Filipe Casal

The python prototype does not declare the registers used in the found gadget.

Python: Add `toString` method to `StrConst`

1

Override StrConst's toString to show the correct type on the AST viewer. Currently, the AST shows the type "Str", which does not exist. Fixes https://github.com/github/codeql/issues/9833.

[Python AST] AST Viewer shows [Str] but no such type exists

6

**Description of the issue** I expect the type names present on the AST viewer to match a real CodeQL type, but this is not the case here. The type could...

Go: failing to match with `...`

2

**Describe the bug** The Go semgrep pattern `var $VAR [...]byte` does not find `var foo [32]byte` **To Reproduce** https://semgrep.dev/playground/s/9A45y **Expected behavior** The `var $VAR [...]byte` pattern should match with `var...

**Describe the bug** In rust mode, the pattern `;` does not match on `println!("{}", self);`. **To Reproduce** https://semgrep.dev/playground/s/2ZDRB **Expected behavior** Find instances of `self`, even in cases where it is...

**Describe the bug** In Rust mode, the `matches!($X, ...) | matches!($X, ...)` pattern does not find instances of `matches!(foo, Foo::A(_)) | matches!(foo, Foo:B(_))` **To Reproduce** Playground example https://semgrep.dev/playground/s/X5R9K?editorMode=advanced **Expected behavior**...

Warn when an import shadows a locally defined function

1

We would flag the following foo import ``` # library.cairo func foo() -> (): end ``` and ``` # main.cairo from library import foo as bar func bar() -> ():...

Currently, the rule finds unused function arguments. However, Cairo programs commonly use the pattern: ``` struct BatchConfig: member general_config : GeneralConfig* member signed_min_oracle_prices : OraclePrice* member signed_max_oracle_prices : OraclePrice* member...

This PR collects clippy's diagnostic children span locations into the SARIF related locations. This prevents clippy-sarif from removing relevant data that is present in clippy's json output. As an example,...