The Wayback Machine - https://web.archive.org/web/20210214042552/https://github.com/github/codeql-go/commits/main
Skip to content

/ codeql-go

Permalink
main

Commits on Feb 13, 2021

  1. Merge pull request #476 from owen-mc/model-zap 

    Model zap
    @owen-mc
    owen-mc committed Feb 13, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    4a2a187

Commits on Feb 11, 2021

  1. Model zap

    @owen-mc
    owen-mc committed Feb 11, 2021
    Loading status checks…
    1dc4746

  2. Merge pull request #474 from sauyon/update-codeql 

    Update actions codeql to 2.4.3
    @smowton
    smowton committed Feb 11, 2021
    Loading status checks…
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    b9a1d9a

  3. Merge pull request #442 from monkey-junkie/main 

    [CWE-369] Query for divide by zero detection
    @smowton
    smowton committed Feb 11, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    2d08173

Commits on Feb 10, 2021

  1. Update actions codeql to 2.4.3

    @sauyon
    sauyon committed Feb 10, 2021
    Loading status checks…
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    9452df1

  2. Merge pull request #465 from smowton/smowton/feature/less-equality-te… 

    …st-panic-edges

Remove panicking edges leading from an equality test where possible
    @smowton
    smowton committed Feb 10, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    617b551

Commits on Feb 9, 2021

  1. tests and docs updated

    user
    user committed Feb 9, 2021
    Loading status checks…
    c29ab89

  2. formatting + example 

    fix

test fix

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.qhelp

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.qhelp

Co-authored-by: Chris Smowton <[email protected]>
    Your Name @smowton
    Your Name and smowton committed Feb 9, 2021
    4b24e56

  3. test fixed, comments added 

    Update ql/src/experimental/CWE-369/DivideByZero.qhelp

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.qhelp

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.qhelp

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>
    Your Name @smowton
    Your Name and smowton committed Feb 9, 2021
    bd09868

  4. test fixed 

    Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>
    Your Name @smowton
    Your Name and smowton committed Feb 9, 2021
    8c5e0a4

  5. conversion detect + tests

    Your Name
    Your Name committed Feb 9, 2021
    41e808d

  6. formatting fix 

    Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>

Update ql/src/experimental/CWE-369/DivideByZero.ql

Co-authored-by: Chris Smowton <[email protected]>
    Your Name @smowton
    Your Name and smowton committed Feb 9, 2021
    a77f36f

  7. Merge pull request #470 from sauyon/go116flagadd 

    Add -overlay to recognized go build flags
    @smowton
    smowton committed Feb 9, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    1b9abc5

  8. Add -overlay to recognized go build flags

    @sauyon
    sauyon committed Feb 9, 2021
    Loading status checks…
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    8c60c61

  9. Merge pull request #469 from github/owen-mc-code-owners-file 

    Create CODEOWNERS
    @owen-mc
    owen-mc committed Feb 9, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    abf59ec

  10. Create CODEOWNERS 

    This is so that `@codeql-go` is automatically suggested as a reviewer for PRs
    @owen-mc
    owen-mc committed Feb 9, 2021
    Loading status checks…
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    5cab5b2

  11. Merge pull request #466 from smowton/smowton/fix/remove-html-template… 

    …-models

Remove models for html/template execution
    @smowton
    smowton committed Feb 9, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    9a919cc

Commits on Feb 8, 2021

  1. Remove models for html/template execution 

    These escape HTML and JavaScript anyhow; because they don't write to their return value they don't quite fit the form of EscapeFunction, so to be expedient I've simply removed their models entirely. Presumably the case where someone HTML-templates something and then uses it for a purpose where HTML sanitisation is insufficient is very rare anyhow.
    @smowton
    smowton committed Feb 8, 2021
    Loading status checks…
    02d21cf

Commits on Feb 6, 2021

  1. Merge pull request #455 from sauyon/insecure-rng 

    Promote Insecure RNG Query
    @sauyon
    sauyon committed Feb 6, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    a325161

  2. InsecureRNG: Select first result in fn only

    @sauyon
    sauyon committed Feb 6, 2021
    Loading status checks…
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    00e5b7c

Commits on Feb 4, 2021

  1. Remove panicking edges leading from an equality test where possible 

    These exist because an equality comparison of explicitly-incomparable interface values can panic, as can comparisons of arrays or structs containing them. Other type comparisons cannot panic.
    @smowton
    smowton committed Feb 4, 2021
    Loading status checks…
    42ff256

Commits on Feb 2, 2021

  1. Move insecure randomness query to cwe-338 

    Also give it a precision
    @sauyon
    sauyon committed Feb 2, 2021
    Loading status checks…
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    73dc135

  2. Polish insecure randomness query

    @sauyon
    sauyon committed Feb 2, 2021
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    82bd293

Commits on Feb 1, 2021

  1. Move InsecureRandomness out of experimental

    @sauyon
    sauyon committed Feb 1, 2021
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    cfb9593

Commits on Jan 28, 2021

  1. Merge pull request #437 from sauyon/goproxy 

    Model elazarl/goproxy
    @sauyon
    sauyon committed Jan 28, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    48a52cf

Commits on Jan 27, 2021

  1. Merge pull request #451 from sauyon/gokit 

    Add gokit models
    @smowton
    smowton committed Jan 27, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    93aaa74

  2. Add change note for goproxy modeling

    @sauyon
    sauyon committed Jan 27, 2021
    Loading status checks…
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    fb84df2

  3. Make InsecureHostnameRegex check for rejecting handlers

    @sauyon
    sauyon committed Jan 27, 2021
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    53b4681

  4. Add models for github.com/elazarl/goproxy

    @sauyon
    sauyon committed Jan 27, 2021
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    4712afa

  5. Add model for net/http.Error

    @sauyon
    sauyon committed Jan 27, 2021
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    b0ddf4b

  6. Add getHeaderValue predicate to HTTP::HeaderWrite

    @sauyon
    sauyon committed Jan 27, 2021
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    bf9bba7

  7. Add HTTP handler concept

    @sauyon
    sauyon committed Jan 27, 2021
    Unverified
    This user has not uploaded their public key yet.
    GPG key ID: 334CB3C2DDC0AEC9 Learn about signing commits
    39c33c5

Commits on Jan 26, 2021

  1. Merge pull request #461 from owen-mc/avoid-unused-barrier-guards-in-s… 

    …cope

Move reused barrier guards into separate files
    @owen-mc
    owen-mc committed Jan 26, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    b76ff0d

Commits on Jan 25, 2021

  1. Move reused barrier guards into separate files 

    This way only the barrier guards that are used will be imported.
This is important because of the comment above BarrierGuard, which
warns about the potential danger of having classes that extend
BarrierGuard in scope which are not used.
    @owen-mc
    owen-mc committed Jan 25, 2021
    Loading status checks…
    bf0f0af

  2. Merge pull request #462 from owen-mc/make-path-containment-check-more… 

    …-specific

Make PathContainmentCheck more specific
    @owen-mc
    owen-mc committed Jan 25, 2021
    Verified
    This commit was created on GitHub.com and signed with a verified signature using GitHub’s key.
    GPG key ID: 4AEE18F83AFDEB23 Learn about signing commits
    e55db63
Older