File tree
930 files changed
+20392
-13225
lines changed- .github/workflows
- config
- cpp/ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow/internal
- dataflow/internal
- exprs
- ir
- dataflow/internal
- implementation
- aliased_ssa
- raw
- internal
- unaliased_ssa
- rangeanalysis/new
- internal/semantic
- analysis
- security
- InvalidPointerDereference
- src
- Likely Bugs/Likely Typos
- Security/CWE
- CWE-119
- CWE-193
- CWE-570
- change-notes
- released
- experimental/Security/CWE/CWE-078
- test
- experimental/query-tests/Security/CWE
- CWE-078
- CWE-193
- array-access
- pointer-deref
- library-tests
- allocators
- dataflow
- dataflow-tests
- fields
- taint-tests
- ir
- ir
- modulus-analysis
- range-analysis
- syntax-zoo
- query-tests
- Critical/MemoryFreed
- Likely Bugs/Likely Typos/CompareWhereAssignMeant
- Security/CWE
- CWE-022/semmle/tests
- CWE-078/semmle/ExecTainted
- CWE-089/SqlTainted
- CWE-119
- SAMATE
- semmle/tests
- CWE-129/semmle/ImproperArrayIndexValidation
- CWE-190/semmle/TaintedAllocationSize
- CWE-193
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-416/semmle/tests
- CWE-497/semmle/tests
- CWE-611
- csharp
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- downgrades/585d6402ff8ba3d15114a869d205bdf6d4e0aa3f
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp/Entities/Types
- Semmle.Extraction.Tests
- Semmle.Util
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- consistency-queries
- integration-tests/all-platforms/diag_recursive_generics
- lib
- change-notes
- released
- semmle/code
- cil
- csharp
- commons
- dataflow/internal
- dispatch
- upgrades/cd877b8cc2fb8327499f96fbefd01bb988b2ed63
- src
- Concurrency
- change-notes/released
- experimental/ir/implementation
- raw
- unaliased_ssa
- test
- TestUtilities
- internal
- library-tests/dataflow
- fields
- operators
- patterns
- tuples
- query-tests
- Dead Code
- NonAssignedFields
- Tests
- Documentation
- EmptyBlock
- Language Abuse
- CatchOfGenericException
- ChainedIs
- DubiousTypeTestOfThis
- ForeachCapture
- MissedReadonlyOpportunity
- MissedTernaryOpportunity
- NestedIf
- RethrowException
- SimplifyBoolExpr
- UselessIsBeforeAs
- UselessNullCoalescingExpression
- UselessUpcast
- Likely Bugs
- BadCheckOdd
- Collections
- ContainerLengthCmpOffByOne
- ContainerSizeCmpZero
- DangerousNonShortCircuitLogic
- Dynamic
- EqualsArray
- EqualsUsesAs
- EqualsUsesIs
- HashedButNoHash
- IncomparableEquals
- InconsistentCompareTo
- MishandlingJapaneseEra
- NestedLoopsSameVariable
- ObjectComparison
- RandomUsedOnce
- RecursiveEquals
- SelfAssignment
- StaticFieldWrittenByInstance
- StringBuilderCharInit
- UncheckedCastInEquals
- UnsafeYearConstruction
- MagicConstants
- Metrics
- Files/FLinesOfCommentedCode
- RefTypes/TNumberOfFields
- Summaries
- Nullness
- Performance
- StringBuilderInLoop
- StringConcatenationInLoop
- UseTryGetValue
- ReadOnlyContainer
- UseBraces
- Useless Code
- DefaultToString
- IntGetHashCode
- PointlessForwardingMethod
- RedundantToStringCall
- UnusedLabel
- WriteOnlyContainer
- docs/codeql
- images/codeql-for-visual-studio-code
- reusables
- go/ql
- lib
- change-notes
- released
- semmle/go/security
- src
- change-notes/released
- test
- TestUtilities
- internal
- experimental/frameworks
- CleverGo
- Fiber
- library-tests/semmle/go
- dataflow
- ArrayConversion
- ChannelField
- ExternalFlowVarArgs
- ExternalFlow
- GenericFunctionsAndTypes
- GuardingFunctions
- HiddenNodes
- ListOfConstantsSanitizerGuards
- PromotedFields
- PromotedMethods
- TypeAssertions
- VarArgsWithFunctionModels
- VarArgs
- frameworks
- EvanphxJsonPatch
- K8sIoApiCoreV1
- K8sIoApimachineryPkgRuntime
- Protobuf
- Spew
- Zap
- query-tests/Security
- CWE-079
- CWE-117
- javascript
- downgrades/c88c69174bd0dd4e95f1bcfbada68a2505e812c3
- extractor
- lib/typescript
- src/com/semmle
- jcorn
- js
- ast
- extractor
- ts/extractor
- ql
- lib
- change-notes
- released
- semmle/javascript
- upgrades/8accf0f930bcb8b42d69fd7ef7b4372604f551ed
- src
- Declarations
- Statements
- change-notes/released
- test/library-tests
- AST/ExplicitResource
- TypeScript
- BindingPattern
- Types
- java
- kotlin-extractor
- src/main/kotlin
- comments
- utils
- versions
- v_1_4_32
- v_1_5_20
- v_1_9_0-Beta
- v_1_9_255
- ql
- automodel
- src
- test
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- com/github/codeql/test
- java
- io
- nio/file
- integration-tests/all-platforms/kotlin
- extractor_information_kotlin1
- extractor_information_kotlin2
- lib
- change-notes
- released
- semmle/code/java/dataflow/internal
- src
- Telemetry
- change-notes/released
- test
- TestUtilities
- internal
- ext/TestModels
- kotlin/library-tests/dataflow/summaries
- library-tests
- dataflow
- callctx
- capture
- collections
- field-value
- fluent-methods
- stream-collect
- stream-read
- synth-global
- taint-format
- taint-gson
- taint-jackson
- frameworks
- JaxWs
- android
- asynctask
- content-provider-summaries
- content-provider
- external-storage
- flow-steps
- intent
- notification
- slice
- sources
- uri
- widget
- apache-ant
- apache-collections
- apache-commons-compress
- apache-commons-lang3
- apache-http
- gson
- guava/generated
- cache
- collect
- hudson
- jackson
- javax-json
- jdk
- java.io
- java.net
- java.nio.file
- json-java
- netty
- generated
- manual
- okhttp
- play
- rabbitmq
- ratpack
- retrofit
- spring
- beans
- cache
- context
- controller
- data
- http
- ui
- util
- validation
- webmultipart
- webutil
- stapler
- stream
- thymeleaf
- logging
- optional
- pathsanitizer
- paths
- qlengine
- regex
- scanner
- query-tests
- Telemetry
- AutomodelApplicationModeExtraction
- AutomodelFrameworkModeExtraction
- security
- CWE-117
- CWE-266
- CWE-441
- CWE-470
- CWE-489/webview-debugging
- CWE-501
- CWE-532
- CWE-611
- CWE-780
- CWE-927
- misc
- scripts
- suite-helpers
- change-notes/released
- python/ql
- lib
- change-notes
- released
- semmle/python
- dataflow/new/internal
- frameworks
- data/internal
- regexp/internal
- security/dataflow
- src
- Functions
- Security
- CWE-020-ExternalAPIs
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-090
- CWE-094
- CWE-117
- CWE-209
- CWE-285
- CWE-312
- CWE-327
- CWE-502
- CWE-601
- CWE-611
- CWE-643
- CWE-730
- CWE-776
- CWE-798
- CWE-918
- examples
- change-notes
- released
- experimental
- Security
- CWE-022bis
- CWE-022
- CWE-074
- paramiko
- CWE-079
- CWE-091
- CWE-113
- CWE-1236
- CWE-176
- CWE-208
- TimingAttackAgainstHash
- TimingAttackAgainstHeaderValue
- TimingAttackAgainstSensitiveInfo
- CWE-287-ConstantSecretKey
- CWE-327/Azure
- CWE-338
- CWE-340
- CWE-348
- CWE-522
- CWE-614
- semmle/python
- libraries
- security
- dataflow
- injection
- templates
- semmle/python/functions
- test
- experimental
- dataflow
- TestUtil
- model-summaries
- query-tests/Security
- CWE-022-TarSlip
- CWE-022-UnsafeUnpacking
- CWE-074-TemplateInjection
- CWE-074-paramiko
- CWE-074
- CWE-079
- CWE-091-XsltInjection
- CWE-091
- CWE-208/TimingAttackAgainstSensitiveInfo
- CWE-522-global-option
- CWE-522
- semmle/python/templates
- library-tests
- frameworks
- data
- flask
- stdlib
- regex
- query-tests
- Functions/ModificationOfParameterWithDefault
- Security
- CWE-022-PathInjection
- CWE-078-CommandInjection
- CWE-078-UnsafeShellCommandConstruction
- src
- CWE-079-ReflectedXss
- CWE-116-BadTagFilter
- CWE-209-StackTraceExposure
- CWE-285-PamAuthorization
- CWE-327-WeakSensitiveDataHashing
- CWE-730-ReDoS
- CWE-918-ServerSideRequestForgery
- ql
- buramu
- extractor
- ruby/ql
- consistency-queries
- lib
- change-notes
- released
- codeql/ruby
- controlflow
- internal
- dataflow/internal
- frameworks
- security
- src
- change-notes
- released
- experimental
- cwe-208
- examples
- ldap-improper-auth
- examples
- test
- TestUtilities
- internal
- library-tests
- dataflow
- array-flow
- call-sensitivity
- flow-summaries
- global
- hash-flow
- local
- params
- pathname-flow
- ssa-flow
- string-flow
- summaries
- frameworks
- action_controller
- action_mailer
- active_support
- arel
- json
- sinatra
- query-tests
- experimental/ImproperLdapAuth
- security/cwe-1333-exponential-redos
- swift
- extractor/translators
- ql
- consistency-queries
- lib
- change-notes
- released
- codeql/swift
- dataflow/internal
- regex
- security/regex
- src
- change-notes
- released
- diagnostics/internal
- queries/Security
- CWE-020
- CWE-328
- test
- extractor-tests/errors/CONSISTENCY
- query-tests/Security/CWE-020
- swift-autobuilder
- tests
- hello-autobuilder
- hello-autobuilder.xcodeproj
- project.xcworkspace
- hello-targets-with-tests-suffix
- Foo.xcodeproj
- project.xcworkspace
- hello-tests
- hello-tests.xcodeproj
- project.xcworkspace
- hello-workspace
- Hello.xcworkspace
- hello-workspace.xcodeproj
- project.xcworkspace
- tools
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
930 files changed
+20392
-13225
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
16 | | - | |
| 16 | + | |
17 | 17 | | |
18 | 18 | | |
19 | 19 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
18 | | - | |
| 18 | + | |
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
19 | | - | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
36 | | - | |
| 36 | + | |
37 | 37 | | |
38 | 38 | | |
39 | 39 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
16 | | - | |
| 16 | + | |
17 | 17 | | |
18 | 18 | | |
19 | 19 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
32 | | - | |
| 32 | + | |
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
| |||
52 | 52 | | |
53 | 53 | | |
54 | 54 | | |
55 | | - | |
| 55 | + | |
56 | 56 | | |
57 | 57 | | |
58 | 58 | | |
| |||
73 | 73 | | |
74 | 74 | | |
75 | 75 | | |
76 | | - | |
| 76 | + | |
77 | 77 | | |
78 | 78 | | |
79 | 79 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
22 | | - | |
| 22 | + | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
| |||
47 | 47 | | |
48 | 48 | | |
49 | 49 | | |
50 | | - | |
| 50 | + | |
51 | 51 | | |
52 | 52 | | |
53 | 53 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
34 | | - | |
| 34 | + | |
35 | 35 | | |
36 | 36 | | |
37 | 37 | | |
38 | | - | |
| 38 | + | |
39 | 39 | | |
40 | 40 | | |
41 | 41 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
23 | | - | |
| 23 | + | |
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
| 12 | + | |
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
16 | | - | |
| 16 | + | |
17 | 17 | | |
18 | 18 | | |
19 | 19 | | |
| |||
0 commit comments