Skip to content

Commit e1d8d27

Browse files
BazookaMusicBazookaMusic
authored
Merge branch 'main' into bazookamusic/python-prompt-injection
2 parents 48b841c + 2eb0158 commit e1d8d27

1,437 files changed

Lines changed: 15651 additions & 7432 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎Cargo.lock‎

Lines changed: 10 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎Cargo.toml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@ members = [
66
"shared/tree-sitter-extractor",
77
"shared/yeast",
88
"shared/yeast-macros",
9+
"shared/yeast-schema",
910
"ruby/extractor",
1011
"unified/extractor",
1112
"unified/extractor/tree-sitter-swift",

‎MODULE.bazel‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ bazel_dep(name = "rules_python", version = "1.9.0")
2424
bazel_dep(name = "rules_shell", version = "0.7.1")
2525
bazel_dep(name = "bazel_skylib", version = "1.9.0")
2626
bazel_dep(name = "abseil-cpp", version = "20260107.1", repo_name = "absl")
27-
bazel_dep(name = "nlohmann_json", version = "3.11.3", repo_name = "json")
27+
bazel_dep(name = "nlohmann_json", version = "3.12.0.bcr.1", repo_name = "json")
2828
bazel_dep(name = "fmt", version = "12.1.0-codeql.1")
2929
bazel_dep(name = "rules_kotlin", version = "2.2.2-codeql.1")
3030
bazel_dep(name = "gazelle", version = "0.50.0")
@@ -276,7 +276,7 @@ use_repo(
276276
)
277277

278278
go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
279-
go_sdk.download(version = "1.26.4")
279+
go_sdk.download(version = "1.26.5")
280280

281281
go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
282282
go_deps.from_file(go_mod = "//go/extractor:go.mod")

‎cpp/ql/src/Critical/NewFreeMismatch.ql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* @id cpp/new-free-mismatch
99
* @tags reliability
1010
* security
11-
* external/cwe/cwe-401
11+
* external/cwe/cwe-762
1212
*/
1313

1414
import NewDelete

‎cpp/ql/src/Security/CWE/CWE-114/UncontrolledProcessOperation.ql‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,8 @@
99
* @precision medium
1010
* @id cpp/uncontrolled-process-operation
1111
* @tags security
12+
* external/cwe/cwe-073
13+
* external/cwe/cwe-078
1214
* external/cwe/cwe-114
1315
*/
1416

‎cpp/ql/src/change-notes/2026-07-09-CWE-114.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: queryMetadata
3+
---
4+
* Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`.

‎cpp/ql/src/change-notes/2026-07-13-new-free.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: queryMetadata
3+
---
4+
* Added the tag `external/cwe/cwe-762` to `cpp/new-free-mismatch`, and removed the tag `external/cwe/cwe-401`. This better matches the behavior of the query.

‎cpp/ql/test/examples/BadLocking/AV Rule 107.qlref‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,2 @@
1-
jsf/4.13 Functions/AV Rule 107.ql
1+
query: jsf/4.13 Functions/AV Rule 107.ql
2+
postprocess: utils/test/InlineExpectationsTestQuery.ql

‎cpp/ql/test/examples/BadLocking/LocalVariableHidesGlobalVariable.qlref‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,2 @@
1-
Best Practices/Hiding/LocalVariableHidesGlobalVariable.ql
1+
query: Best Practices/Hiding/LocalVariableHidesGlobalVariable.ql
2+
postprocess: utils/test/InlineExpectationsTestQuery.ql

‎cpp/ql/test/examples/BadLocking/UnintendedDeclaration.cpp‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ void test1()
4848

4949
void test2()
5050
{
51-
Lock<Mutex> myLock(); // BAD (interpreted as a function declaration, this does nothing)
51+
Lock<Mutex> myLock(); // $ Alert[cpp/function-in-block] // BAD (interpreted as a function declaration, this does nothing)
5252

5353
// ...
5454
}
@@ -62,14 +62,14 @@ void test3()
6262

6363
void test4()
6464
{
65-
Lock<Mutex>(myMutex); // BAD (creates an uninitialized variable called `myMutex`, probably not intended)
65+
Lock<Mutex>(myMutex); // $ Alert[cpp/local-variable-hides-global-variable] // BAD (creates an uninitialized variable called `myMutex`, probably not intended)
6666

6767
// ...
6868
}
6969

7070
void test5()
7171
{
72-
Lock<Mutex> myLock(Mutex); // BAD (interpreted as a function declaration, this does nothing)
72+
Lock<Mutex> myLock(Mutex); // $ Alert[cpp/function-in-block] // BAD (interpreted as a function declaration, this does nothing)
7373

7474
// ...
7575
}
@@ -86,7 +86,7 @@ class MyTestClass
8686

8787
void test7()
8888
{
89-
Lock<Mutex>(memberMutex); // BAD (creates an uninitialized variable called `memberMutex`, probably not intended) [NOT DETECTED]
89+
Lock<Mutex>(memberMutex); // $ MISSING: Alert // BAD (creates an uninitialized variable called `memberMutex`, probably not intended) [NOT DETECTED]
9090

9191
// ...
9292
}

0 commit comments

Comments
 (0)