File tree
14,479 files changed
+1391660
-356362
lines changed- .devcontainer
- swift
- .github
- ISSUE_TEMPLATE
- actions
- cache-query-compilation
- fetch-codeql
- os-version
- problem-matchers
- workflows
- .vscode
- change-notes
- 1.20
- 1.23
- 1.24
- config
- atm/ml-powered-queries-repo
- models
- cpp
- autobuilder
- Semmle.Autobuild.Cpp.Tests
- Semmle.Autobuild.Cpp
- downgrades
- 19e31bf071f588bb7efd1e4d5a185ce4f6fbbd84
- 23f7cbb88a4eb29f30c3490363dc201bc054c5ff
- 34549c3b0937002f11037d01822ebe99442c1402
- 625f706f2a44ae8dc3fc168bfe2637e65c30b012
- 73af5058c6899dcdb05754c27ca966aeb3a68c94
- a5bb28ed29f73855d64cc5f939cef977fa8fd19a
- ba86bebea4c7a8235c2fa0e220391fbd4446a087
- cf72c8898d19eb1b3374432cf79d8276cb07ad43
- f96ad9b2da43bbc9e55a72a165febd270ae07981
- ql
- examples
- lib
- change-notes/released
- experimental/semmle/code/cpp
- dataflow
- ir/dataflow
- internal
- ssa0
- tainttracking1
- tainttracking2
- tainttracking3
- rangeanalysis
- extensions
- semantic
- analysis
- semmle/code/cpp
- commons
- controlflow
- internal
- dataflow/internal
- tainttracking1
- tainttracking2
- dispatch
- exprs
- internal
- ir
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- implementation
- aliased_ssa
- gvn
- internal
- internal
- raw
- gvn
- internal
- unaliased_ssa
- gvn
- internal
- internal
- metrics
- models
- implementations
- interfaces
- pointsto
- rangeanalysis
- security
- stmts
- valuenumbering
- upgrades
- 19e31bf071f588bb7efd1e4d5a185ce4f6fbbd84
- 23f7cbb88a4eb29f30c3490363dc201bc054c5ff
- 34549c3b0937002f11037d01822ebe99442c1402
- 625f706f2a44ae8dc3fc168bfe2637e65c30b012
- 73af5058c6899dcdb05754c27ca966aeb3a68c94
- ba86bebea4c7a8235c2fa0e220391fbd4446a087
- cf72c8898d19eb1b3374432cf79d8276cb07ad43
- e9a518baf14f4322ac243578a8e1391386ff030f
- f96ad9b2da43bbc9e55a72a165febd270ae07981
- src
- Architecture
- General Class-Level Information
- General Namespace-Level Information
- General Top-Level Information
- Refactoring Opportunities
- Best Practices
- Hiding
- Likely Errors
- Magic Constants
- Unused Entities
- Critical
- Diagnostics
- Internal
- Documentation
- JPL_C/LOC-4/Rule 23
- Likely Bugs
- Arithmetic
- Conversion
- Format
- Leap Year
- Likely Typos
- Memory Management
- OO
- Protocols
- Underspecified Functions
- Metrics
- Classes
- Dependencies
- Files
- Internal
- Namespaces
- Microsoft
- PointsTo
- Security/CWE
- CWE-020
- ir
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-114
- CWE-120
- CWE-121
- CWE-129
- CWE-131
- CWE-134
- CWE-170
- CWE-190
- CWE-253
- CWE-290
- CWE-295
- CWE-311
- CWE-313
- CWE-319
- CWE-367
- CWE-428
- CWE-457
- CWE-468
- CWE-497
- CWE-611
- CWE-676
- CWE-704
- CWE-732
- CWE-807
- change-notes
- released
- codeql-suites
- experimental
- Best Practices
- Likely Bugs
- Security/CWE
- CWE-020
- CWE-078
- CWE-1041
- CWE-1126
- CWE-120
- CWE-125
- CWE-190
- CWE-193
- CWE-200
- CWE-243
- CWE-266
- CWE-273
- CWE-285
- CWE-359
- CWE-362
- CWE-377
- CWE-401
- CWE-415
- CWE-476
- CWE-561
- CWE-670
- CWE-675
- CWE-691
- CWE-703
- CWE-754
- CWE-758
- CWE-783
- CWE-787
- CWE-788
- external
- jsf
- 3.02 Code Size and Complexity
- 4.05 Libraries
- 4.06 Pre-Processing Directives
- 4.07 Header Files
- 4.09 Style
- 4.10 Classes
- 4.11 Namespaces
- 4.13 Functions
- 4.15 Declarations and Definitions
- 4.21 Operators
- 4.22 Pointers and References
- 4.23 Type Conversions
- 4.25 Expressions
- test
- TestUtilities
- dataflow
- examples/BadLocking
- experimental
- library-tests/rangeanalysis
- bitshift
- rangeanalysis
- query-tests/Security/CWE
- CWE-020
- NoCheckBeforeUnsafePutUser
- semmle/tests
- CWE-078
- CWE-1041/semmle/tests
- CWE-119
- CWE-125/semmle/tests
- CWE-190/AllocMultiplicationOverflow
- CWE-193
- array-access
- constant-size
- pointer-deref
- CWE-359/semmle/tests
- CWE-401/semmle/tests
- CWE-670/semmle/tests
- CWE-691/semmle/tests
- CWE-703/semmle/tests
- CWE-754/semmle/tests
- CWE-783/semmle/tests
- CWE-788/semmle/tests
- semmle/tests
- library-tests
- builtins
- edg
- type_traits
- constants/strlen
- controlflow
- dereferenced
- nullness
- dataflow
- DefaultTaintTracking
- annotate_path_to_sink
- annotate_sinks_only
- globals
- dataflow-tests
- fields
- security-taint
- source-sink-tests
- taint-tests
- declarationEntry/declarationEntry
- exprs/value_categories
- files
- floats/float128
- ir
- ir
- modulus-analysis
- range-analysis
- sign-analysis
- ssa
- lambdas/captures
- pod
- printf
- formatAttribute
- formatLiteral
- sal
- string_analysis
- syntax-zoo
- templates
- CPP-203
- CPP-223
- type_instantiations
- type_sizes
- types/integral_types
- unspecified_type/types
- valuenumbering/GlobalValueNumbering
- variables
- global
- variables
- vector_types
- query-tests
- AlertSuppression
- Architecture/Refactoring Opportunities/ComplexFunctions
- Best Practices
- Hiding/LocalVariableHidesGlobalVariable
- Likely Errors
- CommaBeforeMisleadingIndentation
- EmptyBlock
- Slicing
- Unused Entities
- UnusedLocals
- UnusedStaticFunctions
- UnusedStaticVariables
- Critical
- FileClosed
- MemoryFreed
- MissingCheckScanf
- NewFree
- OverflowCalculated
- SizeCheck
- UnsafeUseOfThis
- Documentation/CommentedOutCode
- Likely Bugs
- Arithmetic
- BadAdditionOverflowCheck
- BitwiseSignCheck
- FloatComparison
- Conversion
- CastArrayPointerArithmetic
- ImplicitDowncastFromBitfield
- LossyFunctionResultCast
- Format
- NonConstantFormat
- WrongNumberOfFormatArguments
- WrongTypeFormatArguments
- Linux_mixed_byte_wprintf
- Linux_mixed_word_size
- Linux_signed_chars
- Linux_two_byte_wprintf
- Linux_unsigned_chars
- Microsoft_no_wchar
- Microsoft
- Leap Year/Adding365DaysPerYear
- Memory Management
- ImproperNullTermination
- NtohlArrayNoBound
- ReturnStackAllocatedMemory
- StrncpyFlippedArgs
- UsingExpiredStackAddress
- Protocols
- RedundantNullCheckSimple
- ShortLoopVarName
- Metrics/Dependencies
- Security/CWE
- CWE-022
- SAMATE/TaintedPath
- semmle/tests
- CWE-078
- SAMATE/ExecTainted
- semmle/ExecTainted
- CWE-079/semmle/CgiXss
- CWE-089/SqlTainted
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-119/semmle/tests
- CWE-120/semmle/tests
- CWE-121/semmle/tests
- CWE-129
- SAMATE/ImproperArrayIndexValidation
- semmle/ImproperArrayIndexValidation
- CWE-131
- NoSpaceForZeroTerminator
- semmle/NoSpaceForZeroTerminator
- CWE-134
- SAMATE
- semmle
- argv
- funcs
- globalVars
- ifs
- CWE-190
- SAMATE
- semmle
- ArithmeticUncontrolled
- ArithmeticWithExtremeValues
- TaintedAllocationSize
- tainted
- CWE-197/SAMATE/IntegerOverflowTainted
- CWE-242/semmle/tests
- CWE-253
- CWE-290/semmle/AuthenticationBypass
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-416/semmle/tests
- CWE-457/semmle/tests
- CWE-468/semmle/IncorrectPointerScaling
- CWE-497/semmle/tests
- CWE-611
- CWE-676/semmle/PotentiallyDangerousFunction
- CWE-732
- CWE-772
- SAMATE
- semmle
- tests-file
- tests-memory
- CWE-807/semmle/TaintedCondition
- jsf
- 4.09 Style/AV Rule 53 54
- 4.10 Classes/AV Rule 76
- successor-tests
- ifstmt/ifstmt
- switchstmt/switchstmt
- csharp
- actions/create-extractor-pack
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- documentation/library-coverage
- downgrades
- 1136957c0b3c73a7798ae42645c361e813295393
- 4ac7d8bcac6f664b1e83c858aa71f8dc761cc603
- 81a394bedda3d4747e36496c7be4d958424636d6
- 83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2
- 97da4e8c5750e07c4f7c8a366b21060e05ecd5ed
- d0fba103f7dee477dd7d9f6c038518b3f683b2c7
- extractor
- Semmle.Extraction.CIL.Driver
- Semmle.Extraction.CIL
- Entities
- Base
- Semmle.Extraction.CSharp.Driver
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp
- Entities
- Compilations
- Expressions
- Patterns
- PreprocessorDirectives
- Statements
- Extractor
- Kinds
- Populators
- Semmle.Extraction.Tests
- Semmle.Extraction
- Entities/Base
- Semmle.Util.Tests
- Semmle.Util
- old-change-notes
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- test
- Solorigate
- consistency-queries
- examples
- snippets
- integration-tests
- all-platforms
- dotnet_build
- dotnet_pack
- dotnet_publish
- dotnet_run
- posix-only
- dotnet_test
- inherit-env-vars
- lib
- Linq
- change-notes/released
- experimental/code/csharp/Cryptography
- ext
- generated
- semmle/code
- asp
- cil
- internal
- csharp
- commons
- controlflow
- internal
- pressa
- dataflow
- internal
- basessa
- rangeanalysis
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- tainttracking5
- dispatch
- exprs
- frameworks
- microsoft
- extensions
- system
- collections
- componentmodel
- data
- io
- net
- runtime
- security
- cryptography
- text
- threading
- web/ui
- xml
- test
- metrics
- security
- cryptography
- dataflow
- flowsinks
- flowsources
- xml
- serialization
- dotnet
- upgrades
- 1136957c0b3c73a7798ae42645c361e813295393
- 4ac7d8bcac6f664b1e83c858aa71f8dc761cc603
- 81a394bedda3d4747e36496c7be4d958424636d6
- 83aca6b3e4fa38dd2b97b9b51dfc199a2ba9c7f2
- a696c8bae067f69ab3208e98ce35f4fdf7efb68b
- d0fba103f7dee477dd7d9f6c038518b3f683b2c7
- src
- API Abuse
- Bad Practices
- Comments
- Implementation Hiding
- Magic Constants
- Naming Conventions
- CSI
- Concurrency
- Configuration
- Dead Code
- Diagnostics
- Documentation
- Language Abuse
- Likely Bugs
- Collections
- Dynamic
- LeapYear
- Statements
- Linq
- Metrics
- Summaries
- internal
- Security Features
- CWE-011
- CWE-016
- CWE-020
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-090
- CWE-091
- CWE-094
- CWE-099
- CWE-112
- CWE-114
- CWE-117
- CWE-134
- CWE-201
- CWE-209
- CWE-312
- CWE-321
- CWE-327
- CWE-384
- CWE-502
- CWE-548
- CWE-611
- CWE-614
- CWE-643
- CWE-730
- CWE-807
- Stubs
- Telemetry
- Useless code
- change-notes/released
- codeql-suites
- experimental
- CWE-099
- CWE-918
- Security Features
- CWE-1004
- CWE-327/Azure
- CWE-614
- CWE-759
- JsonWebTokenHandler
- Serialization
- backdoor
- dataflow/flowsources
- ir
- implementation
- internal
- raw
- gvn
- internal
- desugar
- internal
- unaliased_ssa
- gvn
- internal
- internal
- rangeanalysis
- meta/frameworks
- utils
- model-generator
- internal
- modelconverter
- modelgenerator
- internal
- test
- TestUtilities
- experimental
- CWE-918
- Security Features
- CWE-1004
- CookieHttpOnlyFalseAspNetCore
- CookieBuilder
- NoPolicy
- UseCookiePolicyCallback
- CookieWithoutHttpOnlyAspNetCore
- NoPolicy
- UseCookiePolicyAlways
- UseCookiePolicyCallback
- UseCookiePolicyNone
- CWE-614
- RequireSSLAspNetCore
- NoPolicy
- UseCookiePolicyAlways
- UseCookiePolicyCallback
- UseCookiePolicyNone
- RequireSSLFalseAspNetCore
- CookieBuilder
- NoPolicy
- UseCookiePolicyCallback
- CWE-759
- JsonWebTokenHandler
- backdoor
- ir/ir
- library-tests
- arguments
- assemblies
- async
- attributes
- cil
- attributes
- consistency
- dataflow
- enums
- functionPointers
- init-only-prop
- regressions
- typeAnnotations
- comments
- commons/Disposal
- constructors
- controlflow/graph
- conversion
- boxing
- operator
- csharp10
- csharp11
- cil
- csharp6
- csharp7.1
- csharp7.3
- csharp7
- csharp8
- csharp9-standalone
- csharp9
- dataflow
- async
- collections
- content
- delegates
- external-models
- fields
- flowsources/aspremote
- global
- library
- local
- ssa-large
- ssa
- definitions
- delegates
- dispatch
- dynamic
- enums
- events
- exceptions
- expressions
- fields
- frameworks
- EntityFramework
- ServiceStack
- microsoft
- generics
- goto
- indexers
- methods
- namespaces
- nestedtypes
- properties
- statements
- types
- query-tests
- API Abuse
- ClassDoesNotImplementEquals
- NoDisposeCallOnLocalIDisposable
- AlertSuppression
- Bad Practices
- Comments/TodoComments
- Control-Flow/ConstantCondition
- Concurrency/SynchSetUnsynchGet
- Dead Code
- NonAssignedFields
- Tests
- EmptyBlock
- Language Abuse
- ForeachCapture
- UselessIsBeforeAs
- Likely Bugs
- BadCheckOdd
- Collections/ContainerLengthCmpOffByOne
- RandomUsedOnce
- RecursiveEquals
- ThreadUnsafeICryptoTransformLambda
- ThreadUnsafeICryptoTransform
- UncheckedCastInEquals
- Nullness
- ReadOnlyContainer
- Security Features
- CWE-020
- CWE-022/TaintedPath
- CWE-078
- CWE-079
- StoredXSS
- XSS
- CWE-089
- CWE-090
- CWE-091/XMLInjection
- CWE-094
- CWE-099
- CWE-112
- CWE-114/AssemblyPathInjection
- CWE-117
- CWE-134
- CWE-201/ExposureInTransmittedData
- CWE-209
- CWE-312
- CWE-321/HardcodedSymmetricEncryptionKey
- CWE-327
- DontInstallRootCert
- InsecureSQLConnection
- InsufficientKeySize
- CWE-338
- CWE-384
- CWE-502/UnsafeDeserializationUntrustedInputNewtonsoftJson
- CWE-601/UrlRedirect
- CWE-611
- CWE-643
- CWE-730
- ReDoSGlobalTimeout
- ReDoS
- RegexInjection
- CWE-798
- CWE-807
- Stubs
- All
- Minimal
- Telemetry
- LibraryUsage
- SupportedExternalApis
- SupportedExternalSinks
- SupportedExternalSources
- UseBraces
- Useless Code/RedundantToStringCall
- resources/stubs
- Antlr3.Runtime/3.5.1
- Dapper/2.0.90
- Iesi.Collections/4.0.4
- Microsoft.Extensions.Primitives/6.0.0
- Microsoft.NETCore.Platforms/5.0.0
- Microsoft.Win32.Registry/4.7.0
- Microsoft.Win32.SystemEvents/5.0.0
- NHibernate/5.3.8
- Newtonsoft.Json/13.0.1
- Remotion.Linq.EagerFetching/2.2.0
- Remotion.Linq/2.2.0
- ServiceStack.Client
- 5.11.0
- 6.2.0
- ServiceStack.Common
- 5.11.0
- 6.2.0
- ServiceStack.Interfaces/6.2.0
- ServiceStack.OrmLite.SqlServer
- 5.11.0
- 6.2.0
- ServiceStack.OrmLite
- 5.11.0
- 6.2.0
- ServiceStack.Redis/5.11.0
- ServiceStack.Text/6.2.0
- ServiceStack
- 5.11.0
- 6.2.0
- Stub.System.Data.SQLite.Core.NetStandard/1.0.116
- System.Configuration.ConfigurationManager/4.4.1
- System.Data.SQLite.Core/1.0.116
- System.Data.SQLite.EF6/1.0.116
- System.Data.SQLite/1.0.116
- System.Data.SqlClient
- 4.8.2
- 4.8.3
- System.Drawing.Common
- 4.7.0
- 5.0.2
- System.Security.AccessControl/4.7.0
- System.Security.Principal.Windows/4.7.0
- _frameworks
- Microsoft.AspNetCore.App
- Microsoft.NETCore.App
- runtime.native.System.Data.SqlClient.sni/4.7.0
- runtime.win-arm64.runtime.native.System.Data.SqlClient.sni/4.4.0
- runtime.win-x64.runtime.native.System.Data.SqlClient.sni/4.4.0
- runtime.win-x86.runtime.native.System.Data.SqlClient.sni/4.4.0
- utils
- model-generator
- modelgenerator
- dataflow
- typebasedflow
- scripts
- tools
- linux64
- osx64
- win64
- docs
- codeql
- codeql-cli
- codeql-for-visual-studio-code
- codeql-language-guides
- codeql-overview
- images
- codeql-for-visual-studio-code
- ql-language-reference
- ql-training
- query-examples
- cpp
- java
- query-help
- reusables
- vs-code-basic-instructions
- support
- reusables
- writing-codeql-queries
- ql-libraries/dataflow
- go
- build
- codeql-tools
- docs/language/learn-ql/go
- downgrades
- 90fa7836e0a239f69bbebffcf342e92c240d54bc
- a58b81b1b4c4cccc8ca11731c1db86622f33af57
- initial
- external-packs/codeql/suite-helpers/0.0.2
- extractor-smoke-test
- extractor
- autobuilder
- cli
- go-autobuilder
- go-bootstrap
- go-build-runner
- go-extractor
- go-gen-dbscheme
- go-tokenizer
- dbscheme
- net/sourceforge/pmd/cpd
- opencsv
- srcarchive
- trap
- util
- old-change-notes
- 1.23
- 1.24
- ql
- config
- legacy-support
- suites/lgtm
- docs
- examples
- snippets
- lib
- change-notes/released
- ext
- semmle/go
- concepts
- controlflow
- dataflow
- barrierguardutil
- internal
- tainttracking1
- tainttracking2
- dependencies
- frameworks
- stdlib
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
14,479 files changed
+1391660
-356362
lines changedLines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 |
| - | |
| 1 | + | |
2 | 2 |
| |
3 | 3 |
|
Lines changed: 0 additions & 27 deletions
This file was deleted.
Lines changed: 2 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
3 | 3 |
| |
4 | 4 |
| |
5 | 5 |
| |
| 6 | + | |
| 7 | + | |
6 | 8 |
| |
7 | 9 |
| |
8 | 10 |
| |
|
Lines changed: 9 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + |
Lines changed: 25 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + |
Lines changed: 22 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + |
Lines changed: 20 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + |
Lines changed: 13 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + |
Lines changed: 9 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
39 | 39 |
| |
40 | 40 |
| |
41 | 41 |
| |
| 42 | + | |
42 | 43 |
| |
43 | 44 |
| |
44 | 45 |
| |
| |||
52 | 53 |
| |
53 | 54 |
| |
54 | 55 |
| |
| 56 | + | |
| 57 | + | |
| 58 | + | |
| 59 | + | |
| 60 | + | |
| 61 | + | |
| 62 | + | |
| 63 | + | |
55 | 64 |
| |
56 | 65 |
| |
57 | 66 |
| |
|
Lines changed: 0 additions & 24 deletions
This file was deleted.
0 commit comments