Skip to content

Pull requests: github/codeql

New pull request New
Clear current search query, filters, and sorts
330 Open 12,840 Closed
330 Open 12,840 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Create SECURITY.dc
#3168 opened Mar 31, 2020 by wdcne Loading… updated Mar 31, 2020
1
Java: Extract module HardcodedCredentials from CWE-798
#3992 opened Jul 30, 2020 by rvermeulen • Draft updated Aug 14, 2020
10
Python: BufferedRWPair Undefined Behavior
#3884 opened Jul 3, 2020 by dilanbhalla Loading… updated Aug 14, 2020
10
Java: Arbitrary user-controlled read/write on user-controlled path Java
#3794 opened Jun 24, 2020 by intrigus-lgtm • Draft updated Aug 14, 2020
16
C++: Use TaintTracking::Configuration in TaintedAllocationSize C++ depends on internal PR This PR should only be merged in sync with an internal Semmle PR
#3519 opened May 19, 2020 by rdmarsh2 Loading… updated Aug 14, 2020
12
C#: Fix a database inconsistency caused by qualifiable delegate invocations C# depends on internal PR This PR should only be merged in sync with an internal Semmle PR
#2792 opened Feb 7, 2020 by calumgrant Loading… updated Aug 14, 2020
1
C#: New query cs/possibly-incorrect-variable
#2702 opened Jan 27, 2020 by calumgrant Loading… updated Aug 14, 2020
13
Insecure MemSet C++
#2207 opened Oct 25, 2019 by dave-bartolomeo • Draft updated Aug 14, 2020
5
QL training: C++ variant analysis slide deck
#1966 opened Sep 19, 2019 by lcartey • Draft updated Aug 14, 2020
2
[CPP-435] Calls to memset and ZeroMemory may be deleted by the compiler C++
#1933 opened Sep 13, 2019 by zlaski-semmle • Draft updated Aug 14, 2020
41
C++: Improve alias analysis for indirections C++
#1736 opened Aug 14, 2019 by dave-bartolomeo • Draft updated Aug 14, 2020
8
C#: New query cs/certificate-validation-disabled C#
#1643 opened Jul 28, 2019 by hvitved • Draft updated Aug 14, 2020
C#: Fix DB inconsistencies with extends/2
#2293 opened Nov 10, 2019 by calumgrant Loading… updated Aug 17, 2020
5
C++/C#: Remove Instruction::getResultType() and friends C# C++
#2217 opened Oct 28, 2019 by dave-bartolomeo Loading… updated Sep 25, 2020
@dbartol
9
C#: range analysis C# Java
#4194 opened Sep 2, 2020 by tamasvajk • Draft updated Sep 25, 2020
2
C++ Test PR: try replacing AST dataflow with IR dataflow in 1.24
#4526 opened Oct 20, 2020 by rdmarsh2 • Draft updated Oct 20, 2020
Java: add query to detect web.xml auth bypass through verb tampering Java
#3944 opened Jul 12, 2020 by porcupineyhairs • Draft updated Nov 12, 2020
@smowton
29
JS: sanitize taint in the LHS of && JS
#4681 opened Nov 17, 2020 by esbena • Draft updated Nov 17, 2020
Data flow: Add Ap column to localStep C# C++ Java Python
#4829 opened Dec 15, 2020 by hvitved • Draft updated Dec 16, 2020
C++/C#: Reuse some SSA def/use info from previous iteration C# C++
#3340 opened Apr 23, 2020 by dbartol • Draft updated Jan 25, 2021
4
Python: Better path explanations Python
#5057 opened Jan 29, 2021 by yoff • Draft updated Feb 16, 2021
11
Test: Simple change to Java folder documentation Java WIP This is a work-in-progress, do not merge yet!
#4248 opened Sep 10, 2020 by adityasharad • Draft updated Mar 10, 2021
4
JS: update externs from closure-compiler Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish JS WIP This is a work-in-progress, do not merge yet!
#4955 opened Jan 13, 2021 by erik-krogh • Draft updated Mar 11, 2021
2 tasks
Java: Add BoundedType.getTypeBound(int) Java
#5406 opened Mar 13, 2021 by Marcono1234 Loading… updated Mar 13, 2021
Java: Fix WildcardTypeAccess.hasNoBound() not considering ArrayTypeAccess Java no-change-note-required This PR does not need a change note
#5407 opened Mar 13, 2021 by Marcono1234 Loading… updated Mar 22, 2021
1
8
ProTip! Add no:assignee to see everything that’s not assigned.