Skip to content

Commit b649f5f

Browse files
RasmusWLRasmusWL
committed
Merge branch 'main' into peewee-modeling
2 parents 97571e0 + 44ff623 commit b649f5f

File tree

2,085 files changed

+77161
-20065
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

2,085 files changed

+77161
-20065
lines changed

‎CODEOWNERS

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,3 +17,9 @@
1717
/java/ql/src/semmle/code/java/dataflow/internal/DataFlowImplCommon.qll @github/codeql-java @github/codeql-go
1818
/java/ql/src/semmle/code/java/dataflow/internal/tainttracking1/TaintTrackingImpl.qll @github/codeql-java @github/codeql-go
1919
/java/ql/src/semmle/code/java/dataflow/internal/tainttracking2/TaintTrackingImpl.qll @github/codeql-java @github/codeql-go
20+
21+
# CodeQL tools and associated docs
22+
/docs/codeql-cli/ @github/codeql-cli-reviewers
23+
/docs/codeql-for-visual-studio-code/ @github/codeql-vscode-reviewers
24+
/docs/ql-language-reference/ @github/codeql-frontend-reviewers
25+
/docs/query-*-style-guide.md @github/codeql-analysis-reviewers

‎config/identical-files.json

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@
66
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImpl4.qll",
77
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImpl5.qll",
88
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImpl6.qll",
9+
"java/ql/src/semmle/code/java/dataflow/internal/DataFlowImplForSerializability.qll",
910
"cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowImpl.qll",
1011
"cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowImpl2.qll",
1112
"cpp/ql/src/semmle/code/cpp/dataflow/internal/DataFlowImpl3.qll",
@@ -448,5 +449,17 @@
448449
"SensitiveDataHeuristics Python/JS": [
449450
"javascript/ql/src/semmle/javascript/security/internal/SensitiveDataHeuristics.qll",
450451
"python/ql/src/semmle/python/security/internal/SensitiveDataHeuristics.qll"
452+
],
453+
"ReDoS Util Python/JS": [
454+
"javascript/ql/src/semmle/javascript/security/performance/ReDoSUtil.qll",
455+
"python/ql/src/semmle/python/security/performance/ReDoSUtil.qll"
456+
],
457+
"ReDoS Exponential Python/JS": [
458+
"javascript/ql/src/semmle/javascript/security/performance/ExponentialBackTracking.qll",
459+
"python/ql/src/semmle/python/security/performance/ExponentialBackTracking.qll"
460+
],
461+
"ReDoS Polynomial Python/JS": [
462+
"javascript/ql/src/semmle/javascript/security/performance/SuperlinearBackTracking.qll",
463+
"python/ql/src/semmle/python/security/performance/SuperlinearBackTracking.qll"
451464
]
452465
}

‎cpp/change-notes/2021-06-24-uncontrolled-arithmetic.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
lgtm
2+
* The 'Uncontrolled data in arithmetic expression' (cpp/uncontrolled-arithmetic) query now recognizes more sources of randomness.

‎cpp/change-notes/2021-06-30-wrong-type-format-argument.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
lgtm,codescanning
2+
* The 'Wrong type of arguments to formatting function' (cpp/wrong-type-format-argument) query is now more accepting of the string and character formatting differences between Microsoft and non-Microsoft platforms. There are now fewer false positive results.

‎cpp/change-notes/2021-07-13-cleartext-storage-file.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
lgtm,codescanning
2+
* The "Cleartext storage of sensitive information in file" (cpp/cleartext-storage-file) query now uses dataflow to produce additional results.
3+
* Heuristics in the SensitiveExprs.qll library have been improved, making the "Cleartext storage of sensitive information in file" (cpp/cleartext-storage-file), "Cleartext storage of sensitive information in buffer" (cpp/cleartext-storage-buffer) and "Cleartext storage of sensitive information in an SQLite" (cpp/cleartext-storage-database) queries more accurate.

‎cpp/change-notes/2021-07-20-toctou-race-condition.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
lgtm,codescanning
2+
* Improvements have been made to the `cpp/toctou-race-condition` query, both to find more correct results and fewer false positive results.

‎cpp/change-notes/2021-07-27-uncontrolled-arithmetic.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
lgtm
2+
* Improvements made to the (`cpp/uncontrolled-arithmetic`) query, reducing the frequency of false positive results.

‎cpp/change-notes/2021-07-29-virtual-function-declaration-specifiers.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
lgtm,codescanning
2+
* Virtual function specifiers are now accessible via the new predicates on `Function` (`.isDeclaredVirtual`, `.isOverride`, and `.isFinal`).

‎cpp/change-notes/2021-08-10-has-trailing-return-type.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
lgtm,codescanning
2+
* Added `Function.hasTrailingReturnType` predicate to check whether a function was declared with a trailing return type.

‎cpp/ql/src/Diagnostics/FailedExtractorInvocations.ql

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,10 +7,6 @@
77

88
import cpp
99

10-
class AnonymousCompilation extends Compilation {
11-
override string toString() { result = "<compilation>" }
12-
}
13-
1410
string describe(Compilation c) {
1511
if c.getArgument(1) = "--mimic"
1612
then result = "compiler invocation " + concat(int i | i > 1 | c.getArgument(i), " " order by i)
@@ -19,4 +15,4 @@ string describe(Compilation c) {
1915

2016
from Compilation c
2117
where not c.normalTermination()
22-
select c, "Extraction aborted for " + describe(c), 2
18+
select "Extraction aborted for " + describe(c)

0 commit comments

Comments
 (0)