Commits

Commit history

1. Commits on Jun 26, 2026

   • Java: Add missing $ Source annotations.

     geoffw0

     committed
     897d169View commit details

     Copy full SHA for 897d169

     View code at this pointBrowse repository at this point

   • Java: Label spurious results.

     geoffw0

     committed
     6f997aeView commit details

     Copy full SHA for 6f997ae

     View code at this pointBrowse repository at this point

   • Java: Move $ Source annotations that were incorrectly placed.

     geoffw0

     committed
     300e48eView commit details

     Copy full SHA for 300e48e

     View code at this pointBrowse repository at this point

   • Java: Make some $ Source annotations query specific.

     geoffw0

     committed
     f840f61View commit details

     Copy full SHA for f840f61

     View code at this pointBrowse repository at this point
2. Commits on Jun 10, 2026

   • First pass converting qlref tests to inline expectation with postprocess

     owen-mc

     committed
     1c1d264View commit details

     Copy full SHA for 1c1d264

     View code at this pointBrowse repository at this point
3. Commits on May 1, 2026

   • Java: move File inspection methods to path-injection[read]

     Show description for 119994b
     MarkLee131

     committed
     119994bView commit details

     Copy full SHA for 119994b

     View code at this pointBrowse repository at this point
4. Commits on Apr 21, 2026

   • Java: update regression-test expectations for path-injection[read]

     Show description for 6d10b15
     MarkLee131

     committed
     6d10b15View commit details

     Copy full SHA for 6d10b15

     View code at this pointBrowse repository at this point
5. Commits on Mar 4, 2026

   • Java: Update test expectations

     owen-mc

     committed
     05a77a2View commit details

     Copy full SHA for 05a77a2

     View code at this pointBrowse repository at this point

   • Java: Inline expectation should have space after $

     Show description for ef345a3
     owen-mc

     committed
     ef345a3View commit details

     Copy full SHA for ef345a3

     View code at this pointBrowse repository at this point
6. Commits on Jan 26, 2026

   • Java: Adapt to changes in `FlowSummaryImpl`

     Show description for 7024b07
     hvitved

     committed
     7024b07View commit details

     Copy full SHA for 7024b07

     View code at this pointBrowse repository at this point
7. Commits on Oct 29, 2025

   • Pretty print models in test

     Show description for 7ad570b
     owen-mc

     committed
     7ad570bView commit details

     Copy full SHA for 7ad570b

     View code at this pointBrowse repository at this point
8. Commits on Oct 24, 2025

   • Merge pull request #20690 from bdrodes/weak_symmetric_cipher_bug

     Show description for d478752
     nicolaswill

     authored
     d478752View commit details

     Copy full SHA for d478752

     View code at this pointBrowse repository at this point

   • Crypto: Adding bad decrypt then mac order query. Fixes to BadMacOrderMacOnEncryptPlaintext as well.

     bdrodes

     committed
     0e624f5View commit details

     Copy full SHA for 0e624f5

     View code at this pointBrowse repository at this point

   • Crypto: Fixed bug in WeakSymmetricCipher.qll, forgot to not only filter if !=AES but the algorithm must still be a SymmetriCipher algorithm.

     bdrodes

     committed
     ed492c7View commit details

     Copy full SHA for ed492c7

     View code at this pointBrowse repository at this point
9. Commits on Oct 22, 2025

   • Crypto: Fix off by one column issue in unit tests.

     bdrodes

     committed
     0837939View commit details

     Copy full SHA for 0837939

     View code at this pointBrowse repository at this point

   • Crytpo: Trying to fix in pipeline test failure, experimentally altering a line to see if this forces the test to pass. The test is off by one column in the piepline

     bdrodes

     committed
     3561d01View commit details

     Copy full SHA for 3561d01

     View code at this pointBrowse repository at this point

   • Crypto: Adjust output of bad mac order queries, update associated bad mac order expected results, fix erroneous change to ID for a slicing query, update model to specify elliptic curve type as a pr…

     Show description for dd60cf9
     bdrodes

     committed
     dd60cf9View commit details

     Copy full SHA for dd60cf9

     View code at this pointBrowse repository at this point
10. Commits on Oct 21, 2025

    • Crypto: Adding false positive to BadMacUse.java, we have no way to avoid this FP currently but should note it exists in the test case.

      bdrodes

      committed
      ddeb42cView commit details

      Copy full SHA for ddeb42c

      View code at this pointBrowse repository at this point
11. Commits on Oct 20, 2025

    • Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check

      bdrodes

      committed
      cc436e8View commit details

      Copy full SHA for cc436e8

      View code at this pointBrowse repository at this point

    • Crypto: Missing hash algorithms for HMAC operations in jca.

      bdrodes

      committed
      354effeView commit details

      Copy full SHA for 354effe

      View code at this pointBrowse repository at this point
12. Commits on Oct 18, 2025

    • Merge branch 'main' into santander-java-crypto-check

      bdrodes

      authored
      2b683c2View commit details

      Copy full SHA for 2b683c2

      View code at this pointBrowse repository at this point
13. Commits on Oct 17, 2025

    • Crypto: more ID renaming to include "examples", fix singleton issues with ql-for-ql, use formatted test for WeakAsymmetricKeyGenSize (add post processing in the qlref), misc expected files updated …

      Show description for c01c060
      bdrodes

      committed
      c01c060View commit details

      Copy full SHA for c01c060

      View code at this pointBrowse repository at this point

    • Crypto: weak symmetric cipher tests.

      bdrodes

      committed
      540daa6View commit details

      Copy full SHA for 540daa6

      View code at this pointBrowse repository at this point

    • Crypto: altering all query IDs in examples to have "examples" in the ID, to make clear the query is not intended for production.

      bdrodes

      committed
      b06e053View commit details

      Copy full SHA for b06e053

      View code at this pointBrowse repository at this point

    • Crypto: Add missing cipher algorithms to JCA. Update node tests to account for missing cipher algorithms.

      bdrodes

      committed
      b4ecb91View commit details

      Copy full SHA for b4ecb91

      View code at this pointBrowse repository at this point

    • Crypto: Add missing block mode JCA Models, add block mode unit tests

      bdrodes

      committed
      f480d90View commit details

      Copy full SHA for f480d90

      View code at this pointBrowse repository at this point

    • Crypto: WeakKDFKeySize tests.

      bdrodes

      committed
      e127341View commit details

      Copy full SHA for e127341

      View code at this pointBrowse repository at this point

    • Crypto: Modify BadMacOrderMacOnEncryptPlaintext to be a path query that traces through any intermediate encrypt or mac to the final encrypt or mac.

      bdrodes

      committed
      628bab9View commit details

      Copy full SHA for 628bab9

      View code at this pointBrowse repository at this point
14. Commits on Oct 16, 2025

    • Crypto: Bad expected files in last push.

      bdrodes

      committed
      5923e5cView commit details

      Copy full SHA for 5923e5c

      View code at this pointBrowse repository at this point

    • Crypto: Bad Mac use tests, and fix for BadMacOrderMacOnEncryptPlaintext (barriers were blocking flow through an encrypt to a subsequent mac on the same plaintext)

      bdrodes

      committed
      700f34eView commit details

      Copy full SHA for 700f34e

      View code at this pointBrowse repository at this point

    • Crypto: Comment todo for observed missing modeled case. Tests for weak and unknown KDF iteration count.

      bdrodes

      committed
      b9b0037View commit details

      Copy full SHA for b9b0037

      View code at this pointBrowse repository at this point

    • Crypto: Rename tests for weak asymmetric key gen size.

      bdrodes

      committed
      3f36b09View commit details

      Copy full SHA for 3f36b09

      View code at this pointBrowse repository at this point

    • Crypto: Updating weak hash tests

      bdrodes

      committed
      d2598d4View commit details

      Copy full SHA for d2598d4

      View code at this pointBrowse repository at this point

    • Crypto: Weak Hash test cases update and expected file.

      bdrodes

      committed
      4860034View commit details

      Copy full SHA for 4860034

      View code at this pointBrowse repository at this point
15. Commits on Oct 15, 2025

    • crypto: Update JCA model macs to take into consideration update calls (use prior pattern for signatures). Misc. bug fixes.

      bdrodes

      committed
      25599e9View commit details

      Copy full SHA for 25599e9

      View code at this pointBrowse repository at this point