yale

Results 60 issues of yale

- Update tools readme

- :bug: fix collie issue path

由于历史原因,部分工具在接入时,工具规则描述没有及时优化,有部分规则描述不清晰、描述错误等。 例:https://github.com/Tencent/CodeAnalysis/blob/main/server/projects/main/apps/scan_conf/management/commands/open_source/pmd.json#L3427

help wanted

![image](https://user-images.githubusercontent.com/11549103/34759897-9474c98a-f618-11e7-9788-1e490221009a.png) Lua 5.3.0 mac os 10.12.6

I use the query below to scan the method call which return nullptr. But the result of query is empty, expect `return b->GetObj();` ``` cpg.method.where(_.ast.isReturn.code(".*nullptr.*")).callIn.l ``` The C++ demo: ```cpp...

Hi, When I learn Joern, I get some question: 1. Can joern support Interprocedural data flow analysis across files? 2. Can you provide java queries Unitest?

**Describe the issue** I create a binary file from a kotlin project with `graal native image` successfully. However, when i run the binary file, it crash with: ``` java.lang.IllegalStateException: Resource...

bug
native-image

### Describe the bug - when i use create-exe ```sh $ wasmer create-exe hello.wasm -o ./hello --enable-all Engine: staticlib Compiler: cranelift Target: x86_64-unknown-linux-gnu error: Failed to compile C source code...

🐞 bug
priority-medium
🍋 Low-hanging Fruit
create-exe

With DevContainer, developers can join the project without deploy the build env.

这边有个jar包使用了反射,加密之后,getTypesAnnotatedWith()或者getSubTypesOf()均返回[]空Set。 而未加密前是能够正常返回对应的Set,不为空Set。