Commits

Breadcrumbs

History for

on1129230

User selector

All users

All time

Commit History

Commits on Oct 28, 2025

• Java/ArithmeticUncontrolledQuery

  Show description for 1129230
  d10c

  committed
  1129230

  Copy full SHA for 1129230

• Java/ArithmeticTainted

  Show description for a228936
  d10c

  committed
  a228936

  Copy full SHA for a228936

• Java/ArbitraryApkInstallationQuery

  Show description for 913550f
  d10c

  committed
  913550f

  Copy full SHA for 913550f

Commits on Oct 27, 2025

• Merge pull request #20598 from github/alexet/overlay-query-libraries

  Show description for 227e1fc
  alexet

  authored
  227e1fc

  Copy full SHA for 227e1fc

Commits on Oct 24, 2025

• Merge pull request #20688 from hvitved/java/request-forgery-matches-sanitizer

  Show description for 32f21d6
  hvitved

  authored
  32f21d6

  Copy full SHA for 32f21d6

• Java: Treat `x.matches(regexp)` as a sanitizer for request forgery

  hvitved

  committed
  7a9cb64

  Copy full SHA for 7a9cb64

Commits on Oct 23, 2025

• ControlFlowReachability: Align the SSA signature with the one from shared SSA.

  aschackmull

  committed
  72d83cc

  Copy full SHA for 72d83cc

• Guards: Align the SSA signature with the one from shared SSA.

  aschackmull

  committed
  f257c7a

  Copy full SHA for f257c7a

• Shared/Java: Rename ControlFlowReachability library.

  aschackmull

  committed
  20147cd

  Copy full SHA for 20147cd

• Merge pull request #20558 from aschackmull/csharp/guards3

  Show description for 8a3f62b
  aschackmull

  authored
  8a3f62b

  Copy full SHA for 8a3f62b

Commits on Oct 21, 2025

• Crypto: Updating java 'location' information to be just a location's toString to be more verbose/precise.

  bdrodes

  committed
  b374ba3

  Copy full SHA for b374ba3

Commits on Oct 20, 2025

• Merge branch 'santander-java-crypto-check' of https://github.com/bdrodes/codeql into santander-java-crypto-check

  bdrodes

  committed
  cc436e8

  Copy full SHA for cc436e8

• Crypto: Missing hash algorithms for HMAC operations in jca.

  bdrodes

  committed
  354effe

  Copy full SHA for 354effe

Commits on Oct 18, 2025

• Merge branch 'main' into santander-java-crypto-check

  bdrodes

  authored
  2b683c2

  Copy full SHA for 2b683c2

Commits on Oct 17, 2025

• Crypto: more ID renaming to include "examples", fix singleton issues with ql-for-ql, use formatted test for WeakAsymmetricKeyGenSize (add post processing in the qlref), misc expected files updated …

  Show description for c01c060
  bdrodes

  committed
  c01c060

  Copy full SHA for c01c060

• Crypto: Add missing cipher algorithms to JCA. Update node tests to account for missing cipher algorithms.

  bdrodes

  committed
  b4ecb91

  Copy full SHA for b4ecb91

• Crypto: Add missing block mode JCA Models, add block mode unit tests

  bdrodes

  committed
  f480d90

  Copy full SHA for f480d90

Commits on Oct 16, 2025

• Crypto: Comment todo for observed missing modeled case. Tests for weak and unknown KDF iteration count.

  bdrodes

  committed
  b9b0037

  Copy full SHA for b9b0037

• Crypto: Comment in Language.qll

  bdrodes

  committed
  a64a24d

  Copy full SHA for a64a24d

Commits on Oct 15, 2025

• crypto: Update JCA model macs to take into consideration update calls (use prior pattern for signatures). Misc. bug fixes.

  bdrodes

  committed
  25599e9

  Copy full SHA for 25599e9

• Crypto: To get unreferenced parameters as general sources for Java, I've included the caveat that if a function is called, all the calls appear to be in test files.

  bdrodes

  committed
  9a6aac1

  Copy full SHA for 9a6aac1

• Crytpo: Update JCA keyagreement to type conversion, XDH is a type of ECDH.

  bdrodes

  committed
  ee08385

  Copy full SHA for ee08385

Commits on Oct 14, 2025

• Post-release preparation for codeql-cli-2.23.3

  

  github-actions[bot]

  committed
  6dd0779

  Copy full SHA for 6dd0779

• Release preparation for version 2.23.3

  

  github-actions[bot]

  committed
  33542f7

  Copy full SHA for 33542f7

Commits on Oct 13, 2025

• Crypto: Update InsecureIVorNonce to be a path problem.

  bdrodes

  committed
  76128ed

  Copy full SHA for 76128ed

• Crypto: Adding a "javaConstant" concept to handle config files.

  bdrodes

  committed
  08abdb8

  Copy full SHA for 08abdb8

Commits on Oct 10, 2025

• Crypto: Weak asymmetric key gen size fixes and test.

  bdrodes

  committed
  3667365

  Copy full SHA for 3667365

Commits on Oct 9, 2025

• Crypto: Fix QL-for-QL alert and auto-format

  nicolaswill

  committed
  fdba3ac

  Copy full SHA for fdba3ac

Commits on Oct 8, 2025

• Crypto: Updated default flows to use taint tracking (this is needed to fix false positives in the unknown IV/Nonce query). Add the unknown IV/Nonce query and associated test cases. Fix unknown IV/N…

  Show description for 11e8139
  bdrodes

  committed
  11e8139

  Copy full SHA for 11e8139

• Crypto: Adding tests for insecure iv or nonce. Updating generic literal sources to include array literals.

  bdrodes

  committed
  83ff70b

  Copy full SHA for 83ff70b

• Crypto: Removing JCA model of random, need to reassess this as this impacts the insecure IV/Nonce query. Updated name of the Insecure nonce query to be InsecureIVorNonce

  bdrodes

  committed
  bd34b6c

  Copy full SHA for bd34b6c

• Crypto: Standardize naming where use of "family" and "type" have been used. Prefer 'type'.

  bdrodes

  committed
  cf88e3f

  Copy full SHA for cf88e3f

Commits on Oct 7, 2025

• Java: Make some query libraries local.

  alexet

  committed
  77d4af1

  Copy full SHA for 77d4af1

• Java: Use Overlay dataflow in java.

  alexet

  committed
  542bdf0

  Copy full SHA for 542bdf0

• DataFlow: Add code to do overlay informed dataflow.

  alexet

  committed
  c49e2ab

  Copy full SHA for c49e2ab