File tree
930 files changed
+20392
-13225
lines changed- .github/workflows
- config
- cpp/ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow/internal
- dataflow/internal
- exprs
- ir
- dataflow/internal
- implementation
- aliased_ssa
- raw
- internal
- unaliased_ssa
- rangeanalysis/new
- internal/semantic
- analysis
- security
- InvalidPointerDereference
- src
- Likely Bugs/Likely Typos
- Security/CWE
- CWE-119
- CWE-193
- CWE-570
- change-notes
- released
- experimental/Security/CWE/CWE-078
- test
- experimental/query-tests/Security/CWE
- CWE-078
- CWE-193
- array-access
- pointer-deref
- library-tests
- allocators
- dataflow
- dataflow-tests
- fields
- taint-tests
- ir
- ir
- modulus-analysis
- range-analysis
- syntax-zoo
- query-tests
- Critical/MemoryFreed
- Likely Bugs/Likely Typos/CompareWhereAssignMeant
- Security/CWE
- CWE-022/semmle/tests
- CWE-078/semmle/ExecTainted
- CWE-089/SqlTainted
- CWE-119
- SAMATE
- semmle/tests
- CWE-129/semmle/ImproperArrayIndexValidation
- CWE-190/semmle/TaintedAllocationSize
- CWE-193
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-416/semmle/tests
- CWE-497/semmle/tests
- CWE-611
- csharp
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- downgrades/585d6402ff8ba3d15114a869d205bdf6d4e0aa3f
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp/Entities/Types
- Semmle.Extraction.Tests
- Semmle.Util
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- consistency-queries
- integration-tests/all-platforms/diag_recursive_generics
- lib
- change-notes
- released
- semmle/code
- cil
- csharp
- commons
- dataflow/internal
- dispatch
- upgrades/cd877b8cc2fb8327499f96fbefd01bb988b2ed63
- src
- Concurrency
- change-notes/released
- experimental/ir/implementation
- raw
- unaliased_ssa
- test
- TestUtilities
- internal
- library-tests/dataflow
- fields
- operators
- patterns
- tuples
- query-tests
- Dead Code
- NonAssignedFields
- Tests
- Documentation
- EmptyBlock
- Language Abuse
- CatchOfGenericException
- ChainedIs
- DubiousTypeTestOfThis
- ForeachCapture
- MissedReadonlyOpportunity
- MissedTernaryOpportunity
- NestedIf
- RethrowException
- SimplifyBoolExpr
- UselessIsBeforeAs
- UselessNullCoalescingExpression
- UselessUpcast
- Likely Bugs
- BadCheckOdd
- Collections
- ContainerLengthCmpOffByOne
- ContainerSizeCmpZero
- DangerousNonShortCircuitLogic
- Dynamic
- EqualsArray
- EqualsUsesAs
- EqualsUsesIs
- HashedButNoHash
- IncomparableEquals
- InconsistentCompareTo
- MishandlingJapaneseEra
- NestedLoopsSameVariable
- ObjectComparison
- RandomUsedOnce
- RecursiveEquals
- SelfAssignment
- StaticFieldWrittenByInstance
- StringBuilderCharInit
- UncheckedCastInEquals
- UnsafeYearConstruction
- MagicConstants
- Metrics
- Files/FLinesOfCommentedCode
- RefTypes/TNumberOfFields
- Summaries
- Nullness
- Performance
- StringBuilderInLoop
- StringConcatenationInLoop
- UseTryGetValue
- ReadOnlyContainer
- UseBraces
- Useless Code
- DefaultToString
- IntGetHashCode
- PointlessForwardingMethod
- RedundantToStringCall
- UnusedLabel
- WriteOnlyContainer
- docs/codeql
- images/codeql-for-visual-studio-code
- reusables
- go/ql
- lib
- change-notes
- released
- semmle/go/security
- src
- change-notes/released
- test
- TestUtilities
- internal
- experimental/frameworks
- CleverGo
- Fiber
- library-tests/semmle/go
- dataflow
- ArrayConversion
- ChannelField
- ExternalFlowVarArgs
- ExternalFlow
- GenericFunctionsAndTypes
- GuardingFunctions
- HiddenNodes
- ListOfConstantsSanitizerGuards
- PromotedFields
- PromotedMethods
- TypeAssertions
- VarArgsWithFunctionModels
- VarArgs
- frameworks
- EvanphxJsonPatch
- K8sIoApiCoreV1
- K8sIoApimachineryPkgRuntime
- Protobuf
- Spew
- Zap
- query-tests/Security
- CWE-079
- CWE-117
- javascript
- downgrades/c88c69174bd0dd4e95f1bcfbada68a2505e812c3
- extractor
- lib/typescript
- src/com/semmle
- jcorn
- js
- ast
- extractor
- ts/extractor
- ql
- lib
- change-notes
- released
- semmle/javascript
- upgrades/8accf0f930bcb8b42d69fd7ef7b4372604f551ed
- src
- Declarations
- Statements
- change-notes/released
- test/library-tests
- AST/ExplicitResource
- TypeScript
- BindingPattern
- Types
- java
- kotlin-extractor
- src/main/kotlin
- comments
- utils
- versions
- v_1_4_32
- v_1_5_20
- v_1_9_0-Beta
- v_1_9_255
- ql
- automodel
- src
- test
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- com/github/codeql/test
- java
- io
- nio/file
- integration-tests/all-platforms/kotlin
- extractor_information_kotlin1
- extractor_information_kotlin2
- lib
- change-notes
- released
- semmle/code/java/dataflow/internal
- src
- Telemetry
- change-notes/released
- test
- TestUtilities
- internal
- ext/TestModels
- kotlin/library-tests/dataflow/summaries
- library-tests
- dataflow
- callctx
- capture
- collections
- field-value
- fluent-methods
- stream-collect
- stream-read
- synth-global
- taint-format
- taint-gson
- taint-jackson
- frameworks
- JaxWs
- android
- asynctask
- content-provider-summaries
- content-provider
- external-storage
- flow-steps
- intent
- notification
- slice
- sources
- uri
- widget
- apache-ant
- apache-collections
- apache-commons-compress
- apache-commons-lang3
- apache-http
- gson
- guava/generated
- cache
- collect
- hudson
- jackson
- javax-json
- jdk
- java.io
- java.net
- java.nio.file
- json-java
- netty
- generated
- manual
- okhttp
- play
- rabbitmq
- ratpack
- retrofit
- spring
- beans
- cache
- context
- controller
- data
- http
- ui
- util
- validation
- webmultipart
- webutil
- stapler
- stream
- thymeleaf
- logging
- optional
- pathsanitizer
- paths
- qlengine
- regex
- scanner
- query-tests
- Telemetry
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- security
- CWE-117
- CWE-266
- CWE-441
- CWE-470
- CWE-489/webview-debugging
- CWE-501
- CWE-532
- CWE-611
- CWE-780
- CWE-927
- misc
- scripts
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new/internal
- frameworks
- data/internal
- regexp/internal
- security/dataflow
- src
- Functions
- Security
- CWE-020-ExternalAPIs
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-090
- CWE-094
- CWE-117
- CWE-209
- CWE-285
- CWE-312
- CWE-327
- CWE-502
- CWE-601
- CWE-611
- CWE-643
- CWE-730
- CWE-776
- CWE-798
- CWE-918
- examples
- change-notes
- released
- experimental
- Security
- CWE-022bis
- CWE-022
- CWE-074
- paramiko
- CWE-079
- CWE-091
- CWE-113
- CWE-1236
- CWE-176
- CWE-208
- TimingAttackAgainstHash
- TimingAttackAgainstHeaderValue
- TimingAttackAgainstSensitiveInfo
- CWE-287-ConstantSecretKey
- CWE-327/Azure
- CWE-338
- CWE-340
- CWE-348
- CWE-522
- CWE-614
- semmle/python
- libraries
- security
- dataflow
- injection
- templates
- semmle/python/functions
- test
- experimental
- dataflow
- TestUtil
- model-summaries
- query-tests/Security
- CWE-022-TarSlip
- CWE-022-UnsafeUnpacking
- CWE-074-TemplateInjection
- CWE-074-paramiko
- CWE-074
- CWE-079
- CWE-091-XsltInjection
- CWE-091
- CWE-208/TimingAttackAgainstSensitiveInfo
- CWE-522-global-option
- CWE-522
- semmle/python/templates
- library-tests
- frameworks
- data
- flask
- stdlib
- regex
- query-tests
- Functions/ModificationOfParameterWithDefault
- Security
- CWE-022-PathInjection
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- src
- CWE-079-ReflectedXss
- CWE-116-BadTagFilter
- CWE-209-StackTraceExposure
- CWE-285-PamAuthorization
- CWE-327-WeakSensitiveDataHashing
- CWE-730-ReDoS
- CWE-918-ServerSideRequestForgery
- ql
- buramu
- extractor
- ruby/ql
- consistency-queries
- lib
- change-notes
- released
- codeql/ruby
- controlflow
- internal
- dataflow/internal
- frameworks
- security
- src
- change-notes
- released
- experimental
- cwe-208
- examples
- ldap-improper-auth
- examples
- test
- TestUtilities
- internal
- library-tests
- dataflow
- array-flow
- call-sensitivity
- flow-summaries
- global
- hash-flow
- local
- params
- pathname-flow
- ssa-flow
- string-flow
- summaries
- frameworks
- action_controller
- action_mailer
- active_support
- arel
- json
- sinatra
- query-tests
- experimental/ImproperLdapAuth
- security/cwe-1333-exponential-redos
- swift
- extractor/translators
- ql
- consistency-queries
- lib
- change-notes
- released
- codeql/swift
- dataflow/internal
- regex
- security/regex
- src
- change-notes
- released
- diagnostics/internal
- queries/Security
- CWE-020
- CWE-328
- test
- extractor-tests/errors/CONSISTENCY
- query-tests/Security/CWE-020
- swift-autobuilder
- tests
- hello-autobuilder
- hello-autobuilder.xcodeproj
- project.xcworkspace
- hello-targets-with-tests-suffix
- Foo.xcodeproj
- project.xcworkspace
- hello-tests
- hello-tests.xcodeproj
- project.xcworkspace
- hello-workspace
- Hello.xcworkspace
- hello-workspace.xcodeproj
- project.xcworkspace
- tools
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
930 files changed
+20392
-13225
lines changedLines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
15 | 15 |
| |
16 | 16 |
| |
17 | 17 |
| |
18 |
| - | |
| 18 | + | |
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
16 | 16 |
| |
17 | 17 |
| |
18 | 18 |
| |
19 |
| - | |
| 19 | + | |
20 | 20 |
| |
21 | 21 |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
33 | 33 |
| |
34 | 34 |
| |
35 | 35 |
| |
36 |
| - | |
| 36 | + | |
37 | 37 |
| |
38 | 38 |
| |
39 | 39 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
Lines changed: 3 additions & 3 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
29 | 29 |
| |
30 | 30 |
| |
31 | 31 |
| |
32 |
| - | |
| 32 | + | |
33 | 33 |
| |
34 | 34 |
| |
35 | 35 |
| |
| |||
52 | 52 |
| |
53 | 53 |
| |
54 | 54 |
| |
55 |
| - | |
| 55 | + | |
56 | 56 |
| |
57 | 57 |
| |
58 | 58 |
| |
| |||
73 | 73 |
| |
74 | 74 |
| |
75 | 75 |
| |
76 |
| - | |
| 76 | + | |
77 | 77 |
| |
78 | 78 |
| |
79 | 79 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
22 |
| - | |
| 22 | + | |
23 | 23 |
| |
24 | 24 |
| |
25 | 25 |
| |
| |||
47 | 47 |
| |
48 | 48 |
| |
49 | 49 |
| |
50 |
| - | |
| 50 | + | |
51 | 51 |
| |
52 | 52 |
| |
53 | 53 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
31 | 31 |
| |
32 | 32 |
| |
33 | 33 |
| |
34 |
| - | |
| 34 | + | |
35 | 35 |
| |
36 | 36 |
| |
37 | 37 |
| |
38 |
| - | |
| 38 | + | |
39 | 39 |
| |
40 | 40 |
| |
41 | 41 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
20 | 20 |
| |
21 | 21 |
| |
22 | 22 |
| |
23 |
| - | |
| 23 | + | |
24 | 24 |
| |
25 | 25 |
| |
26 | 26 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
9 | 9 |
| |
10 | 10 |
| |
11 | 11 |
| |
12 |
| - | |
| 12 | + | |
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
0 commit comments