File tree
1,732 files changed
+87723
-48523
lines changed- .github/workflows
- config
- cpp/ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow/internal
- dataflow
- internal
- tainttracking1
- new
- exprs
- ir
- dataflow
- internal
- tainttracking1
- implementation
- aliased_ssa
- raw
- internal
- reachability
- unaliased_ssa
- internal/reachability
- rangeanalysis/new
- internal/semantic
- analysis
- security
- InvalidPointerDereference
- src
- Likely Bugs
- Format
- Likely Typos
- Security/CWE
- CWE-089
- CWE-119
- CWE-120
- CWE-193
- CWE-570
- change-notes
- released
- experimental/Security/CWE/CWE-078
- test
- experimental/query-tests/Security/CWE
- CWE-078
- CWE-193
- array-access
- pointer-deref
- library-tests
- allocators
- dataflow
- dataflow-tests
- fields
- taint-tests
- ir
- ir
- modulus-analysis
- range-analysis
- syntax-zoo
- query-tests
- Critical/MemoryFreed
- Likely Bugs
- Format/NonConstantFormat
- Likely Typos/CompareWhereAssignMeant
- Security/CWE
- CWE-022/semmle/tests
- CWE-078/semmle/ExecTainted
- CWE-089/SqlTainted
- CWE-119
- SAMATE
- semmle/tests
- CWE-120/semmle/tests
- CWE-129/semmle/ImproperArrayIndexValidation
- CWE-190/semmle/TaintedAllocationSize
- CWE-193
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-416/semmle/tests
- CWE-497/semmle/tests
- CWE-611
- csharp
- .vscode
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- downgrades/585d6402ff8ba3d15114a869d205bdf6d4e0aa3f
- extractor
- Semmle.Extraction.CIL.Driver
- Semmle.Extraction.CIL
- Entities
- Base
- PDB
- Semmle.Extraction.CSharp.DependencyFetching
- Properties
- Semmle.Extraction.CSharp.Driver
- Semmle.Extraction.CSharp.Standalone
- Properties
- Semmle.Extraction.CSharp
- Comments
- Entities
- Compilations
- Expressions
- ObjectCreation
- Patterns
- PreprocessorDirectives
- Statements
- Types
- Extractor
- Populators
- Semmle.Extraction.Tests
- Semmle.Extraction
- Entities
- Base
- Semmle.Util.Tests
- Semmle.Util
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- consistency-queries
- integration-tests/all-platforms
- cshtml_standalone
- Views/Home
- cshtml
- diag_recursive_generics
- dotnet_run
- lib
- change-notes
- released
- semmle/code
- cil
- csharp
- commons
- dataflow
- internal
- tainttracking1
- dispatch
- upgrades/cd877b8cc2fb8327499f96fbefd01bb988b2ed63
- src
- Concurrency
- change-notes/released
- experimental/ir/implementation
- raw
- unaliased_ssa
- test
- TestUtilities
- internal
- library-tests
- csharp7
- dataflow
- fields
- library
- operators
- patterns
- tuples
- query-tests
- Dead Code
- NonAssignedFields
- Tests
- Documentation
- EmptyBlock
- Language Abuse
- CatchOfGenericException
- ChainedIs
- DubiousTypeTestOfThis
- ForeachCapture
- MissedReadonlyOpportunity
- MissedTernaryOpportunity
- NestedIf
- RethrowException
- SimplifyBoolExpr
- UselessIsBeforeAs
- UselessNullCoalescingExpression
- UselessUpcast
- Likely Bugs
- BadCheckOdd
- Collections
- ContainerLengthCmpOffByOne
- ContainerSizeCmpZero
- DangerousNonShortCircuitLogic
- Dynamic
- EqualsArray
- EqualsUsesAs
- EqualsUsesIs
- HashedButNoHash
- IncomparableEquals
- InconsistentCompareTo
- MishandlingJapaneseEra
- NestedLoopsSameVariable
- ObjectComparison
- RandomUsedOnce
- RecursiveEquals
- SelfAssignment
- StaticFieldWrittenByInstance
- StringBuilderCharInit
- UncheckedCastInEquals
- UnsafeYearConstruction
- MagicConstants
- Metrics
- Files/FLinesOfCommentedCode
- RefTypes/TNumberOfFields
- Summaries
- Nullness
- Performance
- StringBuilderInLoop
- StringConcatenationInLoop
- UseTryGetValue
- ReadOnlyContainer
- Telemetry/SupportedExternalApis
- UseBraces
- Useless Code
- DefaultToString
- IntGetHashCode
- PointlessForwardingMethod
- RedundantToStringCall
- UnusedLabel
- WriteOnlyContainer
- tools
- docs/codeql
- codeql-language-guides
- codeql-overview
- images/codeql-for-visual-studio-code
- reusables
- go
- extractor
- cli/go-autobuilder
- diagnostics
- ql
- lib
- change-notes
- released
- semmle/go
- dataflow
- internal
- tainttracking1
- frameworks
- security
- src
- change-notes/released
- test
- TestUtilities
- internal
- experimental/frameworks
- CleverGo
- Fiber
- library-tests/semmle/go
- Function
- dataflow
- ArrayConversion
- ChannelField
- DefaultTaintSanitizer
- ExternalFlowVarArgs
- ExternalFlow
- FlowSteps
- GenericFunctionsAndTypes
- GuardingFunctions
- HiddenNodes
- ListOfConstantsSanitizerGuards
- PromotedFields
- PromotedMethods
- TypeAssertions
- VarArgsWithFunctionModels
- VarArgs
- frameworks
- EvanphxJsonPatch
- K8sIoApiCoreV1
- K8sIoApimachineryPkgRuntime
- Protobuf
- Spew
- TaintSteps
- Zap
- query-tests/Security
- CWE-079
- CWE-117
- javascript
- downgrades/c88c69174bd0dd4e95f1bcfbada68a2505e812c3
- extractor
- lib/typescript
- src
- src/com/semmle
- jcorn
- js
- ast
- extractor
- ts/extractor
- ql
- lib
- change-notes
- released
- semmle/javascript
- upgrades/8accf0f930bcb8b42d69fd7ef7b4372604f551ed
- src
- Declarations
- Statements
- change-notes
- released
- test/library-tests
- AST/ExplicitResource
- Modules
- TypeScript
- BindingPattern
- RegressionTests/CyclicAlias
- Types
- java
- documentation/library-coverage
- kotlin-extractor
- src/main/kotlin
- comments
- utils
- versions
- v_1_4_32
- v_1_5_20
- v_1_9_0-Beta
- v_1_9_255
- ql
- automodel
- src
- test
- AutomodelApplicationModeExtraction
- hudson
- AutomodelFrameworkModeExtraction
- com/github/codeql/test
- java
- io
- nio/file
- integration-tests/all-platforms/kotlin
- diagnostics/kotlin-version-too-new
- extractor_information_kotlin1
- extractor_information_kotlin2
- lib
- change-notes
- released
- ext
- generated
- semmle/code/java
- dataflow
- internal
- tainttracking1
- frameworks
- mdht
- owasp
- regex
- security
- src
- Metrics/Summaries
- Security/CWE/CWE-501
- Telemetry
- change-notes
- released
- test
- TestUtilities
- internal
- ext
- TestModels
- TopJdkApis
- kotlin/library-tests/dataflow/summaries
- library-tests
- dataflow
- callback-dispatch
- callctx
- capture
- collections
- field-value
- fluent-methods
- stream-collect
- stream-read
- synth-global
- taint-format
- taint-gson
- taint-jackson
- frameworks
- JaxWs
- android
- asynctask
- content-provider-summaries
- content-provider
- external-storage
- flow-steps
- intent
- notification
- slice
- sources
- uri
- widget
- apache-ant
- apache-collections
- apache-commons-compress
- apache-commons-lang3
- apache-http
- gson
- guava/generated
- cache
- collect
- hudson
- jackson
- javax-json
- jdk
- java.io
- java.net
- java.nio.file
- json-java
- netty
- generated
- manual
- okhttp
- play
- rabbitmq
- ratpack
- retrofit
- spring
- beans
- cache
- context
- controller
- data
- http
- ui
- util
- validation
- webmultipart
- webutil
- stapler
- stream
- thymeleaf
- logging
- optional
- pathsanitizer
- paths
- qlengine
- regex
- scanner
- query-tests
- Telemetry
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- SupportedExternalApis
- UnsupportedExternalAPIs
- security
- CWE-022/semmle/tests
- mad
- CWE-117
- CWE-266
- CWE-441
- CWE-470
- CWE-489/webview-debugging
- CWE-501
- CWE-532
- CWE-611
- CWE-780
- CWE-918
- mad
- CWE-927
- stubs
- esapi-2.0.1/org/owasp/esapi
- errors
- jaxws-api-2.0/javax
- activation
- xml/bind/annotation/adapters
- mdht-1.2.0
- javax/xml/namespace
- org
- eclipse/emf
- common
- notify
- util
- ecore
- resource
- util
- xmi
- xml/type
- openhealthtools/mdht
- emf/runtime
- resource
- util
- uml
- cda
- util
- hl7
- datatypes
- rim
- vocab
- w3c/dom
- xml/sax
- misc
- scripts
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new
- internal
- tainttracking1
- frameworks
- data/internal
- regexp/internal
- security/dataflow
- src
- Functions
- Security
- CWE-020-ExternalAPIs
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-090
- CWE-094
- CWE-117
- CWE-209
- CWE-285
- CWE-312
- examples
- CWE-327
- CWE-502
- CWE-601
- CWE-611
- CWE-643
- CWE-730
- CWE-776
- CWE-798
- CWE-918
- examples
- change-notes
- released
- experimental
- Security
- CWE-022bis
- CWE-022
- CWE-074
- paramiko
- CWE-079
- CWE-091
- CWE-113
- CWE-1236
- CWE-176
- CWE-208
- TimingAttackAgainstHash
- TimingAttackAgainstHeaderValue
- TimingAttackAgainstSensitiveInfo
- CWE-287-ConstantSecretKey
- examples
- settings
- CWE-327/Azure
- CWE-338
- CWE-340
- CWE-348
- CWE-522
- CWE-614
- semmle/python
- libraries
- security
- dataflow
- injection
- templates
- semmle/python/functions
- test
- experimental
- dataflow
- TestUtil
- basic
- model-summaries
- path-graph
- summaries
- query-tests/Security
- CWE-022-TarSlip
- CWE-022-UnsafeUnpacking
- CWE-074-TemplateInjection
- CWE-074-paramiko
- CWE-074
- CWE-079
- CWE-091-XsltInjection
- CWE-091
- CWE-113
- CWE-1236
- CWE-176
- CWE-208
- TimingAttackAgainstHash
- TimingAttackAgainstSensitiveInfo
- CWE-287-ConstantSecretKey
- CWE-327-UnsafeUsageOfClientSideEncryptionVersion
- CWE-348
- CWE-522-global-option
- CWE-522
- CWE-614
- CWE-943
- semmle/python/templates
- library-tests/frameworks
- data
- django-orm
- flask
- modeling-example
- stdlib
- query-tests
- Functions/ModificationOfParameterWithDefault
- Security
- CWE-020-ExternalAPIs
- CWE-022-PathInjection
- CWE-022-TarSlip
- CWE-078-CommandInjection-py2
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- src
- CWE-079-ReflectedXss
- CWE-090-LdapInjection
- CWE-094-CodeInjection
- CWE-116-BadTagFilter
- CWE-117-LogInjection
- CWE-209-StackTraceExposure
- CWE-285-PamAuthorization
- CWE-312-CleartextLogging
- CWE-312-CleartextStorage-py3
- CWE-312-CleartextStorage
- CWE-327-WeakSensitiveDataHashing
- CWE-502-UnsafeDeserialization
- CWE-601-UrlRedirect
- CWE-611-Xxe
- CWE-643-XPathInjection
- CWE-730-PolynomialReDoS
- CWE-730-ReDoS
- CWE-730-RegexInjection
- CWE-776-XmlBomb
- CWE-918-ServerSideRequestForgery
- ql
- buramu
- extractor
- src
- ruby/ql
- consistency-queries
- lib
- change-notes
- released
- codeql/ruby
- controlflow
- internal
- dataflow/internal
- tainttracking1
- frameworks
- http_clients
- security
- typetracking
- src
- change-notes
- released
- experimental
- cwe-208
- examples
- ldap-improper-auth
- examples
- test
- TestUtilities
- internal
- library-tests
- dataflow
- array-flow
- call-sensitivity
- flow-summaries
- global
- hash-flow
- local
- params
- pathname-flow
- ssa-flow
- string-flow
- summaries
- type-tracker
- frameworks
- action_controller
- action_mailer
- active_support
- arel
- json
- sinatra
- query-tests
- experimental/ImproperLdapAuth
- security
- cwe-1333-exponential-redos
- cwe-295
- swift
- extractor
- invocation
- translators
- integration-tests/osx-only/autobuilder
- failure
- no-build-system
- no-swift-with-spm
- no-xcode-with-spm
- only-tests-with-spm
- ql
- consistency-queries
- lib
- change-notes
- released
- codeql/swift
- dataflow
- internal
- tainttracking1
- frameworks
- JavaScriptCore
- StandardLibrary
- regex
- security
- regex
- src
- change-notes
- released
- diagnostics/internal
- queries/Security
- CWE-020
- CWE-328
- test
- extractor-tests/errors/CONSISTENCY
- library-tests/dataflow
- dataflow
- taint/libraries
- query-tests/Security
- CWE-020
- CWE-094
- swift-autobuilder
- tests
- hello-autobuilder
- hello-autobuilder.xcodeproj
- project.xcworkspace
- hello-targets-with-tests-suffix
- Foo.xcodeproj
- project.xcworkspace
- hello-tests
- hello-tests.xcodeproj
- project.xcworkspace
- hello-workspace
- Hello.xcworkspace
- hello-workspace.xcodeproj
- project.xcworkspace
- tools
- xcode-autobuilder
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,732 files changed
+87723
-48523
lines changedLines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
15 | 15 |
| |
16 | 16 |
| |
17 | 17 |
| |
18 |
| - | |
| 18 | + | |
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
16 | 16 |
| |
17 | 17 |
| |
18 | 18 |
| |
19 |
| - | |
| 19 | + | |
20 | 20 |
| |
21 | 21 |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
33 | 33 |
| |
34 | 34 |
| |
35 | 35 |
| |
36 |
| - | |
| 36 | + | |
37 | 37 |
| |
38 | 38 |
| |
39 | 39 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
Lines changed: 3 additions & 3 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
29 | 29 |
| |
30 | 30 |
| |
31 | 31 |
| |
32 |
| - | |
| 32 | + | |
33 | 33 |
| |
34 | 34 |
| |
35 | 35 |
| |
| |||
52 | 52 |
| |
53 | 53 |
| |
54 | 54 |
| |
55 |
| - | |
| 55 | + | |
56 | 56 |
| |
57 | 57 |
| |
58 | 58 |
| |
| |||
73 | 73 |
| |
74 | 74 |
| |
75 | 75 |
| |
76 |
| - | |
| 76 | + | |
77 | 77 |
| |
78 | 78 |
| |
79 | 79 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
22 |
| - | |
| 22 | + | |
23 | 23 |
| |
24 | 24 |
| |
25 | 25 |
| |
| |||
47 | 47 |
| |
48 | 48 |
| |
49 | 49 |
| |
50 |
| - | |
| 50 | + | |
51 | 51 |
| |
52 | 52 |
| |
53 | 53 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
31 | 31 |
| |
32 | 32 |
| |
33 | 33 |
| |
34 |
| - | |
| 34 | + | |
35 | 35 |
| |
36 | 36 |
| |
37 | 37 |
| |
38 |
| - | |
| 38 | + | |
39 | 39 |
| |
40 | 40 |
| |
41 | 41 |
| |
|
Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
20 | 20 |
| |
21 | 21 |
| |
22 | 22 |
| |
23 |
| - | |
| 23 | + | |
24 | 24 |
| |
25 | 25 |
| |
26 | 26 |
| |
|
Lines changed: 2 additions & 2 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
9 | 9 |
| |
10 | 10 |
| |
11 | 11 |
| |
12 |
| - | |
| 12 | + | |
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
16 |
| - | |
| 16 | + | |
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
|
0 commit comments