Commit 97f11a1

authored

Merge branch 'main' into jb1/ab13144-migration

2 parents 786db34 + aa81060 commit 97f11a1Copy full SHA for 97f11a1

719 files changed

+18969

-11431

lines changed

.gitignore
Cargo.lock
MODULE.bazel
actions/ql
- lib
  - CHANGELOG.md
  - change-notes/released
    - 0.4.18.md
  - codeql-pack.release.yml
  - qlpack.yml
- src
  - CHANGELOG.md
  - change-notes/released
    - 0.6.10.md
  - codeql-pack.release.yml
  - qlpack.yml
cpp/ql
- lib
  - CHANGELOG.md
  - change-notes/released
    - 5.6.1.md
  - codeql-pack.release.yml
  - qlpack.yml
  - semmle/code/cpp/dataflow/internal
    - FlowSummaryImpl.qll
- src
  - CHANGELOG.md
  - change-notes/released
    - 1.5.1.md
  - codeql-pack.release.yml
  - qlpack.yml
- test/library-tests/permissive
csharp/ql
- campaigns/Solorigate
  - lib
    - CHANGELOG.md
    - change-notes/released
      - 1.7.49.md
    - codeql-pack.release.yml
    - qlpack.yml
  - src
    - CHANGELOG.md
    - change-notes/released
      - 1.7.49.md
    - codeql-pack.release.yml
    - qlpack.yml
- integration-tests/posix/query-suite
- lib
  - CHANGELOG.md
  - change-notes/released
    - 5.2.5.md
  - codeql-pack.release.yml
  - qlpack.yml
  - semmle/code/csharp
    - controlflow
      - Guards.qll
    - dataflow/internal
      - FlowSummaryImpl.qll
- src
  - API Abuse
  - ASP
    - SplitControlStructure.ql
  - Bad Practices
    - Comments
      - CommentedOutCode.ql
      - TodoComments.ql
    - Declarations
      - NoConstantsOnly.ql
    - ErroneousClassCompare.ql
    - Implementation Hiding
      - AbstractToConcreteCollection.ql
      - StaticArray.ql
    - Naming Conventions
    - UseOfSystemOutputStream.ql
    - VirtualCallInConstructorOrDestructor.ql
  - CHANGELOG.md
  - Concurrency
  - Documentation
  - Language Abuse
  - Likely Bugs
    - Dynamic
      - BadDynamicCall.ql
    - EqualsUsesAs.ql
    - EqualsUsesIs.ql
    - InconsistentCompareTo.ql
    - LeapYear
      - UnsafeYearConstruction.ql
    - MishandlingJapaneseEra.ql
    - ObjectComparison.ql
    - RecursiveOperatorEquals.ql
    - Statements
      - UseBraces.ql
  - Linq
    - BadMultipleIteration.ql
  - Useless code
    - PointlessForwardingMethod.ql
  - change-notes/released
    - 1.4.1.md
  - codeql-pack.release.yml
  - qlpack.yml
- test/query-tests/Nullness
docs/codeql
- codeql-overview/codeql-changelog
  - codeql-cli-2.23.1.rst
  - index.rst
- ql-language-reference
  - annotations.rst
  - ql-language-specification.rst
go
- extractor/util
  - registryproxy.go
  - registryproxy_test.go
- ql
  - consistency-queries
    - CHANGELOG.md
    - change-notes/released
      - 1.0.32.md
    - codeql-pack.release.yml
    - qlpack.yml
  - lib
    - CHANGELOG.md
    - change-notes/released
      - 4.3.5.md
    - codeql-pack.release.yml
    - qlpack.yml
    - semmle/go/dataflow/internal
      - FlowSummaryImpl.qll
  - src
    - CHANGELOG.md
    - InconsistentCode
      - MistypedExponentiation.ql
    - change-notes/released
      - 1.4.6.md
    - codeql-pack.release.yml
    - qlpack.yml
  - test/query-tests/InconsistentCode/MistypedExponentiation
    - main.go
javascript/ql
- integration-tests/query-suite
  - javascript-code-quality-extended.qls.expected
  - not_included_in_qls.expected
- lib
  - CHANGELOG.md
  - change-notes/released
    - 2.6.12.md
  - codeql-pack.release.yml
  - ext
    - aws-sdk.model.yml
    - graph-ql.model.yml
  - qlpack.yml
  - semmle/javascript
    - dataflow/internal
      - FlowSummaryPrivate.qll
    - frameworks
      - Express.qll
- src
  - CHANGELOG.md
  - Comments
    - CommentedOutCode.ql
    - TodoComments.ql
  - DOM
    - Alert.ql
  - Declarations
    - RedeclaredVariable.ql
    - UnusedParameter.ql
  - LanguageFeatures
  - Performance
    - ReassignParameterAndUseArguments.ql
  - RegExp
    - BackspaceEscape.ql
  - Statements
    - ImplicitReturn.ql
    - InconsistentReturn.ql
  - change-notes/released
    - 2.1.0.md
    - 2.1.1.md
  - codeql-pack.release.yml
  - qlpack.yml
- test
  - library-tests/frameworks/Express
    - src
      - json.js
    - tests.expected
  - query-tests/Security
    - CWE-079/DomBasedXss
    - CWE-089/untyped
    - CWE-094/CodeInjection
java/ql
- integration-tests/java/query-suite
  - java-code-quality-extended.qls.expected
  - not_included_in_qls.expected
- lib
  - CHANGELOG.md
  - change-notes/released
    - 7.7.1.md
  - codeql-pack.release.yml
  - qlpack.yml
  - semmle/code
    - java
      - Overlay.qll
      - dataflow/internal
        DataFlowUtil.qll
        FlowSummaryImpl.qll
      - regex
        RegexFlowConfigs.qll
    - xml
      - XML.qll
- src
  - Advisory
  - CHANGELOG.md
  - DeadCode
  - Language Abuse
    - OverridePackagePrivate.ql
    - TypeVarExtendsFinalType.ql
  - Likely Bugs
    - Arithmetic
    - Cloning
      - MissingCallToSuperClone.ql
      - MissingMethodClone.ql
    - Collections
      - IteratorRemoveMayFail.ql
    - Comparison
    - Concurrency
    - Finalization
      - NullifiedSuperFinalize.ql
    - Frameworks
      - JUnit
        BadSuiteMethod.ql
      - Swing
        BadlyOverriddenAdapter.ql
    - Likely Typos
    - Reflection
      - AnnotationPresentCheck.ql
    - Serialization
    - Statements
      - MissingEnumInSwitch.ql
    - Termination
      - SpinOnField.ql
  - Violations of Best Practice
    - Dead Code
      - CreatesEmptyZip.ql
    - Implementation Hiding
      - GetClassGetResource.ql
    - Naming Conventions
      - FieldMasksSuperField.ql
    - Undesirable Calls
      - NextFromIterator.ql
  - change-notes/released
    - 1.8.1.md
  - codeql-pack.release.yml
  - qlpack.yml
misc
- bazel/3rdparty
  - py_deps
  - tree_sitter_extractors_deps
- suite-helpers
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
powershell/ql
- lib/semmle/code/powershell
  - controlflow
    - CfgNodes.qll
  - dataflow/internal
- test/query-tests/security/cwe-089
  - SqlInjection.expected
  - test.ps1
python
- extractor
  - semmle
    - util.py
  - tests/parser
    - types_new.expected
    - types_new.py
  - tsg-python
    - Cargo.lock
    - Cargo.toml
    - python.tsg
    - src
      - main.rs
    - tsp
      - Cargo.toml
- ql
  - integration-tests/query-suite
    - not_included_in_qls.expected
    - python-code-quality-extended.qls.expected
  - lib
    - CHANGELOG.md
    - change-notes/released
      - 4.0.16.md
    - codeql-pack.release.yml
    - qlpack.yml
    - semmle/python
      - dataflow/new/internal
        Attributes.qll
        DataFlowPrivate.qll
        FlowSummaryImpl.qll
      - frameworks
        builtins.model.yml
      - regexp
        RegexTreeView.qll
        internal
        ParseRegExp.qll
  - src
    - CHANGELOG.md
    - Classes
    - Exceptions
      - IncorrectExceptOrder.qhelp
      - IncorrectExceptOrder.ql
    - Expressions
      - NonPortableComparisonUsingIs.ql
    - Functions
    - Imports
      - FromImportOfMutableAttribute.ql
    - Resources
      - FileNotAlwaysClosed.ql
      - FileNotAlwaysClosedQuery.qll
    - Statements
    - Variables
    - change-notes/released
      - 1.6.6.md
    - codeql-pack.release.yml
    - meta/ClassHierarchy
      - process-builtin-exceptions.py
    - qlpack.yml
  - test
    - library-tests
      - dataflow/fieldflow
        test.py
        test_global.py
      - regex
        FirstLast.expected
    - query-tests
      - Exceptions/general
        CatchingBaseException.expected
        EmptyExcept.expected
        IllegalExceptionHandlerType.expected
        IncorrectExceptOrder.expected
        IncorrectExceptOrder.qlref
        NotImplementedIsNotAnException.expected
        exceptions_test.py
      - Expressions/Regex
        test.py
      - Functions
        general
        SignatureOverriddenMethod.expected
        overriding
        SignatureOverriddenMethod.expected
        SignatureOverriddenMethod.qlref
        WrongNameForArgumentInCall.expected
        test.py
      - Resources/FileNotAlwaysClosed
        FileNotAlwaysClosed.expected
        FileNotAlwaysClosed.qlref
        resources_test.py
        test.expected
        test.ql
      - Security/CWE-022-PathInjection
        DataflowQueryTest.expected
        DataflowQueryTest.ql
        PathInjection.expected
        PathInjection.qlref
        fastapi_path_injection.py
        flask_path_injection.py
        path_injection.py
        pathlib_use.py
        test.py
ruby
- extractor
  - Cargo.toml
- ql
  - lib
    - CHANGELOG.md
    - change-notes/released
      - 5.1.0.md
    - codeql-pack.release.yml
    - codeql/ruby
      - Frameworks.qll
      - dataflow/internal
        FlowSummaryImpl.qll
      - frameworks
        Grape.qll
    - qlpack.yml
  - src
    - CHANGELOG.md
    - change-notes/released
      - 1.4.6.md
    - codeql-pack.release.yml
    - qlpack.yml
  - test/library-tests
    - controlflow/graph
      - BasicBlocks.expected
    - frameworks/grape
      - CONSISTENCY
        VariablesConsistency.expected
      - Flow.expected
      - Flow.ql
      - Grape.expected
      - Grape.ql
      - app.rb
rust
- ast-generator
  - Cargo.toml
- extractor
  - Cargo.toml
  - macros
    - Cargo.toml
- ql
  - integration-tests/query-suite
  - lib
    - CHANGELOG.md
    - change-notes/released
      - 0.1.17.md
    - codeql-pack.release.yml
    - codeql/rust
      - controlflow
        CfgNodes.qll
        internal
        CfgNodes.qll
        ControlFlowGraphImpl.qll
      - dataflow
        Ssa.qll
        internal
        DataFlowImpl.qll
        FlowSummaryImpl.qll
        SsaImpl.qll
      - elements/internal
        CallImpl.qll
        CallableImpl.qll
        UnionImpl.qll
        VariableImpl.qll
      - frameworks
        async-rs.model.yml
        stdlib
        lang-core.model.yml
        warp.model.yml
      - internal
        CachedStages.qll
        PathResolution.qll
        Type.qll
        TypeInference.qll
        TypeMention.qll
      - security
        HardcodedCryptographicValueExtensions.qll
        UseOfHttpExtensions.qll
    - qlpack.yml
    - utils/test
      - InlineFlowTest.qll
      - PathResolutionInlineExpectationsTest.qll
  - src
    - CHANGELOG.md
    - change-notes/released
      - 0.1.17.md
    - codeql-pack.release.yml
    - qlpack.yml
    - queries
      - security/CWE-319
        UseOfHttp.qhelp
        UseOfHttp.ql
        UseOfHttpBad.rs
        UseOfHttpGood.rs
      - summary
        Stats.qll
      - unusedentities
        UnusedValue.ql
  - test
    - extractor-tests/macro-expansion/CONSISTENCY
      - TypeInferenceConsistency.expected
    - library-tests
      - dataflow
        local
        CONSISTENCY
        PathResolutionConsistency.expected
        DataFlowStep.expected
        inline-flow.expected
        main.rs
        models
        CONSISTENCY
        PathResolutionConsistency.expected
        main.rs
        models.expected
        models.ext.yml
        sources
        CONSISTENCY
        PathResolutionConsistency.expected
        Cargo.lock
        InlineFlow.expected
        InlineFlow.ql
        TaintSources.expected
        options.yml
        test.rs
        web_frameworks.rs
        strings
        inline-taint-flow.expected
        main.rs
      - path-resolution
        CONSISTENCY
        PathResolutionConsistency.expected
        main.rs
        my2
        mod.rs
        my3
        mod.rs
        path-resolution.expected
        proc_macro.rs
      - type-inference
        type-inference.expected
      - variables
        CONSISTENCY
        PathResolutionConsistency.expected
        Cfg.expected
        Ssa.expected
        main.rs
        variables.expected
    - query-tests
      - diagnostics
        Cargo.lock
      - security
        CWE-022
        TaintedPath.expected
        CWE-319
        Cargo.lock
        UseOfHttp.expected
        UseOfHttp.qlref
        main.rs
        options.yml
        CWE-327/CONSISTENCY
        PathResolutionConsistency.expected
        CWE-696
        BadCTorInitialization.expected
        CONSISTENCY
        PathResolutionConsistency.expected
        CWE-770/CONSISTENCY
        PathResolutionConsistency.expected
        CWE-798
        CONSISTENCY
        PathResolutionConsistency.expected
        Cargo.lock
        HardcodedCryptographicValue.expected
        CWE-918
        Cargo.lock
        RequestForgery.expected
        options.yml
        request_forgery_tests.rs
shared
- concepts
  - CHANGELOG.md
  - change-notes/released
    - 0.0.6.md
  - codeql-pack.release.yml
  - qlpack.yml
- controlflow
  - CHANGELOG.md
  - change-notes/released
    - 2.0.16.md
  - codeql-pack.release.yml
  - codeql/controlflow
  - qlpack.yml
- dataflow
  - CHANGELOG.md
  - change-notes/released
    - 2.0.16.md
  - codeql-pack.release.yml
  - codeql/dataflow/internal
    - FlowSummaryImpl.qll
  - qlpack.yml
- mad
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- quantum
  - CHANGELOG.md
  - change-notes/released
    - 0.0.10.md
  - codeql-pack.release.yml
  - qlpack.yml
- rangeanalysis
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- regex
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- ssa
  - CHANGELOG.md
  - change-notes/released
    - 2.0.8.md
  - codeql-pack.release.yml
  - qlpack.yml
- threat-models
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- tree-sitter-extractor
  - Cargo.toml
- tutorial
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- typeflow
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- typeinference
  - CHANGELOG.md
  - change-notes/released
    - 0.0.13.md
  - codeql-pack.release.yml
  - qlpack.yml
- typetracking
  - CHANGELOG.md
  - change-notes/released
    - 2.0.16.md
  - codeql-pack.release.yml
  - qlpack.yml
- typos
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- util
  - CHANGELOG.md
  - change-notes/released
    - 2.0.19.md
  - codeql-pack.release.yml
  - qlpack.yml
- xml
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
- yaml
  - CHANGELOG.md
  - change-notes/released
    - 1.0.32.md
  - codeql-pack.release.yml
  - qlpack.yml
swift/ql
- lib
  - CHANGELOG.md
  - change-notes/released
    - 5.0.8.md
  - codeql-pack.release.yml
  - codeql/swift/dataflow/internal
    - FlowSummaryImpl.qll
  - qlpack.yml
- src
  - CHANGELOG.md
  - change-notes/released
    - 1.2.6.md
  - codeql-pack.release.yml
  - qlpack.yml

719 files changed

+18969

-11431

lines changed

`‎.gitignore‎`

-Original file line number
+Diff line change
 # some upgrade/downgrade checks create these files
 **/upgrades/*/*.dbscheme.stats
 **/downgrades/*/*.dbscheme.stats
++
 +# Mergetool files
 +*.orig

Comments

(0)