diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index c5829269bf4b..465cd145d436 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 0.4.5 + +No user-facing changes. + +## 0.4.4 + +No user-facing changes. + ## 0.4.3 ### New Features diff --git a/actions/ql/lib/change-notes/released/0.4.4.md b/actions/ql/lib/change-notes/released/0.4.4.md new file mode 100644 index 000000000000..33e1c91255d3 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.4.4.md @@ -0,0 +1,3 @@ +## 0.4.4 + +No user-facing changes. diff --git a/actions/ql/lib/change-notes/released/0.4.5.md b/actions/ql/lib/change-notes/released/0.4.5.md new file mode 100644 index 000000000000..7ba9b2e8ade1 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.4.5.md @@ -0,0 +1,3 @@ +## 0.4.5 + +No user-facing changes. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index 1ec9c4ea5d96..466cd01cf4e7 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.4.3 +lastReleaseVersion: 0.4.5 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index 2a5ca8a5fff4..76ef8181803e 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.4.4-dev +version: 0.4.6-dev library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index 58690da3f48a..bd465cd8a20d 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,16 @@ +## 0.5.2 + +No user-facing changes. + +## 0.5.1 + +### Bug Fixes + +* The `actions/unversioned-immutable-action` query will no longer report any alerts, since the + Immutable Actions feature is not yet available for customer use. The query remains in the + default Code Scanning suites for use internal to GitHub. Once the Immutable Actions feature is + available, the query will be updated to report alerts again. + ## 0.5.0 ### Breaking Changes diff --git a/actions/ql/src/change-notes/2025-02-27-immutable-actions-list.md b/actions/ql/src/change-notes/released/0.5.1.md similarity index 94% rename from actions/ql/src/change-notes/2025-02-27-immutable-actions-list.md rename to actions/ql/src/change-notes/released/0.5.1.md index 313fd44357b9..e81582aa586c 100644 --- a/actions/ql/src/change-notes/2025-02-27-immutable-actions-list.md +++ b/actions/ql/src/change-notes/released/0.5.1.md @@ -1,6 +1,7 @@ ---- -category: fix ---- +## 0.5.1 + +### Bug Fixes + * The `actions/unversioned-immutable-action` query will no longer report any alerts, since the Immutable Actions feature is not yet available for customer use. The query has also been moved to the experimental folder and will not be used in code scanning unless it is explicitly added diff --git a/actions/ql/src/change-notes/released/0.5.2.md b/actions/ql/src/change-notes/released/0.5.2.md new file mode 100644 index 000000000000..e94d1f4ad5b6 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.5.2.md @@ -0,0 +1,3 @@ +## 0.5.2 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index 30e271c5361c..2d9d3f587f82 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.5.2 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 5b4a830deb1f..8ec60febbcf4 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.5.1-dev +version: 0.5.3-dev library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index ad8002921958..234a154fe456 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 4.0.3 + +No user-facing changes. + +## 4.0.2 + +### Minor Analysis Improvements + +* Modified the `getBufferSize` predicate in `commons/Buffer.qll` to be more tolerant in some cases involving member variables in a larger struct or class. +* Fixed an issue where the `getBufferSize` predicate in `commons/Buffer.qll` was returning results for references inside `offsetof` expressions, which are not accesses to a buffer. + ## 4.0.1 No user-facing changes. diff --git a/cpp/ql/lib/change-notes/2025-02-20-getbuffersize.md b/cpp/ql/lib/change-notes/2025-02-20-getbuffersize.md deleted file mode 100644 index 07646d96ddd8..000000000000 --- a/cpp/ql/lib/change-notes/2025-02-20-getbuffersize.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Fixed an issue where the `getBufferSize` predicate in `commons/Buffer.qll` was returning results for references inside `offsetof` expressions, which are not accesses to a buffer. diff --git a/cpp/ql/lib/change-notes/2025-02-25-getbuffersize.md b/cpp/ql/lib/change-notes/2025-02-25-getbuffersize.md deleted file mode 100644 index cbc7e86d8d27..000000000000 --- a/cpp/ql/lib/change-notes/2025-02-25-getbuffersize.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Modified the `getBufferSize` predicate in `commons/Buffer.qll` to be more tolerant in some cases involving member variables in a larger struct or class. diff --git a/cpp/ql/lib/change-notes/released/4.0.2.md b/cpp/ql/lib/change-notes/released/4.0.2.md new file mode 100644 index 000000000000..6b6426c44b0f --- /dev/null +++ b/cpp/ql/lib/change-notes/released/4.0.2.md @@ -0,0 +1,6 @@ +## 4.0.2 + +### Minor Analysis Improvements + +* Modified the `getBufferSize` predicate in `commons/Buffer.qll` to be more tolerant in some cases involving member variables in a larger struct or class. +* Fixed an issue where the `getBufferSize` predicate in `commons/Buffer.qll` was returning results for references inside `offsetof` expressions, which are not accesses to a buffer. diff --git a/cpp/ql/lib/change-notes/released/4.0.3.md b/cpp/ql/lib/change-notes/released/4.0.3.md new file mode 100644 index 000000000000..fbc675d67f23 --- /dev/null +++ b/cpp/ql/lib/change-notes/released/4.0.3.md @@ -0,0 +1,3 @@ +## 4.0.3 + +No user-facing changes. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index c0db4dcc0b33..f6bbc961bb14 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.0.1 +lastReleaseVersion: 4.0.3 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index 6d862ce68cfc..21923ae1536b 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 4.0.2-dev +version: 4.0.4-dev groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 21e9b2b61195..36df98d3941c 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,14 @@ +## 1.3.6 + +No user-facing changes. + +## 1.3.5 + +### Minor Analysis Improvements + +* Due to changes in libraries the query "Static array access may cause overflow" (`cpp/static-buffer-overflow`) will no longer report cases where multiple fields of a struct or class are written with a single `memset` or similar operation. +* The query "Call to memory access function may overflow buffer" (`cpp/overflow-buffer`) has been added to the security-extended query suite. The query detects a range of buffer overflow and underflow issues. + ## 1.3.4 No user-facing changes. diff --git a/cpp/ql/src/change-notes/2025-02-20-overflow-buffer.md b/cpp/ql/src/change-notes/2025-02-20-overflow-buffer.md deleted file mode 100644 index 11e9b1ac48b6..000000000000 --- a/cpp/ql/src/change-notes/2025-02-20-overflow-buffer.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The query "Call to memory access function may overflow buffer" (`cpp/overflow-buffer`) has been added to the security-extended query suite. The query detects a range of buffer overflow and underflow issues. diff --git a/cpp/ql/src/change-notes/2025-02-27-static-buffer-overflow.md b/cpp/ql/src/change-notes/2025-02-27-static-buffer-overflow.md deleted file mode 100644 index 91e893c5ee96..000000000000 --- a/cpp/ql/src/change-notes/2025-02-27-static-buffer-overflow.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Due to changes in libraries the query "Static array access may cause overflow" (`cpp/static-buffer-overflow`) will no longer report cases where multiple fields of a struct or class are written with a single `memset` or similar operation. diff --git a/cpp/ql/src/change-notes/released/1.3.5.md b/cpp/ql/src/change-notes/released/1.3.5.md new file mode 100644 index 000000000000..e1d739d833cc --- /dev/null +++ b/cpp/ql/src/change-notes/released/1.3.5.md @@ -0,0 +1,6 @@ +## 1.3.5 + +### Minor Analysis Improvements + +* Due to changes in libraries the query "Static array access may cause overflow" (`cpp/static-buffer-overflow`) will no longer report cases where multiple fields of a struct or class are written with a single `memset` or similar operation. +* The query "Call to memory access function may overflow buffer" (`cpp/overflow-buffer`) has been added to the security-extended query suite. The query detects a range of buffer overflow and underflow issues. diff --git a/cpp/ql/src/change-notes/released/1.3.6.md b/cpp/ql/src/change-notes/released/1.3.6.md new file mode 100644 index 000000000000..ce7baecf2109 --- /dev/null +++ b/cpp/ql/src/change-notes/released/1.3.6.md @@ -0,0 +1,3 @@ +## 1.3.6 + +No user-facing changes. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 8263ddf2c8b8..0a0b09863112 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.4 +lastReleaseVersion: 1.3.6 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index bcd94838675e..fa04e55439bb 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.3.5-dev +version: 1.3.7-dev groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index 938e64917e44..49b1297498cd 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 1.7.36 + +No user-facing changes. + +## 1.7.35 + +No user-facing changes. + ## 1.7.34 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.35.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.35.md new file mode 100644 index 000000000000..e19c5d919165 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.35.md @@ -0,0 +1,3 @@ +## 1.7.35 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.36.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.36.md new file mode 100644 index 000000000000..33fcac13f3cf --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.36.md @@ -0,0 +1,3 @@ +## 1.7.36 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 8b738878b2f9..5d773ebdb702 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.34 +lastReleaseVersion: 1.7.36 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index fc9b5c3bdbee..7a4b5a1ef198 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.35-dev +version: 1.7.37-dev groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index 938e64917e44..49b1297498cd 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,11 @@ +## 1.7.36 + +No user-facing changes. + +## 1.7.35 + +No user-facing changes. + ## 1.7.34 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.35.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.35.md new file mode 100644 index 000000000000..e19c5d919165 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.35.md @@ -0,0 +1,3 @@ +## 1.7.35 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.36.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.36.md new file mode 100644 index 000000000000..33fcac13f3cf --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.36.md @@ -0,0 +1,3 @@ +## 1.7.36 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 8b738878b2f9..5d773ebdb702 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.34 +lastReleaseVersion: 1.7.36 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 37b99a5d69d5..b0d8cb147970 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.35-dev +version: 1.7.37-dev groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 2b00693f0cdc..2ca6fea2b086 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 5.1.2 + +No user-facing changes. + +## 5.1.1 + +No user-facing changes. + ## 5.1.0 ### Deprecated APIs diff --git a/csharp/ql/lib/change-notes/released/5.1.1.md b/csharp/ql/lib/change-notes/released/5.1.1.md new file mode 100644 index 000000000000..28b0060cedc5 --- /dev/null +++ b/csharp/ql/lib/change-notes/released/5.1.1.md @@ -0,0 +1,3 @@ +## 5.1.1 + +No user-facing changes. diff --git a/csharp/ql/lib/change-notes/released/5.1.2.md b/csharp/ql/lib/change-notes/released/5.1.2.md new file mode 100644 index 000000000000..86e21502e26f --- /dev/null +++ b/csharp/ql/lib/change-notes/released/5.1.2.md @@ -0,0 +1,3 @@ +## 5.1.2 + +No user-facing changes. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index dd8d287d0103..d21c12fbe7fb 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.1.0 +lastReleaseVersion: 5.1.2 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index bfa839cde600..7df16ccea0b4 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 5.1.1-dev +version: 5.1.3-dev groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index 3818028925a3..09d65767a943 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,13 @@ +## 1.0.19 + +No user-facing changes. + +## 1.0.18 + +### Minor Analysis Improvements + +* C#: Improve precision of the query `cs/call-to-object-tostring` for value tuples. + ## 1.0.17 No user-facing changes. diff --git a/csharp/ql/src/change-notes/2025-02-24-object-tostring.md b/csharp/ql/src/change-notes/released/1.0.18.md similarity index 65% rename from csharp/ql/src/change-notes/2025-02-24-object-tostring.md rename to csharp/ql/src/change-notes/released/1.0.18.md index 9dff09fb07a3..2c9381270c77 100644 --- a/csharp/ql/src/change-notes/2025-02-24-object-tostring.md +++ b/csharp/ql/src/change-notes/released/1.0.18.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.0.18 + +### Minor Analysis Improvements + * C#: Improve precision of the query `cs/call-to-object-tostring` for value tuples. diff --git a/csharp/ql/src/change-notes/released/1.0.19.md b/csharp/ql/src/change-notes/released/1.0.19.md new file mode 100644 index 000000000000..299548ad37e8 --- /dev/null +++ b/csharp/ql/src/change-notes/released/1.0.19.md @@ -0,0 +1,3 @@ +## 1.0.19 + +No user-facing changes. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index a88f1245e146..e15e0d267b0a 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.17 +lastReleaseVersion: 1.0.19 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 846fa2dd51ad..607c7f084c2f 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.0.18-dev +version: 1.0.20-dev groups: - csharp - queries diff --git a/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.5.rst b/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.5.rst index 48d4ff27f0b1..855f25655ec6 100644 --- a/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.5.rst +++ b/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.5.rst @@ -109,6 +109,14 @@ Python * Fixed a bug in the extractor where a comment inside a subscript could sometimes cause the AST to be missing nodes. * Using the :code:`break` and :code:`continue` keywords outside of a loop, which is a syntax error but is accepted by our parser, would cause the control-flow construction to fail. This is now no longer the case. +Major Analysis Improvements +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Golang +"""""" + +* Go 1.24 is now supported. This includes the new language feature of generic type aliases. + Minor Analysis Improvements ~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.6.rst b/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.6.rst new file mode 100644 index 000000000000..d6b934449252 --- /dev/null +++ b/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.20.6.rst @@ -0,0 +1,120 @@ +.. _codeql-cli-2.20.6: + +========================== +CodeQL 2.20.6 (2025-03-06) +========================== + +.. contents:: Contents + :depth: 2 + :local: + :backlinks: none + +This is an overview of changes in the CodeQL CLI and relevant CodeQL query and library packs. For additional updates on changes to the CodeQL code scanning experience, check out the `code scanning section on the GitHub blog `__, `relevant GitHub Changelog updates `__, `changes in the CodeQL extension for Visual Studio Code `__, and the `CodeQL Action changelog `__. + +Security Coverage +----------------- + +CodeQL 2.20.6 runs a total of 450 security queries when configured with the Default suite (covering 168 CWE). The Extended suite enables an additional 137 queries (covering 35 more CWE). 1 security query has been added with this release. + +CodeQL CLI +---------- + +Miscellaneous +~~~~~~~~~~~~~ + +* The CodeQL XML extractor is now able to parse documents in a wider array of character sets. + +* The build of Eclipse Temurin OpenJDK that is used to run the CodeQL CLI has been updated to version 21.0.6. + +Query Packs +----------- + +Bug Fixes +~~~~~~~~~ + +GitHub Actions +"""""""""""""" + +* The :code:`actions/unversioned-immutable-action` query will no longer report any alerts, since the Immutable Actions feature is not yet available for customer use. The query remains in the default Code Scanning suites for use internal to GitHub. Once the Immutable Actions feature is available, the query will be updated to report alerts again. + +Major Analysis Improvements +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Java/Kotlin +""""""""""" + +* Fixed false positive alerts in the java query "Cross-site scripting" (:code:`java/xss`) when :code:`javax.servlet.http.HttpServletResponse` is used with a content type which is not exploitable. + +JavaScript/TypeScript +""""""""""""""""""""" + +* Improved precision of data flow through arrays, fixing some spurious flows that would sometimes cause the :code:`length` property of an array to be seen as tainted. +* Improved call resolution logic to better handle calls resolving "downwards", targeting a method declared in a subclass of the enclosing class. Data flow analysis has also improved to avoid spurious flow between unrelated classes in the class hierarchy. + +Minor Analysis Improvements +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +C/C++ +""""" + +* Due to changes in libraries the query "Static array access may cause overflow" (:code:`cpp/static-buffer-overflow`) will no longer report cases where multiple fields of a struct or class are written with a single :code:`memset` or similar operation. +* The query "Call to memory access function may overflow buffer" (:code:`cpp/overflow-buffer`) has been added to the security-extended query suite. The query detects a range of buffer overflow and underflow issues. + +C# +"" + +* C#: Improve precision of the query :code:`cs/call-to-object-tostring` for value tuples. + +Language Libraries +------------------ + +Major Analysis Improvements +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +JavaScript/TypeScript +""""""""""""""""""""" + +* Added support for the :code:`response` threat model kind, which can enabled with `advanced setup `__. When enabled, the response data coming back from an outgoing HTTP request is considered a source of taint. +* Added support for the :code:`useQuery` hook from :code:`@tanstack/react-query`. + +Minor Analysis Improvements +~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +C/C++ +""""" + +* Modified the :code:`getBufferSize` predicate in :code:`commons/Buffer.qll` to be more tolerant in some cases involving member variables in a larger struct or class. +* Fixed an issue where the :code:`getBufferSize` predicate in :code:`commons/Buffer.qll` was returning results for references inside :code:`offsetof` expressions, which are not accesses to a buffer. + +Golang +"""""" + +* The location info for the following classes has been changed slightly to match a location that is in the database: :code:`BasicBlock`, :code:`ControlFlow::EntryNode`, :code:`ControlFlow::ExitNode`, :code:`ControlFlow::ConditionGuardNode`, :code:`IR::ImplicitLiteralElementIndexInstruction`, :code:`IR::EvalImplicitTrueInstruction`, :code:`SsaImplicitDefinition`, :code:`SsaPhiNode`. +* Added :code:`database` source models for the :code:`github.com/rqlite/gorqlite` package. +* Added :code:`database` source models for database methods from the :code:`go.mongodb.org/mongo-driver/mongo` package. + +Java/Kotlin +""""""""""" + +* Added a path injection sanitizer for the :code:`child` argument of a :code:`java.io.File` constructor if that argument does not contain path traversal sequences. + +JavaScript/TypeScript +""""""""""""""""""""" + +* The :code:`response.download()` function in :code:`express` is now recognized as a sink for path traversal attacks. + +Deprecated APIs +~~~~~~~~~~~~~~~ + +Golang +"""""" + +* The member predicate :code:`hasLocationInfo` has been deprecated on the following classes: :code:`BasicBlock`, :code:`Callable`, :code:`Content`, :code:`ContentSet`, :code:`ControlFlow::Node`, :code:`DataFlowCallable`, :code:`DataFlow::Node`, :code:`Entity`, :code:`GVN`, :code:`HtmlTemplate::TemplateStmt`, :code:`IR:WriteTarget`, :code:`SourceSinkInterpretationInput::SourceOrSinkElement`, :code:`SourceSinkInterpretationInput::InterpretNode`, :code:`SsaVariable`, :code:`SsaDefinition`, :code:`SsaWithFields`, :code:`StringOps::ConcatenationElement`, :code:`Type`, and :code:`VariableWithFields`. Use :code:`getLocation()` instead. + +New Features +~~~~~~~~~~~~ + +Java/Kotlin +""""""""""" + +* The Java extractor and QL libraries now support Java 24. diff --git a/docs/codeql/codeql-overview/codeql-changelog/index.rst b/docs/codeql/codeql-overview/codeql-changelog/index.rst index aa51edced639..e53d669f3a31 100644 --- a/docs/codeql/codeql-overview/codeql-changelog/index.rst +++ b/docs/codeql/codeql-overview/codeql-changelog/index.rst @@ -11,6 +11,7 @@ A list of queries for each suite and language `is available here