Commit 6f8eec2
File tree
- .devcontainer/swift
- .github/workflows
- config
- cpp
- downgrades
- 25e365d1e8147df0f759b604f96eb4bffea48271
- 3d35dd6b50edfc540c14c6757e0c7b3c5b7b04dd
- 9629fc87dab7dbed0771bf5ce22bce4d7f943b52
- ql
- lib
- change-notes
- released
- ext
- allocation
- deallocation
- semmle/code/cpp
- controlflow
- dataflow
- internal
- exprs
- ir
- dataflow/internal
- implementation
- aliased_ssa
- internal
- internal
- raw
- gvn/internal
- internal
- unaliased_ssa
- gvn/internal
- internal
- models
- implementations
- interfaces
- security/flowafterfree
- upgrades
- 25e365d1e8147df0f759b604f96eb4bffea48271
- 3d35dd6b50edfc540c14c6757e0c7b3c5b7b04dd
- abfce5c170f93e281948f7689ece373464fdaf87
- src
- Critical
- Likely Bugs
- Format
- Memory Management
- Security/CWE
- CWE-014
- CWE-191
- CWE-311
- CWE-313
- CWE-367
- CWE-416
- CWE-570
- CWE-732
- change-notes
- released
- test
- header-variant-tests/iquote
- library-tests
- CPP-207
- allocators
- arguments
- array_sizes
- atomic
- attributes
- availability
- routine_attributes
- type_attributes
- var_attributes
- builtins/type_traits
- clang_builtin_macros
- clang_ms
- controlflow
- guards-ir
- guards
- dataflow
- calls-as-ssa-variables
- dataflow-edge-tests
- dataflow-tests
- external-models
- fields
- models-as-data
- smart-pointers-taint
- taint-tests
- declarationEntry
- declarationEntry
- more
- declaration
- declspec/guard
- depends_initializers
- functions/functions
- identifiers/qualified_names
- instantiations
- ir
- ir
- points_to
- ssa
- members
- getters
- templates
- noexcept
- copy_from_prototype
- noexcept
- scopes/scopes
- special_members/generated_copy
- specifiers2
- structs/compatible_c
- syntax-zoo
- templates
- CPP-203
- CPP-223
- friends
- incomplete_instantiations
- isfromtemplateinstantiation
- types/refersTo
- valuenumbering/GlobalValueNumbering
- variables/variables
- vector_types
- query-tests
- Critical
- MemoryFreed
- MissingCheckScanf
- SizeCheck
- Likely Bugs
- Format/WrongTypeFormatArguments
- Linux_mixed_byte_wprintf
- Linux_mixed_word_size
- Linux_signed_chars
- Linux_two_byte_wprintf
- Linux_unsigned_chars
- Microsoft_no_wchar
- Microsoft
- Memory Management/SuspiciousCallToStrncat
- Security/CWE
- CWE-191/UnsignedDifferenceExpressionComparedZero
- CWE-416/semmle/tests/IteratorToExpiredContainer
- CWE-457/semmle/tests
- CWE-497/semmle/tests
- CWE-570
- successor-tests/forstmt/rangebasedforstmt
- csharp
- autobuilder
- Semmle.Autobuild.CSharp.Tests
- Semmle.Autobuild.CSharp
- Semmle.Autobuild.Cpp.Tests
- Semmle.Autobuild.Cpp
- documentation/library-coverage
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Properties
- Semmle.Extraction.CSharp.DependencyStubGenerator
- Semmle.Extraction.CSharp.Driver
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp.StubGenerator
- Properties
- Semmle.Extraction.CSharp.Util
- Semmle.Extraction.CSharp
- Comments
- Entities
- Compilations
- Expressions
- Patterns
- PreprocessorDirectives
- Types
- Extractor
- Populators
- Semmle.Extraction.Tests
- Semmle.Extraction
- Entities
- Base
- Extractor
- Semmle.Util.Tests
- Semmle.Util
- Logging
- Testrunner
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- integration-tests
- all-platforms
- binlog
- a
- b
- source_generator
- Generated
- standalone_buildless_option
- standalone_winforms
- posix-only/standalone_dependencies_executing_runtime
- lib
- change-notes/released
- ext/generated
- semmle/code
- cil
- internal
- csharp
- controlflow/internal
- dataflow
- internal
- rangeanalysis
- dispatch
- internal
- security/xml
- src
- Concurrency
- Dead Code
- change-notes/released
- utils
- modelconverter
- modelgenerator
- internal
- test
- library-tests
- assignables
- csharp7
- dataflow
- defuse
- external-models
- library
- ssa
- exprorstmtparent
- query-tests/Security Features
- CWE-020
- CWE-022/TaintedPath
- CWE-079
- XSSAsp
- XSS
- CWE-090
- CWE-091/XMLInjection
- CWE-094
- CWE-099
- CWE-112
- CWE-114/AssemblyPathInjection
- CWE-117
- CWE-134
- CWE-209
- CWE-321/HardcodedSymmetricEncryptionKey
- CWE-601/UrlRedirect
- CWE-611
- CWE-643
- CWE-730
- ReDoSGlobalTimeout
- ReDoS
- RegexInjection
- CWE-807
- utils/modelgenerator/dataflow
- scripts
- docs
- codeql
- codeql-language-guides
- codeql-overview
- codeql-changelog
- ql-language-reference
- query-help
- reusables
- ql-libraries/dataflow
- go
- documentation/library-coverage
- extractor
- autobuilder
- cli/go-autobuilder
- dbscheme
- project
- toolchain
- trap
- util
- vendor
- golang.org/x
- mod
- internal/lazyregexp
- modfile
- module
- semver
- tools
- go
- gcexportdata
- internal/packagesdriver
- packages
- types/objectpath
- internal
- event
- core
- keys
- label
- tag
- gcimporter
- gocommand
- packagesinternal
- pkgbits
- tokeninternal
- typeparams
- typesinternal
- versions
- ql
- consistency-queries
- change-notes/released
- integration-tests/all-platforms/go/extract-vendor
- src
- vendor
- example.com/test
- lib
- change-notes/released
- ext
- semmle/go
- dataflow
- internal
- frameworks
- stdlib
- security
- src
- Security/CWE-640
- change-notes/released
- experimental
- CWE-090
- CWE-203
- CWE-287
- CWE-369
- CWE-74
- CWE-79
- CWE-807
- CWE-840
- CWE-918
- CWE-942
- frameworks
- test
- experimental
- CWE-090
- CWE-1004
- CWE-203
- CWE-287
- CWE-321-V2
- CWE-369
- CWE-522-DecompressionBombs
- CWE-74
- CWE-79
- CWE-918
- library-tests/semmle/go
- concepts/HTTP
- dataflow
- DefaultTaintSanitizer
- ExternalTaintFlow
- FlowSteps
- GlobalVariableSideEffects
- ThreatModels
- vendor
- github.com/nonexistent/sources
- frameworks
- BeegoOrm
- Beego
- Chi
- Echo
- Encoding
- Fasthttp
- Gin
- Gorestful
- Revel
- Twirp
- WebSocket
- XNetHtml
- query-tests/Security
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-312
- CWE-327
- CWE-338/InsecureRandomness
- CWE-347
- CWE-601
- BadRedirectCheck
- OpenUrlRedirect
- CWE-640
- CWE-643
- CWE-918
- javascript
- extractor
- lib/typescript
- src/com/semmle
- jcorn
- js/extractor
- test/com/semmle/js/extractor/test
- ql
- integration-tests
- all-platforms
- diagnostics
- internal-error
- syntax-error
- no-types
- lib
- change-notes/released
- semmle/javascript
- frameworks
- data/internal
- helmet
- security
- domains
- IntegrityCheckingRequired
- compromised
- untrusted
- src
- Security
- CWE-693
- examples
- CWE-830
- change-notes/released
- experimental/Security
- CWE-094-dataURL
- examples
- CWE-099
- examples
- CWE-347
- Examples
- CWE-942
- examples
- test
- experimental/Security
- CWE-094-dataURL
- CWE-099
- EnvValueAndKeyInjection
- EnvValueInjection
- CWE-347
- localsource
- remotesource
- CWE-942
- library-tests
- Arrays
- TypeScript/Types
- frameworks/Collections
- query-tests/Security
- CWE-693
- CWE-830
- tutorials/Validating RAML-based APIs
- java
- documentation/library-coverage
- kotlin-extractor
- defaults
- deps
- dev
- src/main
- java/com/semmle
- extractor/java
- util
- extraction
- process
- kotlin
- utils/versions/v_2_0_20-Beta2
- ql
- automodel/src
- change-notes/released
- integration-tests/all-platforms
- java
- buildless-erroneous
- buildless-gradle-timeout
- buildless-maven-timeout
- diagnostics
- dependency-error
- maven-http-repository
- maven-enforcer
- src
- main
- java/com/example
- resources
- test/java/com/example
- kotlin/diagnostics/kotlin-version-too-new
- lib
- change-notes
- released
- ext
- semmle/code
- java
- dataflow
- internal
- frameworks
- android
- regex
- security
- xml
- src
- Metrics/Summaries
- Security/CWE/CWE-319
- Telemetry
- change-notes
- released
- utils
- modeleditor
- modelgenerator
- internal
- test
- TestUtilities
- experimental/query-tests/security
- CWE-020
- CWE-073
- CWE-078
- CWE-089/src/main
- CWE-094
- CWE-1004
- CWE-200
- CWE-208/TimingAttackAgainstSignagure
- CWE-346
- CWE-348
- CWE-352
- CWE-400
- CWE-470
- CWE-598
- CWE-600
- CWE-601
- CWE-625
- CWE-652
- CWE-759
- library-tests
- dataflow
- local-additional-taint
- taintsources
- threat-models
- frameworks
- JaxWs
- jdk/java.net
- lastaflute
- pathcreation
- query-tests
- Metrics/GeneratedVsManualCoverage/ApacheCommonsIoTest
- security
- CWE-022/semmle/tests
- CWE-078
- CWE-089/semmle/examples
- CWE-090
- CWE-094
- CWE-113/semmle/tests
- CWE-129/semmle/tests
- CWE-134/semmle/tests
- CWE-190/semmle/tests
- CWE-200/semmle/tests/TempDirLocalInformationDisclosure
- CWE-295/AndroidMissingCertificatePinning
- Test1
- Test2
- Test3
- Test4
- CWE-297
- CWE-311/CWE-319
- CWE-327/semmle/tests
- CWE-601/semmle/tests
- CWE-681/semmle/tests
- CWE-807/semmle/tests
- stubs/lastaflute/org/lastaflute/web
- ruts/multipart
- utils/modelgenerator/dataflow
- p
- misc
- bazel
- internal
- registry/modules/rules_nodejs
- 6.2.0-codeql.1
- patches
- scripts/models-as-data
- suite-helpers
- change-notes/released
- python
- extractor
- semmle
- tsg-python
- ql
- lib
- change-notes/released
- modeling
- semmle/python
- dataflow/new/internal
- frameworks
- data/internal
- internal
- security/dataflow
- src
- Imports
- Security/CWE-798
- change-notes
- released
- experimental
- Security
- CWE-074
- paramiko
- remoteCommandExecution
- CWE-094
- semmle/python
- frameworks
- security
- utils/modeleditor
- test
- experimental
- meta
- query-tests/Security
- CWE-074-RemoteCommandExecution
- CWE-074-paramiko
- CWE-094
- CWE-614
- library-tests
- dataflow
- model-summaries
- qll-private-imports
- frameworks
- aiohttp
- django-v2-v3
- fabric
- fastapi
- flask
- jsonpickle
- pandas
- paramiko
- pexpect
- rest_framework
- testapp
- stdlib
- torch
- tornado
- modelling
- MyPackage
- NotPackage
- not-valid-package
- query-tests
- Imports/unused
- Security/CWE-918-ServerSideRequestForgery
- ruby
- downgrades/40a6b0a5e81115bd870b3a12a1fe954b06362bb7
- extractor
- ql
- lib
- change-notes/released
- codeql/ruby
- ast/internal
- dataflow
- internal
- experimental
- frameworks
- actiondispatch/internal
- data/internal
- security
- internal
- upgrades/63af05c01bdd6a38f280e41ac0453db52f46989c
- src
- change-notes
- released
- queries/security/cwe-327
- examples
- test
- library-tests
- dataflow
- global
- local
- frameworks
- action_dispatch
- app
- config
- controllers
- sinatra
- modules
- query-tests
- experimental/cwe-176
- security
- cwe-078/CommandInjection
- cwe-312
- app/controllers
- cwe-327
- swift
- ql
- lib
- change-notes
- released
- codeql/swift
- dataflow
- internal
- elements/expr
- frameworks/StandardLibrary
- security
- src
- change-notes/released
- queries/Security/CWE-311
- test
- library-tests
- dataflow
- dataflow
- taint
- core
- libraries
- elements/expr/builtinliteralexpr
- query-tests/Security/CWE-311
- third_party/resource-dir
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
6 | 16 | | |
7 | 17 | | |
8 | 18 | | |
9 | 19 | | |
10 | 20 | | |
11 | 21 | | |
12 | 22 | | |
13 | | - | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
14 | 26 | | |
15 | 27 | | |
16 | 28 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
| 3 | + | |
| 4 | + | |
3 | 5 | | |
4 | 6 | | |
5 | 7 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
| 10 | + | |
10 | 11 | | |
11 | 12 | | |
12 | 13 | | |
| |||
16 | 17 | | |
17 | 18 | | |
18 | 19 | | |
| 20 | + | |
19 | 21 | | |
20 | 22 | | |
21 | 23 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
16 | | - | |
17 | | - | |
| 16 | + | |
| 17 | + | |
18 | 18 | | |
19 | | - | |
20 | | - | |
21 | | - | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
22 | 22 | | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
26 | | - | |
| 26 | + | |
27 | 27 | | |
28 | 28 | | |
| 29 | + | |
29 | 30 | | |
30 | 31 | | |
31 | 32 | | |
| 33 | + | |
| 34 | + | |
| 35 | + | |
| 36 | + | |
| 37 | + | |
| 38 | + | |
| 39 | + | |
| 40 | + | |
| 41 | + | |
| 42 | + | |
| 43 | + | |
| 44 | + | |
| 45 | + | |
| 46 | + | |
| 47 | + | |
| 48 | + | |
| 49 | + | |
| 50 | + | |
| 51 | + | |
| 52 | + | |
| 53 | + | |
| 54 | + | |
32 | 55 | | |
33 | 56 | | |
34 | 57 | | |
| |||
62 | 85 | | |
63 | 86 | | |
64 | 87 | | |
| 88 | + | |
| 89 | + | |
| 90 | + | |
| 91 | + | |
65 | 92 | | |
66 | 93 | | |
67 | 94 | | |
| |||
85 | 112 | | |
86 | 113 | | |
87 | 114 | | |
| 115 | + | |
88 | 116 | | |
89 | 117 | | |
90 | 118 | | |
| |||
97 | 125 | | |
98 | 126 | | |
99 | 127 | | |
| 128 | + | |
100 | 129 | | |
101 | 130 | | |
102 | 131 | | |
| |||
109 | 138 | | |
110 | 139 | | |
111 | 140 | | |
| 141 | + | |
112 | 142 | | |
113 | 143 | | |
114 | 144 | | |
115 | 145 | | |
116 | 146 | | |
| 147 | + | |
| 148 | + | |
| 149 | + | |
| 150 | + | |
117 | 151 | | |
118 | 152 | | |
119 | 153 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
61 | 61 | | |
62 | 62 | | |
63 | 63 | | |
64 | | - | |
65 | | - | |
66 | | - | |
67 | | - | |
68 | 64 | | |
69 | 65 | | |
70 | 66 | | |
| |||
185 | 181 | | |
186 | 182 | | |
187 | 183 | | |
188 | | - | |
189 | | - | |
190 | | - | |
191 | | - | |
192 | | - | |
193 | 184 | | |
194 | 185 | | |
195 | 186 | | |
| |||
0 commit comments