-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merge codeql-go repository into codeql #8631
Conversation
Improve performance: join-order AllocationSizeOverflow's source and use `matches` not `regexpFind`
…ns-for-builtin-functions Refactor isVariadic helper functions
Fix incorrect type name in database/sql model
Update dataflow libraries and add support for CSV summary flow
Add missing tests for DatabaseSql function models
Fix change notes
Release preparation for version 2.7.4
Co-authored-by: Owen Mansel-Chan <[email protected]>
…zers Fix sanitization by strings.Replace[All] in go/unsafe-quoting and go/log-injection
…ody" This reverts commit 06f889f.
In future we could try harder to find out whether you're Fprintf'ing to stdout, a file named xyz.log etc, but for now this causes Fprintf'ing to an HTTP writer to be mistaken for log-injection rather than just XSS.
Post-release preparation for codeql-cli-2.7.4
Move change notes to proper location
various automatic patches applied to codeql-go
Release preparation for version 2.7.5
Prior to this (a) Go will attempt to update go.mod/sum anyhow, and (b) the `mod tidy -e` option isn't available.
Run `go mod tidy -e` before building
Post-release preparation for codeql-cli-2.9.2
Update Lua tracing config.
There shouldn't be qhelp files in the ql/test tree. #8631 (comment)
This commit removes special handling of the github/codeql-go repository in the ql-for-ql-dataset_measure.yml and the query-list.yml workflows.
cf7a57d
to
097d518
Compare
b6ff2a0
to
7f96319
Compare
/** | ||
* Gets a child node of this node. | ||
*/ | ||
AstNode getAChild() { result = getChild(_) } |
Check warning
Code scanning / CodeQL
Using implicit `this`
/** | ||
* Gets the number of child nodes of this node. | ||
*/ | ||
int getNumChild() { result = count(getAChild()) } |
Check warning
Code scanning / CodeQL
Using implicit `this`
AstNode getUniquelyNumberedChild(int index) { | ||
result = | ||
rank[index + 1](AstNode child, string kind, int i | | ||
child = getChildOfKind(kind, i) |
Check warning
Code scanning / CodeQL
Using implicit `this`
|
||
/** Gets the parent node of this AST node, but without crossing function boundaries. */ | ||
private AstNode parentInSameFunction() { | ||
result = getParent() and |
Check warning
Code scanning / CodeQL
Using implicit `this`
} | ||
|
||
/** Gets the innermost function definition to which this AST node belongs, if any. */ | ||
FuncDef getEnclosingFunction() { result = getParent().parentInSameFunction*() } |
Check warning
Code scanning / CodeQL
Using implicit `this`
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good to go. The full diff is too large for the UI, but the partial diff looks reasonable, the contents of the go folder are what I expect, and relevant tests are passing. We can keep an eye out for follow-up cleanup.
This PR will be merged on 2022-05-23
For background, see announcement github/codeql-go#741
This PR merges the
github/codeql-go
repository intogithub/codeql
under thego
directory.The repository merge involves the following steps:
github/codeql-go:main
intogithub/codeql
as a new branch Bgo
directorygithub/codeql:main
into the branch BThe cklin/merge-codeql-go-prep branch contains steps 1–3.
The cklin/merge-codeql-go branch contains steps 1–4.
The following link shows only the commits in step 4, which is the more interesting part:
cklin/merge-codeql-go-prep...cklin/merge-codeql-go