diff --git a/.codeqlversion b/.codeqlversion index 28e81542..f34083e0 100644 --- a/.codeqlversion +++ b/.codeqlversion @@ -1 +1 @@ -2.25.6 +2.26.1 diff --git a/.release.yml b/.release.yml index 1497be2d..e94e692b 100644 --- a/.release.yml +++ b/.release.yml @@ -1,6 +1,6 @@ name: "CodeQL Community Packs" repository: "githubsecuritylab/codeql-community-packs" -version: "0.6.0" +version: "0.7.0" prerelease: false ecosystem: CodeQL diff --git a/cpp/lib/codeql-pack.lock.yml b/cpp/lib/codeql-pack.lock.yml index 86c8018c..613f91d6 100644 --- a/cpp/lib/codeql-pack.lock.yml +++ b/cpp/lib/codeql-pack.lock.yml @@ -2,27 +2,27 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/cpp-all: - version: 10.2.0 + version: 12.0.0 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/quantum: - version: 0.0.29 + version: 0.0.31 codeql/rangeanalysis: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typeflow: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/cpp/lib/qlpack.yml b/cpp/lib/qlpack.yml index 7ff345d9..5243151f 100644 --- a/cpp/lib/qlpack.yml +++ b/cpp/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-cpp-libs -version: 0.6.0 +version: 0.7.0 dependencies: - codeql/cpp-all: '10.2.0' + codeql/cpp-all: '12.0.0' diff --git a/cpp/src/codeql-pack.lock.yml b/cpp/src/codeql-pack.lock.yml index a8be7629..f7cfc4e0 100644 --- a/cpp/src/codeql-pack.lock.yml +++ b/cpp/src/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/cpp-all: - version: 10.2.0 + version: 12.0.0 codeql/cpp-queries: - version: 1.6.4 + version: 1.7.0 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/quantum: - version: 0.0.29 + version: 0.0.31 codeql/rangeanalysis: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/suite-helpers: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typeflow: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/cpp/src/qlpack.yml b/cpp/src/qlpack.yml index a2030787..702003ae 100644 --- a/cpp/src/qlpack.yml +++ b/cpp/src/qlpack.yml @@ -1,9 +1,9 @@ library: false name: githubsecuritylab/codeql-cpp-queries -version: 0.6.0 +version: 0.7.0 suites: suites defaultSuiteFile: suites/cpp.qls dependencies: - codeql/cpp-all: '10.2.0' - codeql/cpp-queries: '1.6.4' + codeql/cpp-all: '12.0.0' + codeql/cpp-queries: '1.7.0' githubsecuritylab/codeql-cpp-libs: '*' diff --git a/cpp/test/codeql-pack.lock.yml b/cpp/test/codeql-pack.lock.yml index a8be7629..f7cfc4e0 100644 --- a/cpp/test/codeql-pack.lock.yml +++ b/cpp/test/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/cpp-all: - version: 10.2.0 + version: 12.0.0 codeql/cpp-queries: - version: 1.6.4 + version: 1.7.0 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/quantum: - version: 0.0.29 + version: 0.0.31 codeql/rangeanalysis: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/suite-helpers: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typeflow: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/cpp/test/qlpack.yml b/cpp/test/qlpack.yml index d5a15910..f1e84cee 100644 --- a/cpp/test/qlpack.yml +++ b/cpp/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-cpp-tests groups: [cpp, test] dependencies: - codeql/cpp-all: '10.2.0' - codeql/cpp-queries: '1.6.4' + codeql/cpp-all: '12.0.0' + codeql/cpp-queries: '1.7.0' githubsecuritylab/codeql-cpp-queries: '*' githubsecuritylab/codeql-cpp-libs: '*' extractor: cpp diff --git a/csharp/ext-library-sources/qlpack.yml b/csharp/ext-library-sources/qlpack.yml index 5a606ed2..6cef65f6 100644 --- a/csharp/ext-library-sources/qlpack.yml +++ b/csharp/ext-library-sources/qlpack.yml @@ -1,8 +1,8 @@ library: true name: githubsecuritylab/codeql-csharp-library-sources -version: 0.6.0 +version: 0.7.0 extensionTargets: - codeql/csharp-all: '6.0.2' + codeql/csharp-all: '7.1.0' dataExtensions: - 'manual/*.yml' - 'manual/**/*.yml' diff --git a/csharp/ext/qlpack.yml b/csharp/ext/qlpack.yml index ab9b9b67..98df023c 100644 --- a/csharp/ext/qlpack.yml +++ b/csharp/ext/qlpack.yml @@ -1,8 +1,8 @@ library: true name: githubsecuritylab/codeql-csharp-extensions -version: 0.6.0 +version: 0.7.0 extensionTargets: - codeql/csharp-all: '6.0.2' + codeql/csharp-all: '7.1.0' dataExtensions: - 'manual/*.yml' - 'manual/**/*.yml' diff --git a/csharp/lib/codeql-pack.lock.yml b/csharp/lib/codeql-pack.lock.yml index 66e94d4f..b6843f95 100644 --- a/csharp/lib/codeql-pack.lock.yml +++ b/csharp/lib/codeql-pack.lock.yml @@ -2,23 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/csharp-all: - version: 6.0.2 + version: 7.1.0 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 + codeql/rangeanalysis: + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/csharp/lib/qlpack.yml b/csharp/lib/qlpack.yml index e1c32b80..c41d5005 100644 --- a/csharp/lib/qlpack.yml +++ b/csharp/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-csharp-libs -version: 0.6.0 +version: 0.7.0 dependencies: - codeql/csharp-all: "6.0.2" + codeql/csharp-all: "7.1.0" diff --git a/csharp/src/codeql-pack.lock.yml b/csharp/src/codeql-pack.lock.yml index d7d2a1b8..7d4ec471 100644 --- a/csharp/src/codeql-pack.lock.yml +++ b/csharp/src/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/csharp-all: - version: 6.0.2 + version: 7.1.0 codeql/csharp-queries: - version: 1.7.4 + version: 1.8.0 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 + codeql/rangeanalysis: + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/suite-helpers: - version: 1.0.51 + version: 1.0.53 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/csharp/src/qlpack.yml b/csharp/src/qlpack.yml index fdde8ef7..05936423 100644 --- a/csharp/src/qlpack.yml +++ b/csharp/src/qlpack.yml @@ -1,9 +1,9 @@ library: false name: githubsecuritylab/codeql-csharp-queries -version: 0.6.0 +version: 0.7.0 suites: suites defaultSuiteFile: suites/csharp.qls dependencies: - codeql/csharp-all: "6.0.2" - codeql/csharp-queries: "1.7.4" # Required for Dependencies.ql + codeql/csharp-all: "7.1.0" + codeql/csharp-queries: "1.8.0" # Required for Dependencies.ql githubsecuritylab/codeql-csharp-libs: "*" diff --git a/csharp/test/codeql-pack.lock.yml b/csharp/test/codeql-pack.lock.yml index d7d2a1b8..7d4ec471 100644 --- a/csharp/test/codeql-pack.lock.yml +++ b/csharp/test/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/csharp-all: - version: 6.0.2 + version: 7.1.0 codeql/csharp-queries: - version: 1.7.4 + version: 1.8.0 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 + codeql/rangeanalysis: + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/suite-helpers: - version: 1.0.51 + version: 1.0.53 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/csharp/test/qlpack.yml b/csharp/test/qlpack.yml index ec26637b..63c4d5d4 100644 --- a/csharp/test/qlpack.yml +++ b/csharp/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-csharp-tests groups: [csharp, test] dependencies: - codeql/csharp-all: "6.0.2" - codeql/csharp-queries: "1.7.4" + codeql/csharp-all: "7.1.0" + codeql/csharp-queries: "1.8.0" githubsecuritylab/codeql-csharp-extensions: "*" githubsecuritylab/codeql-csharp-library-sources: "*" githubsecuritylab/codeql-csharp-libs: "*" diff --git a/go/ext/qlpack.yml b/go/ext/qlpack.yml index 1fdb83be..598fdd00 100644 --- a/go/ext/qlpack.yml +++ b/go/ext/qlpack.yml @@ -1,8 +1,8 @@ library: true name: githubsecuritylab/codeql-go-extensions -version: 0.6.0 +version: 0.7.0 extensionTargets: - codeql/go-all: '7.1.2' + codeql/go-all: '7.2.1' dataExtensions: - 'manual/*.yml' - 'manual/**/*.yml' diff --git a/go/lib/codeql-pack.lock.yml b/go/lib/codeql-pack.lock.yml index baa24848..53d9590f 100644 --- a/go/lib/codeql-pack.lock.yml +++ b/go/lib/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/go-all: - version: 7.1.2 + version: 7.2.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 compiled: false diff --git a/go/lib/qlpack.yml b/go/lib/qlpack.yml index 9b21126b..1029bc21 100644 --- a/go/lib/qlpack.yml +++ b/go/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-go-libs -version: 0.6.0 +version: 0.7.0 dependencies: - codeql/go-all: '7.1.2' + codeql/go-all: '7.2.1' diff --git a/go/src/codeql-pack.lock.yml b/go/src/codeql-pack.lock.yml index baa24848..53d9590f 100644 --- a/go/src/codeql-pack.lock.yml +++ b/go/src/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/go-all: - version: 7.1.2 + version: 7.2.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 compiled: false diff --git a/go/src/qlpack.yml b/go/src/qlpack.yml index d462749b..2521262c 100644 --- a/go/src/qlpack.yml +++ b/go/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-go-queries -version: 0.6.0 +version: 0.7.0 suites: suites defaultSuiteFile: suites/go.qls dependencies: - codeql/go-all: '7.1.2' + codeql/go-all: '7.2.1' githubsecuritylab/codeql-go-libs: '*' diff --git a/go/test/codeql-pack.lock.yml b/go/test/codeql-pack.lock.yml index baa24848..53d9590f 100644 --- a/go/test/codeql-pack.lock.yml +++ b/go/test/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/go-all: - version: 7.1.2 + version: 7.2.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 compiled: false diff --git a/go/test/qlpack.yml b/go/test/qlpack.yml index 70b69ad1..bc34fe1f 100644 --- a/go/test/qlpack.yml +++ b/go/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecurtylab/codeql-go-tests groups: [go, test] dependencies: - codeql/go-all: '7.1.2' + codeql/go-all: '7.2.1' # codeql/go-queries: '*' githubsecuritylab/codeql-go-queries: '*' githubsecuritylab/codeql-go-libs: '*' diff --git a/go/test/security/CWE-078/cmdi.expected b/go/test/security/CWE-078/cmdi.expected index cdc0ead3..1ec0670b 100644 --- a/go/test/security/CWE-078/cmdi.expected +++ b/go/test/security/CWE-078/cmdi.expected @@ -1,6 +1,6 @@ edges -| main.go:20:14:20:20 | selection of URL | main.go:20:14:20:28 | call to Query | provenance | Src:MaD:1932 MaD:1993 | -| main.go:20:14:20:28 | call to Query | main.go:27:22:27:28 | cmdName | provenance | Sink:MaD:2003 | +| main.go:20:14:20:20 | selection of URL | main.go:20:14:20:28 | call to Query | provenance | Src:MaD:1968 MaD:2029 | +| main.go:20:14:20:28 | call to Query | main.go:27:22:27:28 | cmdName | provenance | Sink:MaD:2039 | nodes | main.go:20:14:20:20 | selection of URL | semmle.label | selection of URL | | main.go:20:14:20:28 | call to Query | semmle.label | call to Query | diff --git a/java/ext-library-sources/qlpack.yml b/java/ext-library-sources/qlpack.yml index 85592865..a9fe0a24 100644 --- a/java/ext-library-sources/qlpack.yml +++ b/java/ext-library-sources/qlpack.yml @@ -1,8 +1,8 @@ library: true name: githubsecuritylab/codeql-java-library-sources -version: 0.6.0 +version: 0.7.0 extensionTargets: - codeql/java-all: '9.1.2' + codeql/java-all: '9.2.1' dataExtensions: - 'manual/*.yml' - 'manual/**/*.yml' diff --git a/java/ext/qlpack.yml b/java/ext/qlpack.yml index 23952823..ba42a30f 100644 --- a/java/ext/qlpack.yml +++ b/java/ext/qlpack.yml @@ -1,8 +1,8 @@ library: true name: githubsecuritylab/codeql-java-extensions -version: 0.6.0 +version: 0.7.0 extensionTargets: - codeql/java-all: '9.1.2' + codeql/java-all: '9.2.1' dataExtensions: - 'manual/*.yml' - 'manual/**/*.yml' diff --git a/java/lib/codeql-pack.lock.yml b/java/lib/codeql-pack.lock.yml index f26fa1ca..d6113b60 100644 --- a/java/lib/codeql-pack.lock.yml +++ b/java/lib/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/java-all: - version: 9.1.2 + version: 9.2.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/quantum: - version: 0.0.29 + version: 0.0.31 codeql/rangeanalysis: - version: 1.0.51 + version: 1.0.53 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typeflow: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/java/lib/qlpack.yml b/java/lib/qlpack.yml index 9d5a9236..73708ad2 100644 --- a/java/lib/qlpack.yml +++ b/java/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-java-libs -version: 0.6.0 +version: 0.7.0 dependencies: - codeql/java-all: '9.1.2' + codeql/java-all: '9.2.1' diff --git a/java/src/codeql-pack.lock.yml b/java/src/codeql-pack.lock.yml index f26fa1ca..d6113b60 100644 --- a/java/src/codeql-pack.lock.yml +++ b/java/src/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/java-all: - version: 9.1.2 + version: 9.2.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/quantum: - version: 0.0.29 + version: 0.0.31 codeql/rangeanalysis: - version: 1.0.51 + version: 1.0.53 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typeflow: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/java/src/qlpack.yml b/java/src/qlpack.yml index 6a349688..67a2741c 100644 --- a/java/src/qlpack.yml +++ b/java/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-java-queries -version: 0.6.0 +version: 0.7.0 suites: suites defaultSuiteFile: suites/java.qls dependencies: - codeql/java-all: '9.1.2' + codeql/java-all: '9.2.1' githubsecuritylab/codeql-java-libs: '*' diff --git a/java/test/codeql-pack.lock.yml b/java/test/codeql-pack.lock.yml index f26fa1ca..d6113b60 100644 --- a/java/test/codeql-pack.lock.yml +++ b/java/test/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/java-all: - version: 9.1.2 + version: 9.2.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/quantum: - version: 0.0.29 + version: 0.0.31 codeql/rangeanalysis: - version: 1.0.51 + version: 1.0.53 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typeflow: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/java/test/qlpack.yml b/java/test/qlpack.yml index aa5b6e4d..d00d11bd 100644 --- a/java/test/qlpack.yml +++ b/java/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecurtylab/codeql-java-tests groups: [java, test] dependencies: - codeql/java-all: '9.1.2' + codeql/java-all: '9.2.1' githubsecuritylab/codeql-java-queries: '*' githubsecuritylab/codeql-java-libs: '*' githubsecuritylab/codeql-java-library-sources: '*' diff --git a/javascript/lib/codeql-pack.lock.yml b/javascript/lib/codeql-pack.lock.yml index fd2051e9..fa26cd89 100644 --- a/javascript/lib/codeql-pack.lock.yml +++ b/javascript/lib/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/javascript-all: - version: 2.7.2 + version: 2.8.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 codeql/yaml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/javascript/lib/qlpack.yml b/javascript/lib/qlpack.yml index d0ecf6f6..be1cb80e 100644 --- a/javascript/lib/qlpack.yml +++ b/javascript/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-javascript-libs -version: 0.6.0 +version: 0.7.0 dependencies: - codeql/javascript-all: '2.7.2' + codeql/javascript-all: '2.8.1' diff --git a/javascript/src/codeql-pack.lock.yml b/javascript/src/codeql-pack.lock.yml index fd2051e9..fa26cd89 100644 --- a/javascript/src/codeql-pack.lock.yml +++ b/javascript/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/javascript-all: - version: 2.7.2 + version: 2.8.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 codeql/yaml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/javascript/src/qlpack.yml b/javascript/src/qlpack.yml index 44d0415e..e629e06b 100644 --- a/javascript/src/qlpack.yml +++ b/javascript/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-javascript-queries -version: 0.6.0 +version: 0.7.0 suites: suites defaultSuiteFile: suites/javascript.qls dependencies: - codeql/javascript-all: '2.7.2' + codeql/javascript-all: '2.8.1' githubsecuritylab/codeql-javascript-libs: '*' diff --git a/javascript/test/codeql-pack.lock.yml b/javascript/test/codeql-pack.lock.yml index fd2051e9..fa26cd89 100644 --- a/javascript/test/codeql-pack.lock.yml +++ b/javascript/test/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/javascript-all: - version: 2.7.2 + version: 2.8.1 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 codeql/yaml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/javascript/test/qlpack.yml b/javascript/test/qlpack.yml index c0ee3063..c3763f65 100644 --- a/javascript/test/qlpack.yml +++ b/javascript/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecuritylab/codeql-javascript-tests groups: [javascript, test] dependencies: - codeql/javascript-all: "2.7.2" + codeql/javascript-all: "2.8.1" githubsecuritylab/codeql-javascript-queries: "*" extractor: javascript diff --git a/python/ext/qlpack.yml b/python/ext/qlpack.yml index bd64d456..2a447d0c 100644 --- a/python/ext/qlpack.yml +++ b/python/ext/qlpack.yml @@ -1,8 +1,8 @@ library: true name: githubsecuritylab/codeql-python-extensions -version: 0.6.0 +version: 0.7.0 extensionTargets: - codeql/python-all: '7.1.2' + codeql/python-all: '7.2.1' dataExtensions: - 'manual/*.yml' - 'manual/**/*.yml' diff --git a/python/lib/codeql-pack.lock.yml b/python/lib/codeql-pack.lock.yml index 8a2a1ee0..53120e42 100644 --- a/python/lib/codeql-pack.lock.yml +++ b/python/lib/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/python-all: - version: 7.1.2 + version: 7.2.1 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 codeql/yaml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/python/lib/ghsl/DefaultPasswordDB.qll b/python/lib/ghsl/DefaultPasswordDB.qll index fd70bb1a..1b6b4647 100644 --- a/python/lib/ghsl/DefaultPasswordDB.qll +++ b/python/lib/ghsl/DefaultPasswordDB.qll @@ -11,7 +11,7 @@ class DBColumn extends Call { DBColumn() { call.getFunction().(AttrNode).getObject(name) = object and name = "Column" and - call = this.getAFlowNode() and + call.getNode() = this and object.getNode() = var.getVariable().getAnAccess() and var.getId() = id } diff --git a/python/lib/ghsl/InsecurelyStoredPassword.qll b/python/lib/ghsl/InsecurelyStoredPassword.qll index 44cd23b8..38991fa1 100644 --- a/python/lib/ghsl/InsecurelyStoredPassword.qll +++ b/python/lib/ghsl/InsecurelyStoredPassword.qll @@ -17,7 +17,10 @@ class User extends ClassDef { this.getDefinedClass() = class_ and class_.getName() = name and class_.getABase() = base and - base.getAFlowNode().(ControlFlowNodeWithPointsTo).pointsTo(ref) and + exists(ControlFlowNodeWithPointsTo baseFlowNode | + baseFlowNode.getNode() = base and + baseFlowNode.pointsTo(ref) + ) and ( ref.getName() = "UserMixin" and password_variable = "password" diff --git a/python/lib/qlpack.yml b/python/lib/qlpack.yml index 9a956f7b..ce4fcfac 100644 --- a/python/lib/qlpack.yml +++ b/python/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-python-libs -version: 0.6.0 +version: 0.7.0 dependencies: - codeql/python-all: '7.1.2' + codeql/python-all: '7.2.1' diff --git a/python/src/codeql-pack.lock.yml b/python/src/codeql-pack.lock.yml index 8a2a1ee0..53120e42 100644 --- a/python/src/codeql-pack.lock.yml +++ b/python/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/python-all: - version: 7.1.2 + version: 7.2.1 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 codeql/yaml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/python/src/qlpack.yml b/python/src/qlpack.yml index eb6543d6..53761efd 100644 --- a/python/src/qlpack.yml +++ b/python/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-python-queries -version: 0.6.0 +version: 0.7.0 suites: suites defaultSuiteFile: suites/python.qls dependencies: - codeql/python-all: '7.1.2' + codeql/python-all: '7.2.1' githubsecuritylab/codeql-python-libs: '*' diff --git a/python/test/codeql-pack.lock.yml b/python/test/codeql-pack.lock.yml index 38c6d997..514dfd5d 100644 --- a/python/test/codeql-pack.lock.yml +++ b/python/test/codeql-pack.lock.yml @@ -2,33 +2,33 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 codeql/python-all: - version: 7.1.2 + version: 7.2.1 codeql/python-queries: - version: 1.8.4 + version: 1.8.6 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/suite-helpers: - version: 1.0.51 + version: 1.0.53 codeql/threat-models: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 codeql/xml: - version: 1.0.51 + version: 1.0.53 codeql/yaml: - version: 1.0.51 + version: 1.0.53 compiled: false diff --git a/python/test/qlpack.yml b/python/test/qlpack.yml index 9899de86..49662985 100644 --- a/python/test/qlpack.yml +++ b/python/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-python-tests groups: [python, test] dependencies: - codeql/python-all: '7.1.2' - codeql/python-queries: '1.8.4' + codeql/python-all: '7.2.1' + codeql/python-queries: '1.8.6' githubsecuritylab/codeql-python-queries: '*' githubsecuritylab/codeql-python-libs: '*' extractor: python diff --git a/ruby/lib/codeql-pack.lock.yml b/ruby/lib/codeql-pack.lock.yml index 0a9ce166..4f0b7ce0 100644 --- a/ruby/lib/codeql-pack.lock.yml +++ b/ruby/lib/codeql-pack.lock.yml @@ -2,23 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 + codeql/namebinding: + version: 0.0.2 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ruby-all: - version: 5.2.2 + version: 6.0.1 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 compiled: false diff --git a/ruby/lib/qlpack.yml b/ruby/lib/qlpack.yml index 7d51dd4c..0c62ae20 100644 --- a/ruby/lib/qlpack.yml +++ b/ruby/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-ruby-libs -version: 0.6.0 +version: 0.7.0 dependencies: - codeql/ruby-all: '5.2.2' + codeql/ruby-all: '6.0.1' diff --git a/ruby/src/codeql-pack.lock.yml b/ruby/src/codeql-pack.lock.yml index 0a9ce166..4f0b7ce0 100644 --- a/ruby/src/codeql-pack.lock.yml +++ b/ruby/src/codeql-pack.lock.yml @@ -2,23 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 + codeql/namebinding: + version: 0.0.2 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ruby-all: - version: 5.2.2 + version: 6.0.1 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 compiled: false diff --git a/ruby/src/qlpack.yml b/ruby/src/qlpack.yml index 4feb6efd..10c0d87e 100644 --- a/ruby/src/qlpack.yml +++ b/ruby/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-ruby-queries -version: 0.6.0 +version: 0.7.0 suites: suites defaultSuiteFile: suites/ruby.qls dependencies: - codeql/ruby-all: '5.2.2' + codeql/ruby-all: '6.0.1' githubsecuritylab/codeql-ruby-libs: '*' diff --git a/ruby/test/codeql-pack.lock.yml b/ruby/test/codeql-pack.lock.yml index f6d4383d..4d03ef44 100644 --- a/ruby/test/codeql-pack.lock.yml +++ b/ruby/test/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.25 + version: 0.0.27 codeql/controlflow: - version: 2.0.35 + version: 2.0.37 codeql/dataflow: - version: 2.1.7 + version: 2.1.9 codeql/mad: - version: 1.0.51 + version: 1.0.53 + codeql/namebinding: + version: 0.0.2 codeql/regex: - version: 1.0.51 + version: 1.0.53 codeql/ruby-all: - version: 5.2.2 + version: 6.0.1 codeql/ruby-queries: - version: 1.6.4 + version: 1.6.6 codeql/ssa: - version: 2.0.27 + version: 2.0.29 codeql/suite-helpers: - version: 1.0.51 + version: 1.0.53 codeql/tutorial: - version: 1.0.51 + version: 1.0.53 codeql/typetracking: - version: 2.0.35 + version: 2.0.37 codeql/util: - version: 2.0.38 + version: 2.0.40 compiled: false diff --git a/ruby/test/qlpack.yml b/ruby/test/qlpack.yml index 23eec656..26be31c5 100644 --- a/ruby/test/qlpack.yml +++ b/ruby/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-ruby-tests groups: [ruby, test] dependencies: - codeql/ruby-all: '5.2.2' - codeql/ruby-queries: '1.6.4' + codeql/ruby-all: '6.0.1' + codeql/ruby-queries: '1.6.6' githubsecuritylab/codeql-ruby-queries: '*' githubsecuritylab/codeql-ruby-libs: '*' extractor: ruby