Commit aa3982d
File tree
- actions/ql/test/query-tests
- Models
- .github/workflows
- action1
- Security
- CWE-074
- .github/workflows
- CWE-077
- .github/workflows
- CWE-078
- .github/workflows
- CWE-088
- .github/workflows
- CWE-094
- .github
- actions
- action1
- action3
- action4
- action5
- action6
- action7
- external
- TestOrg/TestRepo/.github/actions/clone-repo
- ultralytics/actions
- workflows
- external/TestOrg/TestRepo/.github/workflows
- CWE-1395
- .github/workflows
- CWE-200
- .github/workflows
- CWE-275
- .github/workflows
- CWE-284
- .github/workflows
- CWE-285
- .github/workflows
- CWE-312
- .github/workflows
- CWE-349
- .github/workflows
- CWE-367
- .github/workflows
- CWE-571
- .github/workflows
- CWE-829
- .github
- actions
- dangerous-git-checkout
- download-artifact-2
- download-artifact
- unpinned-tag
- workflows
- external/TestOrg/TestRepo/.github/workflows
- CWE-918
- .github/workflows
- SyntaxError
- .github/workflows
- Violations Of Best Practice/CodeQL
- .github/workflows
- cpp/ql/test
- examples/BadLocking
- experimental/query-tests/Security/CWE
- CWE-020
- NoCheckBeforeUnsafePutUser
- semmle/tests
- CWE-078
- CWE-1041/semmle/tests
- CWE-1126/semmle/tests
- CWE-1240
- CWE-125/semmle/tests
- CWE-190
- AllocMultiplicationOverflow
- DangerousUseOfTransformationAfterOperation
- IfStatementAdditionOverflow
- CWE-193
- array-access
- constant-size
- CWE-200
- test1
- test2
- test3
- CWE-243/semmle/tests
- CWE-266/semmle/tests
- CWE-285
- CWE-295
- CWE-359/semmle/tests
- CWE-369/semmle/tests
- CWE-377/semmle/tests
- CWE-401/semmle/tests
- CWE-409/DecompressionBombs
- CWE-415/semmle/tests
- CWE-476/semmle/tests
- CWE-561/semmle/tests
- CWE-670/semmle/tests
- CWE-675/semmle/tests
- CWE-691/semmle/tests
- CWE-703/semmle/tests
- CWE-754/semmle/tests
- CWE-758/semmle/tests
- CWE-783/semmle/tests
- CWE-788/semmle/tests
- CWE-805/semmle/tests
- semmle/tests
- library-tests/lossy_pointer_cast
- query-tests
- Architecture
- FeatureEnvy
- Refactoring Opportunities
- ClassesWithManyFields
- ComplexFunctions
- Best Practices
- GuardedFree
- Hiding
- DeclarationHidesParameter
- DeclarationHidesVariable
- LocalVariableHidesGlobalVariable
- Likely Errors
- CommaBeforeMisleadingIndentation
- EmptyBlock
- OffsetUseBeforeRangeCheck
- Slicing
- Magic Constants
- Japanese Era
- MagicConstantsNumbers
- MagicConstantsString
- RuleOfTwo
- SloppyGlobal
- Unused Entities
- UnusedIncludes
- UnusedLocals
- UnusedStaticFunctions
- UnusedStaticVariables
- Critical
- DeadCodeFunction
- DeadCodeGoto
- FileClosed
- GlobalUseBeforeInit
- InitialisationNotRun
- LargeParameter
- MemoryFreed
- MissingCheckScanf
- MissingNullTest
- NewFree
- NotInitialised
- OverflowCalculated
- OverflowStatic
- ReturnValueIgnored
- SizeCheck
- Documentation
- CommentedOutCode
- DocumentApi
- TodoComments
- Header Cleanup/Cleanup-DuplicateIncludeGuard
- subfolder
- JPL_C
- LOC-3
- Rule 13
- LimitedScopeFile
- LimitedScopeFunction
- Rule 17
- LOC-4
- Rule 29/NonConstFunctionPointer
- Rule 30/FunctionPointerConversions
- Likely Bugs
- AmbiguouslySignedBitField
- Arithmetic
- BadAdditionOverflowCheck
- BadCheckOdd
- BitwiseSignCheck
- ComparisonPrecedence
- FloatComparison
- IntMultToLong
- PointlessComparison
- UnsignedGEZero
- ContinueInFalseLoop
- Conversion
- ArrayArgSizeMismatch
- CastArrayPointerArithmetic
- ImplicitDowncastFromBitfield
- LossyFunctionResultCast
- Format
- NonConstantFormat
- SnprintfOverflow
- WrongNumberOfFormatArguments
- WrongTypeFormatArguments
- Buildless
- Builtin
- Linux_mixed_byte_wprintf
- Linux_mixed_word_size
- Linux_signed_chars
- Linux_two_byte_wprintf
- Linux_unsigned_chars
- Microsoft_no_wchar
- Microsoft
- InconsistentCheckReturnNull
- Leap Year
- Adding365DaysPerYear
- UnsafeArrayForDaysOfYear
- Likely Typos
- AssignWhereCompareMeant
- CompareWhereAssignMeant
- DubiousNullCheck
- ExprHasNoEffect
- CMakeFiles/CMakeScratch/TryCompile-abcdef
- autoconf
- meson-private/tmp_abc
- IncorrectNotOperatorUsage
- ShortCircuitBitMask
- UsingStrcpyAsBoolean
- inconsistentLoopDirection
- Memory Management
- AllocaInLoop
- ImproperNullTermination
- NtohlArrayNoBound
- Padding
- More64BitWaste
- NonPortablePrintf
- Suboptimal64BitType
- PointerOverflow
- ReturnCstrOfLocalStdString
- ReturnStackAllocatedMemory
- StackAddressEscapes
- StrncpyFlippedArgs
- SuspiciousCallToMemset
- SuspiciousCallToStrncat
- SuspiciousSizeof
- UnsafeUseOfStrcat
- UsingExpiredStackAddress
- OO
- IncorrectConstructorDelegation
- NonVirtualDestructorInBaseClass
- ThrowInDestructor
- Protocols
- RedundantNullCheckSimple
- ReturnConstTypeMember
- ReturnConstType
- ShortLoopVarName
- Underspecified Functions
- UseInOwnInitializer
- Power of 10/Rule 2
- Security/CWE
- CWE-014
- CWE-022/SAMATE/TaintedPath
- CWE-078
- SAMATE/ExecTainted
- semmle/ExecTainted
- CWE-079/semmle/CgiXss
- CWE-114
- SAMATE/UncontrolledProcessOperation
- semmle/UncontrolledProcessOperation
- CWE-119
- SAMATE
- semmle/tests
- CWE-120/semmle
- UnsafeUseOfStrcat
- tests
- CWE-121/semmle/tests
- CWE-129
- SAMATE/ImproperArrayIndexValidation
- semmle/ImproperArrayIndexValidation
- CWE-131/NoSpaceForZeroTerminator
- CWE-134
- SAMATE
- semmle
- argv
- consts
- funcs
- globalVars
- ifs
- CWE-190
- SAMATE
- semmle
- ArithmeticUncontrolled
- ArithmeticWithExtremeValues
- ComparisonWithWiderType
- TaintedAllocationSize
- tainted
- CWE-191/UnsignedDifferenceExpressionComparedZero
- CWE-197/SAMATE/IntegerOverflowTainted
- CWE-242/semmle/tests
- CWE-253
- CWE-290/semmle/AuthenticationBypass
- CWE-295
- CWE-311/semmle/tests
- CWE-319/UseOfHttp
- CWE-326
- CWE-327
- CWE-367/semmle
- CWE-416/semmle/tests
- IteratorToExpiredContainer
- UseAfterFree
- UseOfStringAfterLifetimeEnds
- UseOfUniquePtrAfterLifetimeEnds
- CWE-428
- CWE-457/semmle
- ConditionallyUninitializedVariable
- tests
- CWE-468/semmle
- IncorrectPointerScaling
- SuspiciousAddWithSizeof
- CWE-497
- SAMATE
- semmle/tests
- CWE-570
- CWE-611
- CWE-676
- SAMATE/DangerousUseOfCin
- semmle
- DangerousUseOfCin
- PotentiallyDangerousFunction
- CWE-732
- CWE-764/semmle/tests
- CWE-772
- SAMATE
- semmle
- tests-file
- tests-memory
- CWE-807/semmle/TaintedCondition
- CWE-835/semmle/InfiniteLoopWithUnsatisfiableExitCondition
- CWE-843
- jsf
- 3.02 Code Size and Complexity/AV Rule 1
- 4.04 Environment/AV Rule 13
- 4.06 Pre-Processing Directives/AV Rule 32
- 4.09 Style/AV Rule 53 54
- 4.10 Classes
- AV Rule 73
- AV Rule 76
- AV Rule 77.1
- AV Rule 78
- AV Rule 79
- AV Rule 82
- AV Rule 85
- AV Rule 97
- 4.13 Functions
- AV Rule 107
- AV Rule 114
- 4.16 Initialization/AV Rule 145
- 4.21 Operators
- AV Rule 157
- AV Rule 164
- AV Rule 165
- AV Rule 166
- 4.22 Pointers and References/AV Rule 176
- 4.24 Control Flow Structures
- AV Rule 186
- AV Rule 193
- AV Rule 196
- AV Rule 201
- 4.28 Portable Code/AV Rule 210
- csharp/ql
- campaigns/Solorigate/test/Solorigate
- test
- experimental
- CWE-918
- Security Features
- JsonWebTokenHandler
- Serialization
- backdoor
- query-tests
- API Abuse
- CallToGCCollect
- CallToObsoleteMethod
- ClassDoesNotImplementEquals
- ClassImplementsICloneable
- DisposeNotCalledOnException
- InconsistentEqualsGetHashCode
- IncorrectCompareToSignature
- IncorrectEqualsSignature
- MissingDisposeCall
- MissingDisposeMethod
- NonOverridingMethod
- NullArgumentToEquals
- UncheckedReturnValue
- Architecture
- Dependencies/MutualDependency
- Refactoring Opportunities
- FeatureEnvy
- InappropriateIntimacy
- Bad Practices
- Comments
- CommentedOutCode
- TodoComments
- Declarations
- EmptyInterface
- LocalScopeVariableShadowsMember
- NoConstantsOnly
- TooManyRefParameters
- EmptyCatchBlock
- Implementation Hiding
- AbstractToConcreteCollection
- ExposeRepresentation
- StaticArray
- Naming Conventions
- ConfusingMethodNames
- VariableNameTooShort
- Path Combine
- VirtualCallInConstructorOrDestructor
- CSI/CompareIdenticalValues
- Concurrency
- FutileSyncOnField
- LockOrder
- LockThis
- LockedWait
- SynchSetUnsynchGet
- UnsafeLazyInitialization
- UnsynchronizedStaticAccess
- Dead Code
- NonAssignedFields
- Tests
- Documentation
- EmptyBlock
- Language Abuse
- CatchOfGenericException
- ChainedIs
- DubiousTypeTestOfThis
- ForeachCapture
- MissedTernaryOpportunity
- NestedIf
- RethrowException
- SimplifyBoolExpr
- UselessCastToSelf
- UselessIsBeforeAs
- UselessNullCoalescingExpression
- UselessUpcast
- Likely Bugs
- BadCheckOdd
- Collections
- ContainerLengthCmpOffByOne
- ContainerSizeCmpZero
- DangerousNonShortCircuitLogic
- Dynamic
- EqualsArray
- EqualsUsesAs
- EqualsUsesIs
- IncomparableEquals
- InconsistentCompareTo
- MishandlingJapaneseEra
- NestedLoopsSameVariable
- ObjectComparison
- PossibleLossOfPrecision
- RandomUsedOnce
- RecursiveEquals
- SelfAssignment
- StaticFieldWrittenByInstance
- StringBuilderCharInit
- ThreadUnsafeICryptoTransformLambda
- ThreadUnsafeICryptoTransform
- UncheckedCastInEquals
- UnsafeYearConstruction
- Linq
- MissedCastOpportunity
- MissedWhereOpportunity
- MagicConstants
- Performance
- StringBuilderInLoop
- StringConcatenationInLoop
- UseTryGetValue
- ReadOnlyContainer
- Security Features
- CWE-020
- CWE-119
- CWE-248/MissingASPNETGlobalErrorHandler/WebConfigOffButGlobal
- CWE-285/MissingAccessControl/WebFormsTests
- Test1
- Test3/B
- CWE-312
- CWE-327
- DontInstallRootCert
- InsecureSQLConnection
- InsufficientKeySize
- CWE-352
- global
- missing
- CWE-359
- CWE-384
- CWE-451/MissingXFrameOptions
- CodeAddedHeader
- WebConfigAddedHeaderInLocation
- WebConfigAddedHeader
- CWE-539/PersistentCookie
- CWE-614/RequireSSL
- AddedInCode
- AddedInForms
- CWE-639
- MVCTests
- WebFormsTests
- CWE-798
- UnusedPropertyValue
- UseBraces
- Useless Code/PointlessForwardingMethod
- WriteOnlyContainer
- standalone/Likely Bugs
- IncomparableEquals
- ObjectComparison
- javascript/ql/test
- experimental
- Security
- CWE-094-dataURL
- CWE-099
- EnvValueAndKeyInjection
- EnvValueInjection
- CWE-347
- localsource
- remotesource
- CWE-918
- StandardLibrary/MultipleArgumentsToSetConstructor
- library-tests/frameworks/HTTP-heuristics
- src
- python/ql/test
- 2/query-tests
- Classes
- inconsistent-mro
- new-style
- undefined-attribute
- Exceptions
- general
- generators
- raising
- Expressions
- Functions
- Imports
- encoding_error
- syntax_error
- Lexical
- Statements
- Variables
- LeakyComp
- undefined
- package
- 3/query-tests
- Classes
- equals-attr
- inconsistent-mro
- undefined-attribute
- Expressions
- Arguments
- Formatting
- TruncatedDivision
- UseofApply
- Imports
- encoding_error
- syntax_error
- Statements
- general
- iter
- unreachable_suppressed
- unreachable
- Variables/undefined
- package
- experimental/query-tests
- Classes/Naming
- Functions/general
- Security
- CWE-022-TarSlip
- CWE-079
- CWE-091-XsltInjection
- CWE-094
- CWE-1236
- CWE-208
- TimingAttackAgainstHash
- TimingAttackAgainstHeaderValue
- TimingAttackAgainstSensitiveInfo
- CWE-287-ConstantSecretKey
- CWE-287
- CWE-327-UnsafeUsageOfClientSideEncryptionVersion
- CWE-338
- CWE-346
- CWE-347
- CWE-348
- CWE-522-global-option
- CWE-522
- CWE-611-SimpleXmlRpcServer
- CWE-770
- query-tests
- Classes
- Arguments
- conflicting
- descriptors
- equals-attr
- init-calls-subclass-method
- overwriting-attribute
- should-be-context-manager
- undefined-attribute
- useless
- Expressions
- Arguments
- Formatting
- Regex
- callable
- comparisons
- eq
- general
- strings
- super
- Functions
- general
- iterators
- return_values
- Imports
- PyCheckerTests
- pkg_notok
- cyclic-module-annotations-fp
- cyclic-module-package-fp
- false-negative
- true-negative
- cyclic-module
- deprecated
- general
- unused
- Lexical
- ToDoComment
- commented_out_code
- Security
- CWE-020-CookieInjection
- CWE-020-ExternalAPIs
- CWE-020-IncompleteHostnameRegExp
- CWE-020-IncompleteUrlSubstringSanitization
- CWE-020-SuspiciousRegexpRange
- CWE-022-TarSlip
- CWE-074-TemplateInjection
- CWE-078-CommandInjection-py2
- CWE-079-Jinja2WithoutEscaping
- CWE-079-ReflectedXss
- CWE-089-SqlInjection
- CWE-090-LdapInjection
- CWE-113-HeaderInjection/Tests2-with-wsgi-validator
- CWE-116-BadTagFilter
- CWE-117-LogInjection
- CWE-215-FlaskDebug
- CWE-285-PamAuthorization
- CWE-295-MissingHostKeyValidation
- CWE-295-RequestWithoutValidation
- CWE-312-CleartextLogging
- CWE-312-CleartextStorage-py3
- CWE-312-CleartextStorage
- CWE-326-WeakCryptoKey
- CWE-327-BrokenCryptoAlgorithm
- CWE-327-InsecureDefaultProtocol
- CWE-327-InsecureProtocol
- CWE-327-WeakSensitiveDataHashing
- CWE-377-InsecureTemporaryFile
- CWE-502-UnsafeDeserialization
- CWE-601-UrlRedirect
- CWE-611-Xxe
- CWE-643-XPathInjection
- CWE-730-PolynomialReDoS
- CWE-730-ReDoS
- CWE-730-RegexInjection
- CWE-732-WeakFilePermissions
- CWE-776-XmlBomb
- CWE-798-HardcodedCredentials
- CWE-942-CorsMisconfigurationMiddleware
- Statements
- ReturnOrYieldOutsideFunction
- asserts
- exit
- general
- no_effect
- unreachable_nonlocal
- unreachable
- Testing
- Variables
- general
- multiple
- undefined
- unused_local_nonlocal
- unused
- analysis/pointsto
- ruby/ql/test/query-tests
- experimental
- CWE-522-DecompressionBombs
- ImproperLdapAuth
- InsecureRandomness
- LdapInjection
- TemplateInjection
- XPathInjection
- cwe-022-ZipSlip
- cwe-347
- cwe-502
- manually-check-http-verb
- weak-params
- performance/UseDetect
- security
- cwe-020
- IncompleteHostnameRegExp
- IncompleteUrlSubstringSanitization
- MissingFullAnchor
- impl
- MissingRegExpAnchor
- SuspiciousRegexpRange
- cwe-078
- KernelOpen
- NonConstantKernelOpen
- UnsafeShellCommandConstruction
- impl
- sub
- cwe-079
- lib
- cwe-089
- cwe-094/UnsafeCodeConstruction
- impl
- cwe-116
- BadTagFilter
- IncompleteSanitization
- cwe-117
- app/controllers
- cwe-1333-exponential-redos
- cwe-1333-polynomial-redos
- lib
- cwe-1333-regexp-injection
- cwe-134
- cwe-209
- cwe-295
- cwe-312
- app
- controllers
- models
- cwe-327
- cwe-352
- railsapp
- app/controllers
- config
- environments
- cwe-502
- oj-global-options
- ox-global-options
- unsafe-deserialization
- cwe-506
- cwe-598
- app/controllers
- cwe-601
- cwe-611
- libxml-backend
- xxe
- cwe-732
- app/config
- cwe-798
- cwe-807-user-controlled-bypass
- cwe-912
- cwe-915
- cwe-918
- decompression-api
- swift/ql/test/query-tests/Security
- CWE-020
- CWE-022/UnsafeUnpack
- CWE-079
- CWE-089
- CWE-116
- CWE-1204
- CWE-1333
- CWE-134
- CWE-259
- CWE-311
- CWE-312
- CWE-327
- CWE-328
- CWE-730
- CWE-760
- CWE-916
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Lines changed: 5 additions & 5 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
6 | | - | |
| 6 | + | |
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | | - | |
| 11 | + | |
12 | 12 | | |
13 | | - | |
| 13 | + | |
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
| |||
26 | 26 | | |
27 | 27 | | |
28 | 28 | | |
29 | | - | |
| 29 | + | |
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
33 | | - | |
| 33 | + | |
34 | 34 | | |
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
1 | 4 | | |
2 | 5 | | |
3 | 6 | | |
| |||
10 | 13 | | |
11 | 14 | | |
12 | 15 | | |
13 | | - | |
14 | | - | |
15 | | - | |
Lines changed: 1 addition & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
| 2 | + | |
Lines changed: 6 additions & 6 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
1 | 7 | | |
2 | 8 | | |
3 | 9 | | |
| |||
13 | 19 | | |
14 | 20 | | |
15 | 21 | | |
16 | | - | |
17 | | - | |
18 | | - | |
19 | | - | |
20 | | - | |
21 | | - | |
Lines changed: 1 addition & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
| 2 | + | |
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
1 | 3 | | |
2 | 4 | | |
3 | 5 | | |
| |||
8 | 10 | | |
9 | 11 | | |
10 | 12 | | |
11 | | - | |
12 | | - | |
Lines changed: 1 addition & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
| 2 | + | |
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
1 | 3 | | |
2 | 4 | | |
3 | 5 | | |
| |||
20 | 22 | | |
21 | 23 | | |
22 | 24 | | |
23 | | - | |
24 | | - | |
Lines changed: 1 addition & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
| 2 | + | |
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
1 | 3 | | |
2 | 4 | | |
3 | 5 | | |
| |||
8 | 10 | | |
9 | 11 | | |
10 | 12 | | |
11 | | - | |
12 | | - | |
0 commit comments