File tree
1,196 files changed
+65662
-55092
lines changed- .github/workflows
- config
- cpp
- autobuilder
- Semmle.Autobuild.Cpp.Tests
- Semmle.Autobuild.Cpp
- ql
- lib
- change-notes
- released
- semmle/code/cpp
- dataflow/internal
- tainttracking1
- tainttracking2
- ir
- dataflow/internal
- tainttracking1
- tainttracking2
- tainttracking3
- internal
- models/interfaces
- rangeanalysis/new/internal/semantic/analysis
- security
- src
- Critical
- Security/CWE/CWE-120
- change-notes
- released
- experimental/Security/CWE/CWE-1240
- jsf
- 4.10 Classes
- 4.16 Initialization
- test
- experimental/query-tests/Security/CWE
- CWE-078
- CWE-1240
- library
- CWE-193
- array-access
- constant-size
- CWE-359/semmle/tests
- header-variant-tests/clang-pch
- library-tests
- arguments
- dataflow
- dataflow-tests
- fields
- recursion
- syntax-zoo
- query-tests
- Critical
- MemoryFreed
- MissingCheckScanf
- Security/CWE
- CWE-022
- SAMATE/TaintedPath
- semmle/tests
- CWE-078
- SAMATE/ExecTainted
- semmle/ExecTainted
- CWE-079/semmle/CgiXss
- CWE-089/SqlTainted
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-119
- SAMATE
- semmle/tests
- CWE-120/semmle/tests
- CWE-129/semmle/ImproperArrayIndexValidation
- CWE-134
- SAMATE
- semmle
- argv
- funcs
- globalVars
- ifs
- CWE-190/semmle
- ArithmeticUncontrolled
- TaintedAllocationSize
- tainted
- CWE-193
- CWE-290/semmle/AuthenticationBypass
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-416/semmle/tests/UseAfterFree
- CWE-497
- SAMATE
- semmle/tests
- CWE-611
- CWE-807/semmle/TaintedCondition
- csharp
- actions/create-extractor-pack
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- documentation/library-coverage
- extractor
- Semmle.Extraction.CIL.Driver
- Semmle.Extraction.CIL
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp.DependencyStubGenerator
- Semmle.Extraction.CSharp.Driver
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp.StubGenerator
- Semmle.Extraction.CSharp.Util
- Semmle.Extraction.CSharp
- Entities
- Extractor
- Semmle.Extraction.Tests
- Semmle.Extraction
- Semmle.Util.Tests
- Semmle.Util
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- integration-tests
- all-platforms
- cshtml_standalone_flowsteps
- cshtml_standalone
- cshtml
- diag_dotnet_incompatible
- diag_missing_project_files
- diag_missing_xamarin_sdk
- diag_recursive_generics
- dotnet_build
- dotnet_no_args_inject
- dotnet_pack
- dotnet_publish
- dotnet_run
- standalone_dependencies_net48
- standalone
- linux-only/standalone_dependencies_non_utf8_filename
- posix-only
- dotnet_test_mstest
- dotnet_test
- inherit-env-vars
- standalone_dependencies_multi_target
- standalone_dependencies_nuget
- standalone_dependencies
- warn_as_error
- windows-only/standalone_dependencies
- lib
- change-notes
- released
- ext
- semmle/code
- cil
- csharp
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- tainttracking5
- frameworks
- src
- Telemetry
- change-notes/released
- experimental/dataflow/flowsources
- utils/modeleditor
- test
- experimental/Security Features
- CWE-1004
- CookieHttpOnlyFalseSystemWeb
- CookieWithoutHttpOnlySystemWeb
- ConfigEmpty
- ConfigFalse
- HttpCookiesTrue
- CWE-614
- RequireSSLFalseSystemWeb
- RequireSSLSystemWeb
- ConfigEmpty
- ConfigFalse
- FormsTrue
- HttpCookiesTrue
- library-tests
- asp/basic
- assemblies
- cil
- attributes
- consistency
- dataflow
- enums
- functionPointers
- init-only-prop
- typeAnnotations
- conversion
- boxing
- operator
- csharp9
- dataflow
- external-models
- flowsources/remote
- library
- frameworks
- Aws
- EntityFramework
- NHibernate
- ServiceStack
- parameters
- standalone/errorrecovery
- query-tests
- API Abuse/DisposeNotCalledOnException
- Security Features
- CWE-078
- CWE-079
- StoredXSS
- XSS
- CWE-089
- CWE-090
- CWE-099
- CWE-201/ExposureInTransmittedData
- CWE-327/InsecureSQLConnection
- CWE-611
- CWE-643
- CWE-798
- CWE-838
- Telemetry
- LibraryUsage
- SupportedExternalApis
- SupportedExternalSinks
- SupportedExternalSources
- resources/stubs
- Amazon.Lambda.APIGatewayEvents/2.7.0
- Amazon.Lambda.Core/2.2.0
- Antlr3.Runtime/3.5.1
- Dapper/2.1.24
- EntityFramework/6.4.4
- Iesi.Collections/4.0.4
- Microsoft.CSharp/4.7.0
- Microsoft.Extensions.DependencyInjection.Abstractions/6.0.0
- Microsoft.Extensions.DependencyInjection/6.0.0
- Microsoft.Extensions.Http/6.0.0
- Microsoft.Extensions.Logging.Abstractions/6.0.0
- Microsoft.Extensions.Logging/6.0.0
- Microsoft.Extensions.Options/6.0.0
- Microsoft.Extensions.Primitives/6.0.0
- Microsoft.NETCore.Platforms/1.1.0
- Microsoft.NETCore.Targets/1.1.0
- Microsoft.Win32.Primitives/4.3.0
- Microsoft.Win32.Registry/4.7.0
- Microsoft.Win32.SystemEvents/6.0.0
- NETStandard.Library/1.6.1
- NHibernate/5.4.7
- Newtonsoft.Json/13.0.3
- Remotion.Linq.EagerFetching/2.2.0
- Remotion.Linq/2.2.0
- ServiceStack.Client/8.0.0
- ServiceStack.Common/8.0.0
- ServiceStack.Interfaces/8.0.0
- ServiceStack.OrmLite.SqlServer/8.0.0
- ServiceStack.OrmLite/8.0.0
- ServiceStack.Text/8.0.0
- ServiceStack/8.0.0
- Stub.System.Data.SQLite.Core.NetStandard/1.0.118
- System.AppContext/4.3.0
- System.Buffers/4.3.0
- System.CodeDom/4.7.0
- System.Collections.Concurrent/4.3.0
- System.Collections.NonGeneric/4.3.0
- System.Collections/4.3.0
- System.ComponentModel.Annotations/5.0.0
- System.ComponentModel.Primitives/4.3.0
- System.ComponentModel/4.3.0
- System.Configuration.ConfigurationManager/6.0.0
- System.Console/4.3.0
- System.Data.SQLite.Core/1.0.118
- System.Data.SQLite.EF6/1.0.118
- System.Data.SQLite/1.0.118
- System.Data.SqlClient/4.8.5
- System.Diagnostics.Debug/4.3.0
- System.Diagnostics.DiagnosticSource/6.0.0
- System.Diagnostics.Tools/4.3.0
- System.Diagnostics.Tracing/4.3.0
- System.Drawing.Common/6.0.0
- System.Dynamic.Runtime/4.3.0
- System.Globalization.Calendars/4.3.0
- System.Globalization.Extensions/4.3.0
- System.Globalization/4.3.0
- System.IO.Compression.ZipFile/4.3.0
- System.IO.Compression/4.3.0
- System.IO.FileSystem.Primitives/4.3.0
- System.IO.FileSystem/4.3.0
- System.IO/4.3.0
- System.Linq.Expressions/4.3.0
- System.Linq.Queryable/4.0.1
- System.Linq/4.3.0
- System.Memory/4.5.5
- System.Net.Http/4.3.0
- System.Net.Primitives/4.3.0
- System.Net.Sockets/4.3.0
- System.ObjectModel/4.3.0
- System.Reflection.Emit.ILGeneration/4.3.0
- System.Reflection.Emit.Lightweight/4.7.0
- System.Reflection.Emit/4.7.0
- System.Reflection.Extensions/4.3.0
- System.Reflection.Primitives/4.3.0
- System.Reflection.TypeExtensions/4.7.0
- System.Reflection/4.3.0
- System.Resources.ResourceManager/4.3.0
- System.Runtime.CompilerServices.Unsafe/6.0.0
- System.Runtime.Extensions/4.3.0
- System.Runtime.Handles/4.3.0
- System.Runtime.InteropServices.RuntimeInformation/4.3.0
- System.Runtime.InteropServices/4.3.0
- System.Runtime.Numerics/4.3.0
- System.Runtime.Serialization.Formatters/4.3.0
- System.Runtime.Serialization.Primitives/4.3.0
- System.Runtime/4.3.0
- System.Security.AccessControl/6.0.0
- System.Security.Cryptography.Algorithms/4.3.0
- System.Security.Cryptography.Cng/4.3.0
- System.Security.Cryptography.Csp/4.3.0
- System.Security.Cryptography.Encoding/4.3.0
- System.Security.Cryptography.OpenSsl/4.3.0
- System.Security.Cryptography.Primitives/4.3.0
- System.Security.Cryptography.ProtectedData/6.0.0
- System.Security.Cryptography.X509Certificates/4.3.0
- System.Security.Permissions/6.0.0
- System.Security.Principal.Windows/4.7.0
- System.Text.Encoding.Extensions/4.3.0
- System.Text.Encoding/4.3.0
- System.Text.RegularExpressions/4.3.0
- System.Threading.Tasks.Extensions/4.3.0
- System.Threading.Tasks/4.3.0
- System.Threading.Timer/4.3.0
- System.Threading/4.3.0
- System.Windows.Extensions/6.0.0
- System.Xml.ReaderWriter/4.3.0
- System.Xml.XDocument/4.3.0
- System.Xml.XmlDocument/4.3.0
- _frameworks
- Microsoft.AspNetCore.App
- Microsoft.NETCore.App
- runtime.debian.8-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.fedora.23-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.fedora.24-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.native.System.Data.SqlClient.sni/4.7.0
- runtime.native.System.IO.Compression/4.3.0
- runtime.native.System.Net.Http/4.3.0
- runtime.native.System.Security.Cryptography.Apple/4.3.0
- runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.native.System/4.3.0
- runtime.opensuse.13.2-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.opensuse.42.1-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.osx.10.10-x64.runtime.native.System.Security.Cryptography.Apple/4.3.0
- runtime.osx.10.10-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.rhel.7-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.ubuntu.14.04-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.ubuntu.16.04-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.ubuntu.16.10-x64.runtime.native.System.Security.Cryptography.OpenSsl/4.3.0
- runtime.win-arm64.runtime.native.System.Data.SqlClient.sni/4.4.0
- runtime.win-x64.runtime.native.System.Data.SqlClient.sni/4.4.0
- runtime.win-x86.runtime.native.System.Data.SqlClient.sni/4.4.0
- utils
- modeleditor
- modelgenerator/dataflow
- scripts
- stubs
- docs/codeql
- ql-language-reference
- reusables
- go
- extractor
- vendor
- golang.org/x/tools
- go
- packages
- types/objectpath
- internal
- event/keys
- gcimporter
- typeparams
- ql
- consistency-queries
- change-notes/released
- lib
- change-notes
- released
- semmle/go
- dataflow
- internal
- tainttracking1
- tainttracking2
- frameworks/stdlib
- src
- change-notes/released
- test/library-tests/semmle/go/frameworks/Twirp
- javascript
- extractor/lib/typescript/src
- ql
- experimental/adaptivethreatmodeling
- lib/experimental/adaptivethreatmodeling
- modelbuilding/extraction
- test/endpoint_large_scale
- integration-tests/all-platforms/no-types
- lib
- change-notes
- released
- semmle/javascript
- dataflow
- internal
- frameworks
- AngularJS
- data/internal
- security/dataflow
- src
- change-notes/released
- meta/analysis-quality
- test/library-tests
- DependencyModuleImports
- frameworks/data
- java
- documentation/library-coverage
- ql
- automodel/src
- change-notes/released
- integration-tests/all-platforms/java
- buildless-maven
- buildless
- maven-sample
- lib
- change-notes
- released
- ext
- semmle/code/java
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- dispatch
- frameworks
- android
- regex
- security
- src
- Metrics/Summaries
- Security/CWE
- CWE-327
- CWE-330
- examples
- Telemetry
- change-notes
- released
- experimental/Security/CWE/CWE-1004
- utils/modeleditor
- test
- library-tests/dataflow/external-models
- query-tests/security
- CWE-295/AndroidMissingCertificatePinning
- Test1
- Test2
- Test3
- Test4
- Test5
- CWE-327/semmle/tests
- CWE-330
- stubs/esapi-2.0.1/org/owasp/esapi
- reference
- misc
- bazel/cmake
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- experimental/cryptography/utils
- semmle/python
- dataflow/new
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- frameworks
- data/internal
- internal
- security/dataflow
- src
- change-notes/released
- experimental/Security/CWE-176
- meta
- alerts
- analysis-quality
- test
- experimental
- dataflow
- TestUtil
- basic
- coverage
- import-star
- regression
- sensitive-data
- summaries-checks
- summaries
- tainttracking
- basic
- typetracking-summaries
- typetracking
- import-resolution
- meta/debug
- library-tests
- PointsTo/new
- frameworks
- data
- modeling-example
- ql/ql
- src/codeql_ql
- ast
- style
- test/queries/style/RedundantImport
- folder
- ruby/ql
- docs
- lib
- change-notes/released
- codeql/ruby
- dataflow
- internal
- tainttracking1
- frameworks
- core
- data
- internal
- rack/internal
- security
- typetracking
- internal
- src
- change-notes/released
- queries/modeling
- utils/modeleditor
- test
- TestUtilities
- library-tests/dataflow
- api-graphs
- flow-summaries
- local
- summaries
- query-tests/utils/modeleditor
- lib
- other_lib
- lib
- swift/ql
- lib
- change-notes
- released
- codeql/swift
- dataflow
- internal
- tainttracking1
- frameworks
- StandardLibrary
- src
- change-notes
- released
- test
- library-tests/dataflow
- flowsources
- taint/libraries
- query-tests/Security
- CWE-022
- CWE-311
- CWE-327
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,196 files changed
+65662
-55092
lines changedLines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
12 | 12 |
| |
13 | 13 |
| |
14 | 14 |
| |
15 |
| - | |
| 15 | + | |
16 | 16 |
| |
17 | 17 |
| |
18 | 18 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
30 | 30 |
| |
31 | 31 |
| |
32 | 32 |
| |
33 |
| - | |
| 33 | + | |
34 | 34 |
| |
35 | 35 |
| |
36 | 36 |
| |
|
Lines changed: 5 additions & 5 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
74 | 74 |
| |
75 | 75 |
| |
76 | 76 |
| |
77 |
| - | |
| 77 | + | |
78 | 78 |
| |
79 | 79 |
| |
80 |
| - | |
81 |
| - | |
82 |
| - | |
83 |
| - | |
| 80 | + | |
| 81 | + | |
| 82 | + | |
| 83 | + | |
84 | 84 |
| |
85 | 85 |
| |
86 | 86 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
15 | 15 |
| |
16 | 16 |
| |
17 | 17 |
| |
18 |
| - | |
| 18 | + | |
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
| |||
50 | 50 |
| |
51 | 51 |
| |
52 | 52 |
| |
53 |
| - | |
| 53 | + | |
54 | 54 |
| |
55 | 55 |
| |
56 | 56 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
23 | 23 |
| |
24 | 24 |
| |
25 | 25 |
| |
26 |
| - | |
| 26 | + | |
27 | 27 |
| |
28 | 28 |
| |
29 | 29 |
| |
|
Lines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
44 | 44 |
| |
45 | 45 |
| |
46 | 46 |
| |
| 47 | + |
Lines changed: 0 additions & 21 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
53 | 53 |
| |
54 | 54 |
| |
55 | 55 |
| |
56 |
| - | |
57 |
| - | |
58 |
| - | |
59 |
| - | |
60 |
| - | |
61 |
| - | |
62 |
| - | |
63 |
| - | |
64 | 56 |
| |
65 | 57 |
| |
66 | 58 |
| |
| |||
462 | 454 |
| |
463 | 455 |
| |
464 | 456 |
| |
465 |
| - | |
466 |
| - | |
467 |
| - | |
468 |
| - | |
469 |
| - | |
470 |
| - | |
471 |
| - | |
472 |
| - | |
473 |
| - | |
474 |
| - | |
475 |
| - | |
476 |
| - | |
477 |
| - | |
478 | 457 |
| |
479 | 458 |
| |
480 | 459 |
| |
|
Lines changed: 4 additions & 3 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
326 | 326 |
| |
327 | 327 |
| |
328 | 328 |
| |
329 |
| - | |
| 329 | + | |
330 | 330 |
| |
331 | 331 |
| |
332 | 332 |
| |
| |||
337 | 337 |
| |
338 | 338 |
| |
339 | 339 |
| |
| 340 | + | |
340 | 341 |
| |
341 | 342 |
| |
342 |
| - | |
343 |
| - | |
| 343 | + | |
| 344 | + | |
344 | 345 |
| |
345 | 346 |
| |
346 | 347 |
| |
|
Lines changed: 4 additions & 4 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
2 | 2 |
| |
3 | 3 |
| |
4 | 4 |
| |
5 |
| - | |
| 5 | + | |
6 | 6 |
| |
7 | 7 |
| |
8 | 8 |
| |
| |||
11 | 11 |
| |
12 | 12 |
| |
13 | 13 |
| |
14 |
| - | |
15 |
| - | |
| 14 | + | |
| 15 | + | |
16 | 16 |
| |
17 | 17 |
| |
18 | 18 |
| |
19 |
| - | |
| 19 | + | |
20 | 20 |
| |
21 | 21 |
| |
22 | 22 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
3 | 3 |
| |
4 |
| - | |
| 4 | + | |
5 | 5 |
| |
6 | 6 |
| |
7 | 7 |
| |
| |||
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
20 |
| - | |
| 20 | + | |
21 | 21 |
| |
22 | 22 |
| |
23 | 23 |
| |
|
0 commit comments