Sjoerd Langkemper

Start linear address in hex file

3

I have a HEX file with a 05 record type in it, start linear address: ``` :020000040000FA :10000000021305022003FFFFFFFFFF02200BFFFF8B ... :0400000500001305DF :00000001FF ``` As you can see there is an instruction...

Write anywhere

1

The flash is addressable as 32-bit words, so we can only write on 32-bit boundaries. If the offset parameter to writeCODE is not divisible by 4 (bytes), we will write...

Use TCHAR in mp3checker

2

To support unicode characters

#### This issue pertains to the following package(s): - [ ] GraphQL Playground - Electron App - [x] GraphQL Playground HTML - [ ] GraphQL Playground - [ ] GraphQL...

C# project files, with the extension .csproj, define dependencies like this: ``` ``` I would like for Trivy to scan these dependencies for known vulnerabilities. See also [NuGet Support ·...

Parse function-like language constructs as specials

1

Primarily to reduce the differences between tree-sitter and pfff parsing. PR checklist: - [ ] Tests included or PR comment includes a reproducible test plan - [ ] Documentation is...

Registry shows use-frozen-lockfile-pipenv instead of use-frozen-lockfile-pip

11

From semgrep results I clicked on the Details link, and that sent me to: https://semgrep.dev/r?q=generic.ci.security.use-frozen-lockfile.use-frozen-lockfile-pip When I click the generic.ci.security.use-frozen-lockfile.use-frozen-lockfile-pip row, the inline editor shows use-frozen-lockfile-**pipenv**, where I would expect...

Builtins differ between PHP tree-sitter and pfff parsers

9

The PHP code `isset($a)` is parsed by tree-sitter as a call to `isset`, and by pfff as a call to `__builtin__isset`. [`isset` is a language construct and not a function](https://www.php.net/isset),...

https://github.com/returntocorp/semgrep-rules/blob/develop/csharp/dotnet/security/audit/mass-assignment.yaml ``` csharp.dotnet.security.audit.mass-assignment.mass-assignment Mass assignment or Autobinding vulnerability in code allows an attacker to execute over- posting attacks, which could create a new parameter in the binding request and manipulate...

From [here](https://github.com/JetBrains/intellij-community/blob/master/python/testData/formatter/trailingBlankLinesWithBackslashesAtFunctionEndNoNewLine.py). ``` def foo(): pass \ \ \ ``` ``` (module [0, 0] - [3, 1] (ERROR [0, 0] - [1, 8] (identifier [0, 4] - [0, 7]) (parameters...