Skip to content

Releases: peter-villadsen/codeql-ada

v0.3.0

Choose a tag to compare

@github-actions github-actions released this 11 Oct 18:48

Full Changelog: v0.2.0...v0.3.0

v0.2.0

Choose a tag to compare

@github-actions github-actions released this 09 Oct 02:39

The first release meant for people other than its author.

Rebuild your databases: a database built with 0.1.0 cannot be read by 0.2.0.

What changes in your results:

  • Far fewer false positives. On the five-project test corpus, results fell from 11,520 to about 2,200, nearly all of the difference false positives (precision check).
  • New query ada/command-line-injection: command-line input reaching the command run by GNAT.OS_Lib.Spawn, GNAT.Expect or C system/popen/exec*, across subprograms.
  • Messages name the code (Free_All, ... = ...) instead of AST classes.

For query writers: Java-style classes (Subprogram, Parameter, Call, Type, Variable, Package), data flow and taint tracking, and tested examples in docs/query-writing.md.

Full details: CHANGELOG.md. Linux x86_64 and WSL only.

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Choose a tag to compare

@github-actions github-actions released this 25 Sep 23:16