Popular repositories
-
-
-
machinelearning Public
Forked from dotnet/machinelearning
ML.NET is an open source and cross-platform machine learning framework for .NET.
C# 1
-
-
vscode-codeql-starter Public
Forked from github/vscode-codeql-starter
Starter workspace to use with the CodeQL extension for Visual Studio Code.
CodeQL 1
-
vscode-codeql Public
Forked from github/vscode-codeql
An extension for Visual Studio Code that adds rich language support for CodeQL
TypeScript 1
1,248 contributions in the last year
Contribution activity
December 2022
Created 45 commits in 1 repository
Created a pull request in github/codeql that received 9 comments
Data flow: Track callable in flow-through pruning
This PR reverts commits 70d2a0d and bdb205a from #11087, which means that we go back to tracking parameters instead of parameter positions and retu…
Opened 10 other pull requests in 1 repository
github/codeql
2
open
7
merged
1
closed
- Ruby: Reimplement flow through captured variables using field flow
-
Ruby: Fix bug in call-sensitivity logic for
initializecalls -
Ruby: Recognize custom
self.newmethods that returnself.allocate -
Ruby: Ensure
Node::{toString,getLocation}are computed in data flow stage -
Data flow: Introduce
ApproxContentin a new pruning stage between stages 2 and 3 -
Ruby: Add
SummarizedCallable::getParameter -
Ruby: Fix bug in
TypeTrackerSpecific::returnStep - Data flow: Add consistency checks for parameter positions
-
CI: Change
--ramvalue from 52G to 50G incodeqltests - Data flow: More call context pruning
Reviewed 25 pull requests in 1 repository
github/codeql
25 pull requests
- C#/Java: Migrate tests to use implicitly loaded extensions.
- Java: Apply deadcode guard to data flow nodes.
-
C#: Re-factor and use
ForEach. - C#: Support List and Slice patterns.
-
Ruby: Model flow through
initializeconstructors - C#/Java: Rename externalflow extensible predicates
- Data flow: Track callable in flow-through pruning
- Java: Switch DispatchFlow to typetracking.
- Add TCP and UDP socket client taint sources
- Py/JS/RB: Use instanceof in more places
- Java/C#/GO: Use instanceof in more places
- Ruby: Make array inclusion barrier more sensitive
- C#/Java: Rename Negative Summary Model to Neutral Model
- Rb: add Kernel methods as sinks to path-injection
- Bump Newtonsoft.Json from 13.0.1 to 13.0.2 in /csharp/autobuilder/Semmle.Autobuild.CSharp
- JS: Move MaD models to data extensions
- C#: Pattern match Span<char> and ReadOnlySpan<char> against a constant string.
- C#: nint/System.IntPtr and nuint/System.UIntPtr are indistinguishable…
- Ruby: Include SSA "phi reads" in DataFlow::Node
- csharp: URI should be Uri in Owin.qll library.
- C#: Deprecate hasQualifiedName/1 and prepare for deprecating getQualifiedName/0.
- Java: Replace ad-hoc SCC reduction with union-find.
- Shared: Add a qlpack with a parameterized module defining type-trackers.
- Dynamic: Merge package and type columns
- Ruby: Active support enumerable