Skip to content

Conversation

@jbj
Copy link
Contributor

@jbj jbj commented Sep 13, 2018

In the GitHub UI there was a conflict in javascript/ql/test/query-tests/Security/CWE-730/RegExpInjection.js (@esben-semmle), so I did the merge on the command line, where there was no conflict.

calumgrant and others added 24 commits August 23, 2018 17:45
C++: Fix spurious extra qualified names for enum constants within a class
The `InstructionSanity::duplicateOperand` predicate used `count` instead
of `strictcount`. The 0-case of this `count` was as large as the
Cartesian product of `Instruction` and `OperandTag`, which made
`duplicateOperand` take forever to compute on large snapshots.
C++: IR: InstructionSanity::duplicateOperand perf
C++: Document the three predicates for array size
This query gets optimized badly, and it has started timing out when we
run it on our own code base. Most of the evaluation time is spent in an
RA predicate named `#select#cpe#1#f#antijoin_rhs#1`, which takes 1m36s a
Wireshark snapshot.

This restructuring of the code makes the problematic RA predicate go
away.
C++: Restructure UnsafeUseOfStrcat for performance
@jbj jbj added depends on internal PR This PR should only be merged in sync with an internal Semmle PR Mergeback labels Sep 13, 2018
@jbj jbj requested review from a team as code owners September 13, 2018 11:47
ghost
ghost previously approved these changes Sep 13, 2018
Copy link

@ghost ghost left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The content of javascript/ql/test/query-tests/Security/CWE-730/RegExpInjection.js has been merged correctly.

@jbj jbj force-pushed the merge-master-next-20180913 branch from 9571503 to 9886e4a Compare September 13, 2018 18:28
@jbj
Copy link
Contributor Author

jbj commented Sep 13, 2018

Note: no tests should run for this PR. The tests are running on the internal PR, and the two PRs can be merged together when the internal tests pass.

@nickrolfe nickrolfe merged commit 440d64d into github:next Sep 14, 2018
aibaars added a commit that referenced this pull request Oct 14, 2021
fix snake_casing of camelCased identifiers
smowton pushed a commit to smowton/codeql that referenced this pull request Jan 17, 2022
MathiasVP pushed a commit to MathiasVP/ql that referenced this pull request Aug 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

depends on internal PR This PR should only be merged in sync with an internal Semmle PR Mergeback

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants