Skip to content

Commit db49cfb

Browse files
erik-krogherik-krogh
committed
Merge branch 'main' into kernelLoad
2 parents e0045d2 + 08240e2 commit db49cfb

File tree

1,099 files changed

+43211
-16999
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

1,099 files changed

+43211
-16999
lines changed

‎.github/workflows/atm-check-query-suite.yml

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ on:
1313

1414
jobs:
1515
atm-check-query-suite:
16-
runs-on: ubuntu-latest
16+
runs-on: ubuntu-latest-xl
1717

1818
steps:
1919
- uses: actions/checkout@v3
@@ -23,6 +23,12 @@ jobs:
2323
with:
2424
channel: release
2525

26+
- name: Cache compilation cache
27+
id: query-cache
28+
uses: ./.github/actions/cache-query-compilation
29+
with:
30+
key: atm-suite
31+
2632
- name: Install ATM model
2733
run: |
2834
set -exu
@@ -50,10 +56,13 @@ jobs:
5056
echo "SARIF_PATH=${SARIF_PATH}" >> "${GITHUB_ENV}"
5157
5258
codeql database analyze \
59+
--threads=0 \
60+
--ram 50000 \
5361
--format sarif-latest \
5462
--output "${SARIF_PATH}" \
5563
--sarif-group-rules-by-pack \
5664
-vv \
65+
--compilation-cache "${{ steps.query-cache.outputs.cache-dir }}" \
5766
-- \
5867
"${DB_PATH}" \
5968
"${QUERY_PACK}/${QUERY_SUITE}"

‎.github/workflows/check-query-ids.yml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: Check query IDs
2+
3+
on:
4+
pull_request:
5+
paths:
6+
- "**/src/**/*.ql"
7+
- misc/scripts/check-query-ids.py
8+
- .github/workflows/check-query-ids.yml
9+
branches:
10+
- main
11+
- "rc/*"
12+
workflow_dispatch:
13+
14+
jobs:
15+
check:
16+
name: Check query IDs
17+
runs-on: ubuntu-latest
18+
steps:
19+
- uses: actions/checkout@v3
20+
- name: Check for duplicate query IDs
21+
run: python3 misc/scripts/check-query-ids.py

‎.github/workflows/swift.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,7 @@ jobs:
6565
if : ${{ github.event_name == 'pull_request' }}
6666
needs: build-and-test-macos
6767
runs-on: macos-12-xl
68+
timeout-minutes: 60
6869
steps:
6970
- uses: actions/checkout@v3
7071
- uses: ./swift/actions/run-integration-tests

‎config/identical-files.json

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -470,6 +470,10 @@
470470
"javascript/ql/src/Comments/CommentedOutCodeReferences.inc.qhelp",
471471
"python/ql/src/Lexical/CommentedOutCodeReferences.inc.qhelp"
472472
],
473+
"ThreadResourceAbuse qhelp": [
474+
"java/ql/src/experimental/Security/CWE/CWE-400/LocalThreadResourceAbuse.qhelp",
475+
"java/ql/src/experimental/Security/CWE/CWE-400/ThreadResourceAbuse.qhelp"
476+
],
473477
"IDE Contextual Queries": [
474478
"cpp/ql/lib/IDEContextual.qll",
475479
"csharp/ql/lib/IDEContextual.qll",
@@ -537,6 +541,11 @@
537541
"ruby/ql/lib/codeql/ruby/frameworks/data/internal/ApiGraphModels.qll",
538542
"python/ql/lib/semmle/python/frameworks/data/internal/ApiGraphModels.qll"
539543
],
544+
"ApiGraphModelsExtensions": [
545+
"javascript/ql/lib/semmle/javascript/frameworks/data/internal/ApiGraphModelsExtensions.qll",
546+
"ruby/ql/lib/codeql/ruby/frameworks/data/internal/ApiGraphModelsExtensions.qll",
547+
"python/ql/lib/semmle/python/frameworks/data/internal/ApiGraphModelsExtensions.qll"
548+
],
540549
"TaintedFormatStringQuery Ruby/JS": [
541550
"javascript/ql/lib/semmle/javascript/security/dataflow/TaintedFormatStringQuery.qll",
542551
"ruby/ql/lib/codeql/ruby/security/TaintedFormatStringQuery.qll"

‎cpp/ql/lib/CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
## 0.4.6
2+
3+
No user-facing changes.
4+
15
## 0.4.5
26

37
No user-facing changes.

‎cpp/ql/lib/change-notes/2022-12-08-support-getaddrinfo-dataflow.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `getaddrinfo` function is now recognized as a flow source.

‎cpp/ql/lib/change-notes/2022-12-08-support-scanf-dataflow.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `scanf` and `fscanf` functions and their variants are now recognized as flow sources.

‎cpp/ql/lib/change-notes/2022-12-09-generalize-argv-source.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `ArgvSource` flow source has been generalized to handle cases where the argument vector of `main` is not named `argv`.

‎cpp/ql/lib/change-notes/released/0.4.6.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
## 0.4.6
2+
3+
No user-facing changes.

‎cpp/ql/lib/codeql-pack.release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
11
---
2-
lastReleaseVersion: 0.4.5
2+
lastReleaseVersion: 0.4.6

0 commit comments

Comments
 (0)