File tree
1,761 files changed
+97777
-33140
lines changed- .github/workflows
- actions
- extractor
- ql
- lib
- change-notes/released
- codeql
- actions
- ast/internal
- controlflow
- internal
- dataflow
- security
- src
- Security
- CWE-077
- CWE-094
- CWE-349
- CWE-829
- change-notes/released
- experimental/Security
- CWE-078
- CWE-088
- CWE-829
- cpp
- downgrades/c16b29b27f71247023321cc0d0360998b318837c
- ql
- lib
- change-notes
- released
- ext
- semmle/code/cpp
- commons
- controlflow
- ir
- dataflow/internal
- implementation
- aliased_ssa
- gvn/internal
- raw
- gvn/internal
- internal
- unaliased_ssa
- gvn/internal
- models/interfaces
- stmts
- upgrades/5340d6d5f428557632b1a50113e406430f29ef7d
- src
- Best Practices
- Critical
- Likely Bugs
- Format
- Leap Year
- Security/CWE
- CWE-022
- CWE-078
- CWE-079
- CWE-089
- CWE-120
- CWE-170
- CWE-190
- CWE-290
- CWE-295
- CWE-311
- CWE-313
- CWE-319
- CWE-326
- CWE-416
- CWE-428
- CWE-732
- CWE-807
- CWE-843
- change-notes/released
- experimental/Security/CWE
- CWE-193
- CWE-409
- test
- library-tests
- controlflow/guards
- dataflow
- dataflow-tests
- dispatch
- external-models
- fields
- taint-tests
- ir/ir
- macros/arguments
- valuenumbering/GlobalValueNumbering
- query-tests
- Best Practices/SloppyGlobal
- Critical
- InitialisationNotRun
- MissingCheckScanf
- Likely Bugs/Memory Management/StrncpyFlippedArgs
- Security/CWE
- CWE-119/semmle/tests
- CWE-134/semmle/globalVars
- CWE-295
- CWE-313
- CWE-457/semmle/tests
- CWE-497/semmle/tests
- CWE-611
- csharp
- actions/create-extractor-pack
- documentation/library-coverage
- ql
- campaigns/Solorigate
- lib
- change-notes/released
- src
- change-notes/released
- consistency-queries
- lib
- change-notes/released
- ext
- semmle/code/csharp
- commons
- controlflow
- internal
- dataflow
- internal
- dispatch
- security/dataflow
- serialization
- src
- Bad Practices
- Control-Flow
- Magic Constants
- Language Abuse
- Likely Bugs
- Security Features
- CWE-090
- CWE-384
- CWE-798
- Telemetry
- change-notes/released
- experimental/Security Features/CWE-759
- test
- library-tests
- assignables
- controlflow/graph
- csharp8
- dataflow
- call-sensitivity
- external-models
- library
- ssa
- threat-models
- frameworks/microsoft/aspnetcore/blazor
- goto
- tainttracking/collections
- query-tests/Security Features/CWE-502/UnsafeDeserializationUntrustedInput
- docs/codeql
- _static
- codeql-for-visual-studio-code
- codeql-overview/codeql-changelog
- ql-language-reference
- reusables
- go
- actions/test
- extractor
- autobuilder
- ql
- consistency-queries
- change-notes/released
- lib
- change-notes/released
- semmle/go
- dataflow/internal
- security
- src
- InconsistentCode
- Security
- CWE-322
- CWE-601
- change-notes/released
- experimental
- CWE-1004
- CWE-807
- CWE-840
- CWE-918
- IntegerOverflow
- javascript
- downgrades/76a926a00d5f3bc199c203a1437796fd7b2835ba
- extractor/src/com/semmle/js/extractor
- ql
- lib
- change-notes/released
- semmle/javascript
- dataflow/internal
- frameworks
- data
- internal
- internal
- security/dataflow
- upgrades/ccefb5e2d49318eea4aeafd4c6ae2af9f94ac72a
- src
- change-notes/released
- test
- experimental
- FormParsers
- Security
- CWE-094-dataURL
- CWE-099
- EnvValueAndKeyInjection
- EnvValueInjection
- CWE-347
- localsource
- remotesource
- CWE-918
- library-tests
- CallGraphs/FullTest
- DataFlow
- DefUse
- GlobalAccessPaths
- SSA
- GetRhsNode
- SSADefinition
- StringConcatenation
- frameworks
- Electron
- ReactJS
- data
- koa
- query-tests/Security
- CWE-020/UntrustedDataToExternalAPI
- CWE-022
- TaintedPath
- ZipSlip
- CWE-073
- CWE-078
- CommandInjection
- IndirectCommandInjection
- SecondOrderCommandInjection
- UnsafeShellCommandConstruction
- CWE-079
- DomBasedXssWithResponseThreat
- DomBasedXss
- ExceptionXss
- ReflectedXss
- StoredXss
- UnsafeHtmlConstruction
- UnsafeJQueryPlugin
- XssThroughDom
- CWE-089
- local-threat-source
- typed
- untyped
- CWE-094
- CodeInjection
- UnsafeDynamicMethodAccess
- CWE-116/IncompleteSanitization
- CWE-117
- CWE-200
- CWE-312
- CWE-327
- CWE-338
- CWE-346
- CWE-377
- CWE-400
- ReDoS
- RemovePropertyInjection
- CWE-506
- CWE-522-DecompressionBombs
- CWE-601
- ClientSideUrlRedirect
- ServerSideUrlRedirect
- CWE-611
- CWE-643
- CWE-730
- Threat-models-disabled
- Threat-models-enabled
- CWE-754
- CWE-770/ResourceExhaustion
- CWE-776
- CWE-798
- CWE-807
- CWE-829
- CWE-843
- CWE-915
- PrototypePollutingAssignment
- PrototypePollutingFunction
- PrototypePollutingMergeCall
- CWE-918
- CWE-942
- tutorials/Analyzing data flow in JavaScript/Local data flow
- resources
- java
- documentation/library-coverage
- kotlin-extractor
- deps
- src/main/kotlin/utils/versions/v_2_2_20-Beta2
- ql
- integration-tests/java
- android-sample-kotlin-build-script-no-wrapper
- android-sample-no-wrapper
- android-sample-old-style-kotlin-build-script-no-wrapper
- android-sample-old-style-no-wrapper
- query-suite
- lib
- change-notes/released
- experimental/quantum
- ext
- semmle/code
- configfiles
- java
- controlflow
- dataflow
- internal
- rangeanalysis
- dispatch
- frameworks
- javaee/ejb
- security
- src
- Language Abuse
- Likely Bugs
- Comparison
- Concurrency
- Resource Leaks
- Termination
- Security/CWE/CWE-200/SpringBootActuatorsConfig
- Violations of Best Practice
- Implementation Hiding
- Magic Constants
- Naming Conventions
- Testing
- Undesirable Calls
- change-notes/released
- experimental
- Security/CWE/CWE-016
- quantum
- Analysis
- Examples
- utils/flowtestcasegenerator
- test-kotlin1/library-tests/controlflow/basic
- test-kotlin2/library-tests/controlflow/basic
- test
- experimental/query-tests/security/CWE-016
- library-tests/guards
- query-tests
- CallsToSystemExit
- ExcessivePublicMethodMocking
- Nullness
- VisibleForTestingAbuse
- packageone
- packagetwo
- security/CWE-200/semmle/tests/SpringBootActuatorsConfig
- Version1.0.x-1.4.x
- bad
- default
- false
- good
- Version1.5.x
- bad
- good
- Version2.x
- bad
- expose
- exposure-include
- all-exposed
- some-exposed
- good
- Version3.x
- bad
- all-exposed
- some-exposed
- good
- stubs
- junit-4.13
- org/junit
- function
- mockito-5.14/org/mockito
- internal
- creation
- handler
- progress
- util
- invocation
- mock
- plugins
- stubbing
- misc
- bazel/3rdparty
- py_deps
- tree_sitter_extractors_deps
- suite-helpers
- change-notes/released
- python
- ql
- integration-tests/query-suite
- lib
- analysis
- change-notes/released
- experimental/cryptography
- modules
- stdlib
- semmle/python
- dataflow/new/internal
- frameworks
- data/internal
- objects
- types
- src
- Classes
- Comparisons
- examples
- SubclassShadowing
- examples
- Functions
- examples
- Security/CWE-327
- change-notes/released
- experimental/Security
- CWE-022bis
- CWE-208/TimingAttackAgainstHash
- test
- 2/query-tests/Classes/equals-hash
- 3/query-tests/Classes
- equals-hash
- equals-ne
- experimental/query-tests/Security/CWE-208/TimingAttackAgainstHash
- library-tests/frameworks
- lxml
- psycopg2
- query-tests
- Classes
- equals-attr
- equals-hash
- equals-not-equals
- incomplete-ordering
- subclass-shadowing
- Functions
- IncorrectRaiseInSpecialMethod
- general
- Security/CWE-776-XmlBomb
- analysis/jump_to_defn
- ql/ql
- src/codeql_ql/style
- test/queries
- performance/VarUnusedInDisjunct
- style
- Misspelling
- UseInstanceofExtension
- UseSetLiteral
- ruby
- extractor
- ql
- consistency-queries
- lib
- change-notes/released
- codeql/ruby
- controlflow
- internal
- dataflow/internal
- frameworks
- core
- data/internal
- http_clients
- regexp/internal
- security
- regexp
- utils/test
- src
- change-notes/released
- queries/performance
- test/library-tests
- controlflow/graph
- dataflow/barrier-guards
- frameworks/http_clients
- rust
- ast-generator
- src
- downgrades
- b41e55c0dba14a139d01dbee713aca5efe5b818a
- dfade44a27bd44db996ae8c5095a11effc883aba
- extractor
- macros
- src
- generated
- translate
- ql
- integration-tests
- hello-project
- qltest
- query-suite
- lib
- change-notes
- released
- codeql/rust
- controlflow
- internal
- generated
- dataflow
- internal
- elements
- internal
- generated
- frameworks
- asyncstd
- rustcrypto
- stdlib
- tokio
- internal
- security
- upgrades
- 319c933d9615ccf40f363548cafd51d08c74a534
- b41e55c0dba14a139d01dbee713aca5efe5b818a
- src
- change-notes
- released
- queries
- diagnostics
- security
- CWE-117
- CWE-311
- CWE-312
- CWE-696
- CWE-798
- summary
- telemetry
- test
- extractor-tests
- canonical_path_disabled
- canonical_path
- generated
- AsmExpr
- ClosureBinder
- ClosureExpr
- Const
- Enum
- ExternBlock
- ExternCrate
- ForBinder
- ForTypeRepr
- Function
- Impl
- MacroBlockExpr
- MacroCall
- MacroDef
- MacroItems
- MacroRules
- MethodCallExpr
- Module
- NeverTypeRepr
- Path
- Static
- StructExpr
- StructPat
- Struct
- TraitAlias
- Trait
- TupleExpr
- TupleStructPat
- TypeAlias
- TypeBound
- Union
- Use
- Variant
- WherePred
- macro-expansion
- CONSISTENCY
- library-tests
- controlflow-unstable
- controlflow
- dataflow
- global
- local
- CONSISTENCY
- sources
- CONSISTENCY
- strings
- definitions
- frameworks
- postgres
- CONSISTENCY
- rusqlite
- path-resolution
- CONSISTENCY
- sensitivedata
- type-inference
- CONSISTENCY
- variables
- CONSISTENCY
- query-tests
- diagnostics
- CONSISTENCY
- security
- CWE-020
- CWE-022
- src
- CWE-089
- CONSISTENCY
- CWE-117
- CONSISTENCY
- CWE-311
- CWE-312
- CONSISTENCY
- CWE-327
- CONSISTENCY
- CWE-328/CONSISTENCY
- CWE-696/CONSISTENCY
- CWE-770/CONSISTENCY
- CWE-825
- CONSISTENCY
- unusedentities
- CONSISTENCY
- utils-tests/modelgenerator
- schema
- swift
- ql
- lib
- change-notes
- released
- codeql/swift
- controlflow
- internal
- dataflow
- internal
- elements/decl/internal
- security
- src
- change-notes/released
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,761 files changed
+97777
-33140
lines changedOriginal file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
30 | 30 |
| |
31 | 31 |
| |
32 | 32 |
| |
| 33 | + | |
| 34 | + | |
| 35 | + | |
33 | 36 |
| |
34 | 37 |
| |
35 | 38 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
20 | 20 |
| |
21 | 21 |
| |
22 | 22 |
| |
23 |
| - | |
| 23 | + | |
24 | 24 |
| |
25 | 25 |
| |
26 | 26 |
| |
27 | 27 |
| |
28 | 28 |
| |
29 | 29 |
| |
30 | 30 |
| |
31 |
| - | |
| 31 | + | |
32 | 32 |
| |
33 | 33 |
| |
34 | 34 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
20 |
| - | |
| 20 | + | |
21 | 21 |
| |
22 | 22 |
| |
23 | 23 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
16 | 16 |
| |
17 | 17 |
| |
18 | 18 |
| |
19 |
| - | |
| 19 | + | |
20 | 20 |
| |
21 | 21 |
| |
22 | 22 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
17 | 17 |
| |
18 | 18 |
| |
19 | 19 |
| |
20 |
| - | |
| 20 | + | |
21 | 21 |
| |
22 | 22 |
| |
23 | 23 |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
18 | 18 |
| |
19 | 19 |
| |
20 | 20 |
| |
21 |
| - | |
| 21 | + | |
22 | 22 |
| |
23 | 23 |
| |
24 | 24 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
19 | 19 |
| |
20 | 20 |
| |
21 | 21 |
| |
22 |
| - | |
| 22 | + | |
23 | 23 |
| |
24 | 24 |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
37 | 37 |
| |
38 | 38 |
| |
39 | 39 |
| |
40 |
| - | |
| 40 | + | |
41 | 41 |
| |
42 | 42 |
| |
43 | 43 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
22 | 22 |
| |
23 | 23 |
| |
24 | 24 |
| |
25 |
| - | |
| 25 | + | |
26 | 26 |
| |
27 | 27 |
| |
28 | 28 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
28 | 28 |
| |
29 | 29 |
| |
30 | 30 |
| |
31 |
| - | |
| 31 | + | |
32 | 32 |
| |
33 | 33 |
| |
34 | 34 |
| |
|
0 commit comments