Commit df64388
File tree
- .devcontainer/swift
- cpp
- downgrades
- 25e365d1e8147df0f759b604f96eb4bffea48271
- 3d35dd6b50edfc540c14c6757e0c7b3c5b7b04dd
- 9629fc87dab7dbed0771bf5ce22bce4d7f943b52
- ql
- lib
- change-notes
- released
- ext
- semmle/code/cpp
- controlflow
- dataflow
- internal
- exprs
- ir
- dataflow/internal
- implementation
- aliased_ssa
- internal
- internal
- raw
- internal
- unaliased_ssa
- internal
- models
- implementations
- upgrades
- 25e365d1e8147df0f759b604f96eb4bffea48271
- 3d35dd6b50edfc540c14c6757e0c7b3c5b7b04dd
- abfce5c170f93e281948f7689ece373464fdaf87
- src
- Critical
- Likely Bugs
- Format
- Memory Management
- Security/CWE
- CWE-014
- CWE-191
- CWE-311
- CWE-313
- CWE-367
- CWE-416
- CWE-570
- CWE-732
- change-notes
- released
- test
- library-tests
- allocators
- arguments
- array_sizes
- atomic
- attributes
- routine_attributes
- type_attributes
- var_attributes
- builtins/type_traits
- dataflow
- calls-as-ssa-variables
- dataflow-tests
- external-models
- models-as-data
- taint-tests
- declarationEntry
- declarationEntry
- more
- declaration
- depends_initializers
- exprs/unevaluated
- functions/functions
- identifiers/qualified_names
- instantiations
- ir
- ir
- points_to
- ssa
- members
- getters
- templates
- noexcept
- copy_from_prototype
- noexcept
- scopes/scopes
- special_members/generated_copy
- specifiers2
- syntax-zoo
- templates
- CPP-203
- friends
- incomplete_instantiations
- isfromtemplateinstantiation
- types/refersTo
- valuenumbering/GlobalValueNumbering
- query-tests
- Critical
- MemoryFreed
- MissingCheckScanf
- SizeCheck
- Likely Bugs
- Format/WrongTypeFormatArguments
- Linux_mixed_byte_wprintf
- Linux_mixed_word_size
- Linux_signed_chars
- Linux_two_byte_wprintf
- Linux_unsigned_chars
- Microsoft_no_wchar
- Microsoft
- Memory Management/SuspiciousCallToStrncat
- Security/CWE
- CWE-191/UnsignedDifferenceExpressionComparedZero
- CWE-416/semmle/tests/IteratorToExpiredContainer
- CWE-457/semmle/tests
- CWE-497/semmle/tests
- CWE-570
- successor-tests/forstmt/rangebasedforstmt
- csharp
- autobuilder
- Semmle.Autobuild.CSharp
- Semmle.Autobuild.Cpp
- extractor
- Semmle.Extraction.CSharp.DependencyFetching
- Semmle.Extraction.CSharp.Driver
- Semmle.Extraction.CSharp.Standalone
- Semmle.Extraction.CSharp.StubGenerator
- Semmle.Extraction.CSharp.Util
- Semmle.Extraction.CSharp
- Comments
- Entities
- Compilations
- Expressions
- Patterns
- Types
- Extractor
- Populators
- Semmle.Extraction.Tests
- Semmle.Extraction
- Entities
- Extractor
- Semmle.Util
- Logging
- Testrunner
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- integration-tests
- all-platforms
- binlog
- a
- b
- standalone_winforms
- posix-only/standalone_dependencies_executing_runtime
- lib
- change-notes/released
- semmle/code
- cil
- internal
- csharp
- controlflow/internal
- dataflow
- internal
- rangeanalysis
- dispatch
- internal
- security/xml
- src
- Concurrency
- Dead Code
- change-notes/released
- utils/modelgenerator
- internal
- test
- library-tests
- assignables
- csharp7
- dataflow
- async
- collections
- defuse
- global
- ssa
- threat-models
- exprorstmtparent
- utils/modelgenerator/dataflow
- docs
- codeql
- codeql-language-guides
- codeql-overview
- codeql-changelog
- query-help
- reusables
- ql-libraries/dataflow
- go
- documentation/library-coverage
- extractor
- dbscheme
- project
- toolchain
- trap
- util
- vendor
- golang.org/x
- mod
- internal/lazyregexp
- modfile
- module
- semver
- tools
- go
- gcexportdata
- internal/packagesdriver
- packages
- types/objectpath
- internal
- event
- core
- keys
- label
- tag
- gcimporter
- gocommand
- packagesinternal
- pkgbits
- tokeninternal
- typeparams
- typesinternal
- versions
- ql
- consistency-queries
- change-notes/released
- integration-tests/all-platforms/go/extract-vendor
- src
- vendor
- example.com/test
- lib
- change-notes
- released
- ext
- semmle/go
- dataflow
- internal
- frameworks
- stdlib
- security
- src
- change-notes/released
- experimental/frameworks
- test
- TestUtilities
- experimental
- CWE-090
- CWE-203
- CWE-287
- CWE-369
- CWE-522-DecompressionBombs
- CWE-74
- CWE-79
- CWE-918
- library-tests/semmle/go
- concepts/HTTP
- dataflow
- DefaultTaintSanitizer
- ExternalTaintFlow
- HiddenNodes
- ThreatModels
- frameworks
- BeegoOrm
- Beego
- Chi
- Echo
- Encoding
- Fasthttp
- Gin
- Gorestful
- Revel
- Twirp
- WebSocket
- XNetHtml
- query-tests/Security
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-312
- CWE-327
- CWE-338/InsecureRandomness
- CWE-347
- CWE-601
- BadRedirectCheck
- OpenUrlRedirect
- CWE-640
- CWE-643
- vendor/github.com/antchfx/xpath
- CWE-918
- javascript
- extractor
- lib/typescript
- src/com/semmle/js/extractor
- ql
- integration-tests
- all-platforms
- diagnostics
- internal-error
- syntax-error
- no-types
- lib
- change-notes/released
- semmle/javascript
- frameworks/helmet
- security
- domains
- IntegrityCheckingRequired
- compromised
- untrusted
- src
- Security
- CWE-693
- examples
- CWE-830
- change-notes/released
- experimental/Security/CWE-942
- examples
- test
- experimental/Security/CWE-942
- library-tests/TypeScript/Types
- query-tests/Security
- CWE-693
- CWE-830
- java
- documentation/library-coverage
- integration-tests-lib
- kotlin-extractor
- deps
- dev
- src/main
- java/com/semmle
- extractor/java
- util/process
- kotlin
- utils/versions/v_2_0_20-Beta2
- ql
- automodel/src
- change-notes/released
- integration-tests/all-platforms
- java
- buildless-erroneous
- buildless-gradle-timeout
- buildless-maven-timeout
- buildless-proxy-gradle
- gradle/wrapper
- src/main/java/com/fractestexample
- buildless-proxy-maven
- src
- main
- java/com/example
- resources
- test/java/com/example
- maven-enforcer
- src
- main
- java/com/example
- resources
- test/java/com/example
- kotlin/diagnostics/kotlin-version-too-new
- lib
- change-notes
- released
- ext
- semmle/code
- java
- dataflow
- internal
- frameworks
- android
- regex
- security
- xml
- src
- Metrics/Summaries
- Security/CWE
- CWE-209
- CWE-319
- Telemetry
- Violations of Best Practice/Dead Code
- change-notes
- released
- experimental
- Security/CWE/CWE-522-DecompressionBombs
- semmle/code/java/security
- utils/modelgenerator
- internal
- test
- TestUtilities
- experimental
- query-tests/security
- CWE-020
- CWE-073
- CWE-078
- CWE-089/src/main
- CWE-094
- CWE-1004
- CWE-200
- CWE-208
- NotConstantTimeCheckOnSignature
- TimingAttackAgainstSignagure
- CWE-299
- CWE-327
- CWE-346
- CWE-348
- CWE-352
- CWE-400
- CWE-470
- CWE-502
- CWE-522-DecompressionBombs
- CWE-598
- CWE-600
- CWE-601
- CWE-625
- CWE-652
- CWE-755
- CWE-759
- stubs
- apache-commons-compress-1.23.0/org
- apache/commons/compress
- archivers
- arj
- ar
- cpio
- jar
- zip
- compressors
- brotli
- bzip2
- deflate64
- deflate
- gzip
- lz4
- lz77support
- lzma
- lzw
- pack200
- snappy
- xz
- zstandard
- z
- utils
- xerial/snappy
- lingala-zip4j-2.11.5/net/lingala/zip4j
- headers
- io/inputstream
- model
- enums
- util
- zstd-jni-1.5.5/com/github/luben/zstd
- library-tests
- dataflow
- call-sensitivity
- local-additional-taint
- taintsources
- threat-models
- frameworks
- JaxWs
- jdk/java.net
- lastaflute
- query-tests
- DeadCode/DeadRefTypes
- Metrics/GeneratedVsManualCoverage/ApacheCommonsIoTest
- security
- CWE-022/semmle/tests
- CWE-078
- CWE-089/semmle/examples
- CWE-090
- CWE-094
- CWE-113/semmle/tests
- CWE-129/semmle/tests
- CWE-134/semmle/tests
- CWE-190/semmle/tests
- CWE-200/semmle/tests/TempDirLocalInformationDisclosure
- CWE-209/semmle/tests
- CWE-295/AndroidMissingCertificatePinning
- Test1
- Test2
- Test3
- Test4
- CWE-297
- CWE-311/CWE-319
- CWE-327/semmle/tests
- CWE-532
- CWE-601/semmle/tests
- CWE-681/semmle/tests
- CWE-807/semmle/tests
- stubs/lastaflute/org/lastaflute/web
- ruts/multipart
- utils/modelgenerator/dataflow
- p
- misc
- bazel
- internal
- scripts/models-as-data
- suite-helpers
- change-notes/released
- python
- extractor/semmle
- ql
- lib
- change-notes
- released
- modeling
- semmle/python
- dataflow/new/internal
- frameworks
- data/internal
- internal
- security/dataflow
- src
- Security
- CWE-020
- examples
- CWE-798
- change-notes
- released
- experimental
- Security
- CWE-094
- CWE-614
- semmle/python/security/injection
- utils/modeleditor
- test
- experimental
- meta
- query-tests/Security
- CWE-022-TarSlip
- CWE-094
- CWE-614
- library-tests
- dataflow
- model-summaries
- tainttracking/isinstance
- frameworks
- aiohttp
- data
- django-v2-v3
- fabric
- fastapi
- flask
- gradio
- rest_framework
- testapp
- stdlib
- streamlit
- tornado
- modelling
- MyPackage
- NotPackage
- not-valid-package
- query-tests/Security/CWE-020-CookieInjection
- ruby
- downgrades/40a6b0a5e81115bd870b3a12a1fe954b06362bb7
- extractor
- ql
- lib
- change-notes/released
- codeql/ruby
- ast/internal
- dataflow
- internal
- security
- upgrades/63af05c01bdd6a38f280e41ac0453db52f46989c
- src
- change-notes
- released
- queries/security/cwe-327
- examples
- test
- library-tests
- dataflow
- global
- local
- modules
- query-tests/security
- cwe-327
- cwe-506
- swift
- ql
- lib
- change-notes
- released
- codeql/swift
- dataflow
- internal
- frameworks/StandardLibrary
- security
- src
- change-notes/released
- test
- library-tests/dataflow/taint/libraries
- query-tests/Security/CWE-311
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
6 | 16 | | |
7 | 17 | | |
8 | 18 | | |
9 | 19 | | |
10 | 20 | | |
11 | 21 | | |
12 | 22 | | |
13 | | - | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
14 | 26 | | |
15 | 27 | | |
16 | 28 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
| 3 | + | |
| 4 | + | |
3 | 5 | | |
4 | 6 | | |
5 | 7 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
112 | 112 | | |
113 | 113 | | |
114 | 114 | | |
| 115 | + | |
115 | 116 | | |
116 | 117 | | |
117 | 118 | | |
| |||
124 | 125 | | |
125 | 126 | | |
126 | 127 | | |
| 128 | + | |
127 | 129 | | |
128 | 130 | | |
129 | 131 | | |
| |||
136 | 138 | | |
137 | 139 | | |
138 | 140 | | |
| 141 | + | |
139 | 142 | | |
140 | 143 | | |
141 | 144 | | |
142 | 145 | | |
143 | 146 | | |
| 147 | + | |
| 148 | + | |
| 149 | + | |
| 150 | + | |
144 | 151 | | |
145 | 152 | | |
146 | 153 | | |
| |||
0 commit comments