File tree
8,082 files changed
+430720
-158340
lines changed- .devcontainer
- swift
- .github
- codeql
- workflows
- .vscode
- actions
- extractor/tools
- ql
- lib
- change-notes
- released
- codeql
- actions
- Violations Of Best Practices
- ast/internal
- config
- controlflow
- internal
- dataflow
- internal
- ideContextual
- security
- files
- ext
- config
- generated
- composite-actions
- reusable-workflows
- manual
- ide-contextual-queries
- src
- Debug
- Models
- Security
- CWE-077
- CWE-094
- CWE-1395
- CWE-275
- CWE-285
- CWE-312
- CWE-349
- CWE-367
- CWE-571
- CWE-829
- Violations Of Best Practice/CodeQL
- change-notes
- released
- codeql-suites
- experimental/Security
- CWE-074
- CWE-078
- CWE-088
- CWE-200
- CWE-284
- CWE-829
- CWE-918
- test
- library-tests
- .github/workflows
- query-tests
- Models
- .github/workflows
- action1
- Placeholder
- .github/workflows
- Security
- CWE-074
- .github/workflows
- CWE-077
- .github
- actions
- download-artifact-2
- download-artifact
- workflows
- CWE-078
- .github
- actions/run-airbyte-ci
- workflows
- CWE-088
- .github/workflows
- CWE-094
- .github
- actions
- action1
- action2
- action3
- action4
- action5
- action6
- action7
- external
- TestOrg/TestRepo/.github/actions/clone-repo
- ultralytics/actions
- workflows
- external/TestOrg/TestRepo/.github/workflows
- CWE-1395
- .github/workflows
- CWE-200
- .github/workflows
- CWE-275
- .github/workflows
- CWE-284
- .github/workflows
- CWE-285
- .github/workflows
- CWE-312
- .github/workflows
- CWE-349
- .github/workflows
- CWE-367
- .github/workflows
- CWE-571
- .github/workflows
- CWE-829
- .github
- actions
- dangerous-git-checkout
- download-artifact-2
- download-artifact
- workflows
- external/TestOrg/TestRepo/.github/workflows
- CWE-918
- .github/workflows
- SyntaxError
- .github/workflows
- Violations Of Best Practice/CodeQL
- .github/workflows
- config
- cpp
- downgrades
- 1a4bbe5ded083b9de87911c155fc99ca22ecb0ce
- 1aa71a4a687fc93f807d4dfeeef70feceeced242
- 4813509d85b45ae17421c036905199f7324cf228
- 59cb96ca699929b63941e81905f9b8de7eed59a6
- 7eeff19bf7c89a350d3e43516a33c98a270cb057
- a01d8f91b8d49259e509b574962dec90719f69a6
- c3881af7e5b247d126aea68a1901b4497adf3d83
- d6a03a00b9824f27241b58b8e18208f31c03904a
- dd32242a870867a532bb0b2a88a6a917a5b4c26f
- e594389175c098d7225683d0fd8cefcc47d84bc1
- f0156f5f88ab5967c79162012c20f30600ca5ebf
- f786eb3f5dfddb0ac914ab09551bf1c5c64b47c0
- ql
- lib
- change-notes/released
- experimental/cryptography/modules
- ext
- semmle/code/cpp
- commons
- controlflow
- internal
- dataflow
- internal
- tainttracking1
- tainttracking2
- new
- exprs
- headers
- internal
- ir
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- implementation
- aliased_ssa
- gvn
- internal
- raw
- gvn
- internal
- unaliased_ssa
- gvn
- models
- implementations
- interfaces
- rangeanalysis
- new/internal/semantic
- analysis
- stmts
- valuenumbering
- upgrades
- 1a4bbe5ded083b9de87911c155fc99ca22ecb0ce
- 1aa71a4a687fc93f807d4dfeeef70feceeced242
- 4813509d85b45ae17421c036905199f7324cf228
- 59cb96ca699929b63941e81905f9b8de7eed59a6
- 7eeff19bf7c89a350d3e43516a33c98a270cb057
- a01d8f91b8d49259e509b574962dec90719f69a6
- c3881af7e5b247d126aea68a1901b4497adf3d83
- d6a03a00b9824f27241b58b8e18208f31c03904a
- dd32242a870867a532bb0b2a88a6a917a5b4c26f
- e51fad7a2436caefab0c6bd52f05e28e7cce4d92
- f0156f5f88ab5967c79162012c20f30600ca5ebf
- f786eb3f5dfddb0ac914ab09551bf1c5c64b47c0
- utils/test
- dataflow
- internal
- src
- Architecture/Refactoring Opportunities
- Best Practices
- Unused Entities
- Critical
- Likely Bugs
- Arithmetic
- Format
- Likely Typos
- Memory Management
- Underspecified Functions
- Metrics/Internal
- Security/CWE
- CWE-078
- CWE-120
- CWE-190
- CWE-570
- CWE-732
- CWE-843
- change-notes/released
- codeql-suites
- experimental/Best Practices
- jsf/4.13 Functions
- test
- examples/expressions
- experimental
- library-tests/rangeanalysis
- rangeanalysis
- signanalysis
- query-tests
- Best Practices/GuardedFree
- Security/CWE
- CWE-193/constant-size
- CWE-409/DecompressionBombs
- library-tests
- arguments
- blocks
- capture
- cpp
- c
- deduplication
- builtins/type_traits
- clang_builtin_macros
- complex_numbers
- constants/addresses
- consteval_if
- constexpr_if
- controlflow
- guards-ir
- guards
- conversions
- cpp11_g
- dataflow
- asExpr
- dataflow-tests
- external-models
- fields
- ir-barrier-guards
- models-as-data
- parameters-without-defs
- smart-pointers-taint
- source-sink-tests
- taint-tests
- declaration
- fold
- functionpointerish
- functions/functions
- headers/preprocBlock
- ir
- ir
- modulus-analysis
- points_to
- range-analysis
- sign-analysis
- ssa
- types
- preprocessor/preprocessor
- proxy_class
- rangeanalysis/SimpleRangeAnalysis
- rvalueCast
- specifiers2
- structs/compatible_c
- syntax-zoo
- type_sizes
- types/datasizeof
- udl
- unspecified_type/types
- vector_types
- query-tests
- Best Practices
- GuardedFree
- Unused Entities/UnusedStaticFunctions
- Critical
- MissingCheckScanf
- SizeCheck
- Likely Bugs
- Format
- WrongNumberOfFormatArguments
- WrongTypeFormatArguments
- Buildless
- Microsoft_no_wchar
- Likely Typos/ExprHasNoEffect/CMakeFiles/CMakeScratch/TryCompile-abcdef
- Memory Management/ReturnStackAllocatedMemory
- Underspecified Functions
- Security/CWE
- CWE-022/semmle/tests
- CWE-119
- SAMATE
- semmle/tests
- CWE-120/semmle/tests
- CWE-193
- jsf/4.13 Functions/AV Rule 114
- csharp
- .config
- .paket
- .vscode
- actions/create-extractor-pack
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- Semmle.Autobuild.Cpp.Tests
- documentation/library-coverage
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- SourceGenerators/DotnetSourceGeneratorWrapper
- Semmle.Extraction.CSharp.DependencyStubGenerator
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp.StubGenerator
- Semmle.Extraction.CSharp
- CodeAnalysisExtensions
- Comments
- Entities
- Base
- Compilations
- Expressions
- ObjectCreation
- Patterns
- Locations
- Statements
- Types
- Extractor
- Trap
- Semmle.Extraction.Tests
- Semmle.Extraction
- Entities
- Base
- Semmle.Util.Tests
- Semmle.Util
- Logging
- Testrunner
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- examples/snippets
- integration-tests
- all-platforms
- autobuild
- binlog_multiple
- a
- b
- binlog
- a
- b
- blazor_build_mode_none
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- blazor_net_8
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- blazor
- BlazorTest
- Components
- Layout
- Pages
- Properties
- wwwroot
- bootstrap
- conditional_compilation
- cshtml_standalone_disabled
- cshtml_standalone_flowsteps
- cshtml_standalone_net6
- cshtml_standalone
- cshtml
- diag_dotnet_incompatible
- diag_missing_project_files
- diag_missing_xamarin_sdk
- diag_recursive_generics
- dotnet_build
- dotnet_no_args_inject
- dotnet_pack
- dotnet_publish
- dotnet_run
- source_generator
- standalone_buildless_option
- standalone_dependencies_net48
- standalone_failed
- standalone_resx
- standalone_winforms
- standalone
- linux
- compiler_args
- standalone_dependencies_non_utf8_filename
- standalone_dotnet3
- posix
- dotnet_test_mstest
- dotnet_test
- inherit-env-vars
- standalone_dependencies_executing_runtime
- standalone_dependencies_multi_project
- standalone_dependencies_multi_target
- standalone_dependencies_no_framework
- standalone_dependencies_nuget with_space
- standalone_dependencies_nuget_config_error_timeout/proj
- standalone_dependencies_nuget_config_error/proj
- standalone_dependencies_nuget_config_fallback/proj
- standalone_dependencies_nuget_no_sources/proj
- standalone_dependencies_nuget_versions
- d1
- d2
- standalone_dependencies_nuget
- standalone_dependencies
- warn_as_error
- windows/standalone_dependencies
- lib
- change-notes
- released
- experimental/code/csharp/Cryptography
- ext
- generated
- semmle/code/csharp
- commons
- controlflow
- internal
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- tainttracking5
- dispatch
- exprs
- frameworks
- microsoft/aspnetcore
- system
- collections
- runtime
- security
- dataflow
- flowsources
- xml
- telemetry
- utils/test
- internal
- src
- Bad Practices
- Likely Bugs
- Dynamic
- Telemetry
- change-notes/released
- codeql-suites
- experimental
- CWE-099
- CWE-918
- Security Features
- CWE-1004
- CWE-327/Azure
- CWE-614
- CWE-759
- JsonWebTokenHandler
- Serialization
- backdoor
- dataflow/flowsources
- meta/frameworks
- utils
- modeleditor
- modelgenerator/internal
- test
- TestUtilities/inline-tests
- experimental
- CWE-918
- Security Features
- CWE-759
- backdoor
- library-tests
- arguments
- assemblies
- async
- attributes
- controlflow/graph
- conversion
- boxing
- operator
- reftype
- csharp11
- csharp7.2
- csharp9
- dataflow
- async
- barrier-guards
- collections
- constructors
- delegates
- external-models
- fields
- flowsources/stored
- database/dapper
- file
- functionpointers
- global
- implicittostring
- indexers
- library
- operators
- patterns
- ssa
- threat-models
- tuples
- typeflow-dispatch
- types
- dispatch
- frameworks
- Aws
- EntityFramework
- NHibernate
- ServiceStack
- format
- microsoft/aspnetcore/blazor
- sql
- system/data/entity
- generics
- implements
- implicittostring
- index
- iterators
- methods
- parameters
- partial
- security/dataflow/flowsources
- statements
- strings
- tuples
- typeparameterconstraints
- unification
- query-tests
- API Abuse/DisposeNotCalledOnException
- Bad Practices/VirtualCallInConstructorOrDestructor
- Nullness
- Security Features
- CWE-020
- CWE-022
- TaintedPath
- ZipSlip
- CWE-078
- CWE-079
- StoredXSS
- XSSAsp
- XSS
- CWE-089
- CWE-090
- CWE-091/XMLInjection
- CWE-094
- CWE-099
- CWE-112
- CWE-114/AssemblyPathInjection
- CWE-117
- CWE-134
- CWE-201/ExposureInTransmittedData
- CWE-209
- CWE-321/HardcodedSymmetricEncryptionKey
- CWE-327/InsecureSQLConnection
- CWE-338
- CWE-502
- UnsafeDeserializationUntrustedInputNewtonsoftJson
- UnsafeDeserializationUntrustedInput
- CWE-601/UrlRedirect
- CWE-611
- CWE-643
- CWE-730
- ReDoSGlobalTimeout
- ReDoS
- RegexInjection
- CWE-798
- CWE-807
- CWE-838
- Telemetry/DatabaseQuality
- Useless Code
- RedundantToStringCall
- UnusedLabel
- resources/stubs
- Amazon.Lambda.APIGatewayEvents/2.7.1
- Amazon.Lambda.Core
- 2.2.0
- 2.5.0
- Antlr3.Runtime/3.5.1
- Dapper/2.1.35
- EntityFramework/6.5.1
- Iesi.Collections/4.0.4
- Microsoft.CSharp/4.7.0
- Microsoft.Extensions.Configuration.Abstractions/8.0.0
- Microsoft.Extensions.Configuration.Binder/8.0.0
- Microsoft.Extensions.Configuration/8.0.0
- Microsoft.Extensions.DependencyInjection.Abstractions/8.0.0
- Microsoft.Extensions.DependencyInjection
- 6.0.0
- 8.0.0
- Microsoft.Extensions.Diagnostics.Abstractions/8.0.0
- Microsoft.Extensions.Diagnostics/8.0.0
- Microsoft.Extensions.Http
- 6.0.0
- 8.0.0
- Microsoft.Extensions.Logging.Abstractions
- 6.0.0
- 8.0.0
- Microsoft.Extensions.Logging
- 6.0.0
- 8.0.0
- Microsoft.Extensions.Options.ConfigurationExtensions/8.0.0
- Microsoft.Extensions.Options/8.0.0
- Microsoft.Extensions.Primitives
- 6.0.0
- 8.0.0
- Microsoft.NETCore.Platforms
- 1.1.0
- 3.1.0
- Microsoft.NETCore.Targets/1.1.0
- Microsoft.Win32.Primitives/4.3.0
- Microsoft.Win32.Registry/4.7.0
- Microsoft.Win32.SystemEvents/9.0.1
- NETStandard.Library/1.6.1
- NHibernate/5.5.2
- Newtonsoft.Json/13.0.3
- Remotion.Linq.EagerFetching/2.2.0
- Remotion.Linq/2.2.0
- ServiceStack.Client
- 8.0.0
- 8.5.2
- ServiceStack.Common
- 8.0.0
- 8.5.2
- ServiceStack.Interfaces/8.5.2
- ServiceStack.OrmLite.SqlServer
- 8.0.0
- 8.5.2
- ServiceStack.OrmLite/8.5.2
- ServiceStack.Text/8.5.2
- ServiceStack
- 8.0.0
- 8.5.2
- Stub.System.Data.SQLite.Core.NetStandard/1.0.119
- System.AppContext/4.3.0
- System.Buffers/4.3.0
- System.CodeDom/6.0.0
- System.Collections.Concurrent/4.3.0
- System.Collections.NonGeneric/4.3.0
- System.Collections/4.3.0
- System.ComponentModel.Annotations/5.0.0
- System.ComponentModel.Primitives/4.3.0
- System.ComponentModel/4.3.0
- System.Configuration.ConfigurationManager
- 6.0.0
- 8.0.0
- 9.0.1
- System.Console/4.3.0
- System.Data.OleDb
- 8.0.0
- 9.0.1
- System.Data.SQLite.Core/1.0.119
- System.Data.SQLite.EF6/1.0.119
- System.Data.SQLite/1.0.119
- System.Data.SqlClient
- 4.8.5
- 4.9.0
- System.Diagnostics.Debug/4.3.0
- System.Diagnostics.DiagnosticSource
- 6.0.0
- 8.0.0
- System.Diagnostics.EventLog/9.0.1
- System.Diagnostics.PerformanceCounter/9.0.1
- System.Diagnostics.Tools/4.3.0
- System.Diagnostics.Tracing/4.3.0
- System.Drawing.Common/9.0.1
- System.Dynamic.Runtime/4.3.0
- System.Globalization.Calendars/4.3.0
- System.Globalization.Extensions/4.3.0
- System.Globalization/4.3.0
- System.IO.Compression.ZipFile/4.3.0
- System.IO.Compression/4.3.0
- System.IO.FileSystem.Primitives/4.3.0
- System.IO.FileSystem/4.3.0
- System.IO/4.3.0
- System.Linq.Expressions/4.3.0
- System.Linq.Queryable/4.0.1
- System.Linq/4.3.0
- System.Memory/4.6.0
- System.Net.Http/4.3.0
- System.Net.Primitives/4.3.0
- System.Net.Sockets/4.3.0
- System.ObjectModel/4.3.0
- System.Reflection.Emit.ILGeneration/4.3.0
- System.Reflection.Emit.Lightweight/4.7.0
- System.Reflection.Emit/4.7.0
- System.Reflection.Extensions/4.3.0
- System.Reflection.Primitives/4.3.0
- System.Reflection.TypeExtensions/4.7.0
- System.Reflection/4.3.0
- System.Resources.ResourceManager/4.3.0
- System.Runtime.CompilerServices.Unsafe/6.0.0
- System.Runtime.Extensions/4.3.0
- System.Runtime.Handles/4.3.0
- System.Runtime.InteropServices.RuntimeInformation/4.3.0
- System.Runtime.InteropServices/4.3.0
- System.Runtime.Numerics/4.3.0
- System.Runtime.Serialization.Formatters/4.3.0
- System.Runtime.Serialization.Primitives/4.3.0
- System.Runtime/4.3.0
- System.Security.AccessControl
- 4.7.0
- 6.0.0
- System.Security.Cryptography.Algorithms/4.3.0
- System.Security.Cryptography.Cng/4.3.0
- System.Security.Cryptography.Csp/4.3.0
- System.Security.Cryptography.Encoding/4.3.0
- System.Security.Cryptography.OpenSsl/4.3.0
- System.Security.Cryptography.Primitives/4.3.0
- System.Security.Cryptography.ProtectedData
- 6.0.0
- 8.0.0
- 9.0.1
- System.Security.Cryptography.X509Certificates/4.3.0
- System.Security.Permissions
- 6.0.0
- 9.0.1
- System.Security.Principal.Windows/4.7.0
- System.Text.Encoding.Extensions/4.3.0
- System.Text.Encoding/4.3.0
- System.Text.RegularExpressions/4.3.0
- System.Threading.Tasks.Extensions/4.3.0
- System.Threading.Tasks/4.3.0
- System.Threading.Timer/4.3.0
- System.Threading/4.3.0
- System.Windows.Extensions
- 6.0.0
- 9.0.1
- System.Xml.ReaderWriter/4.3.0
- System.Xml.XDocument/4.3.0
- System.Xml.XmlDocument/4.3.0
- _frameworks/Microsoft.AspNetCore.App
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
8,082 files changed
+430720
-158340
lines changedLines changed: 11 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
2 | 2 |
| |
3 | 3 |
| |
4 | 4 |
| |
| 5 | + | |
| 6 | + | |
| 7 | + | |
5 | 8 |
| |
6 | 9 |
| |
7 | 10 |
| |
| |||
23 | 26 |
| |
24 | 27 |
| |
25 | 28 |
| |
26 |
| - | |
| 29 | + | |
| 30 | + | |
| 31 | + | |
| 32 | + | |
| 33 | + | |
| 34 | + | |
| 35 | + | |
| 36 | + | |
27 | 37 |
| |
28 | 38 |
|
Lines changed: 0 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
8 | 8 |
| |
9 | 9 |
| |
10 | 10 |
| |
11 |
| - |
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 |
| - | |
| 1 | + |
Lines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
| 2 | + | |
2 | 3 |
| |
3 | 4 |
| |
4 | 5 |
| |
|
Lines changed: 0 additions & 9 deletions
This file was deleted.
Lines changed: 0 additions & 25 deletions
This file was deleted.
Lines changed: 0 additions & 34 deletions
This file was deleted.
Lines changed: 0 additions & 20 deletions
This file was deleted.
Lines changed: 0 additions & 15 deletions
This file was deleted.
Lines changed: 2 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
86 | 86 |
| |
87 | 87 |
| |
88 | 88 |
| |
89 |
| - | |
| 89 | + | |
| 90 | + |
0 commit comments