Merge branch next and update CodeQL to v2.23.9 - #1154

Open

mbaluda wants to merge 116 commits into

mainfrom

mbaluda-next-merge

Commits on Jun 30, 2026

Update expected test results after frontend update

jketema
authored and
mbaluda
committed
57661d5
Update MISRA queries and tests after merging location tables

jketema
authored and
mbaluda
committed
6abda06
C++: accept new test results after QL changes

IdrissRio
authored and
mbaluda
committed
57c4180
Comvert ARR37-C to use the new dataflow library

jketema
authored and
mbaluda
committed
a3d85dd
Conver ARR39-C to the new dataflow library

jketema
authored and
mbaluda
committed
3f2ae9e
Convert ERR30-C to use the new dataflow library

jketema
authored and
mbaluda
committed
46af73d
Convert FIO45-C to use the new dataflow library

jketema
authored and
mbaluda
committed
e2ac35d
Convert EXP36-C to the new datafow library

jketema
authored and
mbaluda
committed
43d5bf8
Convert MSC33-C to the new dataflow library

jketema
authored and
mbaluda
committed
10b9266
Convert MSC51-CPP to the new dataflow library

jketema
authored and
mbaluda
committed
e0b7924
Convert CTR56-CPP to the new dataflow library

jketema
authored and
mbaluda
committed
b6c26ee
Conver M3-9-3 to use the new dataflow library

jketema
authored and
mbaluda
committed
c478ead
Convert A9-3-1 to use the new dataflow library

jketema
authored and
mbaluda
committed
0817197
Convert A27-0-4 to use the new dataflow library

jketema
authored and
mbaluda
committed
51295f1
Convert A5-0-4 to use the new dataflow library

jketema
authored and
mbaluda
committed
8933de9
Update expected test results for MSC33-C

jketema
authored and
mbaluda
committed
aa7d827
Create temporary copies of parts of the concurrency library

jketema
authored and
mbaluda
committed
f737a94
Convert CON30-C to use the new dataflow library

jketema
authored and
mbaluda
committed
f6c3c4c
Convert CON34-C to the new dataflow library

jketema
authored and
mbaluda
committed
9e12e5e
Move queries not depending on dataflow over to `ConcurrencyNew`

jketema
authored and
mbaluda
committed
ef96540
Convert UseOnlyArrayIndexingForPointerArithmetic to use the new dataflow library

jketema
authored and
mbaluda
committed
cb6ab90
Convert StringNumberConversionMissingErrorCheck to use the new dataflow library

jketema
authored and
mbaluda
committed
30a3635
Convert FgetsErrorManagement to use the new dataflow library

jketema
authored and
mbaluda
committed
ce08d1e
Convert RULE-22-3 to use the new dataflow library

jketema
authored and
mbaluda
committed
88ef34f
Convert RULE-22-4 to use the new dataflow library

jketema
authored and
mbaluda
committed
fdf1923
Convert A7-5-1 to use the new dataflow library

jketema
authored and
mbaluda
committed
8ea39d8
Convert DoNotSubtractPointersAddressingDifferentArrays to use new dataflow library

jketema
authored and
mbaluda
committed
b3cffdb
Remove unused dataflow import from IOFstreamMissingPositioning

jketema
authored and
mbaluda
committed
0afdf32
Convert DanglingCaptureWhenReturningLambdaObject to use new dataflow library

jketema
authored and
mbaluda
committed
241ec63
Revert "Convert DanglingCaptureWhenReturningLambdaObject to use new dataflow library"

jketema
authored and
mbaluda
committed
5887113
Fix FIO40-C regression after incorrectly solving a merge conflict

jketema
authored and
mbaluda
committed
5e3f1dc
Conver ARR32-C to use the new dataflow library

jketema
authored and
mbaluda
committed
d997db1
Convert DCL30-C to the new dataflow library

jketema
authored and
mbaluda
committed
fbb5d04
Convert ERR32-C to use the new dataflow library

jketema
authored and
mbaluda
committed
6b8b5f5
Convert ERR33-C to use the new dataflow library

jketema
authored and
mbaluda
committed
9830abc
Convert EXP37-C to the new dataflow library

jketema
authored and
mbaluda
committed
135cb7a
Convert EXP40-C to the new dataflow library

jketema
authored and
mbaluda
committed
bb5e033
Convert FIO44-C to the new dataflow library

jketema
authored and
mbaluda
committed
a5a1865
Convert MEM35-C to the new dataflow library

jketema
authored and
mbaluda
committed
3e69bf6
Convert MEM36-C to the new dataflow library

jketema
authored and
mbaluda
committed
ba281e2
Convert SIG30-C to the new dataflow library

jketema
authored and
mbaluda
committed
d385a76
Convert SIG35-C to the new dataflow library

jketema
authored and
mbaluda
committed
099f358
Convert Signal library to the new data flow library

jketema
authored and
mbaluda
committed
2a8277c
Convert RULE-13-2 to the new dataflow library

jketema
authored and
mbaluda
committed
69c6bf7
Convert RULE-21-14 to the new dataflow library

jketema
authored and
mbaluda
committed
9e8e429
Convert RULE-22-7 to the new dataflow library

jketema
authored and
mbaluda
committed
cee7cef
Convert A13-1-3 to the new dataflow library

jketema
authored and
mbaluda
committed
fcbb620
Convert A13-2-1 to the new dataflow library

jketema
authored and
mbaluda
committed
def97cc
Convert A15-1-3 to the new dataflow library

jketema
authored and
mbaluda
committed
3b6a124
Address review comment

jketema
authored and
mbaluda
committed
c06f22a
C++: Accept path changes caused by codeql#20040.

MathiasVP
authored and
mbaluda
committed
1d15367
Convert RULE-17-5 to the new dataflow library

jketema
authored and
mbaluda
committed
de0357a
Convert A15-2-2 to use the new dataflow library

jketema
authored and
mbaluda
committed
8a2f016
Convert A18-9-4 to use the new dataflow library

jketema
authored and
mbaluda
committed
bebac73
Convert A20-8-4 to use the new dataflow library

jketema
authored and
mbaluda
committed
c12d294
Convert A5-1-7 to use the new dataflow library

jketema
authored and
mbaluda
committed
2c4414d
Convert A8-4-12 to use the new dataflow library

jketema
authored and
mbaluda
committed
8dc6dcf
Convert CTR52-CPP to the new dataflow library

jketema
authored and
mbaluda
committed
447a3bb
Convert CTR53-CPP to the new dataflow library

jketema
authored and
mbaluda
committed
04da91f
C++: Block flow into thread-specific storage creating functions (i.e., *almost* the sources of the query) to remove false negatives.

MathiasVP
authored and
mbaluda
committed
cc0d1c8
C++: Accept test changes to another query.

MathiasVP
authored and
mbaluda
committed
3a7a99b
Convert `ThrowingOperatorNewReturnsNull` to the new dataflow library

jketema
authored and
mbaluda
committed
88d909e
Convert `PredicateFunctionObjectsShouldNotBeMutable` to the new dataflow library

jketema
authored and
mbaluda
committed
65cf74d
Remove redundant dataflow import

jketema
authored and
mbaluda
committed
01841f3
Convert `OnlyFreeMemoryAllocatedDynamicallyShared` to the new dataflow library

jketema
authored and
mbaluda
committed
15eef22
Convert `InvalidatedEnvStringPointers` to the new dataflow library

jketema
authored and
mbaluda
committed
68956c9
Convert `FunctionErroneousReturnValueNotTested` to the new dataflow library

jketema
authored and
mbaluda
committed
635eca0
Update `DoNotPassAliasedPointerToRestrictQualifiedParamShared` to the new dataflow library

jketema
authored and
mbaluda
committed
76642a8
Convert M9-3-1 to the new dataflow library

jketema
authored and
mbaluda
committed
6edece6
Convert A8-4-9 to the new dataflow library

jketema
authored and
mbaluda
committed
5b03559
Conver A8-4-11 to the new dataflow library

jketema
authored and
mbaluda
committed
aa1c3af
Convert STR31-C to the new dataflow library

jketema
authored and
mbaluda
committed
0ae0087
Convert `FileStreams.qll` to the new dataflow library

jketema
authored and
mbaluda
committed
d3dbc96
Convert `DoNotAccessAClosedFile` to the new dataflow library

jketema
authored and
mbaluda
committed
404692b
Update `OwnedPointerValueStoredInUnrelatedSmartPointer` to the new dataflow library

jketema
authored and
mbaluda
committed
8d8cedc
Update `MovedFromObjectsUnspecifiedState` to the new dataflow library

jketema
authored and
mbaluda
committed
75c5263
Update `DoNotUseRelationalOperatorsWithDifferingArrays` to the new dataflow library

jketema
authored and
mbaluda
committed
6fc0b5e
Convert `DanglingCaptureWhenReturningLambdaObject` to the new dataflow library

jketema
authored and
mbaluda
committed
b6d3b33
Update `DanglingCaptureWhenMovingLambdaObject` to the new dataflow library

jketema
authored and
mbaluda
committed
890ee51
Update `ConstLikeReturnValue` to the new dataflow library

jketema
authored and
mbaluda
committed
318498a
Remove redundant dataflow import

jketema
authored and
mbaluda
committed
35fbfad
Convert `BasicStringMayNotBeNullTerminated` to the new dataflow library

jketema
authored and
mbaluda
committed
90496ba
C++: Fix up queries after github/codeql#20485.

MathiasVP
authored and
mbaluda
committed
a9c527a
C++: Fix queries I forgot after merging github/codeql#20485.

MathiasVP
authored and
mbaluda
committed
e30f5e7
C++: Accept line number changes in .expected file.

MathiasVP
authored and
mbaluda
committed
164d2f4
Update expected test results

jketema
authored and
mbaluda
committed
01898e9
Update expected test results after frontend update

jketema
authored and
mbaluda
committed
bee8bd0
Fix test formatting

jketema
authored and
mbaluda
committed
22438a2
Floating point decimal support has been removed from CodeQL

jketema
authored and
mbaluda
committed
cad5be0
C++: Accept test changes after github/codeql#21313.

MathiasVP
authored and
mbaluda
committed
e92d9c5
C++: Fix Copilot comments.

MathiasVP
authored and
mbaluda
committed
7f71c7b
Revert "C++: Accept test changes after github/codeql#21313."

paldepind
authored and
mbaluda
committed
d77616e
Update test expectations after switch to SoftFloat library in the extractor

jketema
authored and
mbaluda
committed
a79c12d
Revert "Merge pull request #1042 from jketema/jketema/softfloat"

jketema
authored and
mbaluda
committed
e116488
Update expected test results

jketema
authored and
mbaluda
committed
b318aa6
Reapply "Merge pull request #1042 from jketema/jketema/softfloat"

jketema
authored and
mbaluda
committed
d483765
Update expected test results

jketema
authored and
mbaluda
committed
aab3b2d
Update references to deprecated classes

jketema
authored and
mbaluda
committed
e2495c8
Update references to deprecated classes

jketema
authored and
mbaluda
committed
a42dd07
Use the new dataflow module without affecting any tested behavior (#1142)
mbaluda
authored
d66ec8d

Commits on Aug 17, 2026

Merge branch 'main' into mbaluda-next-merge
mbaluda
authored
57a9833
Update CodeQL to 2.23.9
mbaluda
committed
e939643
Update CodeQL dependencies to latest versions across multiple modules
mbaluda
committed
d73042f
Update CodeQL dependencies to latest versions in multiple lock files
mbaluda
committed
2521132
Update SsaInternals usage in PointerArithmeticFormsAnInvalidPointer
mbaluda
committed
46bc06d
Fix PossibleDataRaceBetweenThreadsConfig
mbaluda
committed
b8ba0ec

Commits on Aug 18, 2026

Fix VariableLengthArraySizeNotInValidRange
mbaluda
committed
2a14a02
Add change note for ARR32-C query update

Copilot
and
mbaluda
authored
aaa8702
Update expected results for various tests
mbaluda
committed
95ef81f
Fix test formatting
mbaluda
committed
5c60c39

Commits on Aug 28, 2026

Address review comments
mbaluda
committed
cbb457c
Fix formatting
mbaluda
committed
782f8b0
Merge branch 'main' into mbaluda-next-merge
mbaluda
authored
50333b2
Remove outdated change notes for ARR32-C and CPP upgrade regressions
mbaluda
committed
5e33e2d
Add change notes for recent rule fixes and false positive/negative corrections
mbaluda
committed
97181ce
Update change notes to reflect CodeQL upgrade
mbaluda
committed
3e41b11