Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
997
Pull requests
454
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
cpp
ql
src
Security
on
codeql-cli/v2.15.5
User selector
All users
Datepicker
All time
Commit history
Commits on Nov 29, 2023
C++: Add GOOD and BAD comments to qhelp examples.
MathiasVP
committed
351caac
View commit details
Copy full SHA for 351caac
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for 8afd928
MathiasVP
and
felicitymay
authored
8afd928
View commit details
Copy full SHA for 8afd928
View code at this point
Browse repository at this point
Commits on Nov 28, 2023
C++: Add support for 'data' in the query.
MathiasVP
committed
2b36ba3
View commit details
Copy full SHA for 2b36ba3
View code at this point
Browse repository at this point
C++: Add qhelp.
MathiasVP
committed
71ad769
View commit details
Copy full SHA for 71ad769
View code at this point
Browse repository at this point
C++: Add a new query for detecting calls to 'c_str' on temporary objects.
MathiasVP
committed
204acba
View commit details
Copy full SHA for 204acba
View code at this point
Browse repository at this point
Commits on Nov 24, 2023
C++: No need to exclude ExprNodes as sources now that #14903 is merged.
MathiasVP
committed
73138f1
View commit details
Copy full SHA for 73138f1
View code at this point
Browse repository at this point
C++: Remove workaround for negated conditions in 'cpp/user-controlled-bypass'.
MathiasVP
committed
a7d820c
View commit details
Copy full SHA for a7d820c
View code at this point
Browse repository at this point
Merge pull request #14896 from MathiasVP/no-dtt-in-user-controlled-bypass
Show description for e438671
MathiasVP
authored
e438671
View commit details
Copy full SHA for e438671
View code at this point
Browse repository at this point
C++: Undo the workaround in 'cpp/tainted-permissions-check'.
MathiasVP
committed
2681617
View commit details
Copy full SHA for 2681617
View code at this point
Browse repository at this point
Commits on Nov 23, 2023
C++: Rewrite 'cpp/user-controlled-bypass' away from 'DefaultTaintTracking'.
MathiasVP
committed
5604fd7
View commit details
Copy full SHA for 5604fd7
View code at this point
Browse repository at this point
Merge pull request #14886 from jketema/rewrite-tainted-condition
Show description for 257d94b
MathiasVP
authored
257d94b
View commit details
Copy full SHA for 257d94b
View code at this point
Browse repository at this point
Merge pull request #14881 from MathiasVP/no-dtt-in-user-controlled-null-termination-tainted
Show description for 149fb7b
MathiasVP
authored
149fb7b
View commit details
Copy full SHA for 149fb7b
View code at this point
Browse repository at this point
Update cpp/ql/src/Security/CWE/CWE-170/ImproperNullTerminationTainted.ql
Show description for b774ae0
MathiasVP
and
jketema
authored
b774ae0
View commit details
Copy full SHA for b774ae0
View code at this point
Browse repository at this point
C++: Rewrite `cpp/tainted-permissions-check` to not use `DefaultTaintTracking`
jketema
committed
7834626
View commit details
Copy full SHA for 7834626
View code at this point
Browse repository at this point
Commits on Nov 22, 2023
C++: Rewrite `cpp/tainted-format-string` away from `DefaultTaintTracking`
jketema
committed
bb1945f
View commit details
Copy full SHA for bb1945f
View code at this point
Browse repository at this point
C++: Convert 'cpp/user-controlled-null-termination-tainted' away from 'DefaultTaintTracking'.
MathiasVP
committed
306440c
View commit details
Copy full SHA for 306440c
View code at this point
Browse repository at this point
Commits on Nov 17, 2023
C++: Rewrite 'cpp/arithmetic-with-extreme-values' away from 'DefaultTaintTracking'.
MathiasVP
committed
c65c248
View commit details
Copy full SHA for c65c248
View code at this point
Browse repository at this point
Commits on Nov 16, 2023
Merge pull request #14812 from MathiasVP/no-dtt-in-Integer-overflow-tainted
Show description for c5d2866
MathiasVP
authored
c5d2866
View commit details
Copy full SHA for c5d2866
View code at this point
Browse repository at this point
C++: Rewrite 'cpp/cpp/integer-overflow-tainted' away from DefaultTaintTracking.
MathiasVP
committed
078f223
View commit details
Copy full SHA for 078f223
View code at this point
Browse repository at this point
C++: Delete `cpp/tainted-format-string-through-global`
jketema
committed
afe318e
View commit details
Copy full SHA for afe318e
View code at this point
Browse repository at this point
Commits on Nov 15, 2023
C++: Address review comments
jketema
committed
46e6e72
View commit details
Copy full SHA for 46e6e72
View code at this point
Browse repository at this point
C++: Rewrite `cpp/uncontrolled-process-operation` to not use `DefaultTaintTracking`
jketema
committed
92c1896
View commit details
Copy full SHA for 92c1896
View code at this point
Browse repository at this point
Commits on Nov 14, 2023
Merge branch 'main' into no-dtt-in-tainted-arithmetic
MathiasVP
committed
1623bba
View commit details
Copy full SHA for 1623bba
View code at this point
Browse repository at this point
C++: Rewrite 'cpp/cpp/tainted-arithmetic' away from DefaultTaintTracking.
MathiasVP
committed
c950e26
View commit details
Copy full SHA for c950e26
View code at this point
Browse repository at this point
C++: Block flow out of sinks that are qualifiers. This removes the new result duplication and keeps the new result.
MathiasVP
committed
967bbbc
View commit details
Copy full SHA for 967bbbc
View code at this point
Browse repository at this point
Commits on Nov 13, 2023
C++: Fix failing test and accept test cases.
MathiasVP
committed
cc62683
View commit details
Copy full SHA for cc62683
View code at this point
Browse repository at this point
Commits on Nov 9, 2023
Update cpp/ql/src/Security/CWE/CWE-120/UnboundedWrite.ql
Show description for 7048190
MathiasVP
and
jketema
authored
7048190
View commit details
Copy full SHA for 7048190
View code at this point
Browse repository at this point
Commits on Nov 8, 2023
C++: Rewrite 'cpp/unbounded-write' away from DefaultTaintTracking.
MathiasVP
committed
e90803a
View commit details
Copy full SHA for e90803a
View code at this point
Browse repository at this point
Commits on Oct 31, 2023
Merge pull request #14650 from jketema/invalid-experimental
Show description for 37a536b
MathiasVP
authored
37a536b
View commit details
Copy full SHA for 37a536b
View code at this point
Browse repository at this point
C++: Drop `experimental` tag from `cpp/invalid-pointer-deref`
jketema
committed
3478890
View commit details
Copy full SHA for 3478890
View code at this point
Browse repository at this point
C++: Expose a public memset model and use it in the exposure queries.
MathiasVP
committed
4a1bf95
View commit details
Copy full SHA for 4a1bf95
View code at this point
Browse repository at this point
Commits on Oct 13, 2023
Merge pull request #14424 from jketema/rewrite-cgi-xss
Show description for d56a9f0
jketema
authored
d56a9f0
View commit details
Copy full SHA for d56a9f0
View code at this point
Browse repository at this point
C++: Fix barrier in `cpp/cgi-xss`
jketema
committed
6167627
View commit details
Copy full SHA for 6167627
View code at this point
Browse repository at this point
Commits on Oct 12, 2023
C++: Remove the hacky flow state since this is no longer needed after #13717.
MathiasVP
committed
64fa6c8
View commit details
Copy full SHA for 64fa6c8
View code at this point
Browse repository at this point
Commits on Oct 10, 2023
C++: Rewrite `cpp/cgi-xss` to not use default taint tracking
Show description for 3b777c2
jketema
committed
3b777c2
View commit details
Copy full SHA for 3b777c2
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.