataFlowConfigModuleNaming
- ruby
- actions/create-extractor-pack
- autobuilder
- downgrades/3595c826de6db850f16b9da265a54dbf24dd3126
- extractor
- src
- bin
- generator
- generator
- node-types
- ql
- integration-tests/all-platforms
- diagnostics
- syntax-error
- unknown-encoding
- lib
- change-notes
- released
- codeql/ruby
- ast
- internal
- controlflow
- internal
- dataflow
- internal
- tainttracking1
- experimental
- frameworks
- core
- http_clients
- stdlib
- security
- internal
- regexp
- src
- change-notes/released
- experimental/performance
- queries
- analysis
- security
- cwe-020
- cwe-079
- variables
- test
- library-tests
- dataflow
- call-sensitivity
- global
- local
- frameworks
- pathname
- sinatra
- views
- variables
- query-tests
- diagnostics
- security
- cwe-078/UnsafeShellCommandConstruction
- impl
- cwe-089
- cwe-094/UnsafeCodeConstruction
- impl
- cwe-312
- scripts
- swift
- downgrades
- 0c4c904720f88c527e7d896d6a334b6abdd3e32f
- ba43367c819291c264809f13f6c02ddf014dad0a
- c2f01f2beb67e5a57e9df9b6d1c51e35e8d5b0a2
- extractor
- infra
- mangler
- translators
- integration-tests/posix-only/deduplication
- Sources/deduplication
- ql
- lib
- codeql/swift
- dataflow
- internal
- tainttracking1
- elements
- expr
- type
- frameworks/StandardLibrary
- generated
- decl
- expr
- type
- security
- upgrades
- 0c4c904720f88c527e7d896d6a334b6abdd3e32f
- ba43367c819291c264809f13f6c02ddf014dad0a
- ea1b37a631001395b9f1eeb36bd5ecec871a7190
- src
- diagnostics
- queries/Summary
- test
- extractor-tests
- declarations
- generated/File
- library-tests
- ast
- dataflow
- dataflow
- taint
- core
- libraries
- elements/type
- nominaltype
- pointertypes
- query-tests
- Diagnostics
- Security
- CWE-089
- CWE-611
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
2,604 files changed
+136544
-218224
lines changedLines changed: 21 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + |
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
| |||
48 | 48 |
| |
49 | 49 |
| |
50 | 50 |
| |
51 |
| - | |
| 51 | + | |
52 | 52 |
| |
53 | 53 |
| |
54 | 54 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
21 | 21 |
| |
22 | 22 |
| |
23 | 23 |
| |
24 |
| - | |
| 24 | + | |
25 | 25 |
| |
26 | 26 |
| |
27 | 27 |
| |
|
Lines changed: 32 additions & 31 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
55 | 55 |
| |
56 | 56 |
| |
57 | 57 |
| |
58 |
| - | |
59 |
| - | |
60 |
| - | |
61 |
| - | |
62 |
| - | |
63 |
| - | |
| 58 | + | |
| 59 | + | |
| 60 | + | |
| 61 | + | |
| 62 | + | |
| 63 | + | |
64 | 64 |
| |
65 | 65 |
| |
66 | 66 |
| |
67 | 67 |
| |
68 | 68 |
| |
69 | 69 |
| |
70 | 70 |
| |
71 |
| - | |
| 71 | + | |
72 | 72 |
| |
73 | 73 |
| |
74 |
| - | |
| 74 | + | |
75 | 75 |
| |
76 | 76 |
| |
77 |
| - | |
| 77 | + | |
78 | 78 |
| |
79 | 79 |
| |
80 |
| - | |
| 80 | + | |
81 | 81 |
| |
82 | 82 |
| |
83 |
| - | |
| 83 | + | |
84 | 84 |
| |
85 | 85 |
| |
86 |
| - | |
| 86 | + | |
87 | 87 |
| |
88 | 88 |
| |
89 | 89 |
| |
| |||
98 | 98 |
| |
99 | 99 |
| |
100 | 100 |
| |
101 |
| - | |
102 |
| - | |
103 |
| - | |
104 |
| - | |
| 101 | + | |
| 102 | + | |
| 103 | + | |
| 104 | + | |
105 | 105 |
| |
106 | 106 |
| |
107 | 107 |
| |
| |||
116 | 116 |
| |
117 | 117 |
| |
118 | 118 |
| |
119 |
| - | |
120 |
| - | |
121 |
| - | |
122 |
| - | |
123 |
| - | |
124 |
| - | |
125 |
| - | |
126 |
| - | |
| 119 | + | |
| 120 | + | |
| 121 | + | |
| 122 | + | |
| 123 | + | |
| 124 | + | |
| 125 | + | |
| 126 | + | |
| 127 | + | |
127 | 128 |
| |
128 | 129 |
| |
129 | 130 |
| |
130 | 131 |
| |
131 | 132 |
| |
132 | 133 |
| |
133 |
| - | |
| 134 | + | |
134 | 135 |
| |
135 | 136 |
| |
136 | 137 |
| |
| |||
158 | 159 |
| |
159 | 160 |
| |
160 | 161 |
| |
161 |
| - | |
162 |
| - | |
163 |
| - | |
164 |
| - | |
165 |
| - | |
166 |
| - | |
| 162 | + | |
| 163 | + | |
| 164 | + | |
| 165 | + | |
| 166 | + | |
| 167 | + | |
167 | 168 |
| |
168 | 169 |
| |
169 | 170 |
| |
|
Lines changed: 3 additions & 3 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
2 | 2 |
| |
3 | 3 |
| |
4 | 4 |
| |
5 |
| - | |
6 |
| - | |
7 |
| - | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
8 | 8 |
| |
9 | 9 |
| |
10 | 10 |
| |
|
Lines changed: 43 additions & 19 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
3 | 13 |
| |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
4 | 24 |
| |
5 | 25 |
| |
6 | 26 |
| |
7 | 27 |
| |
8 | 28 |
| |
9 |
| - | |
10 |
| - | |
11 |
| - | |
| 29 | + | |
12 | 30 |
| |
13 | 31 |
| |
14 | 32 |
| |
15 | 33 |
| |
16 |
| - | |
| 34 | + | |
17 | 35 |
| |
18 | 36 |
| |
19 | 37 |
| |
20 |
| - | |
21 |
| - | |
22 |
| - | |
23 |
| - | |
24 |
| - | |
| 38 | + | |
25 | 39 |
| |
26 | 40 |
| |
27 | 41 |
| |
28 | 42 |
| |
29 | 43 |
| |
30 |
| - | |
| 44 | + | |
31 | 45 |
| |
32 | 46 |
| |
33 |
| - | |
| 47 | + | |
34 | 48 |
| |
35 | 49 |
| |
36 | 50 |
| |
37 | 51 |
| |
38 |
| - | |
| 52 | + | |
39 | 53 |
| |
40 | 54 |
| |
41 | 55 |
| |
42 |
| - | |
| 56 | + | |
43 | 57 |
| |
44 | 58 |
| |
45 | 59 |
| |
46 | 60 |
| |
47 | 61 |
| |
48 |
| - | |
49 | 62 |
| |
50 | 63 |
| |
51 | 64 |
| |
52 | 65 |
| |
53 | 66 |
| |
54 | 67 |
| |
55 |
| - | |
| 68 | + | |
| 69 | + | |
| 70 | + | |
| 71 | + | |
| 72 | + | |
| 73 | + | |
| 74 | + | |
| 75 | + | |
| 76 | + | |
| 77 | + | |
| 78 | + | |
56 | 79 |
| |
57 | 80 |
| |
58 | 81 |
| |
59 | 82 |
| |
60 | 83 |
| |
61 |
| - | |
62 |
| - | |
63 |
| - | |
64 | 84 |
| |
65 | 85 |
| |
66 | 86 |
| |
| |||
82 | 102 |
| |
83 | 103 |
| |
84 | 104 |
| |
85 |
| - | |
86 | 105 |
| |
87 | 106 |
| |
88 | 107 |
| |
| |||
260 | 279 |
| |
261 | 280 |
| |
262 | 281 |
| |
| 282 | + | |
| 283 | + | |
| 284 | + | |
| 285 | + | |
| 286 | + | |
263 | 287 |
| |
264 | 288 |
| |
265 | 289 |
| |
|
Lines changed: 20 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
| 3 | + | |
3 | 4 |
| |
4 | 5 |
| |
5 | 6 |
| |
| |||
75 | 76 |
| |
76 | 77 |
| |
77 | 78 |
| |
| 79 | + | |
| 80 | + | |
| 81 | + | |
| 82 | + | |
| 83 | + | |
| 84 | + | |
| 85 | + | |
| 86 | + | |
| 87 | + | |
78 | 88 |
| |
79 | 89 |
| |
80 | 90 |
| |
| |||
184 | 194 |
| |
185 | 195 |
| |
186 | 196 |
| |
| 197 | + | |
| 198 | + | |
| 199 | + | |
| 200 | + | |
| 201 | + | |
| 202 | + | |
| 203 | + | |
| 204 | + | |
| 205 | + | |
187 | 206 |
| |
188 | 207 |
| |
189 | 208 |
| |
| |||
243 | 262 |
| |
244 | 263 |
| |
245 | 264 |
| |
| 265 | + | |
246 | 266 |
| |
247 | 267 |
| |
248 | 268 |
| |
|
Lines changed: 2 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
| 2 | + | |
2 | 3 |
| |
3 | 4 |
| |
4 | 5 |
| |
| |||
21 | 22 |
| |
22 | 23 |
| |
23 | 24 |
| |
24 |
| - | |
| 25 | + | |
25 | 26 |
| |
26 | 27 |
| |
27 | 28 |
| |
|
Lines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
1 | 5 |
| |
2 | 6 |
| |
3 | 7 |
| |
|
Lines changed: 4 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + |
0 commit comments