codeql

codeql copied to clipboard

C++: Output destructors of temporary objects

3

jketema

hmac

Data flow: Allow for direct stores into nodes with `clearsContent`

1

Before this PR, store steps where the target node would clear the stored content via `clearsContent` would get filtered away. However, it is convenient to be able to only filter...

hvitved

Go: Promote `go/uncontrolled-allocation-size` from experimental

1

Promotes the query `go/uncontrolled-allocation-size` (previously [`go/denial-of-service`](https://github.com/github/codeql/pull/15130)) from experimental. Sinks and barriers have been reused from `AllocationSizeOverflow` due to their similarities. This adds coverage for CVE-2023-37279 and CVE-2023-2253.

atorralba

At present, none of the code in this PR has any effect, as the internal copy is still used for the build and CI. However, the changes in this PR...

tausbn

UAF not flagged

2

I borrowed the query from UseAfterFree.ql present in CodeQL repo and modified to include a custom free function, but the query is not flagging UAF. ``` import cpp import semmle.code.cpp.dataflow.new.DataFlow...

tardigrade-9

[Java] Extract all unit test methods and the methods they call

1

I want to extract all unit test methods (Junit 4 or 5) and the corresponding methods that they test. I want to learn how to write a query for this....

xennygrimmato

C# builds fails when invoking command from dotnet tools

3

My .NET solution has a project that uses a `dotnet tool` command to generate code from an OpenApi spec, this works fine in my GH workflows and local environment but...

svalbuena

CodeQL failed to compile C# program based on Unity

1

I want to try codeQL on the Unity program of its C# code in its assets folder. I could execute "msbuild xxx.sln" in my local environment. However, when I try...

wwwjwww

False positive - Log entries created from user input (cs/log-forging)

1

**Description of the false positive** The user input/log string is handled inside an extension log method and sanitized. We are getting a false positive warning from our Logging extension method....

serhatataman