File tree
1,424 files changed
+88163
-55444
lines changed- .devcontainer/swift
- .github/workflows
- config
- cpp/ql
- lib
- change-notes
- released
- semmle/code/cpp
- controlflow
- dataflow/internal
- tainttracking1
- tainttracking2
- exprs
- internal
- ir
- dataflow/internal
- tainttracking1
- tainttracking2
- tainttracking3
- implementation
- aliased_ssa
- internal
- raw
- internal
- unaliased_ssa
- internal
- src
- Likely Bugs
- Conversion
- Memory Management
- change-notes
- released
- experimental/Security/CWE/CWE-670
- test
- TestUtilities
- experimental/query-tests/Security/CWE/CWE-670/semmle/tests
- library-tests
- controlflow/nullness
- dataflow/dataflow-tests
- declarationEntry/declarationEntry
- ir
- ir
- ssa
- syntax-zoo
- valuenumbering/GlobalValueNumbering
- variables/global
- query-tests/Likely Bugs/Conversion/LossyFunctionResultCast
- csharp
- extractor/Semmle.Extraction.CSharp
- Entities
- Statements
- Populators
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- lib
- change-notes/released
- semmle/code/csharp
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- tainttracking5
- frameworks
- generated/dotnet
- microsoft
- extensions
- system
- collections
- componentmodel
- data
- io
- net
- runtime
- security
- cryptography
- text
- threading
- web/ui
- xml
- security/dataflow
- flowsinks
- flowsources
- src
- Diagnostics
- Telemetry
- change-notes
- released
- experimental
- CWE-918
- ir
- implementation
- internal
- raw
- internal
- unaliased_ssa
- internal
- utils/model-generator/internal
- test
- TestUtilities
- experimental/ir/ir
- library-tests
- csharp9-standalone
- dataflow
- external-models
- flowsources/aspremote
- library
- frameworks/EntityFramework
- query-tests/Security Features/CWE-079/XSS
- resources/stubs
- utils/model-generator
- docs/codeql
- codeql-cli
- codeql-language-guides
- reusables
- go
- codeql-tools
- ql
- lib
- change-notes/released
- semmle/go
- dataflow
- barrierguardutil
- internal
- tainttracking1
- tainttracking2
- security
- src
- InconsistentCode
- Security/CWE-326
- change-notes/released
- experimental
- CWE-321
- CWE-369
- CWE-918
- test
- TestUtilities
- library-tests/semmle/go/dataflow/GuardingFunctions
- javascript
- downgrades
- c0664d5721c90dd32a5b167efea24f9cc6f57cfb
- initial
- externs/nodejs
- extractor
- lib/typescript/src
- src/com/semmle
- js/extractor
- ts
- ast
- extractor
- ql
- lib
- Declarations
- change-notes
- released
- semmle/javascript
- dataflow
- internal
- frameworks
- heuristics
- security
- dataflow
- internal
- upgrades/c1ee5346e068f6e0b687e75b4ba3f04a7382f4c4
- src
- Declarations
- change-notes
- released
- meta/analysis-quality
- test
- library-tests/TypeTracking
- query-tests/Security
- CWE-022/TaintedPath
- CWE-079
- DomBasedXss
- UnsafeHtmlConstruction
- CWE-094/CodeInjection
- lib
- java
- documentation/library-coverage
- kotlin-extractor
- src/main/kotlin
- comments
- utils
- versions
- v_1_4_32
- v_1_5_0
- v_1_5_10
- v_1_5_21
- v_1_5_31
- v_1_6_10
- v_1_6_20
- v_1_7_0-RC
- v_1_7_0
- ql
- consistency-queries
- integration-tests
- linux-only/kotlin
- custom_plugin
- plugin
- resources/META-INF/services
- use_java_library
- javasrc/extlib
- posix-only/kotlin
- enabling
- extractor_crash
- code
- gradle_groovy_app
- app
- src/main/kotlin/testProject
- gradle_kotlinx_serialization
- app
- src/main/kotlin/testProject
- java_kotlin_extraction_orders
- kotlin_compiler_java_source
- kotlin_file_import
- libsrc
- kotlin_java_lowering_wildcards
- kotlin_java_static_fields
- kotlinc_multi
- logs
- module_mangled_names
- nested_generic_types
- libsrc/extlib
- private_property_accessors
- raw_generic_types
- libsrc/extlib
- lib
- change-notes
- released
- config
- semmle/code
- java
- dataflow
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- frameworks
- android
- apache
- guava
- jackson
- javaee/jsf
- ratpack
- spring
- regex
- security
- upgrades
- 57c55f404a5954f0e738febf590ad5d49dd67b08
- b9225587bc0a643ae484ec215b9a6f19d17d0fc2
- cf58c7d9b1fa1eae9cdc20ce8f157c140ac0c3de
- src
- Security/CWE
- CWE-117
- CWE-925
- Telemetry
- Violations of Best Practice/Naming Conventions
- change-notes
- released
- experimental
- Security/CWE
- CWE-020
- CWE-073
- CWE-200
- CWE-321
- CWE-400
- CWE-470
- CWE-552
- CWE-601
- semmle/code/java
- utils
- flowtestcasegenerator
- model-generator/internal
- test
- TestUtilities
- kotlin/library-tests
- arrays-with-variances
- classes
- data-classes
- dataflow
- notnullexpr
- whenexpr
- exprs_typeaccess
- exprs
- generics
- internal-public-alias
- java-kotlin-collection-type-generic-methods
- jvmstatic-annotation
- lazy-val-multiple-constructors
- methods
- modifiers
- properties
- reflection
- stmts
- library-tests
- dataflow
- callback-dispatch
- collections
- external-models
- frameworks
- android
- content-provider
- external-storage
- flow-steps
- intent
- notification
- slice
- uri
- widget
- apache-collections
- guava/generated
- cache
- collect
- jackson
- javax-json
- json-java
- okhttp
- spring
- beans
- cache
- ui
- util
- webmultipart
- webutil
- stream
- logging
- optional
- regex
- types/cycles
- query-tests/security
- CWE-094
- CWE-312
- CWE-925
- stubs/google-android-9.0.0/android/os
- utils/model-generator
- misc/suite-helpers
- python/ql
- lib
- analysis
- change-notes
- released
- semmle/python
- dataflow/new
- internal
- tainttracking1
- tainttracking2
- tainttracking3
- tainttracking4
- filters
- frameworks
- data
- internal
- internal
- pointsto
- security
- dataflow
- internal
- src
- Security
- CWE-022
- CWE-079
- CWE-285
- CWE-295
- CWE-327
- CWE-732
- analysis
- change-notes
- released
- experimental/semmle/python
- frameworks
- security
- dataflow
- injection
- test
- TestUtilities
- experimental
- dataflow
- sensitive-data
- tainttracking
- commonSanitizer
- customSanitizer
- typetracking
- meta
- debug
- library-tests
- ApiGraphs/py2
- frameworks
- asyncpg
- data
- stdlib
- query-tests/Security/CWE-022-TarSlip
- ql/ql
- src
- codeql_ql/ast
- codeql
- files
- queries
- bugs
- performance
- style
- test
- TestUtilities
- callgraph
- printAst
- queries/style
- AcronymsShouldBeCamelCase
- DeadCode
- MissingOverride
- Misspelling
- type
- ruby
- downgrades/4ba51641799d2aaa315c7323931e2dd2a94c9f9d
- extractor
- generator
- ql
- lib
- change-notes
- released
- codeql/ruby
- ast
- internal
- dataflow
- internal
- tainttracking1
- tainttrackingforlibraries
- frameworks
- core
- internal
- data
- http_clients
- security
- internal
- performance
- ide-contextual-queries
- upgrades/1199e154f5e9b3560297633c6ebb4dfe0b191ae4
- src
- change-notes
- released
- experimental/decompression-api
- examples
- queries/security
- cwe-078
- cwe-089
- test
- TestUtilities
- library-tests
- ast/erb
- concepts
- app/controllers
- dataflow
- api-graphs
- barrier-guards
- summaries
- frameworks
- action_cable
- app/controllers/foo
- files
- railties
- query-tests/security
- cwe-601
- decompression-api
- swift
- codegen
- generators
- lib
- templates
- test
- extractor
- infra
- trap
- visitors
- integration-tests
- osx-only/frontend-invocations
- posix-only
- cross-references
- Sources/cross-references
- hello-world
- Sources/hello-world
- partial-modules
- A
- Sources/A
- B
- Sources/B
- Sources/partial-modules
- ql
- lib
- codeql/swift
- controlflow
- internal
- dataflow
- internal
- tainttracking1
- elements
- decl
- expr
- type
- frameworks/StandardLibrary
- generated
- decl
- expr
- type
- src/queries
- Security/CWE-135
- test
- extractor-tests
- declarations
- expressions
- generated
- File
- decl
- ConcreteFuncDecl
- EnumDecl
- ImportDecl
- ModuleDecl
- expr
- BridgeFromObjCExpr
- BridgeToObjCExpr
- ConditionalBridgeFromObjCExpr
- DotSelfExpr
- DotSyntaxCallExpr
- EnumIsCaseExpr
- ErrorExpr
- ObjCSelectorExpr
- SequenceExpr
- UnresolvedDeclRefExpr
- UnresolvedDotExpr
- UnresolvedMemberExpr
- UnresolvedPatternExpr
- UnresolvedSpecializeExpr
- type
- BuiltinBridgeObjectType
- BuiltinDefaultActorStorageType
- BuiltinExecutorType
- BuiltinFloatType
- BuiltinIntegerLiteralType
- BuiltinIntegerType
- BuiltinJobType
- BuiltinNativeObjectType
- BuiltinRawPointerType
- BuiltinRawUnsafeContinuationType
- BuiltinType
- BuiltinUnsafeValueBufferType
- BuiltinVectorType
- DynamicSelfType
- ExistentialType
- InOutType
- NestedArchetypeType
- PrimaryArchetypeType
- ProtocolCompositionType
- UnmanagedStorageType
- UnownedStorageType
- VariadicSequenceType
- WeakStorageType
- statements
- types
- library-tests
- controlflow/graph
- dataflow/dataflow
- elements/expr
- arithmeticoperation
- logicaloperation
- parent
- query-tests/Security/CWE-135
- tools
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,424 files changed
+88163
-55444
lines changedLines changed: 9 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + |
Lines changed: 25 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + |
Lines changed: 22 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + |
Lines changed: 20 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + |
Lines changed: 13 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + |
Lines changed: 1 addition & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
10 | 10 |
| |
11 | 11 |
| |
12 | 12 |
| |
| 13 | + | |
13 | 14 |
| |
14 | 15 |
| |
15 | 16 |
| |
|
Lines changed: 12 additions & 8 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
15 | 15 |
| |
16 | 16 |
| |
17 | 17 |
| |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
18 | 23 |
| |
19 | 24 |
| |
20 | 25 |
| |
21 |
| - | |
22 |
| - | |
23 |
| - | |
24 |
| - | |
25 |
| - | |
| 26 | + | |
| 27 | + | |
| 28 | + | |
| 29 | + | |
26 | 30 |
| |
27 | 31 |
| |
28 |
| - | |
| 32 | + | |
29 | 33 |
| |
30 | 34 |
| |
31 |
| - | |
32 |
| - | |
| 35 | + | |
| 36 | + |
Lines changed: 34 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
| 26 | + | |
| 27 | + | |
| 28 | + | |
| 29 | + | |
| 30 | + | |
| 31 | + | |
| 32 | + | |
| 33 | + | |
| 34 | + |
Lines changed: 3 additions & 0 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
58 | 58 |
| |
59 | 59 |
| |
60 | 60 |
| |
| 61 | + | |
| 62 | + | |
| 63 | + |
Lines changed: 7 additions & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
15 | 15 |
| |
16 | 16 |
| |
17 | 17 |
| |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
18 | 24 |
| |
19 | 25 |
| |
20 | 26 |
| |
| |||
40 | 46 |
| |
41 | 47 |
| |
42 | 48 |
| |
43 |
| - | |
| 49 | + | |
44 | 50 |
| |
45 | 51 |
| |
46 | 52 |
| |
|
0 commit comments