File tree
1,838 files changed
+138377
-102765
lines changed- .github
- workflows
- config
- cpp
- downgrades/dbe9c8eb5fc6f54b7ae08c7317d0795b24961564
- ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow
- internal
- dataflow/internal
- exprs
- ir
- dataflow/internal
- implementation
- aliased_ssa
- raw
- internal
- reachability
- unaliased_ssa
- internal/reachability
- rangeanalysis/new
- internal/semantic
- analysis
- security
- InvalidPointerDereference
- upgrades/d77c09d8bdc172c9201dec293de1e14c931d3f05
- src
- Critical
- Likely Bugs
- Format
- Leap Year
- Likely Typos
- Metrics/Internal
- Security/CWE
- CWE-089
- CWE-119
- CWE-190
- CWE-193
- CWE-311
- CWE-497
- CWE-570
- CWE-611
- change-notes
- released
- experimental/Security/CWE
- CWE-078
- CWE-416
- test
- examples/docs-examples/analyzing-data-flow-in-cpp
- experimental/query-tests/Security/CWE
- CWE-078
- CWE-190/AllocMultiplicationOverflow
- CWE-193
- array-access
- pointer-deref
- CWE-359/semmle/tests
- library-tests
- allocators
- builtins/type_traits
- dataflow
- DefaultTaintTracking/annotate_path_to_sink
- dataflow-tests
- fields
- taint-tests
- ir
- ir
- modulus-analysis
- range-analysis
- syntax-zoo
- query-tests
- Critical/MemoryFreed
- Likely Bugs
- Conversion/CastArrayPointerArithmetic
- Likely Typos/CompareWhereAssignMeant
- Memory Management/NtohlArrayNoBound
- Security/CWE
- CWE-022/semmle/tests
- CWE-078/semmle/ExecTainted
- CWE-079/semmle/CgiXss
- CWE-089/SqlTainted
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-119
- SAMATE
- semmle/tests
- CWE-120/semmle/tests
- CWE-129/semmle/ImproperArrayIndexValidation
- CWE-134
- SAMATE
- semmle
- argv
- funcs
- globalVars
- ifs
- CWE-190
- SAMATE
- semmle
- ArithmeticUncontrolled
- TaintedAllocationSize
- CWE-193
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-416/semmle/tests
- CWE-497
- SAMATE
- semmle/tests
- CWE-611
- csharp
- .vscode
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- downgrades/585d6402ff8ba3d15114a869d205bdf6d4e0aa3f
- extractor
- Semmle.Extraction.CIL.Driver
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp.DependencyStubGenerator
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp.StubGenerator
- Semmle.Extraction.CSharp.Util
- Semmle.Extraction.CSharp
- Entities
- Expressions
- ObjectCreation
- Statements
- Types
- Extractor
- Populators
- Semmle.Extraction.Tests
- Semmle.Extraction
- Semmle.Util.Tests
- Semmle.Util
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- consistency-queries
- integration-tests/all-platforms
- cshtml_standalone
- diag_recursive_generics
- dotnet_run
- standalone
- lib
- change-notes
- released
- semmle/code
- cil
- csharp
- commons
- dataflow/internal
- dispatch
- upgrades/cd877b8cc2fb8327499f96fbefd01bb988b2ed63
- src
- Concurrency
- Stubs
- Telemetry
- change-notes/released
- experimental/ir/implementation
- raw
- unaliased_ssa
- test
- TestUtilities
- internal
- library-tests
- csharp7
- dataflow
- fields
- global
- library
- operators
- patterns
- tuples
- frameworks
- JsonNET
- NHibernate
- query-tests
- Dead Code
- NonAssignedFields
- Tests
- Documentation
- EmptyBlock
- Language Abuse
- CatchOfGenericException
- ChainedIs
- DubiousTypeTestOfThis
- ForeachCapture
- MissedReadonlyOpportunity
- MissedTernaryOpportunity
- NestedIf
- RethrowException
- SimplifyBoolExpr
- UselessIsBeforeAs
- UselessNullCoalescingExpression
- UselessUpcast
- Likely Bugs
- BadCheckOdd
- Collections
- ContainerLengthCmpOffByOne
- ContainerSizeCmpZero
- DangerousNonShortCircuitLogic
- Dynamic
- EqualsArray
- EqualsUsesAs
- EqualsUsesIs
- HashedButNoHash
- IncomparableEquals
- InconsistentCompareTo
- MishandlingJapaneseEra
- NestedLoopsSameVariable
- ObjectComparison
- RandomUsedOnce
- RecursiveEquals
- SelfAssignment
- StaticFieldWrittenByInstance
- StringBuilderCharInit
- UncheckedCastInEquals
- UnsafeYearConstruction
- MagicConstants
- Metrics
- Files/FLinesOfCommentedCode
- RefTypes/TNumberOfFields
- Summaries
- Nullness
- Performance
- StringBuilderInLoop
- StringConcatenationInLoop
- UseTryGetValue
- ReadOnlyContainer
- Security Features/CWE-502/UnsafeDeserializationUntrustedInputNewtonsoftJson
- UseBraces
- Useless Code
- DefaultToString
- IntGetHashCode
- PointlessForwardingMethod
- RedundantToStringCall
- UnusedLabel
- WriteOnlyContainer
- resources/stubs
- Antlr3.Runtime/3.5.1
- Iesi.Collections/4.0.4
- NHibernate/5.4.6
- Newtonsoft.Json/13.0.3
- Remotion.Linq.EagerFetching/2.2.0
- Remotion.Linq/2.2.0
- System.Configuration.ConfigurationManager/6.0.0
- _frameworks
- Microsoft.AspNetCore.App
- Microsoft.NETCore.App
- tools
- docs
- codeql
- codeql-language-guides
- images/codeql-for-visual-studio-code
- ql-language-reference
- reusables
- go
- codeql-tools
- extractor
- diagnostics
- ql
- lib
- change-notes
- released
- semmle/go
- dataflow/internal
- security
- src
- Security/CWE-117
- change-notes/released
- test
- TestUtilities
- internal
- experimental/frameworks
- CleverGo
- Fiber
- library-tests/semmle/go
- dataflow
- ArrayConversion
- ChannelField
- ExternalFlowVarArgs
- ExternalFlow
- GenericFunctionsAndTypes
- GuardingFunctions
- HiddenNodes
- ListOfConstantsSanitizerGuards
- PromotedFields
- PromotedMethods
- TypeAssertions
- VarArgsWithFunctionModels
- VarArgs
- frameworks
- EvanphxJsonPatch
- K8sIoApiCoreV1
- K8sIoApimachineryPkgRuntime
- Protobuf
- Spew
- Zap
- query-tests/Security
- CWE-079
- CWE-089
- CWE-117
- javascript
- downgrades/c88c69174bd0dd4e95f1bcfbada68a2505e812c3
- extractor
- lib/typescript
- src/com/semmle
- jcorn
- js
- ast
- extractor
- ts/extractor
- ql
- lib
- change-notes
- released
- semmle/javascript
- upgrades/8accf0f930bcb8b42d69fd7ef7b4372604f551ed
- src
- Declarations
- Security
- CWE-116
- CWE-601
- examples
- Statements
- change-notes/released
- test
- library-tests
- AST/ExplicitResource
- TypeScript
- BindingPattern
- Types
- query-tests/Security/CWE-601/ServerSideUrlRedirect
- java
- documentation/library-coverage
- kotlin-extractor
- src/main/kotlin
- comments
- utils
- versions
- v_1_4_32
- v_1_5_20
- v_1_9_0-Beta
- v_1_9_20-Beta
- v_1_9_255-SNAPSHOT
- ql
- automodel
- src
- test
- AutomodelApplicationModeExtraction
- hudson
- AutomodelFrameworkModeExtraction
- com/github/codeql/test
- java
- io
- nio/file
- integration-tests/all-platforms
- java
- buildless-maven
- src
- main
- java/com/example
- resources
- test/java/com/example
- buildless-module-definition-not-in-module-info-file
- buildless-snapshot-repository
- repo/snapshots/com/github/my/snapshot/test/snapshottest/1.0-SNAPSHOT
- src/main/java
- buildless
- src
- main
- java/com/example
- resources
- test/java/com/example
- kotlin
- compiler_arguments
- diagnostics/kotlin-version-too-new
- extractor_information_kotlin1
- extractor_information_kotlin2
- gradle_groovy_app
- gradle_kotlinx_serialization
- kotlin_kfunction
- lib
- change-notes
- released
- ext
- generated
- semmle/code/java
- arithmetic
- dataflow
- internal
- frameworks
- regex
- security
- src
- Security/CWE/CWE-347
- Telemetry
- change-notes/released
- test
- TestUtilities
- internal
- ext/TestModels
- kotlin/library-tests
- annotation_classes
- arrays
- classes
- controlflow/basic
- dataflow/summaries
- enum
- exprs/CONSISTENCY
- extensions
- field-initializer-flow
- java-map-methods
- java_and_kotlin_internal
- java_and_kotlin
- private-anonymous-types
- properties
- special-method-getters
- stmts
- this
- variables
- library-tests
- dataflow
- callback-dispatch
- callctx
- capture
- collections
- field-value
- fluent-methods
- stream-collect
- stream-read
- synth-global
- taint-format
- taint-gson
- taint-jackson
- typeflow-dispatch
- errorexpr
- errortype-with-params
- errortype
- frameworks
- JaxWs
- android
- asynctask
- content-provider-summaries
- content-provider
- external-storage
- flow-steps
- intent
- notification
- slice
- sources
- uri
- widget
- apache-ant
- apache-collections
- apache-commons-compress
- apache-commons-lang3
- apache-http
- gson
- guava/generated
- cache
- collect
- hudson
- jackson
- javax-json
- jdk
- java.io
- java.net
- java.nio.file
- json-java
- netty
- generated
- manual
- okhttp
- play
- rabbitmq
- ratpack
- retrofit
- spring
- beans
- cache
- context
- controller
- data
- http
- ui
- util
- validation
- webmultipart
- webutil
- stapler
- stream
- thymeleaf
- logging
- module-info-wrong-name
- somepkg
- optional
- pathsanitizer
- paths
- qlengine
- regex
- scanner
- unknown-method-reference-lhs
- query-tests
- Telemetry
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- security
- CWE-022/semmle/tests
- mad
- CWE-117
- CWE-266
- CWE-441
- CWE-470
- CWE-489/webview-debugging
- CWE-501
- CWE-532
- CWE-611
- CWE-730
- CWE-780
- CWE-918
- mad
- CWE-927
- stubs
- apache-cxf/org/apache/cxf
- catalog
- common
- classloader
- jaxb
- logging
- configuration/jsse
- helpers
- resource
- staxutils
- tools
- corba/utils
- util
- jaxws-api-2.0/javax/xml/bind/annotation/adapters
- misc
- codegen/templates
- scripts
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new/internal
- frameworks
- data/internal
- regexp
- internal
- security/dataflow
- src
- Functions
- Security
- CWE-020-ExternalAPIs
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-090
- CWE-094
- CWE-117
- CWE-209
- CWE-285
- CWE-312
- examples
- CWE-327
- CWE-502
- CWE-601
- CWE-611
- CWE-643
- CWE-730
- CWE-776
- CWE-798
- CWE-918
- examples
- change-notes
- released
- experimental
- Security
- CWE-022bis
- CWE-022
- CWE-074
- paramiko
- CWE-079
- CWE-091
- CWE-113
- CWE-1236
- CWE-176
- CWE-208
- TimingAttackAgainstHash
- TimingAttackAgainstHeaderValue
- TimingAttackAgainstSensitiveInfo
- CWE-287-ConstantSecretKey
- CWE-327/Azure
- CWE-338
- CWE-340
- CWE-348
- CWE-522
- CWE-614
- semmle/python
- libraries
- security
- dataflow
- injection
- templates
- meta/debug
- semmle/python/functions
- test
- experimental
- dataflow
- TestUtil
- basic
- callgraph_crosstalk
- calls
- consistency
- coverage
- exceptions
- fieldflow
- global-flow
- match
- model-summaries
- pep_328
- regression
- strange-essaflow
- tainttracking
- basic
- commonSanitizer
- customSanitizer
- defaultAdditionalTaintStep-py3
- defaultAdditionalTaintStep
- generator-flow
- unwanted-global-flow
- typetracking
- variable-capture
- library-tests/CallGraph
- query-tests/Security
- CWE-022-TarSlip
- CWE-022-UnsafeUnpacking
- CWE-074-TemplateInjection
- CWE-074-paramiko
- CWE-074
- CWE-079
- CWE-091-XsltInjection
- CWE-091
- CWE-208/TimingAttackAgainstSensitiveInfo
- CWE-522-global-option
- CWE-522
- semmle/python/templates
- library-tests
- ApiGraphs/py3
- frameworks
- data
- django-orm
- flask
- stdlib
- regexparser
- query-tests
- Functions/ModificationOfParameterWithDefault
- Security
- CWE-020-IncompleteHostnameRegExp
- CWE-020-SuspiciousRegexpRange
- CWE-022-PathInjection
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- src
- CWE-079-ReflectedXss
- CWE-116-BadTagFilter
- CWE-209-StackTraceExposure
- CWE-285-PamAuthorization
- CWE-327-WeakSensitiveDataHashing
- CWE-601-UrlRedirect
- CWE-730-PolynomialReDoS
- CWE-730-ReDoS
- CWE-918-ServerSideRequestForgery
- ql
- buramu
- extractor
- ruby/ql
- consistency-queries
- lib
- change-notes
- released
- codeql/ruby
- ast
- controlflow
- internal
- dataflow
- internal
- experimental
- frameworks
- core
- data/internal
- http_clients
- stdlib
- security
- regexp
- typetracking
- src
- change-notes
- released
- experimental
- cwe-022-zipslip
- cwe-176
- cwe-208
- examples
- cwe-807
- decompression-api
- ldap-improper-auth
- examples
- ldap-injection
- manually-check-http-verb
- template-injection
- weak-params
- xpath-injection
- queries
- meta
- security
- cwe-020
- cwe-022
- cwe-078
- cwe-079
- cwe-089
- cwe-094
- cwe-116
- cwe-117
- cwe-1333
- cwe-209
- cwe-312
- cwe-502
- cwe-506
- cwe-598
- cwe-601
- cwe-611
- cwe-732
- cwe-798
- cwe-829
- cwe-918
- test
- TestUtilities
- internal
- library-tests
- dataflow
- array-flow
- call-sensitivity
- flow-summaries
- global
- hash-flow
- local
- params
- pathname-flow
- ssa-flow
- string-flow
- summaries
- type-tracker
- frameworks
- action_controller
- action_mailer
- active_record
- active_support
- arel
- json
- sinatra
- query-tests
- experimental
- ImproperLdapAuth
- TemplateInjection
- cwe-022-ZipSlip
- security
- cwe-022
- cwe-079
- cwe-089
- cwe-094/CodeInjection
- cwe-117
- cwe-1333-exponential-redos
- cwe-1333-regexp-injection
- cwe-134
- cwe-601
- cwe-798
- cwe-829
- swift
- downgrades/f5a22f5168adfd7f308b5941c11852c925edd638
- extractor
- infra
- invocation
- print_unextracted
- translators
- trap
- ql
- consistency-queries
- lib
- change-notes
- released
- codeql/swift
- controlflow/internal
- dataflow
- internal
- elements
- decl
- expr
- type
- frameworks
- JavaScriptCore
- StandardLibrary
- generated
- decl
- regex
- security
- regex
- upgrades/147e087e57e51b2eb41e75c9c97380d0e6c20ecb
- src
- change-notes
- released
- diagnostics/internal
- experimental/Security/CWE-078
- queries/Security
- CWE-020
- CWE-328
- test
- extractor-tests
- errors/CONSISTENCY
- generated
- decl
- AssociatedTypeDecl
- ClassDecl
- EnumDecl
- ModuleDecl
- OpaqueTypeDecl
- expr/MethodLookupExpr/CONSISTENCY
- library-tests
- dataflow
- dataflow
- taint
- core
- libraries
- elements
- expr/methodlookup/CONSISTENCY
- type/nominaltype
- query-tests/Security
- CWE-020
- CWE-022
- CWE-078
- CWE-079
- CWE-094
- CWE-311
- CWE-312
- swift-autobuilder
- tests
- hello-autobuilder
- hello-autobuilder.xcodeproj
- project.xcworkspace
- hello-targets-with-tests-suffix
- Foo.xcodeproj
- project.xcworkspace
- hello-tests
- hello-tests.xcodeproj
- project.xcworkspace
- hello-workspace
- Hello.xcworkspace
- hello-workspace.xcodeproj
- project.xcworkspace
- tools
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,838 files changed
+138377
-102765
lines changedLines changed: 1 addition & 5 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
45 | 45 |
| |
46 | 46 |
| |
47 | 47 |
| |
48 |
| - | |
49 |
| - | |
50 |
| - | |
51 |
| - | |
52 |
| - | |
| 48 | + | |
53 | 49 |
| |
54 | 50 |
| |
55 | 51 |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
15 | 15 |
| |
16 | 16 |
| |
17 | 17 |
| |
18 |
| - | |
| 18 | + | |
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
16 | 16 |
| |
17 | 17 |
| |
18 | 18 |
| |
19 |
| - | |
| 19 | + | |
20 | 20 |
| |
21 | 21 |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
33 | 33 |
| |
34 | 34 |
| |
35 | 35 |
| |
36 |
| - | |
| 36 | + | |
37 | 37 |
| |
38 | 38 |
| |
39 | 39 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
Lines changed: 3 additions & 3 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
29 | 29 |
| |
30 | 30 |
| |
31 | 31 |
| |
32 |
| - | |
| 32 | + | |
33 | 33 |
| |
34 | 34 |
| |
35 | 35 |
| |
| |||
52 | 52 |
| |
53 | 53 |
| |
54 | 54 |
| |
55 |
| - | |
| 55 | + | |
56 | 56 |
| |
57 | 57 |
| |
58 | 58 |
| |
| |||
73 | 73 |
| |
74 | 74 |
| |
75 | 75 |
| |
76 |
| - | |
| 76 | + | |
77 | 77 |
| |
78 | 78 |
| |
79 | 79 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
22 |
| - | |
| 22 | + | |
23 | 23 |
| |
24 | 24 |
| |
25 | 25 |
| |
| |||
47 | 47 |
| |
48 | 48 |
| |
49 | 49 |
| |
50 |
| - | |
| 50 | + | |
51 | 51 |
| |
52 | 52 |
| |
53 | 53 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
31 | 31 |
| |
32 | 32 |
| |
33 | 33 |
| |
34 |
| - | |
| 34 | + | |
35 | 35 |
| |
36 | 36 |
| |
37 | 37 |
| |
38 |
| - | |
| 38 | + | |
39 | 39 |
| |
40 | 40 |
| |
41 | 41 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
20 | 20 |
| |
21 | 21 |
| |
22 | 22 |
| |
23 |
| - | |
| 23 | + | |
24 | 24 |
| |
25 | 25 |
| |
26 | 26 |
| |
|
0 commit comments