Skip to content

Commit 3aed1c8

Browse files
paldepindpaldepind
committed
Merge branch 'main' into rust-update-stdlib-models
2 parents 499d224 + 74669cb commit 3aed1c8

File tree

184 files changed

+2031
-1455
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

184 files changed

+2031
-1455
lines changed

‎actions/ql/lib/CHANGELOG.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,9 @@ No user-facing changes.
44

55
## 0.4.7
66

7-
No user-facing changes.
7+
### New Features
8+
9+
* CodeQL and Copilot Autofix support for GitHub Actions is now Generally Available.
810

911
## 0.4.6
1012

‎actions/ql/lib/change-notes/released/0.4.7.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,5 @@
11
## 0.4.7
22

3-
No user-facing changes.
3+
### New Features
4+
5+
* CodeQL and Copilot Autofix support for GitHub Actions is now Generally Available.

‎actions/ql/src/CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,10 @@
2020

2121
## 0.5.4
2222

23+
### New Features
24+
25+
* CodeQL and Copilot Autofix support for GitHub Actions is now Generally Available.
26+
2327
### Bug Fixes
2428

2529
* Alerts produced by the query `actions/missing-workflow-permissions` now include a minimal set of recommended permissions in the alert message, based on well-known actions seen within the workflow file.

‎actions/ql/src/change-notes/released/0.5.4.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
## 0.5.4
22

3+
### New Features
4+
5+
* CodeQL and Copilot Autofix support for GitHub Actions is now Generally Available.
6+
37
### Bug Fixes
48

59
* Alerts produced by the query `actions/missing-workflow-permissions` now include a minimal set of recommended permissions in the alert message, based on well-known actions seen within the workflow file.

‎actions/ql/src/codeql-suites/actions-code-quality.qls

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,3 @@
1-
[]
1+
- queries: .
2+
- apply: code-quality-selectors.yml
3+
from: codeql/suite-helpers

‎cpp/ql/src/Likely Bugs/Conversion/CastArrayPointerArithmetic.ql

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,10 @@ module CastToPointerArithFlowConfig implements DataFlow::StateConfigSig {
4444
) and
4545
getFullyConvertedType(node) = state
4646
}
47+
48+
predicate isBarrierIn(DataFlow::Node node) { isSource(node, _) }
49+
50+
predicate isBarrierOut(DataFlow::Node node) { isSink(node, _) }
4751
}
4852

4953
/**

‎cpp/ql/src/Security/CWE/CWE-014/MemsetMayBeDeleted.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* @security-severity 7.8
99
* @precision high
1010
* @tags security
11-
* external/cwe/cwe-14
11+
* external/cwe/cwe-014
1212
*/
1313

1414
import cpp

‎cpp/ql/src/Security/CWE/CWE-020/CountUntrustedDataToExternalAPI.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
* to it.
66
* @id cpp/count-untrusted-data-external-api
77
* @kind table
8-
* @tags security external/cwe/cwe-20
8+
* @tags security external/cwe/cwe-020
99
*/
1010

1111
import cpp

‎cpp/ql/src/Security/CWE/CWE-020/IRCountUntrustedDataToExternalAPI.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
* to it.
66
* @id cpp/count-untrusted-data-external-api-ir
77
* @kind table
8-
* @tags security external/cwe/cwe-20
8+
* @tags security external/cwe/cwe-020
99
*/
1010

1111
import cpp

‎cpp/ql/src/Security/CWE/CWE-020/IRUntrustedDataToExternalAPI.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
* @precision low
77
* @problem.severity error
88
* @security-severity 7.8
9-
* @tags security external/cwe/cwe-20
9+
* @tags security external/cwe/cwe-020
1010
*/
1111

1212
import cpp

‎cpp/ql/src/Security/CWE/CWE-020/UntrustedDataToExternalAPI.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
* @precision low
77
* @problem.severity error
88
* @security-severity 7.8
9-
* @tags security external/cwe/cwe-20
9+
* @tags security external/cwe/cwe-020
1010
*/
1111

1212
import cpp

‎cpp/ql/src/change-notes/2025-05-01-cwe-tag-changed.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
---
2+
category: queryMetadata
3+
---
4+
* The tag `external/cwe/cwe-14` has been removed from `cpp/memset-may-be-deleted` and the tag `external/cwe/cwe-014` has been added.
5+
* The tag `external/cwe/cwe-20` has been removed from `cpp/count-untrusted-data-external-api` and the tag `external/cwe/cwe-020` has been added.
6+
* The tag `external/cwe/cwe-20` has been removed from `cpp/count-untrusted-data-external-api-ir` and the tag `external/cwe/cwe-020` has been added.
7+
* The tag `external/cwe/cwe-20` has been removed from `cpp/untrusted-data-to-external-api-ir` and the tag `external/cwe/cwe-020` has been added.
8+
* The tag `external/cwe/cwe-20` has been removed from `cpp/untrusted-data-to-external-api` and the tag `external/cwe/cwe-020` has been added.
9+
* The tag `external/cwe/cwe-20` has been removed from `cpp/late-check-of-function-argument` and the tag `external/cwe/cwe-020` has been added.

‎cpp/ql/src/codeql-suites/cpp-code-quality.qls

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,3 @@
1-
[]
1+
- queries: .
2+
- apply: code-quality-selectors.yml
3+
from: codeql/suite-helpers

‎cpp/ql/src/experimental/Security/CWE/CWE-020/LateCheckOfFunctionArgument.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
* @tags correctness
1111
* security
1212
* experimental
13-
* external/cwe/cwe-20
13+
* external/cwe/cwe-020
1414
*/
1515

1616
import cpp

‎cpp/ql/src/utils/modelgenerator/CaptureContentSummaryModels.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@
77
*/
88

99
import internal.CaptureModels
10+
import SummaryModels
1011

1112
from DataFlowSummaryTargetApi api, string flow
1213
where flow = ContentSensitive::captureFlow(api, _)

‎cpp/ql/src/utils/modelgenerator/CaptureNeutralModels.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@
77
*/
88

99
import internal.CaptureModels
10+
import SummaryModels
1011

1112
from DataFlowSummaryTargetApi api, string noflow
1213
where noflow = captureNeutral(api)

‎cpp/ql/src/utils/modelgenerator/CaptureSinkModels.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@
77
*/
88

99
import internal.CaptureModels
10-
import Heuristic
10+
import SinkModels
1111

1212
from DataFlowSinkTargetApi api, string sink
13-
where sink = captureSink(api)
13+
where sink = Heuristic::captureSink(api)
1414
select sink order by sink

‎cpp/ql/src/utils/modelgenerator/CaptureSourceModels.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@
77
*/
88

99
import internal.CaptureModels
10-
import Heuristic
10+
import SourceModels
1111

1212
from DataFlowSourceTargetApi api, string source
13-
where source = captureSource(api)
13+
where source = Heuristic::captureSource(api)
1414
select source order by source

‎cpp/ql/src/utils/modelgenerator/CaptureSummaryModels.ql

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@
77
*/
88

99
import internal.CaptureModels
10+
import SummaryModels
1011

1112
from DataFlowSummaryTargetApi api, string flow
1213
where flow = captureFlow(api, _)

0 commit comments

Comments
 (0)