Files

.devcontainer
.github
.vscode
actions
change-notes
config
cpp
- autobuilder
- config
- downgrades
- old-change-notes
- ql
  - examples
  - lib
    - change-notes/released
      - 0.0.10.md
      - 0.0.11.md
      - 0.0.12.md
      - 0.0.13.md
      - 0.0.4.md
      - 0.0.5.md
      - 0.0.6.md
      - 0.0.7.md
      - 0.0.8.md
      - 0.0.9.md
      - 0.1.0.md
      - 0.10.0.md
      - 0.10.1.md
      - 0.11.0.md
      - 0.12.0.md
      - 0.12.1.md
      - 0.12.10.md
      - 0.12.11.md
      - 0.12.2.md
      - 0.12.3.md
      - 0.12.4.md
      - 0.12.5.md
      - 0.12.6.md
      - 0.12.7.md
      - 0.12.8.md
      - 0.12.9.md
      - 0.13.0.md
      - 0.13.1.md
      - 0.2.0.md
      - 0.2.1.md
      - 0.2.2.md
      - 0.2.3.md
      - 0.3.0.md
      - 0.3.1.md
      - 0.3.2.md
      - 0.3.3.md
      - 0.3.4.md
      - 0.3.5.md
      - 0.4.0.md
      - 0.4.1.md
      - 0.4.2.md
      - 0.4.3.md
      - 0.4.4.md
      - 0.4.5.md
      - 0.4.6.md
      - 0.5.0.md
      - 0.5.1.md
      - 0.5.2.md
      - 0.5.3.md
      - 0.5.4.md
      - 0.6.0.md
      - 0.6.1.md
      - 0.7.0.md
      - 0.7.1.md
      - 0.7.2.md
      - 0.7.3.md
      - 0.7.4.md
      - 0.8.0.md
      - 0.8.1.md
      - 0.9.0.md
      - 0.9.1.md
      - 0.9.2.md
      - 0.9.3.md
      - 1.0.0.md
      - 1.1.0.md
      - 1.1.1.md
      - 1.2.0.md
      - 1.3.0.md
      - 1.4.0.md
      - 1.4.1.md
      - 1.4.2.md
      - 2.0.0.md
      - 2.0.1.md
      - 2.0.2.md
      - 2.1.0.md
      - 2.1.1.md
      - 3.0.0.md
      - 3.1.0.md
      - 3.2.0.md
      - 4.0.0.md
      - 4.0.1.md
      - 4.0.2.md
      - 4.0.3.md
      - 4.1.0.md
      - 4.2.0.md
    - experimental
    - ext
    - external
    - semmle
    - upgrades
    - utils
    - BUILD.bazel
    - CHANGELOG.md
    - DefaultOptions.qll
    - IDEContextual.qll
    - Options.qll
    - codeql-pack.release.yml
    - cpp.qll
    - definitions.qll
    - localDefinitions.ql
    - localReferences.ql
    - printAst.ql
    - qlpack.lock.yml
    - qlpack.yml
    - semmlecode.cpp.dbscheme
    - semmlecode.cpp.dbscheme.stats
  - src
  - test
- BUILD.bazel
csharp
docs
go
java
javascript
misc
python
ql
ruby
rust
shared
swift
.bazelrc
.bazelrc.internal
.bazelversion
.clang-format
.editorconfig
.git-blame-ignore-revs
.gitattributes
.gitignore
.lfsconfig
.lgtm.yml
.pre-commit-config.yaml
BUILD.bazel
CODEOWNERS
CODE_OF_CONDUCT.md
CONTRIBUTING.md
Cargo.lock
Cargo.toml
LICENSE
MODULE.bazel
README.md
codeql-workspace.yml
conftest.py
defs.bzl
rust-toolchain.toml

2.0.0.md

Cannot retrieve latest commit at this time.

2.0.0

Breaking Changes

Deleted many deprecated taint-tracking configurations based on TaintTracking::Configuration.
Deleted many deprecated dataflow configurations based on DataFlow::Configuration.
Deleted the deprecated hasQualifiedName and isDefined predicates from the Declaration class, use hasGlobalName and hasDefinition respectively instead.
Deleted the getFullSignature predicate from the Function class, use getIdentityString(Declaration) from semmle.code.cpp.Print instead.
Deleted the deprecated freeCall predicate from Alloc.qll. Use DeallocationExpr instead.
Deleted the deprecated explorationLimit predicate from DataFlow::Configuration, use FlowExploration<explorationLimit> instead.
Deleted the deprecated getFieldExpr predicate from ClassAggregateLiteral, use getAFieldExpr instead.
Deleted the deprecated getElementExpr predicate from ArrayOrVectorAggregateLiteral, use getAnElementExpr instead.

New Features

Added a class C11GenericExpr to represent C11 generic selection expressions. The generic selection is represented as a Conversion on the expression that will be selected.
Added subclasses of BuiltInOperations for the __is_scoped_enum, __is_trivially_equality_comparable, and __is_trivially_relocatable builtin operations.
Added a subclass of Expr for __datasizeof expressions.

Minor Analysis Improvements

Added a data flow model for swap member functions, which were previously modeled as taint tracking functions. This change improves the precision of queries where flow through swap member functions might affect the results.
Added a data flow model for realloc-like functions, which were previously modeled as a taint tracking functions. This change improves the precision of queries where flow through realloc-like functions might affect the results.