File tree
1,886 files changed
+47256
-3582
lines changed- cpp/ql
- lib
- change-notes
- released
- semmle/code/cpp/ir/dataflow/internal
- ssa0
- src
- Likely Bugs/Memory Management
- Security/CWE
- CWE-114
- CWE-134
- CWE-190
- Summary
- change-notes
- released
- experimental/cryptography/inventory/new_models
- test
- library-tests/dataflow/dataflow-tests
- query-tests
- Likely Bugs/Memory Management/ReturnStackAllocatedMemory
- Security/CWE
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-134/semmle/globalVars
- CWE-190
- SAMATE
- semmle/tainted
- CWE-197/SAMATE/IntegerOverflowTainted
- csharp
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp/Populators
- Semmle.Extraction.Tests
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- integration-tests
- all-platforms/dotnet_pack
- posix-only/dotnet_test_mstest
- lib
- change-notes
- released
- semmle/code
- cil/internal
- csharp
- controlflow/internal
- dataflow/internal
- security/dataflow/flowsinks
- src
- Security Features
- change-notes/released
- test/library-tests/standalone
- assemblyattribute
- externalLocationSink
- docs/codeql
- codeql-for-visual-studio-code
- images/codeql-for-visual-studio-code
- reusables
- go/ql
- consistency-queries
- change-notes/released
- lib
- change-notes
- released
- semmle/go
- dataflow/internal
- src
- change-notes/released
- test
- library-tests/semmle/go
- dataflow
- ArrayConversion
- SliceExpressions
- frameworks/Beego
- query-tests/Security/CWE-078
- javascript
- extractor
- lib/typescript
- src
- src/com/semmle/ts/extractor
- tests/ts
- input
- output/trap
- ql
- lib
- change-notes
- released
- src
- Security
- CWE-022
- examples
- CWE-079
- CWE-117
- Summary
- change-notes/released
- test
- library-tests/TypeScript
- ImportAssertions
- ImportAttributes
- Types
- query-tests/Security/CWE-022/TaintedPath
- examples
- java
- kotlin-extractor
- src/main/kotlin
- utils/versions/v_2.0.0-Beta1
- ql
- automodel
- src
- change-notes/released
- test
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- com/github/codeql/test
- lib
- change-notes
- released
- semmle/code/java/dataflow/internal
- src
- Security/CWE/CWE-022
- change-notes/released
- test-kotlin1
- TestUtilities
- internal
- library-tests
- GeneratedFiles
- android_function_return_types
- annotation-accessor-result-type
- annotation_classes
- annotations/jvmName
- arrays-with-variances
- arrays
- call-int-to-char
- clashing-extension-fields
- classes
- collection-literals
- comments
- companion_objects
- compilation-units
- controlflow
- basic
- dominance
- paths
- plot
- coroutines
- data-classes
- dataflow
- extensionMethod
- foreach
- func
- notnullexpr
- stmtexpr
- summaries
- taint
- whenexpr
- declaration-stack
- empty
- enum
- exprs_typeaccess
- exprs
- extensions_recursion
- extensions
- fake_overrides
- all_java
- all_kotlin
- kotlin_calling_java
- field-initializer-flow
- files
- for-array-iterators
- function-n
- generic-inner-classes
- generic-instance-methods
- generic-methods
- generic-selective-extraction
- generic-type-bounds
- generics-location
- generics
- inherited-callee
- inherited-collection-implementation
- inherited-default-value
- inherited-single-abstract-method
- inheritence-substitution
- instances
- interface-delegate
- internal-constructor-called-from-java
- internal-public-alias
- java-kotlin-collection-type-generic-methods
- java-lang-number-conversions
- java-list-kotlin-user
- java-map-methods
- java_and_kotlin_generics
- java
- kotlin
- java_and_kotlin_internal
- java_and_kotlin
- java_properties
- jvmoverloads-annotation
- jvmoverloads_flow
- jvmoverloads_generics
- jvmstatic-annotation
- kotlin-java-map-entries
- lateinit
- lazy-val-multiple-constructors
- literals
- maps-iterator-overloads
- methods-mixed-java-and-kotlin
- methods
- ministdlib
- mixed-java-and-kotlin
- modifiers
- multiple_extensions
- multiple_files
- no-when-branch-found
- numlines
- object
- operator-overloads
- parameter-defaults
- private-anonymous-types
- properties
- recursive-instantiations
- stack-overflow-1
- stack-overflow-2
- reflection
- special-method-getters
- static-method-calls
- stmts
- string-charat
- super-method-calls
- this
- trap
- trivial
- type_aliases
- type_equivalences
- types
- underscore-parameters
- vararg
- variables
- query-tests
- AbstractToConcreteCollection
- AutoBoxing
- CloseReader
- CloseWriter
- ConfusingOverloading
- ConstantLoopCondition
- DeadCode
- DeadRefTypes
- EmptyBlock
- ExposeRepresentation
- InnerClassCouldBeStatic
- MissingInstanceofInEquals
- MissingOverrideAnnotation
- MutualDependency
- NamingConventionsRefTypes
- NonSerializableField
- NonSerializableInnerClass
- NullMaybe
- OneStatementPerLine
- PartiallyMaskedCatch
- ReturnValueIgnored
- SimplifyBoolExpr
- UnderscoreIdentifier
- UnreadLocal
- UselessNullCheck
- UselessParameter
- WhitespaceContradictsPrecedence
- test-kotlin2
- TestUtilities
- internal
- library-tests
- GeneratedFiles
- android_function_return_types
- annotation-accessor-result-type
- annotation_classes
- annotations/jvmName
- arrays-with-variances
- arrays
- call-int-to-char
- clashing-extension-fields
- classes
- collection-literals
- comments
- companion_objects
- compilation-units
- controlflow
- basic
- dominance
- paths
- plot
- coroutines
- data-classes
- dataflow
- extensionMethod
- foreach
- func
- notnullexpr
- stmtexpr
- summaries
- taint
- whenexpr
- declaration-stack
- empty
- enum
- exprs_typeaccess
- exprs
- extensions_recursion
- extensions
- fake_overrides
- all_java
- all_kotlin
- kotlin_calling_java
- field-initializer-flow
- files
- for-array-iterators
- function-n
- generic-inner-classes
- generic-instance-methods
- generic-methods
- generic-selective-extraction
- generic-type-bounds
- generics-location
- generics
- inherited-callee
- inherited-collection-implementation
- inherited-default-value
- inherited-single-abstract-method
- inheritence-substitution
- instances
- interface-delegate
- internal-constructor-called-from-java
- internal-public-alias
- java-kotlin-collection-type-generic-methods
- java-lang-number-conversions
- java-list-kotlin-user
- java-map-methods
- java_and_kotlin_generics
- java
- kotlin
- java_and_kotlin_internal
- java_and_kotlin
- java_properties
- jvmoverloads-annotation
- jvmoverloads_flow
- jvmoverloads_generics
- jvmstatic-annotation
- kotlin-java-map-entries
- lateinit
- lazy-val-multiple-constructors
- literals
- maps-iterator-overloads
- methods-mixed-java-and-kotlin
- methods
- ministdlib
- mixed-java-and-kotlin
- modifiers
- multiple_extensions
- multiple_files
- no-when-branch-found
- numlines
- object
- operator-overloads
- parameter-defaults
- private-anonymous-types
- properties
- recursive-instantiations
- stack-overflow-1
- stack-overflow-2
- reflection
- special-method-getters
- static-method-calls
- stmts
- string-charat
- super-method-calls
- this
- trap
- trivial
- type_aliases
- type_equivalences
- types
- underscore-parameters
- vararg
- variables
- query-tests
- AbstractToConcreteCollection
- AutoBoxing
- CloseReader
- CloseWriter
- ConfusingOverloading
- ConstantLoopCondition
- DeadCode
- DeadRefTypes
- EmptyBlock
- ExposeRepresentation
- InnerClassCouldBeStatic
- MissingInstanceofInEquals
- MissingOverrideAnnotation
- MutualDependency
- NamingConventionsRefTypes
- NonSerializableField
- NonSerializableInnerClass
- NullMaybe
- OneStatementPerLine
- PartiallyMaskedCatch
- ReturnValueIgnored
- SimplifyBoolExpr
- UnderscoreIdentifier
- UnreadLocal
- UselessNullCheck
- UselessParameter
- WhitespaceContradictsPrecedence
- test/query-tests/security/CWE-022/semmle/tests
- misc
- bazel/cmake
- suite-helpers
- change-notes/released
- python
- downgrades/728c6d65e61d808ae276013ebc15abc3a97aaef1
- ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new/internal
- frameworks
- upgrades/0565f7466437d52e1dc64a3b930926ab2f60cd64
- src
- Summary
- change-notes/released
- experimental/cryptography/inventory
- new_models
- old_models
- test
- 2
- library-tests
- ControlFlow/Exceptions
- PointsTo/imports2
- package
- classes/attr
- comprehensions
- modules
- general
- package_members
- usage
- types/properties
- query-tests/Summary
- 3
- library-tests
- ControlFlow/Exceptions
- PointsTo
- import_time
- imports
- package
- classes
- attr
- meta
- modules
- package_members
- usage
- types
- functions
- properties
- query-tests/Summary
- experimental
- dataflow
- basic
- calls
- coverage-py2
- coverage-py3
- coverage
- def-use-flow
- exceptions
- fieldflow
- global-flow
- match
- model-summaries
- module-initialization
- path-graph
- regression
- sensitive-data
- summaries
- tainttracking
- commonSanitizer
- customSanitizer
- defaultAdditionalTaintStep-py3
- defaultAdditionalTaintStep
- generator-flow
- unwanted-global-flow
- typetracking-summaries
- typetracking_imports
- typetracking
- use-use-flow
- variable-capture
- import-resolution
- library-tests
- CallGraph-implicit-init
- CallGraph-imports
- CallGraph
- meta/inline-taint-test-demo
- library-tests
- ApiGraphs/py2
- ControlFlow
- augassign
- comparison
- dominators
- except
- general
- ssa/deletions
- InlineExpectationsTest/missing-relevant-tag
- PEP695
- PointsTo
- functions
- imports
- inheritance
- lookup
- new
- attributes
- classes/attr
- comments
- essa/ssa-compute
- exceptions
- frameworks
- aioch
- aiofiles
- aiofile
- aiohttp
- aiomysql
- aiopg
- aiosqlite
- anyio
- asyncpg
- baize
- cassandra-driver
- cherrypy
- clickhouse_driver
- cryptodome
- cryptography
- crypto
- cx_Oracle
- dill
- django-orm
- django-v1
- django-v2-v3
- django
- fabric
- fastapi
- flask_admin
- flask_sqlalchemy
- flask
- httpx
- idna
- internal-ql-helpers
- invoke
- jmespath
- joblib
- libtaxii
- lxml
- markupsafe
- multidict
- mysql-connector-python
- mysqldb
- numpy
- oracledb
- pandas
- peewee
- phoenixdb
- pycurl
- pymssql
- pymysql
- pyodbc
- requests
- rest_framework
- rsa
- ruamel.yaml
- sanic
- serverless
- simplejson
- sqlalchemy
- starlette
- stdlib-py2
- stdlib-py3
- stdlib
- toml
- tornado
- twisted
- ujson
- urllib3
- xmltodict
- yaml
- yarl
- imports
- locations/negative_numbers
- modules/usage
- parentheses
- regex
- stmts
- general
- raise_stmt
- try_stmt
- with_stmt
- types/properties
- query-tests
- Expressions/general
- Functions/ModificationOfParameterWithDefault
- Security
- CWE-022-PathInjection
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- CWE-209-StackTraceExposure
- CWE-943-NoSqlInjection
- Statements/ReturnOrYieldOutsideOfFunction
- ruby/ql
- lib
- change-notes/released
- codeql/ruby
- controlflow
- dataflow/internal
- src
- change-notes/released
- test/library-tests/dataflow
- array-flow
- hash-flow
- local
- swift/ql
- lib
- change-notes
- released
- codeql/swift/dataflow
- internal
- src
- change-notes
- released
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,886 files changed
+47256
-3582
lines changedLines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
8 | 8 |
| |
9 | 9 |
| |
10 | 10 |
| |
| 11 | + | |
| 12 | + | |
11 | 13 |
| |
12 | 14 |
| |
13 | 15 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
3 | 3 |
| |
4 |
| - | |
| 4 | + | |
5 | 5 |
| |
6 | 6 |
| |
7 | 7 |
| |
|
Lines changed: 14 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
1 | 15 |
| |
2 | 16 |
| |
3 | 17 |
| |
|
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 0 additions & 4 deletions
This file was deleted.
Lines changed: 13 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 |
| - | |
| 2 | + | |
3 | 3 |
| |
4 | 4 |
| |
5 | 5 |
| |
|
0 commit comments