Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Apr 17, 2026

• Address review: inline Woodstox into XmlParsers, move changelog to lib

  

  Salah Baddou

  authored and

  chmodxxx

  committed
  fb2d53e

  Copy full SHA for fb2d53e

• Java: Add XXE sink model for Woodstox WstxInputFactory

  Show description for f5131f9
  

  Salah Baddou

  authored and

  chmodxxx

  committed
  f5131f9

  Copy full SHA for f5131f9

Commits on Apr 14, 2026

• Merge pull request #21584 from owen-mc/shared/update-mad-comments

  Show description for 7458674
  owen-mc

  authored
  7458674

  Copy full SHA for 7458674

Commits on Mar 29, 2026

• Address review: update QLDoc comment and fix expected test output

  Show description for e6adfbc
  MarkLee131

  committed
  e6adfbc

  Copy full SHA for e6adfbc

• Merge branch 'main' into fix/tainted-arithmetic-bounds-check-barrier

  MarkLee131

  authored
  938039d

  Copy full SHA for 938039d

Commits on Mar 28, 2026

• Exclude bounds-check arithmetic from tainted-arithmetic sinks

  Show description for 0c5e89a
  MarkLee131

  committed
  0c5e89a

  Copy full SHA for 0c5e89a

• Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs

  Show description for da4a223
  MarkLee131

  committed
  da4a223

  Copy full SHA for da4a223

• Add EC to secure algorithm whitelist for Java CWE-327 query

  MarkLee131

  committed
  a9449cc

  Copy full SHA for a9449cc

Commits on Mar 27, 2026

• Replace `acceptingvalue` with `acceptingValue`

  owen-mc

  committed
  a7fdc4b

  Copy full SHA for a7fdc4b

• Make description of `acceptingvalue` column clearer

  owen-mc

  committed
  b3285c6

  Copy full SHA for b3285c6

• Shared: document extensible relations rather than CSV

  owen-mc

  committed
  e680d49

  Copy full SHA for e680d49

• Add barriers and barrier guards to MaD format explanations

  owen-mc

  committed
  10fddc7

  Copy full SHA for 10fddc7

Commits on Mar 10, 2026

• Merge pull request #21441 from aschackmull/cfg/switch-sharing

  Show description for 6a6bb5e
  aschackmull

  authored
  6a6bb5e

  Copy full SHA for 6a6bb5e

• Cfg: Update fallsThrough default.

  aschackmull

  committed
  77d4f5a

  Copy full SHA for 77d4f5a

• Cfg: Move Case.getBodyElement to shared code.

  aschackmull

  committed
  edf88b3

  Copy full SHA for edf88b3

• Cfg: Move getCaseControlFlowOrder to shared code.

  aschackmull

  committed
  35ac66d

  Copy full SHA for 35ac66d

Commits on Mar 9, 2026

• Java: Make corresponding predicate private

  owen-mc

  committed
  d8007a8

  Copy full SHA for d8007a8

Commits on Mar 6, 2026

• Merge pull request #21415 from owen-mc/java/validate-constructor-summary-models

  Show description for e96ba48
  owen-mc

  authored
  e96ba48

  Copy full SHA for e96ba48

Commits on Mar 5, 2026

• Add model validation for constructor summary models

  owen-mc

  committed
  63c71b4

  Copy full SHA for 63c71b4

• Java: Make Assignment extend BinaryExpr.

  aschackmull

  committed
  ec1d034

  Copy full SHA for ec1d034

Commits on Mar 4, 2026

• Java: Align BinaryExpr.getOp() with AssignOp.getOp().

  aschackmull

  committed
  3c129fc

  Copy full SHA for 3c129fc

Commits on Feb 27, 2026

• Cfg: Address review comments.

  aschackmull

  committed
  ab94524

  Copy full SHA for ab94524

Commits on Feb 23, 2026

• Java: Handle missing throws clauses.

  aschackmull

  committed
  bdbbd45

  Copy full SHA for bdbbd45

• Java: Fix enhancedForEarlyExit implementation.

  aschackmull

  committed
  b798bc2

  Copy full SHA for b798bc2

• Java: Exclude ExprStmt consistent with SwitchCase.getRuleExpression().

  aschackmull

  committed
  fc8b7c0

  Copy full SHA for fc8b7c0

• Java: Fix instanceof-disjunction.

  aschackmull

  committed
  ccd28ff

  Copy full SHA for ccd28ff

• Java: Fix switchcase guards.

  aschackmull

  committed
  7871cd7

  Copy full SHA for 7871cd7

• Java: Fix RangeAnalysis/ModulusAnalysis.

  aschackmull

  committed
  1e9dcea

  Copy full SHA for 1e9dcea

• Java: Fix Cyclomatic complexity calculation.

  aschackmull

  committed
  6fbdb2c

  Copy full SHA for 6fbdb2c

• Java/Cfg: Introduce new shared CFG library and replace the Java CFG.

  aschackmull

  committed
  48e3724

  Copy full SHA for 48e3724

• Java: Replace ControlFlowNode.asCall with Call.getControlFlowNode.

  aschackmull

  committed
  4a97a44

  Copy full SHA for 4a97a44

• Java: Preparatory tweaks.

  aschackmull

  committed
  2e98734

  Copy full SHA for 2e98734

Commits on Feb 17, 2026

• Merge pull request #21319 from owen-mc/java/javax-jakarta

  Show description for 94e3d86
  owen-mc

  authored
  94e3d86

  Copy full SHA for 94e3d86

Commits on Feb 16, 2026

• Rename `MethodCall ma` to `mc`

  owen-mc

  committed
  94f1d94

  Copy full SHA for 94f1d94

• Expand log injection sanitizers to annotation regex matches

  owen-mc

  committed
  9fc95f5

  Copy full SHA for 9fc95f5